HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / EnrichSplunkMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog

Port 49154

HoneyLabs honeypots recorded 106 probes against destination port 49154 from 43 distinct source IP addresses in the last 7 days.

First observed 2026-09-14 16:35:26, most recently 2026-09-21 04:38:20 (UTC).

Most active source addresses

Source IPProbesNetworkCountry
130.12.180.12712Omegatech LTDNL
165.154.29.1448UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDSG
101.36.107.2438UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK
152.32.215.2248UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK
165.154.134.2038UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDUS
123.58.215.744UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK
156.225.1.1154AGOTOZ PTE. LTD.HK
87.251.64.184Shesternin Vladimir AnatolievichRU

Networks it comes from

ASNOrganisationProbesSource IPs
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED499
AS396982Google LLC1413
AS202412Omegatech LTD121
AS213412ONYPHE SAS66
AS212835Shesternin Vladimir Anatolievich62
AS209334Modat B.V.44

Where it comes from

CountryProbes
Hong Kong36
United States21
The Netherlands12
Singapore9
Russia6
France6

Client strings seen on this port

User agentProbes
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.016
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity14
Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.3610
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.367
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.06

Port report

Port report

Loading live data…