Port 4840

HoneyLabs honeypots recorded 628 probes against destination port 4840 from 117 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 09:18, most recently 2026-11-15 06:34 (UTC).

What the sensors show

The sources sat in 18 networks across 9 countries. No single address sent more than 9% of them. The largest source network was AS398324 (Censys, Inc.), with 41% of the probes from 32 addresses. 23 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
84.201.21.7059Ultahost, Inc.DE
143.246.221.14457Alexhost S.r.l.MD
18.116.101.22026Amazon.com, Inc.US
3.129.187.3820Amazon.com, Inc.US
66.132.172.20318Censys, Inc.US
66.132.172.14318Censys, Inc.US
167.94.146.5518Censys, Inc.US
167.94.146.4818Censys, Inc.US

Networks it comes from

ASNOrganisationProbesSource IPs
AS398324Censys, Inc.26032
AS398705Censys, Inc.1088
AS214036Ultahost, Inc.591
AS200019Alexhost S.r.l.571
AS16509Amazon.com, Inc.503
AS6939Hurricane Electric LLC2017

Where it comes from

CountryProbes
United States482
Germany59
Moldova57
Russia9
Portugal8
The Netherlands6

Client strings seen on this port

User agentProbes
Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)234
nerva/1.0108
visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.3650
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.3613
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08

Port report

Port report

Loading