Port report
Port 4001
7-day honeypot probe activity targeting destination port 4001. First seen 2026-07-08, most recent 2026-07-15 06:58.
555
Events 7d
97
Source IPs
31
Source ASNs
20
Countries
Top source ASNs
Top source countries
Top source IPs hitting port 4001
- 80.82.77.202174 eventsKnown scanner NLseen Jul 15
- 94.102.49.15597 eventsProbing NL路 AS202425 IP Volume incseen Jul 15
- 216.180.246.4816 eventsKnown scanner USseen Jul 8
- 158.94.209.19316 eventsProbing NL路 AS202412 Omegatech LTDseen Jul 14
- 80.66.83.4314 eventsProbing RU路 AS216473 Bashinskii Vadim Ruslanovichseen Jul 14
- 150.107.36.23612 eventsProbing HK路 AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 10
- 160.119.71.9212 eventsProbing SC路 AS49870 Alsycon B.V.seen Jul 9
- 5.42.211.25012 eventsProbing RU路 AS214833 PR Obrada Podataka Castles Novi Sadseen Jul 14
- 160.119.71.13612 eventsProbing SC路 AS49870 Alsycon B.V.seen Jul 9
- 199.45.155.848 eventsKnown scanner USseen Jul 14
- 66.132.195.1058 eventsKnown scanner USseen Jul 13
- 51.158.248.1238 eventsProbing NL路 AS12876 Scaleway SASseen Jul 12
- 66.132.172.1978 eventsKnown scanner USseen Jul 10
- 204.76.203.788 eventsProbing NL路 AS51396 Pfcloud UG (haftungsbeschrankt)seen Jul 11
- 167.94.146.548 eventsKnown scanner USseen Jul 11
- 151.115.99.2538 eventsProbing PL路 AS12876 Scaleway SASseen Jul 9
- 199.45.155.648 eventsKnown scanner USseen Jul 8
- 199.45.154.1237 eventsKnown scanner USseen Jul 9
- 150.107.38.2516 eventsProbing HK路 AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 12
- 204.76.203.805 eventsProbing NL路 AS51396 Pfcloud UG (haftungsbeschrankt)seen Jul 11
- 176.65.148.254 eventsProbing NL路 AS51396 Pfcloud UG (haftungsbeschrankt)seen Jul 12
- 193.37.69.1154 eventsProbing RU路 AS213194 Nechaev Dmitry Sergeevichseen Jul 13
- 204.76.203.794 eventsProbing NL路 AS51396 Pfcloud UG (haftungsbeschrankt)seen Jul 11
- 216.180.246.2073 eventsKnown scanner USseen Jul 12
- 192.253.248.1802 eventsProbing IR路 AS213790 Limited Network LTDseen Jul 9
Top user-agents on port 4001
- Python/3.10 aiohttp/3.8.4267
- Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)35
- Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)19
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity18
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.017
- Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4 240.111 Safari/537.3615
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.369
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.08
- python-requests/2.32.58
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.156
JSON: /api/port/4001. CSV: /api/port/4001?format=csv.