Port report
Port 12226
7-day honeypot probe activity targeting destination port 12226. First seen 2026-06-30, most recent 2026-07-06 13:17.
1,896
Events 7d
28
Source IPs
10
Source ASNs
8
Countries
Top source ASNs
Top source countries
Top source IPs hitting port 12226
- 184.105.3.841,857 eventsProbing USΒ· AS394996 47-2339071seen Jul 6
- 101.36.116.457 eventsProbing HKΒ· AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 4
- 8.216.10.2002 eventsProbing JPΒ· AS45102 Alibaba (US) Technology Co., Ltd.seen Jul 4
- 123.160.223.722 eventsProbing CNΒ· AS4134 Chinanetseen Jul 5
- 8.216.7.2182 eventsProbing JPΒ· AS45102 Alibaba (US) Technology Co., Ltd.seen Jul 4
- 47.84.128.1152 eventsProbing SGΒ· AS45102 Alibaba (US) Technology Co., Ltd.seen Jul 5
- 123.160.223.752 eventsProbing CNΒ· AS4134 Chinanetseen Jul 5
- 207.90.244.182 eventsProbing USΒ· AS174 Cogent Communications, LLCseen Jul 5
- 147.185.133.311 eventsProbing USΒ· AS396982 Google LLCseen Jul 4
- 91.238.181.61 eventsProbing FRΒ· AS49434 Fbw Networks SASseen Jul 5
- 182.138.158.51 eventsProbing CNΒ· AS4134 Chinanetseen Jul 2
- 147.185.133.1921 eventsProbing USΒ· AS396982 Google LLCseen Jun 30
- 35.203.211.281 eventsProbing GBseen Jul 2
- 162.216.150.1221 eventsProbing USseen Jul 2
- 85.217.140.71 eventsKnown scanner FRseen Jul 2
- 123.160.223.731 eventsProbing CNΒ· AS4134 Chinanetseen Jul 4
- 162.216.150.101 eventsProbing USseen Jul 4
- 85.217.149.471 eventsKnown scanner CAseen Jun 30
- 85.217.140.151 eventsKnown scanner FRseen Jul 2
- 139.170.73.531 eventsProbing CNΒ· AS4837 CHINA UNICOM China169 Backboneseen Jul 2
- 123.160.223.741 eventsProbing CNΒ· AS4134 Chinanetseen Jul 4
- 147.185.133.691 eventsProbing USΒ· AS396982 Google LLCseen Jun 30
- 162.216.149.381 eventsProbing USseen Jul 6
- 35.203.211.1741 eventsProbing GBseen Jul 1
- 147.185.133.181 eventsProbing USΒ· AS396982 Google LLCseen Jul 3
Top user-agents on port 12226
- Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0225
- Mozilla/5.0 (Linux; Android 14; SM-S928B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36219
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36216
- Mozilla/5.0 (iPhone; CPU iPhone OS 18_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.2 Mobile/15E148 Safari/605.1.15209
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.2 Safari/605.1.15204
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0200
- Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36199
- Mozilla/5.0 (X11; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0198
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36187
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity10
JSON: /api/port/12226. CSV: /api/port/12226?format=csv.