Port 2120

HoneyLabs honeypots recorded 24 probes against destination port 2120 from 15 distinct source IP addresses in the last 7 days.

First observed 2026-11-02 00:18, most recently 2026-11-07 06:50 (UTC).

What the sensors show

The sources sat in 8 networks across 6 countries. One address, 152.32.197.159, sent 29% of them. The largest source network was AS213412 (ONYPHE SAS), with 33% of the probes from 8 addresses. 9 of the 15 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
152.32.197.1597UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDBR
94.26.68.903MEVSPACE sp. z o.o.BG
185.136.15.1532AO ALMAZKZ
91.230.168.341ONYPHE SASUS
112.94.252.501China Unicom Guangzhou networkCN
195.184.76.1451ONYPHE SASUS
104.152.52.2101Rethem Hosting LLCUS
176.120.22.1791Proton66 OOORU

Networks it comes from

ASNOrganisationProbesSource IPs
AS213412ONYPHE SAS88
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED71
AS201814MEVSPACE sp. z o.o.31
AS210328AO ALMAZ21
AS14987Rethem Hosting LLC11
AS17622China Unicom Guangzhou network11

Where it comes from

CountryProbes
United States9
Brazil7
Bulgaria3
China2
Kazakhstan2
Russia1

Client strings seen on this port

User agentProbes
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.04
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.111
Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.361
curl/7.61.11

Port report

Port report

Loading