Port 12000
HoneyLabs honeypots recorded 1,340 probes against destination port 12000 from 71 distinct source IP addresses in the last 7 days.
First observed 2026-08-21 17:38:47, most recently 2026-08-28 06:41:44 (UTC).
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 35.223.192.217 | 542 | Google LLC | US |
| 34.175.199.78 | 504 | Google LLC | ES |
| 35.226.134.247 | 24 | Google LLC | US |
| 104.199.68.151 | 24 | Google LLC | BE |
| 34.181.143.75 | 24 | Google LLC | US |
| 34.41.118.168 | 19 | Google LLC | US |
| 34.106.193.135 | 19 | Google LLC | US |
| 34.72.16.21 | 19 | Google LLC | US |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS396982 | Google LLC | 1,196 | 22 |
| AS398324 | Censys, Inc. | 26 | 4 |
| AS14061 | DigitalOcean, LLC | 22 | 10 |
| AS398722 | Censys, Inc. | 16 | 2 |
| AS63199 | CDS Global Cloud Co., Ltd | 16 | 2 |
| AS135377 | UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED | 16 | 2 |
Where it comes from
| Country | Probes |
|---|---|
| United States | 765 |
| Spain | 504 |
| Belgium | 24 |
| Japan | 12 |
| Philippines | 8 |
| Hong Kong | 8 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36 | 1,049 |
| crusader-worker/1.0 | 129 |
| Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) | 32 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 | 12 |
| Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 | 10 |
Port report
Port report
Loading live data…