Port 81

HoneyLabs honeypots recorded 2,033 probes against destination port 81 from 321 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 10:05, most recently 2026-11-15 08:14 (UTC).

What the sensors show

The sources sat in 57 networks across 28 countries. One address, 80.94.95.211, sent 42% of them. The largest source network was AS204428 (SS-Net), with 42% of the probes from 1 address. 16 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
80.94.95.211849SS-NetRO
195.178.110.78152Techoff Srv LimitedBG
45.135.193.19358Pfcloud UG (haftungsbeschrankt)DE
95.164.203.14556ISP4Life INCUS
89.248.171.2437IP Volume incNL
93.174.93.1229IP Volume incNL
151.243.11.16021LLC Vash Kredit BankAE
18.218.118.20318Amazon.com, Inc.US

Networks it comes from

ASNOrganisationProbesSource IPs
AS204428SS-Net8491
AS48090Techoff Srv Limited1521
AS398324Censys, Inc.9413
AS202425IP Volume inc926
AS51396Pfcloud UG (haftungsbeschrankt)748
AS396982Google LLC7139

Where it comes from

CountryProbes
Romania851
United States520
Bulgaria155
The Netherlands106
Germany75
Portugal66

Client strings seen on this port

User agentProbes
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2914.3 Safari/537.36 OPR/43.0.2431.0 (Edition developer)259
Mozilla/5.0 (iPod touch; CPU iPhone OS 8_1_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B440 Safari/600.1.4259
Opera/9.80 (Linux mips; ) Presto/2.12.407 Version/12.51 MB97/0.0.39.18 (HITACHI, Mxl661L32, wired) VSTVB_MB97 SmartTvA/3.0.0259
Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)100
Python/3.10 aiohttp/3.8.485

Port report

Port report

Loading