Port 52869

HoneyLabs honeypots recorded 193 probes against destination port 52869 from 73 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 13:22, most recently 2026-11-15 05:01 (UTC).

What the sensors show

The sources sat in 25 networks across 14 countries. No single address sent more than 21% of them. The largest source network was AS16509 (Amazon.com, Inc.), with 31% of the probes from 5 addresses. 6 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
18.218.118.20341Amazon.com, Inc.US
3.129.187.3810Amazon.com, Inc.US
152.32.146.2027UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDJP
165.154.179.627UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDRU
128.1.46.1837UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDRU
156.232.100.957UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDSC
128.14.236.417UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDUS
117.181.50.986China Mobile Communications Group Co., Ltd.CN

Networks it comes from

ASNOrganisationProbesSource IPs
AS16509Amazon.com, Inc.605
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED416
AS396982Google LLC3030
AS10439CariNet, Inc.104
AS9808China Mobile Communications Group Co., Ltd.93
AS63199CDS Global Cloud Co., Ltd61

Where it comes from

CountryProbes
United States117
China15
Russia14
Japan9
Seychelles7
Pakistan6

Client strings seen on this port

User agentProbes
visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.3660
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity28
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.020
Hello-World11
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4 240.111 Safari/537.3610

Port report

Port report

Loading