Port 144

HoneyLabs honeypots recorded 24 probes against destination port 144 from 15 distinct source IP addresses in the last 7 days.

First observed 2026-11-02 05:49, most recently 2026-11-08 11:39 (UTC).

What the sensors show

The sources sat in 6 networks across 6 countries. One address, 45.141.233.16, sent 25% of them. The largest source network was AS213412 (ONYPHE SAS), with 33% of the probes from 8 addresses. 10 of the 15 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
45.141.233.166MEVSPACE sp. z o.o.BG
192.51.188.64Hdtidc LimitedCN
193.8.186.292PebbleHost LtdSG
85.217.149.251Modat B.V.CA
91.230.168.541ONYPHE SASUS
195.184.76.2011ONYPHE SASUS
45.131.155.1011Detai Prosperous Technologies LimitedDE
91.230.168.2121ONYPHE SASUS

Networks it comes from

ASNOrganisationProbesSource IPs
AS213412ONYPHE SAS88
AS201814MEVSPACE sp. z o.o.61
AS205960Hdtidc Limited41
AS209334Modat B.V.22
AS212512Detai Prosperous Technologies Limited22
AS201002PebbleHost Ltd21

Where it comes from

CountryProbes
United States8
Bulgaria6
China4
Canada2
Germany2
Singapore2

Client strings seen on this port

User agentProbes
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.362
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 ModatScanner/1.2 (+https://modat.io/)2
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.361
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.361

Port report

Port report

Loading