Port 2181

HoneyLabs honeypots recorded 407 probes against destination port 2181 from 127 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 12:22, most recently 2026-11-15 08:19 (UTC).

What the sensors show

The sources sat in 19 networks across 13 countries. No single address sent more than 5% of them. The largest source network was AS14061 (DigitalOcean, LLC), with 35% of the probes from 17 addresses. 11 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
165.22.191.11621DigitalOcean, LLCUS
68.183.23.4021DigitalOcean, LLCUS
134.209.116.521DigitalOcean, LLCUS
146.190.220.16321DigitalOcean, LLCUS
174.138.46.14719DigitalOcean, LLCUS
185.191.236.3813GRUPO PANAGLOBAL 15 S.ACH
165.227.194.13612DigitalOcean, LLCUS
66.132.224.939Censys, Inc.US

Networks it comes from

ASNOrganisationProbesSource IPs
AS14061DigitalOcean, LLC14417
AS398324Censys, Inc.7010
AS8075Microsoft Corporation2726
AS396982Google LLC2621
AS213412ONYPHE SAS2423
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED243

Where it comes from

CountryProbes
United States286
Germany23
France18
Switzerland18
China17
Portugal15

Client strings seen on this port

User agentProbes
Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)53
Go-http-client/1.136
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.016
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.012
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.3611

Port report

Port report

Loading