Port report
Port 27017MongoDB
7-day honeypot probe activity targeting destination port 27017. First seen 2026-05-14, most recent 2026-05-21 11:43.
Events 7d
1,907
Source IPs
302
Source ASNs
46
Countries
21
Top source ASNs
Top source countries
- United States1,165
- Netherlands307
- United Kingdom150
- Germany62
- Hong Kong36
- Russia34
- China33
- Belgium30
- Pakistan19
- Romania14
Top source IPs hitting port 27017
- 94.102.49.155157 eventsNL· AS202425 IP Volume inc
- 80.82.77.202135 eventsNL· AS202425 IP Volume inc
- 67.205.170.20278 eventsUS· AS14061 DigitalOcean, LLC
- 23.239.29.11646 eventsUS· AS63949 Akamai Connected Cloud
- 142.93.26.7046 eventsUS· AS14061 DigitalOcean, LLC
- 157.245.167.3646 eventsUS· AS14061 DigitalOcean, LLC
- 45.79.207.1346 eventsUS· AS63949 Akamai Connected Cloud
- 96.126.101.8946 eventsUS· AS63949 Akamai Connected Cloud
- 138.68.7.9046 eventsUS· AS14061 DigitalOcean, LLC
- 176.65.132.14144 eventsDE· AS51396 Pfcloud UG (haftungsbeschrankt)
- 159.223.111.5539 eventsUS· AS14061 DigitalOcean, LLC
- 159.65.221.7139 eventsUS· AS14061 DigitalOcean, LLC
- 159.223.186.1339 eventsUS· AS14061 DigitalOcean, LLC
- 165.22.187.5339 eventsUS· AS14061 DigitalOcean, LLC
- 192.241.150.13039 eventsUS· AS14061 DigitalOcean, LLC
- 206.189.231.9939 eventsUS· AS14061 DigitalOcean, LLC
- 167.99.12.4739 eventsUS· AS14061 DigitalOcean, LLC
- 157.245.81.1239 eventsUS· AS14061 DigitalOcean, LLC
- 18.218.118.20327 eventsUS· AS16509 Amazon.com, Inc.
- 64.89.163.8622 eventsGB· AS401626 Netiface America, Inc.
- 64.89.163.8522 eventsGB· AS401626 Netiface America, Inc.
- 64.89.163.8721 eventsGB· AS401626 Netiface America, Inc.
- 95.215.0.14420 eventsRU· AS34665 Petersburg Internet Network ltd.
- 64.89.163.13019 eventsGB· AS401626 Netiface America, Inc.
- 43.228.157.4519 eventsPK· AS205759 Ghosty Networks LLC
Top user-agents on port 27017
- Python/3.10 aiohttp/3.8.4277
- Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)95
- Go-http-client/1.185
- visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.3662
- Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.3622
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity14
- Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.010
- Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)10
- Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.368
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.368
JSON: /api/port/27017. CSV: /api/port/27017?format=csv.