Port 21312
HoneyLabs honeypots recorded 36 probes against destination port 21312 from 19 distinct source IP addresses in the last 7 days.
First observed 2026-11-02 19:30, most recently 2026-11-08 10:28 (UTC).
What the sensors show
The sources sat in 10 networks across 9 countries. No single address sent more than 17% of them. The largest source network was AS135377 (UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED), with 25% of the probes from 3 addresses. 9 of the 19 busiest addresses are recognised research scanners.
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 31.56.20.123 | 6 | BreezeHost | US |
| 213.177.179.195 | 4 | Feo Prest SRL | IR |
| 101.36.108.9 | 3 | UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED | HK |
| 152.32.141.199 | 3 | UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED | NG |
| 165.154.11.247 | 3 | UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED | NG |
| 86.54.31.36 | 2 | Black HOST Ltd | CA |
| 106.75.175.100 | 2 | CHINANET Guangdong province network | CN |
| 207.90.244.28 | 2 | Cogent Communications, LLC | US |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS135377 | UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED | 9 | 3 |
| AS213412 | ONYPHE SAS | 8 | 8 |
| AS400810 | BreezeHost | 6 | 1 |
| AS208137 | Feo Prest SRL | 4 | 1 |
| AS58466 | CHINANET Guangdong province network | 2 | 1 |
| AS174 | Cogent Communications, LLC | 2 | 1 |
Where it comes from
| Country | Probes |
|---|---|
| France | 8 |
| United States | 8 |
| Nigeria | 6 |
| Iran | 4 |
| Hong Kong | 3 |
| China | 3 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0 | 8 |
| curl/7.29.0 | 6 |
| Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36 | 2 |
| Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36 | 2 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36 | 2 |
Port report
Port report
Loading