Port 88

HoneyLabs honeypots recorded 2,236 probes against destination port 88 from 225 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 09:24, most recently 2026-11-15 07:52 (UTC).

What the sensors show

The sources sat in 36 networks across 18 countries. One address, 80.94.95.211, sent 69% of them. The largest source network was AS204428 (SS-Net), with 69% of the probes from 1 address. 8 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
80.94.95.2111,554SS-NetRO
95.164.201.17156ISP4Life INCUS
18.218.118.20324Amazon.com, Inc.US
35.206.134.3019Google LLCBE
167.94.146.6116Censys, Inc.US
35.210.237.5615Google LLCBE
141.98.10.19812UAB Host BalticLT
3.129.187.3811Amazon.com, Inc.US

Networks it comes from

ASNOrganisationProbesSource IPs
AS204428SS-Net1,5541
AS15169Google LLC19027
AS394814ISP4Life INC572
AS6939Hurricane Electric LLC4819
AS398324Censys, Inc.477
AS396982Google LLC4646

Where it comes from

CountryProbes
Romania1,555
United States371
Belgium191
Hong Kong27
Germany16
Lithuania12

Client strings seen on this port

User agentProbes
Mozilla/5.0 (X11; U; Linux arm7tdmi; rv:1.8.1.11) Gecko/20071130 Minimo/0.025259
Mozilla/5.0 (Linux; Android 7.0; SM-G610F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.111 Mobile Safari/537.36259
Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0; BOIE9;ENUS)259
Mozilla/5.0 (X11; U; OpenBSD arm; en-us) AppleWebKit/531.2 (KHTML, like Gecko) Safari/531.2 Epiphany/2.30.0259
Mozilla/5.0 (Linux; U; Android 2.3.6; en-gb; GT-I8150 Build/GINGERBREAD) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1259

Port report

Port report

Loading