Port 16922

HoneyLabs honeypots recorded 23 probes against destination port 16922 from 12 distinct source IP addresses in the last 7 days.

First observed 2026-11-02 01:36, most recently 2026-11-08 14:27 (UTC).

What the sensors show

The sources sat in 6 networks across 5 countries. One address, 148.153.189.62, sent 26% of them. The largest source network was AS396982 (Google LLC), with 39% of the probes from 6 addresses. None of the 12 busiest addresses is a recognised research scanner.

Most active source addresses

Source IPProbesNetworkCountry
148.153.189.626CDS Global Cloud Co., LtdUS
106.75.5.793China Unicom Beijing Province NetworkCN
147.185.132.1482Google LLCUS
147.185.133.1182Google LLCUS
106.75.174.1382CHINANET Guangdong province networkCN
35.203.210.2302Google LLCGB
106.75.24.611China Unicom Beijing Province NetworkCN
147.185.133.1611Google LLCUS

Networks it comes from

ASNOrganisationProbesSource IPs
AS396982Google LLC96
AS63199CDS Global Cloud Co., Ltd61
AS4808China Unicom Beijing Province Network42
AS58466CHINANET Guangdong province network21
AS201814MEVSPACE sp. z o.o.11
AS198953Proton66 OOO11

Where it comes from

CountryProbes
United States12
China6
United Kingdom3
Azerbaijan1
Russia1

Client strings seen on this port

User agentProbes
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity9
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4 240.111 Safari/537.365
Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.364

Port report

Port report

Loading