Port report
Port 110POP3
7-day honeypot probe activity targeting destination port 110. First seen 2026-07-08, most recent 2026-07-15 06:40.
892
Events 7d
132
Source IPs
23
Source ASNs
15
Countries
Top source ASNs
- AS396982Google LLC682
- AS16509Amazon.com, Inc.69
- AS14061DigitalOcean, LLC45
- AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED21
- AS8075Microsoft Corporation14
- AS45102Alibaba (US) Technology Co., Ltd.8
- AS197834Ucom CJSC8
- AS34665Petersburg Internet Network ltd.5
- AS21859Zenlayer Inc5
- AS211680Sistemas Informaticos, S.A.4
Top source countries
Top source IPs hitting port 110
- 16.58.56.21439 eventsKnown scanner USseen Jul 14
- 34.76.152.10627 eventsProbing BEseen Jul 9
- 34.53.149.22727 eventsProbing BEseen Jul 14
- 104.155.85.5127 eventsProbing BEseen Jul 8
- 34.34.157.7822 eventsProbing BEseen Jul 10
- 18.218.118.20320 eventsKnown scanner USseen Jul 14
- 34.79.56.23618 eventsProbing BEseen Jul 9
- 34.22.249.718 eventsProbing BEseen Jul 13
- 34.62.17.15918 eventsProbing BEseen Jul 15
- 34.53.234.21318 eventsProbing BEseen Jul 10
- 207.175.82.14518 eventsProbing BEseen Jul 11
- 34.53.243.18318 eventsProbing BEseen Jul 11
- 35.187.122.22418 eventsProbing BEseen Jul 12
- 216.180.246.17616 eventsKnown scanner USseen Jul 9
- 34.76.221.9713 eventsProbing BEseen Jul 14
- 142.93.20.22610 eventsKnown scanner USseen Jul 13
- 159.89.229.9610 eventsKnown scanner USseen Jul 13
- 167.71.24.18110 eventsKnown scanner USseen Jul 13
- 3.129.187.3810 eventsKnown scanner USseen Jul 10
- 34.76.161.639 eventsProbing BEseen Jul 14
- 104.155.74.1909 eventsProbing BEseen Jul 13
- 104.155.6.1089 eventsProbing BEseen Jul 8
- 34.53.179.1049 eventsProbing BEseen Jul 14
- 34.78.45.279 eventsProbing BEseen Jul 11
- 34.62.201.1599 eventsProbing BEseen Jul 13
Top user-agents on port 110
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.3675
- visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.3653
- Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)15
- fasthttp5
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.364
- curl/7.64.14
- Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.364
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity3
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.362
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.362
JSON: /api/port/110. CSV: /api/port/110?format=csv.