Port 30011

HoneyLabs honeypots recorded 56 probes against destination port 30011 from 41 distinct source IP addresses in the last 7 days.

First observed 2026-10-31 23:43, most recently 2026-11-07 19:53 (UTC).

What the sensors show

The sources sat in 11 networks across 9 countries. No single address sent more than 14% of them. The largest source network was AS396982 (Google LLC), with 29% of the probes from 14 addresses. 5 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
86.54.31.368Black HOST LtdCA
204.76.203.534Pfcloud UG (haftungsbeschrankt)NL
204.76.203.442Pfcloud UG (haftungsbeschrankt)NL
147.185.133.1192Google LLCUS
47.250.91.272Alibaba (US) Technology Co., Ltd.MY
35.203.210.642Google LLCGB
47.245.141.1762Alibaba (US) Technology Co., Ltd.DE
91.230.168.951ONYPHE SASUS

Networks it comes from

ASNOrganisationProbesSource IPs
AS396982Google LLC1614
AS51396Pfcloud UG (haftungsbeschrankt)106
AS12989Black HOST Ltd81
AS213412ONYPHE SAS88
AS45102Alibaba (US) Technology Co., Ltd.42
AS14987Rethem Hosting LLC33

Where it comes from

CountryProbes
United States21
The Netherlands10
Canada9
United Kingdom6
China4
Malaysia2

Client strings seen on this port

User agentProbes
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity16
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.364
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.364
curl/7.61.13

Port report

Port report

Loading