Port 4195
HoneyLabs honeypots recorded 15 probes against destination port 4195 from 11 distinct source IP addresses in the last 7 days.
First observed 2026-11-11 02:37, most recently 2026-11-14 06:56 (UTC).
What the sensors show
The sources sat in 5 networks across 5 countries. One address, 107.189.30.98, sent 27% of them. The largest source network was AS213412 (ONYPHE SAS), with 40% of the probes from 6 addresses. 6 of the 11 busiest addresses are recognised research scanners.
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 107.189.30.98 | 4 | FranTech Solutions | LU |
| 79.124.49.58 | 2 | Tamatiya EOOD | BG |
| 91.196.152.163 | 1 | ONYPHE SAS | FR |
| 204.76.203.221 | 1 | Pfcloud UG (haftungsbeschrankt) | NL |
| 91.231.89.221 | 1 | ONYPHE SAS | FR |
| 204.76.203.214 | 1 | Pfcloud UG (haftungsbeschrankt) | NL |
| 91.196.152.123 | 1 | ONYPHE SAS | FR |
| 91.231.89.66 | 1 | ONYPHE SAS | FR |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS213412 | ONYPHE SAS | 6 | 6 |
| AS53667 | FranTech Solutions | 4 | 1 |
| AS51396 | Pfcloud UG (haftungsbeschrankt) | 2 | 2 |
| AS50360 | Tamatiya EOOD | 2 | 1 |
| AS141679 | China Telecom Beijing Tianjin Hebei Big Data Industry Park Branch | 1 | 1 |
Where it comes from
| Country | Probes |
|---|---|
| France | 6 |
| Luxembourg | 4 |
| Bulgaria | 2 |
| The Netherlands | 2 |
| China | 1 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0 | 6 |
| Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 | 2 |
| Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 | 2 |
| Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko)Safari/537.36 | 1 |
| Mozilla/5.0 (compatible; census/1) | 1 |
Port report
Port report
Loading