Port 30015

HoneyLabs honeypots recorded 58 probes against destination port 30015 from 32 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 20:44, most recently 2026-11-15 17:26 (UTC).

What the sensors show

The sources sat in 7 networks across 6 countries. No single address sent more than 14% of them. The largest source network was AS396982 (Google LLC), with 34% of the probes from 19 addresses. 3 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
66.132.172.1818Censys, Inc.US
165.154.36.1054UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDUS
152.32.172.1084UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK
45.194.70.2484UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDSC
204.76.203.2143Pfcloud UG (haftungsbeschrankt)NL
204.76.203.2213Pfcloud UG (haftungsbeschrankt)NL
204.76.203.2122Pfcloud UG (haftungsbeschrankt)NL
104.152.52.2262Rethem Hosting LLCUS

Networks it comes from

ASNOrganisationProbesSource IPs
AS396982Google LLC2019
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED144
AS51396Pfcloud UG (haftungsbeschrankt)125
AS398324Censys, Inc.81
AS14987Rethem Hosting LLC21
AS201401NewVM B.V.11

Where it comes from

CountryProbes
United States28
The Netherlands13
Hong Kong6
United Kingdom6
Seychelles4
Slovenia1

Client strings seen on this port

User agentProbes
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity20
Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)6
Go-http-client/1.16
Microsoft WinRM Client2
Mozilla/5.0 (Windows NT 7_1; Win64; x64) AppleWebKit/541.48 (KHTML, like Gecko) Chrome/94.0.2436 Safari/537.361

Port report

Port report

Loading