Port 902
HoneyLabs honeypots recorded 254 probes against destination port 902 from 42 distinct source IP addresses in the last 7 days.
First observed 2026-11-01 00:15, most recently 2026-11-07 21:31 (UTC).
What the sensors show
The sources sat in 14 networks across 10 countries. No single address sent more than 18% of them. The largest source network was AS14061 (DigitalOcean, LLC), with 41% of the probes from 4 addresses. 17 of the 25 busiest addresses are recognised research scanners.
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 165.22.11.28 | 46 | DigitalOcean, LLC | US |
| 159.223.122.120 | 46 | DigitalOcean, LLC | US |
| 45.33.54.161 | 46 | Akamai Connected Cloud | US |
| 192.155.87.176 | 46 | Akamai Connected Cloud | US |
| 159.89.88.22 | 6 | DigitalOcean, LLC | US |
| 188.166.25.212 | 6 | DigitalOcean, LLC | NL |
| 192.51.188.6 | 4 | Hdtidc Limited | CN |
| 43.106.105.18 | 4 | Alibaba (US) Technology Co., Ltd. | SG |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS14061 | DigitalOcean, LLC | 104 | 4 |
| AS63949 | Akamai Connected Cloud | 94 | 4 |
| AS213412 | ONYPHE SAS | 12 | 12 |
| AS21859 | Zenlayer Inc | 12 | 6 |
| AS45102 | Alibaba (US) Technology Co., Ltd. | 8 | 2 |
| AS211680 | Sistemas Informaticos, S.A. | 8 | 4 |
Where it comes from
| Country | Probes |
|---|---|
| United States | 204 |
| Portugal | 20 |
| Singapore | 8 |
| The Netherlands | 6 |
| Bulgaria | 4 |
| China | 4 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0 | 12 |
| python-httpx/0.28.1 | 10 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 | 10 |
| Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 | 10 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 | 2 |
Port report
Port report
Loading