Port 16016
HoneyLabs honeypots recorded 74 probes against destination port 16016 from 5 distinct source IP addresses in the last 7 days.
First observed 2026-11-11 08:43, most recently 2026-11-14 08:09 (UTC).
What the sensors show
The sources sat in 5 networks across 1 country. One address, 191.102.156.68, sent 76% of them. The largest source network was AS394474 (WhiteLabelColo), with 76% of the probes from 1 address. 1 of the 5 busiest addresses is a recognised research scanner.
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 191.102.156.68 | 56 | WhiteLabelColo | US |
| 66.132.195.50 | 8 | Censys, Inc. | US |
| 152.32.206.51 | 7 | UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED | US |
| 207.90.244.12 | 2 | Cogent Communications, LLC | US |
| 95.164.110.199 | 1 | NJ IX | US |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS394474 | WhiteLabelColo | 56 | 1 |
| AS398324 | Censys, Inc. | 8 | 1 |
| AS135377 | UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED | 7 | 1 |
| AS174 | Cogent Communications, LLC | 2 | 1 |
| AS53856 | NJ IX | 1 | 1 |
Where it comes from
| Country | Probes |
|---|---|
| United States | 74 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| Python/3.12 aiohttp/3.14.5 | 29 |
| Mozilla/5.0 (compatible; scanner) | 27 |
| Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) | 6 |
| Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0 | 4 |
| anothers/0.1 | 1 |
Port report
Port report
Loading