Port report
Port 20000
7-day honeypot probe activity targeting destination port 20000. First seen 2026-07-08, most recent 2026-07-15 09:01.
911
Events 7d
235
Source IPs
34
Source ASNs
19
Countries
Top source ASNs
Top source countries
- United States419
- Germany201
- Seychelles62
- Portugal52
- The Netherlands37
- Brazil32
- Vietnam21
- Singapore14
- Russia14
- France11
Top source IPs hitting port 20000
- 160.119.71.9224 eventsProbing SC路 AS49870 Alsycon B.V.seen Jul 10
- 167.94.146.6118 eventsKnown scanner USseen Jul 13
- 66.132.186.19817 eventsKnown scanner USseen Jul 11
- 216.180.246.12616 eventsKnown scanner USseen Jul 9
- 109.105.210.6813 eventsKnown scanner PTseen Jul 9
- 109.105.210.6013 eventsKnown scanner PTseen Jul 14
- 45.156.129.7313 eventsKnown scanner PTseen Jul 14
- 185.226.197.1313 eventsKnown scanner PTseen Jul 11
- 165.22.76.6512 eventsProbing DE路 AS14061 DigitalOcean, LLCseen Jul 14
- 46.101.126.16912 eventsProbing DE路 AS14061 DigitalOcean, LLCseen Jul 10
- 165.245.240.8112 eventsProbing DE路 AS14061 DigitalOcean, LLCseen Jul 9
- 165.227.153.13212 eventsProbing DE路 AS14061 DigitalOcean, LLCseen Jul 10
- 160.119.71.13612 eventsProbing SC路 AS49870 Alsycon B.V.seen Jul 10
- 209.38.198.15712 eventsProbing DE路 AS14061 DigitalOcean, LLCseen Jul 9
- 104.248.252.14912 eventsProbing DE路 AS14061 DigitalOcean, LLCseen Jul 14
- 164.90.213.18212 eventsProbing DE路 AS14061 DigitalOcean, LLCseen Jul 10
- 159.65.126.5812 eventsProbing DE路 AS14061 DigitalOcean, LLCseen Jul 9
- 46.101.179.17312 eventsProbing DE路 AS14061 DigitalOcean, LLCseen Jul 9
- 66.132.224.899 eventsKnown scanner USseen Jul 14
- 66.132.195.799 eventsKnown scanner USseen Jul 14
- 66.132.172.1019 eventsKnown scanner USseen Jul 11
- 167.94.146.629 eventsKnown scanner USseen Jul 12
- 199.45.154.1539 eventsKnown scanner USseen Jul 9
- 66.132.224.799 eventsKnown scanner USseen Jul 13
- 66.132.195.729 eventsKnown scanner USseen Jul 11
Top user-agents on port 20000
- Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)148
- Go-http-client/1.180
- Mozilla/5.0 (compatible; FlowIQLabsBot/1.0; +https://flowiq-labs.com/scanning-info)64
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.020
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity19
- Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)16
- Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.3614
- Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:146.0) Gecko/20100101 Firefox/146.012
- Mozilla/5.0 zgrab/0.x10
- Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)9
JSON: /api/port/20000. CSV: /api/port/20000?format=csv.