Port 18000

HoneyLabs honeypots recorded 93 probes against destination port 18000 from 35 distinct source IP addresses in the last 7 days.

First observed 2026-09-16 13:31:00, most recently 2026-09-23 08:22:01 (UTC).

Most active source addresses

Source IPProbesNetworkCountry
150.107.38.4014UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK
165.154.11.2107UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDNG
123.58.200.217UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDKR
45.43.60.1857UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDJP
118.193.68.427UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDKR
47.81.209.1457Alibaba (US) Technology Co., Ltd.MY
150.107.38.2516UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK
176.65.134.484Pfcloud UG (haftungsbeschrankt)DE

Networks it comes from

ASNOrganisationProbesSource IPs
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED486
AS45102Alibaba (US) Technology Co., Ltd.133
AS396982Google LLC1010
AS213412ONYPHE SAS88
AS201002PebbleHost Ltd42
AS51396Pfcloud UG (haftungsbeschrankt)41

Where it comes from

CountryProbes
Hong Kong20
South Korea14
Malaysia10
United Kingdom8
France8
Japan7

Client strings seen on this port

User agentProbes
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.028
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity10
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.117
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.366

Port report

Port report

Loading live data…