Port 52703

HoneyLabs honeypots recorded 40 probes against destination port 52703 from 31 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 10:06, most recently 2026-11-14 09:17 (UTC).

What the sensors show

The sources sat in 5 networks across 4 countries. No single address sent more than 10% of them. The largest source network was AS213412 (ONYPHE SAS), with 40% of the probes from 16 addresses. 19 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
151.243.11.364LLC Vash Kredit BankAE
151.243.11.343LLC Vash Kredit BankAE
151.243.11.413LLC Vash Kredit BankAE
151.243.11.372LLC Vash Kredit BankAE
151.243.11.462LLC Vash Kredit BankAE
91.231.89.601ONYPHE SASFR
195.184.76.571ONYPHE SASUS
44.220.185.421Amazon.com, Inc.US

Networks it comes from

ASNOrganisationProbesSource IPs
AS213412ONYPHE SAS1616
AS209630LLC Vash Kredit Bank156
AS209334Modat B.V.66
AS14618Amazon.com, Inc.22
AS63949Akamai Connected Cloud11

Where it comes from

CountryProbes
United Arab Emirates15
France11
United States11
Canada3

Client strings seen on this port

User agentProbes
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.016
Mozilla/5.0 (compatible; FlowIQLabsBot/1.0; +https://flowiq-labs.com/scanning-info)15
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 ModatScanner/1.2 (+https://modat.io/)2
Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.361
Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/55.0.3060.105 Safari/537.321

Port report

Port report

Loading