Port 61234

HoneyLabs honeypots recorded 49 probes against destination port 61234 from 41 distinct source IP addresses in the last 7 days.

First observed 2026-11-09 10:25, most recently 2026-11-15 21:55 (UTC).

What the sensors show

The sources sat in 11 networks across 8 countries. No single address sent more than 10% of them. The largest source network was AS396982 (Google LLC), with 37% of the probes from 18 addresses. 5 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
204.76.203.2215Pfcloud UG (haftungsbeschrankt)NL
94.26.68.903MEVSPACE sp. z o.o.BG
151.243.11.1803LLC Vash Kredit BankAE
162.216.150.2381Google LLCUS
204.76.203.2121Pfcloud UG (haftungsbeschrankt)NL
35.203.210.2011Google LLCGB
147.185.133.131Google LLCUS
195.184.76.991ONYPHE SASUS

Networks it comes from

ASNOrganisationProbesSource IPs
AS396982Google LLC1818
AS213412ONYPHE SAS88
AS51396Pfcloud UG (haftungsbeschrankt)62
AS209334Modat B.V.33
AS201814MEVSPACE sp. z o.o.31
AS209630LLC Vash Kredit Bank31

Where it comes from

CountryProbes
United States24
The Netherlands7
United Kingdom6
Bulgaria3
Canada3
United Arab Emirates3

Client strings seen on this port

User agentProbes
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity18
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
Mozilla/5.0 (compatible; FlowIQLabsBot/1.0; +https://flowiq-labs.com/scanning-info)3
Mozilla/5.0 zgrab/0.x2
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 ModatScanner/1.2 (+https://modat.io/)2

Port report

Port report

Loading