Port 25565 (Minecraft)

HoneyLabs honeypots recorded 776 probes against destination port 25565 (Minecraft) from 160 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 08:50, most recently 2026-11-15 08:17 (UTC).

What the sensors show

The sources sat in 39 networks across 21 countries. No single address sent more than 9% of them. The largest source network was AS398324 (Censys, Inc.), with 15% of the probes from 16 addresses. 12 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
45.153.34.11973TechTies Inc.NL
176.65.148.21651Pfcloud UG (haftungsbeschrankt)NL
146.70.179.19948M247 Europe SRLGB
198.44.135.10337tzulo, inc.US
163.176.27.12625Oracle CorporationBR
88.87.85.19917JSC ER-Telecom HoldingRU
185.191.236.3817GRUPO PANAGLOBAL 15 S.ACH
138.199.43.9414Datacamp LimitedUS

Networks it comes from

ASNOrganisationProbesSource IPs
AS398324Censys, Inc.11916
AS8075Microsoft Corporation10746
AS51396Pfcloud UG (haftungsbeschrankt)796
AS197170TechTies Inc.731
AS9009M247 Europe SRL532
AS11878tzulo, inc.524

Where it comes from

CountryProbes
United States354
The Netherlands204
United Kingdom56
Brazil25
Russia21
Switzerland17

Client strings seen on this port

User agentProbes
Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)80
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.012
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.3612
Mozilla/5.0 (compatible; FlowIQLabsBot/1.0; +https://flowiq-labs.com/scanning-info)12
ApcosysBot/1.0 (+https://apcosys.net)10

Port report

Port report

Loading