Port 2379
HoneyLabs honeypots recorded 318 probes against destination port 2379 from 118 distinct source IP addresses in the last 7 days.
First observed 2026-10-28 19:00, most recently 2026-11-04 17:40 (UTC).
What the sensors show
The sources sat in 27 networks across 22 countries. No single address sent more than 7% of them. The largest source network was AS16509 (Amazon.com, Inc.), with 21% of the probes from 7 addresses. 7 of the 25 busiest addresses are recognised research scanners.
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 3.129.187.38 | 23 | Amazon.com, Inc. | US |
| 185.191.236.38 | 19 | GRUPO PANAGLOBAL 15 S.A | CH |
| 170.231.237.214 | 16 | GRUPO PANAGLOBAL 15 S.A | PA |
| 18.116.101.220 | 16 | Amazon.com, Inc. | US |
| 3.130.168.2 | 14 | Amazon.com, Inc. | US |
| 80.82.77.139 | 12 | IP Volume inc | NL |
| 150.107.38.5 | 11 | UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED | HK |
| 165.154.164.24 | 11 | UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED | DE |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS16509 | Amazon.com, Inc. | 66 | 7 |
| AS135377 | UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED | 61 | 6 |
| AS264617 | GRUPO PANAGLOBAL 15 S.A | 45 | 3 |
| AS396982 | Google LLC | 34 | 33 |
| AS8075 | Microsoft Corporation | 31 | 31 |
| AS202425 | IP Volume inc | 12 | 1 |
Where it comes from
| Country | Probes |
|---|---|
| United States | 154 |
| Panama | 26 |
| Hong Kong | 22 |
| Switzerland | 19 |
| Germany | 14 |
| Russia | 12 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36 | 62 |
| Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity | 30 |
| Mozilla/5.0 zgrab/0.x | 28 |
| Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0 | 20 |
| Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.138 Safari/537.36 | 15 |
Port report
Port report
Loading live data…