Port 4173
HoneyLabs honeypots recorded 1,912 probes against destination port 4173 from 11 distinct source IP addresses in the last 7 days.
First observed 2026-11-10 14:40, most recently 2026-11-14 21:38 (UTC).
What the sensors show
The sources sat in 8 networks across 6 countries. One address, 79.124.56.246, sent 97% of them. The largest source network was AS50360 (Tamatiya EOOD), with 97% of the probes from 1 address. None of the 11 busiest addresses is a recognised research scanner.
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 79.124.56.246 | 1,848 | Tamatiya EOOD | BG |
| 191.44.114.20 | 22 | Node Host Limited | SE |
| 45.140.185.109 | 11 | Contabo GmbH | FR |
| 87.192.41.180 | 9 | Fontaine, LLC | NL |
| 79.143.191.165 | 8 | Contabo GmbH | FR |
| 216.144.226.116 | 4 | HostPapa | US |
| 134.19.179.211 | 2 | Global Layer B.V. | NL |
| 144.91.73.103 | 2 | Contabo GmbH | FR |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS50360 | Tamatiya EOOD | 1,848 | 1 |
| AS51167 | Contabo GmbH | 23 | 4 |
| AS198550 | Node Host Limited | 22 | 1 |
| AS218751 | Fontaine, LLC | 9 | 1 |
| AS36352 | HostPapa | 4 | 1 |
| AS397423 | Tier.Net Technologies LLC | 2 | 1 |
Where it comes from
| Country | Probes |
|---|---|
| Bulgaria | 1,848 |
| France | 23 |
| Sweden | 22 |
| The Netherlands | 11 |
| United States | 6 |
| Hong Kong | 2 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | 1,904 |
| Mozilla/5.0 Chrome/131 | 4 |
| Mozilla/5.0 (compatible) | 2 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/131.0 Safari/537.36 | 2 |
Port report
Port report
Loading