Port 30121

HoneyLabs honeypots recorded 58 probes against destination port 30121 from 17 distinct source IP addresses in the last 7 days.

First observed 2026-10-31 21:57, most recently 2026-11-07 00:15 (UTC).

What the sensors show

The sources sat in 8 networks across 6 countries. No single address sent more than 14% of them. The largest source network was AS398324 (Censys, Inc.), with 40% of the probes from 3 addresses. 8 of the 17 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
66.132.172.2028Censys, Inc.US
167.94.146.598Censys, Inc.US
66.132.172.398Censys, Inc.US
152.32.150.297UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDUS
66.132.172.1837Censys, Inc.US
93.123.109.1234Techoff Srv LimitedBG
45.82.78.1052Detai Prosperous Technologies LimitedDE
35.203.211.2192Google LLCGB

Networks it comes from

ASNOrganisationProbesSource IPs
AS398324Censys, Inc.233
AS398705Censys, Inc.81
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED71
AS396982Google LLC74
AS212512Detai Prosperous Technologies Limited43
AS48090Techoff Srv Limited41

Where it comes from

CountryProbes
United States44
Bulgaria4
United Kingdom4
Germany3
Canada2
Belgium1

Client strings seen on this port

User agentProbes
Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)23
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity6
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.04
curl/7.61.12
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.361

Port report

Port report

Loading