Port report
Port 110POP3
7-day honeypot probe activity targeting destination port 110. First seen 2026-05-14, most recent 2026-05-21 10:18.
Events 7d
849
Source IPs
181
Source ASNs
24
Countries
20
Top source ASNs
Top source countries
Top source IPs hitting port 110
- 94.102.49.155103 eventsNL· AS202425 IP Volume inc
- 80.82.77.20289 eventsNL· AS202425 IP Volume inc
- 16.58.56.21442 eventsUS· AS16509 Amazon.com, Inc.
- 165.22.91.10720 eventsDE· AS14061 DigitalOcean, LLC
- 64.226.110.1220 eventsDE· AS14061 DigitalOcean, LLC
- 157.230.28.9320 eventsDE· AS14061 DigitalOcean, LLC
- 3.130.168.219 eventsUS· AS16509 Amazon.com, Inc.
- 3.129.187.3818 eventsUS· AS16509 Amazon.com, Inc.
- 18.116.101.22010 eventsUS· AS16509 Amazon.com, Inc.
- 66.132.186.1718 eventsUS
- 167.94.146.528 eventsUS· AS398705 Censys, Inc.
- 167.94.146.628 eventsUS· AS398705 Censys, Inc.
- 3.131.220.1218 eventsUS· AS16509 Amazon.com, Inc.
- 66.132.186.1728 eventsUS
- 165.154.11.2108 eventsNG· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 66.132.195.1208 eventsUS
- 199.45.155.928 eventsUS· AS398722 Censys, Inc.
- 165.154.138.1078 eventsDE· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 199.45.154.1258 eventsUS· AS398722 Censys, Inc.
- 199.45.154.1278 eventsUS· AS398722 Censys, Inc.
- 167.94.146.578 eventsUS· AS398705 Censys, Inc.
- 66.132.195.338 eventsUS
- 152.32.180.988 eventsAE· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 152.32.200.1178 eventsBR· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 167.94.146.538 eventsUS· AS398705 Censys, Inc.
Top user-agents on port 110
- Python/3.10 aiohttp/3.8.4192
- Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)99
- visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.3677
- Go-http-client/1.135
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.028
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.3623
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity16
- curl/7.29.08
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.117
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.366
JSON: /api/port/110. CSV: /api/port/110?format=csv.