Port 4321
HoneyLabs honeypots recorded 191 probes against destination port 4321 from 57 distinct source IP addresses in the last 7 days.
First observed 2026-11-09 07:04, most recently 2026-11-15 17:48 (UTC).
What the sensors show
The sources sat in 25 networks across 11 countries. One address, 168.0.215.225, sent 29% of them. The largest source network was AS52393 (Corporacion Dana S.A.), with 30% of the probes from 2 addresses. 1 of the 25 busiest addresses is a recognised research scanner.
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 168.0.215.225 | 56 | Corporacion Dana S.A. | US |
| 168.119.64.101 | 17 | Hetzner Online GmbH | DE |
| 164.92.211.98 | 10 | DigitalOcean, LLC | NL |
| 66.132.195.58 | 7 | Censys, Inc. | US |
| 207.154.204.0 | 7 | DigitalOcean, LLC | DE |
| 193.29.13.199 | 6 | Bunea TELECOM SRL | RO |
| 213.177.179.195 | 5 | Feo Prest SRL | IR |
| 136.244.83.169 | 5 | The Constant Company, LLC | DE |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS52393 | Corporacion Dana S.A. | 57 | 2 |
| AS14061 | DigitalOcean, LLC | 29 | 8 |
| AS24940 | Hetzner Online GmbH | 17 | 1 |
| AS396982 | Google LLC | 14 | 12 |
| AS398324 | Censys, Inc. | 7 | 1 |
| AS42397 | Bunea TELECOM SRL | 6 | 1 |
Where it comes from
| Country | Probes |
|---|---|
| United States | 103 |
| Germany | 31 |
| The Netherlands | 16 |
| Romania | 13 |
| United Kingdom | 7 |
| Russia | 6 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| Python/3.12 aiohttp/3.14.5 | 29 |
| Mozilla/5.0 (compatible; scanner) | 27 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36 | 22 |
| Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 | 15 |
| Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 | 8 |
Port report
Port report
Loading