Port report
Port 4002
7-day honeypot probe activity targeting destination port 4002. First seen 2026-06-29, most recent 2026-07-06 08:07.
1,110
Events 7d
57
Source IPs
17
Source ASNs
17
Countries
Top source ASNs
Top source countries
- Italy563
- Belgium235
- United States131
- France44
- The Netherlands31
- Taiwan30
- Seychelles24
- Poland12
- Germany11
- China6
Top source IPs hitting port 4002
- 34.17.194.33563 eventsProbing ITseen Jun 30
- 34.22.195.218230 eventsProbing BEseen Jun 30
- 34.125.41.7930 eventsProbing USseen Jun 30
- 104.199.185.17630 eventsProbing TWseen Jun 30
- 35.202.117.12830 eventsProbing USseen Jun 30
- 34.45.60.13030 eventsProbing USseen Jun 30
- 216.180.246.6716 eventsKnown scanner USseen Jun 30
- 62.210.142.16016 eventsKnown scanner FRseen Jul 5
- 62.210.142.17016 eventsKnown scanner FRseen Jul 1
- 160.119.71.13612 eventsProbing SC· AS49870 Alsycon B.V.seen Jul 1
- 151.115.99.25312 eventsProbing PL· AS12876 Scaleway SASseen Jun 30
- 160.119.71.9212 eventsProbing SC· AS49870 Alsycon B.V.seen Jul 1
- 51.158.248.12311 eventsProbing NL· AS12876 Scaleway SASseen Jun 30
- 216.180.246.1297 eventsKnown scanner USseen Jul 1
- 204.76.203.2226 eventsProbing NL· AS51396 Pfcloud UG (haftungsbeschrankt)seen Jun 30
- 34.158.19.1245 eventsProbing CHseen Jun 30
- 35.240.112.1045 eventsProbing BEseen Jun 30
- 34.159.80.1285 eventsProbing DEseen Jun 30
- 204.76.203.2125 eventsProbing NL· AS51396 Pfcloud UG (haftungsbeschrankt)seen Jun 30
- 34.88.236.715 eventsProbing FIseen Jun 30
- 77.91.118.184 eventsProbing US· AS209896 Contrust Solutions S.R.L.seen Jul 3
- 77.91.118.504 eventsProbing US· AS209896 Contrust Solutions S.R.L.seen Jul 3
- 151.241.119.1134 eventsProbing US· AS174 Cogent Communications, LLCseen Jul 3
- 204.76.203.2143 eventsProbing NL· AS51396 Pfcloud UG (haftungsbeschrankt)seen Jun 30
- 157.230.26.2293 eventsProbing DE· AS14061 DigitalOcean, LLCseen Jul 4
Top user-agents on port 4002
- Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)57
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.3612
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.010
- python-requests/2.32.510
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.06
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.366
- Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)5
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.365
- Mozilla/5.0 zgrab/0.x5
- Mozilla/5.0 (Windows NT 5.1; rv:5.0) Gecko/20100101 Firefox/5.04
JSON: /api/port/4002. CSV: /api/port/4002?format=csv.