Port 50091
HoneyLabs honeypots recorded 15 probes against destination port 50091 from 11 distinct source IP addresses in the last 7 days.
First observed 2026-11-02 05:14, most recently 2026-11-08 14:17 (UTC).
What the sensors show
The sources sat in 3 networks across 3 countries. No single address sent more than 13% of them. The largest source network was AS14618 (Amazon.com, Inc.), with 53% of the probes from 4 addresses. 4 of the 11 busiest addresses are recognised research scanners.
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 44.220.188.132 | 2 | Amazon.com, Inc. | US |
| 98.80.4.110 | 2 | Amazon.com, Inc. | US |
| 18.97.5.119 | 2 | Amazon.com, Inc. | US |
| 44.220.185.222 | 2 | Amazon.com, Inc. | US |
| 35.203.211.85 | 1 | Google LLC | GB |
| 185.136.15.17 | 1 | AO ALMAZ | KZ |
| 147.185.132.245 | 1 | Google LLC | US |
| 147.185.133.14 | 1 | Google LLC | US |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS14618 | Amazon.com, Inc. | 8 | 4 |
| AS396982 | Google LLC | 6 | 6 |
| AS210328 | AO ALMAZ | 1 | 1 |
Where it comes from
| Country | Probes |
|---|---|
| United States | 11 |
| United Kingdom | 3 |
| Kazakhstan | 1 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity | 6 |
| Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/56.0.3107.111 Safari/537.32 | 1 |
| Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/58.0.3090.107 Safari/537.32 | 1 |
| Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/53.0.3104.109 Safari/537.32 | 1 |
| Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/52.0.3084.72 Safari/537.32 | 1 |
Port report
Port report
Loading