Port 21 (FTP)
HoneyLabs honeypots recorded 1,838 probes against destination port 21 (FTP) from 192 distinct source IP addresses in the last 7 days.
First observed 2026-08-08 22:36:18, most recently 2026-08-15 20:37:29 (UTC).
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 177.39.171.117 | 955 | Alsol Provedor de Internet Ltda | BR |
| 220.185.85.27 | 58 | Chinanet | CN |
| 34.62.85.55 | 30 | Google LLC | BE |
| 34.156.214.152 | 20 | Google LLC | BE |
| 34.52.140.183 | 20 | Google LLC | BE |
| 34.79.100.31 | 20 | Google LLC | BE |
| 207.175.173.99 | 20 | Google LLC | BE |
| 165.154.11.210 | 11 | UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED | NG |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS52768 | Alsol Provedor de Internet Ltda | 955 | 1 |
| AS396982 | Google LLC | 610 | 55 |
| AS4134 | Chinanet | 58 | 1 |
| AS8075 | Microsoft Corporation | 36 | 36 |
| AS135377 | UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED | 34 | 5 |
| AS211298 | Driftnet Ltd | 21 | 14 |
Where it comes from
| Country | Probes |
|---|---|
| Brazil | 958 |
| Belgium | 610 |
| United States | 96 |
| China | 61 |
| United Kingdom | 22 |
| Portugal | 18 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 | 61 |
| curl/7.64.1 | 14 |
| Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 | 9 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 | 8 |
| Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/) | 7 |
Port report
Port report
Loading live data…