Port 22 (SSH)
HoneyLabs honeypots recorded 14,390 probes against destination port 22 (SSH) from 945 distinct source IP addresses in the last 7 days.
First observed 2026-09-23 02:20:30, most recently 2026-09-30 02:18:19 (UTC).
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 218.23.170.184 | 550 | Chinanet | CN |
| 124.225.4.88 | 478 | Chinanet | CN |
| 61.153.184.151 | 451 | CT-HangZhou-IDC | CN |
| 27.155.92.28 | 437 | Fuzhou | CN |
| 115.190.165.165 | 434 | Beijing Volcano Engine Technology Co., Ltd. | CN |
| 46.8.200.79 | 432 | Adman LLC | RU |
| 41.111.172.25 | 432 | Telecom Algeria | DZ |
| 101.47.152.216 | 432 | Byteplus Pte. Ltd. | SG |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS48090 | Techoff Srv Limited | 1,634 | 5 |
| AS4134 | Chinanet | 1,227 | 19 |
| AS215930 | Cipher Operations Doo Beograd - Novi Beograd | 1,065 | 3 |
| AS47890 | Unmanaged Ltd | 478 | 3 |
| AS58461 | CT-HangZhou-IDC | 459 | 4 |
| AS137718 | Beijing Volcano Engine Technology Co., Ltd. | 457 | 22 |
Where it comes from
| Country | Probes |
|---|---|
| China | 4,117 |
| The Netherlands | 1,856 |
| United States | 1,437 |
| Iran | 1,112 |
| India | 870 |
| Singapore | 744 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| Python/3.10 aiohttp/3.8.4 | 80 |
| Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0 | 16 |
| Go-http-client/1.1 | 13 |
| Mozilla/5.0 (compatible; FlowIQ/1.0; +https://flowiq-labs.com/scanning-info) | 9 |
| Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/) | 7 |
Port report
Port report
Loading live data…