Port 8642

HoneyLabs honeypots recorded 24 probes against destination port 8642 from 10 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 15:03, most recently 2026-11-15 00:17 (UTC).

What the sensors show

The sources sat in 6 networks across 5 countries. One address, 192.3.165.146, sent 46% of them. The largest source network was AS36352 (HostPapa), with 46% of the probes from 1 address. 3 of the 10 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
192.3.165.14611HostPapaUS
195.182.16.1834Amarutu Technology LtdDE
5.181.86.602Internet Solutions & Innovations LTD.UA
162.216.149.2171Google LLCUS
104.152.52.2421Rethem Hosting LLCUS
104.152.52.1371Rethem Hosting LLCUS
80.94.95.2371SS-NetRO
35.203.210.1071Google LLCGB

Networks it comes from

ASNOrganisationProbesSource IPs
AS36352HostPapa111
AS206264Amarutu Technology Ltd41
AS14987Rethem Hosting LLC33
AS396982Google LLC33
AS211632Internet Solutions & Innovations LTD.21
AS204428SS-Net11

Where it comes from

CountryProbes
United States15
Germany4
United Kingdom2
Ukraine2
Romania1

Client strings seen on this port

User agentProbes
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:146.0) Gecko/20100101 Firefox/146.04
curl/7.61.13
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity3

Port report

Port report

Loading