iAnonymous lookups: 10/min, 60/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.
Filtered actors
query: port:2000
225 unique IPs · 852 events · 25 countries · 30 ASNs
Activity · last 7d
peak 213 on 2026-06-30
Top source networks · click to refine
query: port:2000×window1h24h7d30d🔒90d🔒
Turn this query into a daily email digest or an IOC feed URL.Save as feed
Sample payloads
top distinct probes matching this query| Protocol | Port | Probe / payload | Hits | Example |
|---|---|---|---|---|
| HTTP | 2000 | GET / UA: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpan… | 183 · 93 IPs | 147.185.133.203 → |
| HTTP | 2000 | GET /favicon.ico UA: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36 | 88 · 54 IPs | 152.32.211.139 → |
| - | 2000 | MGLNDD_<HONEYPOT>_2000 | 30 · 30 IPs | 20.127.195.188 → |
| RDP | 2000 | /*� Cookie: mstshash=Administr | 21 · 5 IPs | 141.98.83.111 → |
| - | 2000 | 38 00 00 00 00 00 00 00 01 00 00 00 53 45 50 30 30 30 39 34 33 36 36 35 …(64 bytes) | 20 · 19 IPs | 198.235.24.3 → |
| - | 2000 | 20 · 15 IPs | 65.49.20.69 → | |
| - | 2000 | 0a | 19 · 7 IPs | 18.218.118.203 → |
| - | 2000 | 44 6d 64 54 00 00 00 17 00 00 00 01 00 00 00 00 11 11 00 ff 01 ff 13 | 18 · 16 IPs | 47.251.251.235 → |
| - | 2000 | 17 · 16 IPs | 167.94.146.61 → | |
| TLS | 2000 | 50 52 49 20 2a 20 48 54 54 50 2f 32 2e 30 0d 0a 0d 0a 53 4d 0d 0a 0d 0a …(57 bytes) | 17 · 16 IPs | 167.94.146.61 → |
| - | 2000 | d� 6Ld� ގd� ��d� wFd� �d� �Rd� �Xd� \�d� �d� �{d� �qd� X�d� 2ed� ڧd� ��d� sod� �d� �)d… | 14 · 14 IPs | 20.65.194.48 → |
| - | 2000 | 0d 0a | 14 · 12 IPs | 47.251.251.235 → |
IPCountryASNTop portsEvents