HoneyLabs
KEV
LookupKEVMCP
Data
The datasetDataset and methodCVEsCampaignsPayloadsPre-disclosureEmissions IndexPortsBlog
Integrations
OverviewFeeds
PricingDocs

Port 49664

HoneyLabs honeypots recorded 321 probes against destination port 49664 from 45 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 11:51, most recently 2026-11-14 18:32 (UTC).

What the sensors show

The sources sat in 10 networks across 5 countries. No single address sent more than 14% of them. The largest source network was AS63949 (Akamai Connected Cloud), with 29% of the probes from 2 addresses. 13 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
64.227.16.24446DigitalOcean, LLCUS
172.104.27.24446Akamai Connected CloudUS
64.225.40.13646DigitalOcean, LLCUS
45.33.63.2346Akamai Connected CloudUS
121.41.169.12310Hangzhou Alibaba Advertising Co.,Ltd.CN
151.243.11.1809LLC Vash Kredit BankAE
152.32.207.888UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDUS
167.94.146.488Censys, Inc.US

Networks it comes from

ASNOrganisationProbesSource IPs
AS63949Akamai Connected Cloud922
AS14061DigitalOcean, LLC922
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED324
AS398324Censys, Inc.243
AS209630LLC Vash Kredit Bank215
AS398705Censys, Inc.162

Where it comes from

CountryProbes
United States266
United Arab Emirates21
Hong Kong14
China12
Germany8

Client strings seen on this port

User agentProbes
Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)30
Mozilla/5.0 (compatible; FlowIQLabsBot/1.0; +https://flowiq-labs.com/scanning-info)21
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.016
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.114
Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)4

Port report

Port report

Loading