Port 50000 (SAP)

HoneyLabs honeypots recorded 367 probes against destination port 50000 (SAP) from 155 distinct source IP addresses in the last 7 days.

First observed 2026-08-13 20:26:54, most recently 2026-08-20 15:22:47 (UTC).

Most active source addresses

Source IPProbesNetworkCountry
3.131.220.12135Amazon.com, Inc.US
150.107.36.8218UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK
62.210.142.17317Scaleway SASFR
165.154.163.1016UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDUS
18.218.118.20314Amazon.com, Inc.US
18.116.101.22012Amazon.com, Inc.US
3.130.168.212Amazon.com, Inc.US
3.144.231.712Amazon.com, Inc.US

Networks it comes from

ASNOrganisationProbesSource IPs
AS16509Amazon.com, Inc.1009
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED555
AS6939Hurricane Electric LLC2824
AS8075Microsoft Corporation2218
AS396982Google LLC1916
AS12876Scaleway SAS171

Where it comes from

CountryProbes
United States234
Hong Kong25
France21
United Kingdom16
Germany10
Japan9

Client strings seen on this port

User agentProbes
visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.3673
Mozilla/5.0 (X11; Linux x86_64; rv:135.0) Gecko/20100101 Firefox/135.018
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity17
Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)16
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4 240.111 Safari/537.3615

Port report

Port report

Loading live data…