HoneyLabs
KEV
LookupKEVMCP
Data
The datasetDataset and methodCVEsCampaignsPayloadsPre-disclosureEmissions IndexPortsBlog
Integrations
OverviewFeeds
PricingDocs

Port 60000

HoneyLabs honeypots recorded 1,453 probes against destination port 60000 from 195 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 10:46, most recently 2026-11-15 07:56 (UTC).

What the sensors show

The sources sat in 44 networks across 19 countries. One address, 165.154.43.129, sent 53% of them. The largest source network was AS135377 (UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED), with 56% of the probes from 8 addresses. 15 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
165.154.43.129767UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK
89.248.171.2467IP Volume incNL
80.82.77.20242IP Volume incNL
93.174.93.1239IP Volume incNL
89.248.168.3622IP Volume incNL
89.248.172.3318IP Volume incNL
193.29.13.19918Bunea TELECOM SRLRO
80.94.95.22317SS-NetRO

Networks it comes from

ASNOrganisationProbesSource IPs
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED8128
AS202425IP Volume inc1885
AS398324Censys, Inc.628
AS398705Censys, Inc.484
AS14061DigitalOcean, LLC4718
AS6939Hurricane Electric LLC3725

Where it comes from

CountryProbes
Hong Kong791
United States287
The Netherlands209
Romania39
United Kingdom18
China17

Client strings seen on this port

User agentProbes
Mozilla/5.0 (iPhone; CPU iPhone OS 16_4 like Mac OS X) AppleWebKit/604.1.38 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1.38189
Mozilla/5.0 (Linux; Android 8; Redmi Note 11S 5G; Build/OPR5.220803.64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.1264.71 Mobile Safari/537.36 EdgA/103.0.1264.71184
Mozilla/5.0 (iPhone; CPU iPhone OS 18 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) CriOS/132.0.6834.78 Mobile/15E148 Safari/537.36175
Python/3.10 aiohttp/3.8.4166
Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)82

Port report

Port report

Loading