Port 92

HoneyLabs honeypots recorded 314 probes against destination port 92 from 48 distinct source IP addresses in the last 7 days.

First observed 2026-11-09 03:34, most recently 2026-11-15 17:13 (UTC).

What the sensors show

The sources sat in 14 networks across 9 countries. No single address sent more than 15% of them. The largest source network was AS63949 (Akamai Connected Cloud), with 30% of the probes from 3 addresses. 13 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
96.126.108.14646Akamai Connected CloudUS
159.65.228.18946DigitalOcean, LLCUS
178.128.156.24546DigitalOcean, LLCUS
173.255.233.6546Akamai Connected CloudUS
18.116.101.22031Amazon.com, Inc.US
18.218.118.20320Amazon.com, Inc.US
141.98.10.19816UAB Host BalticLT
176.65.134.678Pfcloud UG (haftungsbeschrankt)DE

Networks it comes from

ASNOrganisationProbesSource IPs
AS63949Akamai Connected Cloud933
AS14061DigitalOcean, LLC922
AS16509Amazon.com, Inc.533
AS396982Google LLC1919
AS209605UAB Host Baltic161
AS212835Shesternin Vladimir Anatolievich82

Where it comes from

CountryProbes
United States265
Lithuania16
Germany9
Russia8
Kazakhstan7
United Kingdom5

Client strings seen on this port

User agentProbes
visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.3653
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity19
Go-http-client/1.112
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.368
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08

Port report

Port report

Loading