Port 4100

HoneyLabs honeypots recorded 172 probes against destination port 4100 from 70 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 18:51, most recently 2026-11-15 17:25 (UTC).

What the sensors show

The sources sat in 15 networks across 9 countries. No single address sent more than 14% of them. The largest source network was AS396982 (Google LLC), with 26% of the probes from 42 addresses. 1 of the 25 busiest addresses is a recognised research scanner.

Most active source addresses

Source IPProbesNetworkCountry
36.156.22.224China Mobile communications corporationCN
193.29.13.19918Bunea TELECOM SRLRO
80.94.95.22317SS-NetRO
150.107.36.23612UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK
206.189.2.126DigitalOcean, LLCNL
148.153.56.1706CDS Global Cloud Co., LtdUS
165.154.163.106UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDUS
148.153.188.2466CDS Global Cloud Co., LtdUS

Networks it comes from

ASNOrganisationProbesSource IPs
AS396982Google LLC4542
AS56046China Mobile communications corporation241
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED182
AS42397Bunea TELECOM SRL181
AS204428SS-Net171
AS14061DigitalOcean, LLC122

Where it comes from

CountryProbes
United States78
Romania37
China27
Hong Kong12
United Kingdom7
The Netherlands6

Client strings seen on this port

User agentProbes
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity45
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4 240.111 Safari/537.3645
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.3610
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.363

Port report

Port report

Loading