Port 23456

HoneyLabs honeypots recorded 157 probes against destination port 23456 from 91 distinct source IP addresses in the last 7 days.

First observed 2026-11-01 23:39, most recently 2026-11-08 17:45 (UTC).

What the sensors show

The sources sat in 13 networks across 9 countries. No single address sent more than 6% of them. The largest source network was AS6939 (Hurricane Electric LLC), with 27% of the probes from 22 addresses. 15 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
80.82.77.13910IP Volume incNL
184.105.139.709Hurricane Electric LLCUS
213.177.179.1958Feo Prest SRLIR
36.156.22.26China Mobile communications corporationCN
216.250.250.1346Majestic Hosting Solutions, LLCUS
74.82.47.56Hurricane Electric LLCUS
151.243.11.285LLC Vash Kredit BankAE
199.165.159.973The Shadowserver Foundation, Inc.US

Networks it comes from

ASNOrganisationProbesSource IPs
AS6939Hurricane Electric LLC4322
AS22168The Shadowserver Foundation, Inc.2720
AS396982Google LLC2423
AS209630LLC Vash Kredit Bank125
AS202425IP Volume inc101
AS208137Feo Prest SRL81

Where it comes from

CountryProbes
United States100
United Arab Emirates12
The Netherlands12
Iran8
France8
Singapore7

Client strings seen on this port

User agentProbes
curl/7.68.021
Mozilla/5.0 (compatible; FlowIQLabsBot/1.0; +https://flowiq-labs.com/scanning-info)12
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.365
Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.365

Port report

Port report

Loading