Port report
Port 20001
7-day honeypot probe activity targeting destination port 20001. First seen 2026-06-29, most recent 2026-07-06 11:51.
289
Events 7d
91
Source IPs
20
Source ASNs
14
Countries
Top source ASNs
Top source countries
Top source IPs hitting port 20001
- 216.180.246.6316 eventsKnown scanner USseen Jul 3
- 167.94.146.509 eventsKnown scanner USseen Jul 2
- 66.132.195.999 eventsKnown scanner USseen Jul 2
- 199.45.155.989 eventsKnown scanner USseen Jul 1
- 66.132.195.909 eventsKnown scanner USseen Jul 3
- 66.132.172.1049 eventsKnown scanner USseen Jul 4
- 66.132.195.869 eventsKnown scanner USseen Jul 4
- 66.132.172.1849 eventsKnown scanner USseen Jul 2
- 66.132.172.369 eventsKnown scanner USseen Jun 29
- 66.132.172.1929 eventsKnown scanner USseen Jul 6
- 66.132.172.2079 eventsKnown scanner USseen Jul 4
- 66.132.172.349 eventsKnown scanner USseen Jul 3
- 66.132.172.1289 eventsKnown scanner USseen Jul 6
- 199.45.154.1209 eventsKnown scanner USseen Jul 5
- 167.94.146.589 eventsKnown scanner USseen Jul 2
- 66.132.186.1749 eventsKnown scanner USseen Jul 1
- 167.94.146.579 eventsKnown scanner USseen Jun 30
- 66.132.172.2028 eventsKnown scanner USseen Jul 4
- 165.154.138.1657 eventsProbing DE· AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 6
- 165.154.164.1147 eventsProbing DE· AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 6
- 152.32.156.507 eventsProbing IN· AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 6
- 204.76.203.2125 eventsProbing NL· AS51396 Pfcloud UG (haftungsbeschrankt)seen Jul 1
- 204.76.203.2214 eventsProbing NL· AS51396 Pfcloud UG (haftungsbeschrankt)seen Jul 1
- 204.76.203.2134 eventsProbing NL· AS51396 Pfcloud UG (haftungsbeschrankt)seen Jul 1
- 65.49.20.664 eventsProbing USseen Jul 6
Top user-agents on port 20001
- Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)101
- Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)16
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.012
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity10
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.06
- Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.06
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.364
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.113
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 Edg/140.0.0.02
- Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.02
JSON: /api/port/20001. CSV: /api/port/20001?format=csv.