Port report
Port 20000
7-day honeypot probe activity targeting destination port 20000. First seen 2026-05-14, most recent 2026-05-21 11:35.
Events 7d
581
Source IPs
176
Source ASNs
32
Countries
19
Top source ASNs
Top source countries
Top source IPs hitting port 20000
- 101.27.96.209114 eventsCN· AS4837 CHINA UNICOM China169 Backbone
- 128.136.131.8420 eventsUS· AS13649 Flexential Colorado Corp.
- 109.105.210.5913 eventsPT· AS21859 Zenlayer Inc
- 45.156.129.8013 eventsPT· AS211680 Sistemas Informaticos, S.A.
- 46.101.226.17912 eventsDE· AS14061 DigitalOcean, LLC
- 165.154.163.1012 eventsUS· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 165.22.95.3112 eventsDE· AS14061 DigitalOcean, LLC
- 68.183.71.19612 eventsDE· AS14061 DigitalOcean, LLC
- 66.132.172.989 eventsUS· AS398324 Censys, Inc.
- 167.94.146.499 eventsUS· AS398705 Censys, Inc.
- 167.94.146.539 eventsUS· AS398705 Censys, Inc.
- 199.45.154.1529 eventsUS· AS398722 Censys, Inc.
- 199.45.155.799 eventsUS· AS398722 Censys, Inc.
- 66.132.172.2089 eventsUS· AS398324 Censys, Inc.
- 66.132.172.1299 eventsUS· AS398324 Censys, Inc.
- 199.45.154.1159 eventsUS· AS398722 Censys, Inc.
- 66.132.172.2219 eventsUS· AS398324 Censys, Inc.
- 66.132.195.509 eventsUS
- 167.94.146.529 eventsUS· AS398705 Censys, Inc.
- 66.132.172.979 eventsUS· AS398324 Censys, Inc.
- 167.94.146.609 eventsUS· AS398705 Censys, Inc.
- 66.132.172.2118 eventsUS· AS398324 Censys, Inc.
- 66.132.186.1728 eventsUS
- 185.242.226.586 eventsUS· AS202425 IP Volume inc
- 160.119.76.586 eventsSC· AS49870 Alsycon B.V.
Top user-agents on port 20000
- Python/3.11 aiohttp/3.13.5114
- Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)88
- Go-http-client/1.127
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.014
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity14
- Mozilla/5.0 zgrab/0.x12
- Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4 240.111 Safari/537.3610
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.368
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.2037
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.366
JSON: /api/port/20000. CSV: /api/port/20000?format=csv.