Port report
Port 49152
7-day honeypot probe activity targeting destination port 49152. First seen 2026-05-14, most recent 2026-05-21 07:42.
Events 7d
585
Source IPs
163
Source ASNs
34
Countries
21
Top source ASNs
Top source countries
Top source IPs hitting port 49152
- 3.130.168.232 eventsUS· AS16509 Amazon.com, Inc.
- 16.58.56.21428 eventsUS· AS16509 Amazon.com, Inc.
- 167.94.146.5724 eventsUS· AS398705 Censys, Inc.
- 152.32.189.12117 eventsHK· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 66.132.195.9215 eventsUS
- 3.129.187.3812 eventsUS· AS16509 Amazon.com, Inc.
- 18.218.118.20312 eventsUS· AS16509 Amazon.com, Inc.
- 3.134.216.10811 eventsUS· AS16509 Amazon.com, Inc.
- 216.180.246.21710 eventsUS· AS396982 Google LLC
- 199.45.154.1438 eventsUS· AS398722 Censys, Inc.
- 101.36.111.1798 eventsHK· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 104.218.164.1178 eventsGB· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 66.132.186.1788 eventsUS
- 167.94.146.498 eventsUS· AS398705 Censys, Inc.
- 128.14.225.2538 eventsUS· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 118.194.228.1678 eventsJP· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 152.32.129.1108 eventsHK· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 101.36.109.1448 eventsHK· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 93.152.208.268 eventsZA· AS209854 Cyberzone S.A.
- 66.132.172.2208 eventsUS· AS398324 Censys, Inc.
- 199.45.155.1038 eventsUS· AS398722 Censys, Inc.
- 165.154.221.1518 eventsVN· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 152.32.134.1828 eventsHK· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 199.45.154.1518 eventsUS· AS398722 Censys, Inc.
- 66.132.172.458 eventsUS· AS398324 Censys, Inc.
Top user-agents on port 49152
- Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)106
- visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.3674
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.3637
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.028
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity13
- Go-http-client/1.112
- Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)10
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.117
- curl/7.29.06
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.195776
JSON: /api/port/49152. CSV: /api/port/49152?format=csv.