Port 49152

HoneyLabs honeypots recorded 649 probes against destination port 49152 from 157 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 08:29, most recently 2026-11-15 08:14 (UTC).

What the sensors show

The sources sat in 33 networks across 20 countries. No single address sent more than 9% of them. The largest source network was AS135377 (UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED), with 22% of the probes from 17 addresses. 12 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
134.195.153.3556GLOBALHOSTINGSOLUTIONS INCUS
3.129.187.3830Amazon.com, Inc.US
167.94.146.5624Censys, Inc.US
18.218.118.20320Amazon.com, Inc.US
152.32.172.23420UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK
18.116.101.22018Amazon.com, Inc.US
91.236.116.7417Anastasiia HeinSE
188.92.75.24817Sia Nano ITLV

Networks it comes from

ASNOrganisationProbesSource IPs
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED14617
AS398324Censys, Inc.11015
AS16509Amazon.com, Inc.804
AS46918GLOBALHOSTINGSOLUTIONS INC561
AS398705Censys, Inc.403
AS264617GRUPO PANAGLOBAL 15 S.A293

Where it comes from

CountryProbes
United States378
Hong Kong112
Sweden23
Latvia20
United Kingdom19
Panama17

Client strings seen on this port

User agentProbes
Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)110
visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.3658
Python/3.12 aiohttp/3.14.529
Mozilla/5.0 (compatible; scanner)27
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.020

Port report

Port report

Loading