Port 30125

HoneyLabs honeypots recorded 8 probes against destination port 30125 from 6 distinct source IP addresses in the last 7 days.

First observed 2026-11-01 22:58, most recently 2026-11-06 18:18 (UTC).

What the sensors show

The sources sat in 4 networks across 4 countries. One address, 94.26.68.90, sent 38% of them. The largest source network was AS201814 (MEVSPACE sp. z o.o.), with 38% of the probes from 1 address. 1 of the 6 busiest addresses is a recognised research scanner.

Most active source addresses

Source IPProbesNetworkCountry
94.26.68.903MEVSPACE sp. z o.o.BG
162.216.149.861Google LLCUS
35.203.211.551Google LLCGB
85.11.167.831TechTies Inc.NL
162.216.150.1231Google LLCUS
104.152.52.1241Rethem Hosting LLCUS

Networks it comes from

ASNOrganisationProbesSource IPs
AS201814MEVSPACE sp. z o.o.31
AS396982Google LLC33
AS14987Rethem Hosting LLC11
AS197170TechTies Inc.11

Where it comes from

CountryProbes
United States3
Bulgaria3
United Kingdom1
The Netherlands1

Client strings seen on this port

User agentProbes
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity3
curl/7.61.11

Port report

Port report

Loading