Port 2233

HoneyLabs honeypots recorded 45 probes against destination port 2233 from 21 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 17:13, most recently 2026-11-13 23:11 (UTC).

What the sensors show

The sources sat in 11 networks across 7 countries. One address, 185.136.15.153, sent 31% of them. The largest source network was AS210328 (AO ALMAZ), with 33% of the probes from 2 addresses. 12 of the 21 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
185.136.15.15314AO ALMAZKZ
151.158.44.1208Web Host BDBD
151.243.11.1803LLC Vash Kredit BankAE
46.29.26.2052M/S ROBI TRADERSTR
207.90.244.192Cogent Communications, LLCUS
195.184.76.1631ONYPHE SASUS
195.184.76.21ONYPHE SASUS
195.184.76.1471ONYPHE SASUS

Networks it comes from

ASNOrganisationProbesSource IPs
AS210328AO ALMAZ152
AS138145Web Host BD81
AS213412ONYPHE SAS88
AS209334Modat B.V.33
AS209630LLC Vash Kredit Bank31
AS174Cogent Communications, LLC21

Where it comes from

CountryProbes
Kazakhstan15
United States12
Bangladesh8
United Arab Emirates4
France3
Türkiye2

Client strings seen on this port

User agentProbes
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
Mozilla/5.0 (compatible; FlowIQLabsBot/1.0; +https://flowiq-labs.com/scanning-info)3
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 ModatScanner/1.2 (+https://modat.io/)2
Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.361
Mozilla/5.0 (Linux; Android 5.0; SM-G900P Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.84 Mobile Safari/537.361

Port report

Port report

Loading