Port 54321
HoneyLabs honeypots recorded 245 probes against destination port 54321 from 57 distinct source IP addresses in the last 7 days.
First observed 2026-11-08 11:55, most recently 2026-11-15 07:22 (UTC).
What the sensors show
The sources sat in 25 networks across 14 countries. One address, 101.42.50.25, sent 29% of them. The largest source network was AS45090 (Shenzhen Tencent Computer Systems Company Limited), with 29% of the probes from 1 address. None of the 25 busiest addresses is a recognised research scanner.
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 101.42.50.25 | 72 | Shenzhen Tencent Computer Systems Company Limited | CN |
| 134.199.230.0 | 21 | DigitalOcean, LLC | US |
| 45.227.254.71 | 17 | Flyservers S.A. | PA |
| 106.75.13.75 | 11 | China Unicom Beijing Province Network | CN |
| 106.75.24.130 | 11 | China Unicom Beijing Province Network | CN |
| 193.29.13.199 | 6 | Bunea TELECOM SRL | RO |
| 151.243.11.184 | 6 | LLC Vash Kredit Bank | AE |
| 170.231.237.214 | 6 | GRUPO PANAGLOBAL 15 S.A | PA |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS45090 | Shenzhen Tencent Computer Systems Company Limited | 72 | 1 |
| AS4808 | China Unicom Beijing Province Network | 22 | 2 |
| AS14061 | DigitalOcean, LLC | 21 | 1 |
| AS264617 | GRUPO PANAGLOBAL 15 S.A | 17 | 3 |
| AS267784 | Flyservers S.A. | 17 | 1 |
| AS396982 | Google LLC | 16 | 14 |
Where it comes from
| Country | Probes |
|---|---|
| China | 97 |
| United States | 44 |
| Panama | 29 |
| The Netherlands | 13 |
| United Arab Emirates | 13 |
| Romania | 11 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| Python/3.11 aiohttp/3.14.5 | 69 |
| Mozilla/5.0 | 21 |
| Mozilla/5.0 (compatible; FlowIQLabsBot/1.0; +https://flowiq-labs.com/scanning-info) | 12 |
| ApcosysBot/1.0 (+https://apcosys.net) | 8 |
| Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0 | 6 |
Port report
Port report
Loading