Port report
Port 21FTP
7-day honeypot probe activity targeting destination port 21. First seen 2026-05-14, most recent 2026-05-21 11:07.
Events 7d
118,883
Source IPs
217
Source ASNs
31
Countries
19
Top source ASNs
- AS28343UNIFIQUE TELECOMUNICACOES SA117,995
- AS202425IP Volume inc183
- AS396982Google LLC138
- AS14061DigitalOcean, LLC89
- AS45102Alibaba US Technology Co., Ltd.67
- AS14956RouterHosting LLC45
- AS135377UCLOUD INFORMATION TECHNOLOGY HK LIMITED44
- AS8075Microsoft Corporation38
- AS34665Petersburg Internet Network ltd.37
- AS398705Censys, Inc.32
Top source countries
- Brazil117,995
- United States330
- Netherlands183
- Belgium107
- Germany97
- Russia42
- Singapore21
- Hong Kong20
- China15
- Malaysia15
Top source IPs hitting port 21
- 131.161.18.126117,995 eventsBR· AS28343 UNIFIQUE TELECOMUNICACOES SA
- 94.102.49.15594 eventsNL· AS202425 IP Volume inc
- 80.82.77.20289 eventsNL· AS202425 IP Volume inc
- 46.161.50.10937 eventsRU· AS34665 Petersburg Internet Network ltd.
- 167.99.240.21020 eventsDE· AS14061 DigitalOcean, LLC
- 104.248.37.7320 eventsDE· AS14061 DigitalOcean, LLC
- 165.245.253.12720 eventsUS
- 165.154.164.579 eventsDE· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 152.32.183.2099 eventsUS· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 118.194.248.1429 eventsKR· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 123.58.209.1129 eventsHK· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 34.156.5.2258 eventsUS· AS396982 Google LLC
- 199.45.154.1478 eventsUS· AS398722 Censys, Inc.
- 66.132.172.1928 eventsUS· AS398324 Censys, Inc.
- 66.132.186.1858 eventsUS
- 66.132.186.2038 eventsUS
- 66.132.172.2178 eventsUS· AS398324 Censys, Inc.
- 167.94.146.528 eventsUS· AS398705 Censys, Inc.
- 66.132.172.1438 eventsUS· AS398324 Censys, Inc.
- 167.94.146.618 eventsUS· AS398705 Censys, Inc.
- 167.94.146.568 eventsUS· AS398705 Censys, Inc.
- 66.132.186.1638 eventsUS
- 66.132.195.898 eventsUS
- 66.132.172.1868 eventsUS· AS398324 Censys, Inc.
- 167.94.146.638 eventsUS· AS398705 Censys, Inc.
Top user-agents on port 21
- Python/3.10 aiohttp/3.8.4174
- Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)100
- Go-http-client/1.138
- Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.3630
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.3620
- curl/7.74.020
- curl/7.64.120
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.016
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.368
- python-httpx/0.28.16
JSON: /api/port/21. CSV: /api/port/21?format=csv.