Port 20128

HoneyLabs honeypots recorded 37 probes against destination port 20128 from 17 distinct source IP addresses in the last 7 days.

First observed 2026-08-08 13:37:11, most recently 2026-08-14 17:43:12 (UTC).

Most active source addresses

Source IPProbesNetworkCountry
89.106.83.24412Rizki Abdul AzisDE
14.225.19.606VIETNAM POSTS AND TELECOMMUNICATIONS GROUPVN
194.180.49.1023MEVSPACE sp. z o.o.BG
43.129.57.2192Tencent Building, Kejizhongyi AvenueID
103.252.221.1632Hostpalace Datacenters LtdIT
195.184.76.861ONYPHE SASUS
91.230.168.961ONYPHE SASUS
195.184.76.501ONYPHE SASUS

Networks it comes from

ASNOrganisationProbesSource IPs
AS200051Rizki Abdul Azis121
AS213412ONYPHE SAS88
AS135905VIETNAM POSTS AND TELECOMMUNICATIONS GROUP61
AS396982Google LLC44
AS201814MEVSPACE sp. z o.o.31
AS60064Hostpalace Datacenters Ltd21

Where it comes from

CountryProbes
Germany12
United States10
Vietnam6
Bulgaria3
United Kingdom2
Indonesia2

Client strings seen on this port

User agentProbes
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.012
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
Mozilla/5.0 (compatible; filter9router/1.0)6
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity4
Mozilla/5.02

Port report

Port report

Loading live data…