HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsEmissions IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / EnrichSplunkMicrosoft SentinelElasticMISPOpenCTICrowdSec
PricingDocsBlog

Port 110 (POP3)

HoneyLabs honeypots recorded 649 probes against destination port 110 (POP3) from 105 distinct source IP addresses in the last 7 days.

First observed 2026-09-23 01:25:53, most recently 2026-09-29 17:51:57 (UTC).

Most active source addresses

Source IPProbesNetworkCountry
18.116.101.22042Amazon.com, Inc.US
104.199.44.936Google LLCBE
34.140.206.1427Google LLCBE
34.22.113.21027Google LLCBE
35.195.131.15827Google LLCBE
207.175.86.6027Google LLCBE
35.233.42.11527Google LLCBE
34.38.234.8127Google LLCBE

Networks it comes from

ASNOrganisationProbesSource IPs
AS396982Google LLC43632
AS16509Amazon.com, Inc.584
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED3611
AS214664JSC F6192
AS45102Alibaba (US) Technology Co., Ltd.114
AS202425IP Volume inc102

Where it comes from

CountryProbes
Belgium432
United States107
Russia20
Germany12
The Netherlands10
Brazil8

Client strings seen on this port

User agentProbes
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.3648
visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.3641
fasthttp15
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.3612
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.3612

Port report

Port report

Loading live data…