Port report
Port 50000SAP
7-day honeypot probe activity targeting destination port 50000. First seen 2026-06-29, most recent 2026-07-06 11:54.
2,096
Events 7d
161
Source IPs
37
Source ASNs
23
Countries
Top source ASNs
- AS396982Google LLC1,740
- AS16509Amazon.com, Inc.87
- AS6939Hurricane Electric LLC27
- AS8075Microsoft Corporation25
- AS31898Oracle Corporation24
- AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED21
- AS51396Pfcloud UG (haftungsbeschrankt)20
- AS12876Scaleway SAS17
- AS49870Alsycon B.V.12
- AS63199CDS Global Cloud Co., Ltd12
Top source countries
- United States772
- Italy571
- India571
- Chile30
- The Netherlands25
- China20
- France20
- United Kingdom16
- Romania15
- Seychelles12
Top source IPs hitting port 50000
- 34.154.191.11571 eventsProbing ITseen Jun 30
- 35.244.31.213563 eventsProbing INseen Jun 30
- 34.145.223.88234 eventsProbing USseen Jun 30
- 34.121.73.192230 eventsProbing USseen Jun 30
- 16.58.56.21436 eventsKnown scanner USseen Jul 5
- 34.16.197.24031 eventsProbing USseen Jun 30
- 8.235.62.15230 eventsProbing USseen Jun 30
- 34.176.85.7130 eventsProbing CLseen Jun 30
- 141.148.181.19524 eventsProbing US· AS31898 Oracle Corporationseen Jul 5
- 216.180.246.15317 eventsKnown scanner USseen Jun 29
- 62.210.142.17017 eventsKnown scanner FRseen Jul 6
- 18.220.53.23812 eventsProbing USseen Jul 5
- 3.143.162.21012 eventsKnown scanner USseen Jul 1
- 3.144.234.22012 eventsProbing USseen Jul 6
- 148.153.56.17412 eventsProbing US· AS63199 CDS Global Cloud Co., Ltdseen Jul 3
- 18.116.101.22012 eventsKnown scanner USseen Jul 2
- 167.94.146.598 eventsKnown scanner USseen Jul 1
- 165.154.36.2457 eventsProbing US· AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 3
- 152.32.159.1777 eventsProbing IN· AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 3
- 152.32.206.497 eventsProbing US· AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 3
- 79.124.58.1267 eventsProbing BG· AS50360 Tamatiya EOODseen Jun 29
- 34.105.159.2246 eventsProbing GBseen Jun 30
- 80.94.95.436 eventsProbing RO· AS204428 SS-Netseen Jul 1
- 176.65.148.1476 eventsProbing NL· AS51396 Pfcloud UG (haftungsbeschrankt)seen Jul 3
- 160.119.71.926 eventsProbing SC· AS49870 Alsycon B.V.seen Jul 4
Top user-agents on port 50000
- visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.3662
- Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)32
- Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:131.0) Gecko/20100101 Firefox/131.019
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity14
- Mozilla/5.0 zgrab/0.x13
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.012
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.010
- Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4 240.111 Safari/537.3610
- Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.369
- Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_0; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.202.0 Safari/532.07
JSON: /api/port/50000. CSV: /api/port/50000?format=csv.