Port report
Port 21000
7-day honeypot probe activity targeting destination port 21000. First seen 2026-06-29, most recent 2026-07-06 07:19.
272
Events 7d
29
Source IPs
8
Source ASNs
8
Countries
Top source ASNs
Top source countries
Top source IPs hitting port 21000
- 50.116.20.13846 eventsKnown scanner USseen Jul 5
- 69.164.203.3246 eventsKnown scanner USseen Jul 5
- 45.79.207.10946 eventsKnown scanner USseen Jul 5
- 157.230.161.2746 eventsKnown scanner USseen Jul 5
- 147.182.174.23812 eventsKnown scanner USseen Jul 5
- 50.116.33.11812 eventsKnown scanner USseen Jul 5
- 159.223.111.5212 eventsKnown scanner USseen Jul 5
- 45.33.5.6912 eventsKnown scanner USseen Jul 5
- 152.32.170.556 eventsProbing HK· AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 4
- 152.32.211.694 eventsProbing HK· AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 3
- 77.91.118.504 eventsProbing US· AS209896 Contrust Solutions S.R.L.seen Jul 5
- 93.152.208.424 eventsProbing BG· AS211486 Alferov Aleksey Aleksandrovichseen Jul 5
- 165.154.51.2213 eventsProbing TH· AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jun 29
- 93.152.208.262 eventsProbing BG· AS211486 Alferov Aleksey Aleksandrovichseen Jul 5
- 91.231.89.2002 eventsKnown scanner FRseen Jul 1
- 93.152.208.382 eventsProbing BG· AS211486 Alferov Aleksey Aleksandrovichseen Jul 5
- 85.217.149.171 eventsKnown scanner CAseen Jul 6
- 91.231.89.1191 eventsKnown scanner FRseen Jul 2
- 91.196.152.201 eventsKnown scanner FRseen Jul 2
- 68.183.5.1011 eventsProbing NL· AS14061 DigitalOcean, LLCseen Jul 1
- 85.217.140.231 eventsKnown scanner FRseen Jul 6
- 147.45.112.1751 eventsProbing VU· AS209132 Alviva Holding Limitedseen Jun 30
- 91.231.89.1481 eventsKnown scanner FRseen Jul 2
- 91.231.89.1361 eventsKnown scanner FRseen Jun 30
- 91.231.89.561 eventsKnown scanner FRseen Jul 1
Top user-agents on port 21000
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.3612
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
- Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)4
- Go-http-client/1.13
- curl/7.29.02
- Mozilla/5.0 zgrab/0.x1
- Mozilla/5.0 (Macintosh; Intel Mac OS X 9_2_2) AppleWebKit/573.54 (KHTML, like Gecko) Chrome/87.0.2899 Safari/537.361
JSON: /api/port/21000. CSV: /api/port/21000?format=csv.