Port 83
HoneyLabs honeypots recorded 2,983 probes against destination port 83 from 261 distinct source IP addresses in the last 7 days.
First observed 2026-11-08 08:42, most recently 2026-11-15 07:30 (UTC).
What the sensors show
The sources sat in 39 networks across 18 countries. One address, 80.94.95.211, sent 69% of them. The largest source network was AS204428 (SS-Net), with 69% of the probes from 1 address. 20 of the 25 busiest addresses are recognised research scanners.
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 80.94.95.211 | 2,072 | SS-Net | RO |
| 89.248.171.24 | 106 | IP Volume inc | NL |
| 93.174.93.12 | 76 | IP Volume inc | NL |
| 186.179.61.141 | 56 | Corporacion Dana S.A. | US |
| 80.82.77.202 | 45 | IP Volume inc | NL |
| 18.116.101.220 | 42 | Amazon.com, Inc. | US |
| 18.218.118.203 | 26 | Amazon.com, Inc. | US |
| 89.248.172.33 | 18 | IP Volume inc | NL |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS204428 | SS-Net | 2,072 | 1 |
| AS202425 | IP Volume inc | 249 | 5 |
| AS6939 | Hurricane Electric LLC | 99 | 51 |
| AS398324 | Censys, Inc. | 92 | 12 |
| AS22168 | The Shadowserver Foundation, Inc. | 81 | 59 |
| AS16509 | Amazon.com, Inc. | 80 | 5 |
Where it comes from
| Country | Probes |
|---|---|
| Romania | 2,074 |
| United States | 537 |
| The Netherlands | 245 |
| Russia | 42 |
| Germany | 31 |
| Portugal | 14 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| Opera/8.52 (Windows NT 5.1; U; ru) | 259 |
| Opera/10.60 (Windows NT 5.1; U; en-US) Presto/2.6.30 Version/10.60 | 259 |
| Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/7.0; rv:11.0; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648) | 259 |
| Mozilla/5.0 (Linux; Android 4.4.2; SM-T230NU Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.78 Safari/537.36 OPR/30.0.1856.93524 | 259 |
| Mozilla/5.0 (Windows; U; Windows NT 6.0; he-IL) AppleWebKit/528+ (KHTML, like Gecko) Version/4.0 Safari/528.16 | 259 |
Port report
Port report
Loading