Port 4000
HoneyLabs honeypots recorded 589 probes against destination port 4000 from 180 distinct source IP addresses in the last 7 days.
First observed 2026-11-08 08:50, most recently 2026-11-15 07:08 (UTC).
What the sensors show
The sources sat in 48 networks across 22 countries. No single address sent more than 10% of them. The largest source network was AS16509 (Amazon.com, Inc.), with 16% of the probes from 4 addresses. 13 of the 25 busiest addresses are recognised research scanners.
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 170.244.95.50 | 56 | WhiteLabelColo | US |
| 18.218.118.203 | 34 | Amazon.com, Inc. | US |
| 18.116.101.220 | 32 | Amazon.com, Inc. | US |
| 45.198.224.85 | 24 | Vpsvault.host Ltd | US |
| 173.35.95.189 | 21 | Rogers Communications Canada Inc. | CA |
| 3.129.187.38 | 15 | Amazon.com, Inc. | US |
| 46.151.178.14 | 15 | Sino Worldwide Trading Limited | NL |
| 209.99.188.174 | 12 | SKN Subnet & Telecom Ltd | CH |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS16509 | Amazon.com, Inc. | 93 | 4 |
| AS398324 | Censys, Inc. | 86 | 14 |
| AS394474 | WhiteLabelColo | 56 | 1 |
| AS14061 | DigitalOcean, LLC | 44 | 19 |
| AS135377 | UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED | 40 | 7 |
| AS215925 | Vpsvault.host Ltd | 24 | 1 |
Where it comes from
| Country | Probes |
|---|---|
| United States | 369 |
| The Netherlands | 39 |
| Canada | 22 |
| Russia | 18 |
| Hong Kong | 17 |
| China | 17 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36 | 69 |
| Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) | 60 |
| Python/3.12 aiohttp/3.14.5 | 29 |
| Mozilla/5.0 (compatible; scanner) | 27 |
| curl/8.23.0 | 21 |
Port report
Port report
Loading