Port 50000 (SAP)

HoneyLabs honeypots recorded 236 probes against destination port 50000 (SAP) from 131 distinct source IP addresses in the last 7 days.

First observed 2026-09-28 22:54:08, most recently 2026-10-05 19:47:52 (UTC).

Most active source addresses

Source IPProbesNetworkCountry
195.178.110.20412Techoff Srv LimitedBG
77.90.185.2011Limited Network LTDDE
18.218.118.2039Amazon.com, Inc.US
79.124.56.2149Tamatiya EOODBG
3.129.187.387Amazon.com, Inc.US
213.177.179.1956Feo Prest SRLIR
18.116.101.2206Amazon.com, Inc.US
3.131.220.1214Amazon.com, Inc.US

Networks it comes from

ASNOrganisationProbesSource IPs
AS16509Amazon.com, Inc.389
AS6939Hurricane Electric LLC2624
AS8075Microsoft Corporation2417
AS45102Alibaba (US) Technology Co., Ltd.167
AS396982Google LLC1515
AS48090Techoff Srv Limited132

Where it comes from

CountryProbes
United States137
Bulgaria25
Germany18
China10
Singapore7
Iran6

Client strings seen on this port

User agentProbes
visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.3619
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity14
Mozilla/5.0 zgrab/0.x11
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.366

Port report

Port report

Loading live data…