Port report
Port 50
7-day honeypot probe activity targeting destination port 50. First seen 2026-07-20, most recent 2026-07-27 14:13.
338
Events 7d
12
Source IPs
5
Source ASNs
4
Countries
Top source ASNs
Top source countries
Top source IPs hitting port 50
- 94.102.49.155166 eventsProbing NL路 AS202425 IP Volume incseen Jul 27
- 80.82.77.202156 eventsKnown scanner NLseen Jul 27
- 94.154.43.364 eventsProbing NL路 AS219502 Storm Industries LLCseen Jul 23
- 152.32.134.893 eventsProbing HK路 AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 23
- 89.248.172.102 eventsProbing NL路 AS202425 IP Volume incseen Jul 25
- 45.91.64.71 eventsKnown scanner RUseen Jul 27
- 45.91.64.61 eventsKnown scanner RUseen Jul 25
- 93.174.93.341 eventsProbing NL路 AS202425 IP Volume incseen Jul 23
- 89.248.171.231 eventsKnown scanner NLseen Jul 23
- 94.102.49.2101 eventsProbing NL路 AS202425 IP Volume incseen Jul 25
- 89.248.172.331 eventsProbing NL路 AS202425 IP Volume incseen Jul 25
- 85.217.149.611 eventsKnown scanner CAseen Jul 24
Top user-agents on port 50
- Python/3.10 aiohttp/3.8.4318
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.364
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.364
- fasthttp2
- curl/7.29.02
- Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_3; en-us; Silk/1.0.13.81_10003810) AppleWebKit/533.16 (KHTML, like Gecko) Version/5.0 Safari/533.16 Silk-Accelerated=true2
- Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)1
- Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36 Edg/101.0.1210.391
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.361
JSON: /api/port/50. CSV: /api/port/50?format=csv.