Port 64359
HoneyLabs honeypots recorded 122 probes against destination port 64359 from 10 distinct source IP addresses in the last 7 days.
First observed 2026-11-08 12:05, most recently 2026-11-15 10:38 (UTC).
What the sensors show
The sources sat in 5 networks across 4 countries. One address, 89.248.171.24, sent 36% of them. The largest source network was AS202425 (IP Volume inc), with 82% of the probes from 5 addresses. 5 of the 10 busiest addresses are recognised research scanners.
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 89.248.171.24 | 44 | IP Volume inc | NL |
| 93.174.93.12 | 32 | IP Volume inc | NL |
| 80.82.77.202 | 15 | IP Volume inc | NL |
| 176.32.193.16 | 15 | Ucom CJSC | AM |
| 89.248.172.33 | 8 | IP Volume inc | NL |
| 31.184.195.246 | 2 | Petersburg Internet Network ltd. | RU |
| 45.91.64.10 | 2 | JSC F6 | RU |
| 109.236.48.223 | 2 | CAFER ESER | TR |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS202425 | IP Volume inc | 100 | 5 |
| AS197834 | Ucom CJSC | 15 | 1 |
| AS34665 | Petersburg Internet Network ltd. | 3 | 2 |
| AS214664 | JSC F6 | 2 | 1 |
| AS215391 | CAFER ESER | 2 | 1 |
Where it comes from
| Country | Probes |
|---|---|
| The Netherlands | 100 |
| Armenia | 15 |
| Russia | 5 |
| Türkiye | 2 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| Python/3.10 aiohttp/3.8.4 | 95 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36 | 8 |
| fasthttp | 4 |
| Mozilla/5.0 (X11; NetBSD amd64; rv:16.0) Gecko/20121102 Firefox/16.0 | 2 |
| Mozilla/5.0 (Linux; Android 12; SM-G970F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.61 Mobile Safari/537.36 | 1 |
Port report
Port report
Loading