Port 53 (DNS)
HoneyLabs honeypots recorded 1,188 probes against destination port 53 (DNS) from 242 distinct source IP addresses in the last 7 days.
First observed 2026-11-08 08:30, most recently 2026-11-15 08:12 (UTC).
What the sensors show
The sources sat in 43 networks across 21 countries. No single address sent more than 11% of them. The largest source network was AS202425 (IP Volume inc), with 26% of the probes from 5 addresses. 13 of the 25 busiest addresses are recognised research scanners.
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 89.248.171.24 | 132 | IP Volume inc | NL |
| 93.174.93.12 | 93 | IP Volume inc | NL |
| 80.82.77.202 | 56 | IP Volume inc | NL |
| 71.6.155.70 | 29 | CariNet, Inc. | US |
| 89.248.172.33 | 24 | IP Volume inc | NL |
| 109.105.210.62 | 16 | Zenlayer Inc | PT |
| 71.6.199.23 | 15 | CariNet, Inc. | US |
| 35.206.150.95 | 14 | Google LLC | BE |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS202425 | IP Volume inc | 307 | 5 |
| AS15169 | Google LLC | 216 | 40 |
| AS135377 | UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED | 114 | 16 |
| AS398324 | Censys, Inc. | 92 | 9 |
| AS10439 | CariNet, Inc. | 56 | 9 |
| AS212835 | Shesternin Vladimir Anatolievich | 48 | 5 |
Where it comes from
| Country | Probes |
|---|---|
| The Netherlands | 312 |
| United States | 305 |
| Belgium | 221 |
| Hong Kong | 67 |
| Portugal | 66 |
| Russia | 49 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| Python/3.10 aiohttp/3.8.4 | 305 |
| Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) | 53 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 | 53 |
| Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0 | 32 |
| Mozilla/5.0 zgrab/0.x | 29 |
Port report
Port report
Loading