Port report
Port 20
HoneyLabs honeypots recorded 242 probes against destination port 20 from 69 distinct source IP addresses in the last 7 days. The largest source network was DigitalOcean, LLC (AS14061). Most probes came from United States. First seen 2026-07-29, most recent 2026-08-05 18:48.
242
Events 7d
69
Source IPs
18
Source ASNs
7
Countries
Top source ASNs
Top source countries
Top source IPs hitting port 20
- 104.248.122.15646 eventsRecognized scanner USseen Aug 2
- 170.187.147.2446 eventsRecognized scanner USseen Aug 2
- 68.183.165.9946 eventsRecognized scanner USseen Aug 2
- 162.217.100.19614 eventsObserved US路 AS32475 Internap Holding LLCseen Aug 3
- 167.94.146.628 eventsRecognized scanner USseen Jul 30
- 106.75.24.614 eventsObserved CN路 AS4808 China Unicom Beijing Province Networkseen Aug 5
- 118.194.251.173 eventsObserved TH路 AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 31
- 162.216.149.1673 eventsObserved USseen Aug 4
- 15.204.101.2113 eventsObserved US路 AS16276 OVH SASseen Aug 2
- 104.152.52.2233 eventsRecognized scanner USseen Aug 1
- 104.152.52.2242 eventsRecognized scanner USseen Aug 1
- 104.152.52.2202 eventsRecognized scanner USseen Aug 1
- 141.98.83.1112 eventsObserved PA路 AS209588 Flyservers S.A.seen Jul 31
- 44.220.188.2272 eventsRecognized scanner USseen Aug 3
- 18.97.26.722 eventsRecognized scanner USseen Aug 4
- 147.185.133.92 eventsObserved US路 AS396982 Google LLCseen Jul 30
- 44.220.188.182 eventsRecognized scanner USseen Jul 31
- 20.14.90.841 eventRecognized scanner USseen Aug 5
- 45.82.78.1051 eventObserved DE路 AS212512 Detai Prosperous Technologies Limitedseen Aug 4
- 85.217.149.461 eventRecognized scanner CAseen Aug 1
- 20.64.105.1481 eventRecognized scanner USseen Jul 30
- 52.146.90.1911 eventRecognized scanner USseen Jul 30
- 116.172.249.1681 eventObserved CN路 AS4837 CHINA UNICOM China169 Backboneseen Aug 1
- 162.216.149.1491 eventObserved USseen Jul 31
- 91.230.168.1961 eventRecognized scanner USseen Aug 5
Top user-agents on port 20
- Mozilla/5.0 (compatible; FlowIQLabsBot/1.0; +https://flowiq-labs.com/scanning-info)14
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
- Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)6
- Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.364
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.363
- curl/7.29.02
- Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/53.0.3107.93 Safari/537.321
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:143.0) Gecko/20100101 Firefox/143.01
- curl/7.61.11
- Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/53.0.3002.95 Safari/537.321
JSON: /api/port/20. CSV: /api/port/20?format=csv.