Port report
Port 18789
7-day honeypot probe activity targeting destination port 18789. First seen 2026-05-14, most recent 2026-05-21 09:25.
Events 7d
683
Source IPs
199
Source ASNs
22
Countries
17
Top source ASNs
- AS14061DigitalOcean, LLC88
- AS135377UCLOUD INFORMATION TECHNOLOGY HK LIMITED87
- AS398324Censys, Inc.81
- AS398722Censys, Inc.79
- AS45102Alibaba US Technology Co., Ltd.75
- AS6939Hurricane Electric LLC52
- AS211680Sistemas Informaticos, S.A.24
- AS398705Censys, Inc.24
- AS4538China Education and Research Network Center23
- AS14618Amazon.com, Inc.20
Top source countries
Top source IPs hitting port 18789
- 159.223.24.25038 eventsDE· AS14061 DigitalOcean, LLC
- 202.112.47.5423 eventsCN· AS4538 China Education and Research Network Center
- 66.132.172.18416 eventsUS· AS398324 Censys, Inc.
- 165.154.11.21014 eventsNG· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 150.107.38.25112 eventsHK· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 44.220.188.22310 eventsUS· AS14618 Amazon.com, Inc.
- 44.220.188.14310 eventsUS· AS14618 Amazon.com, Inc.
- 45.156.129.959 eventsPT· AS211680 Sistemas Informaticos, S.A.
- 66.132.172.1968 eventsUS· AS398324 Censys, Inc.
- 66.132.186.1948 eventsUS
- 66.132.186.2018 eventsUS
- 66.132.186.1958 eventsUS
- 199.45.154.1318 eventsUS· AS398722 Censys, Inc.
- 66.132.172.398 eventsUS· AS398324 Censys, Inc.
- 66.132.172.1818 eventsUS· AS398324 Censys, Inc.
- 66.132.172.1938 eventsUS· AS398324 Censys, Inc.
- 66.132.172.1978 eventsUS· AS398324 Censys, Inc.
- 66.132.172.988 eventsUS· AS398324 Censys, Inc.
- 66.132.195.688 eventsUS
- 199.45.154.1278 eventsUS· AS398722 Censys, Inc.
- 66.132.172.2218 eventsUS· AS398324 Censys, Inc.
- 66.132.195.398 eventsUS
- 199.45.154.1358 eventsUS· AS398722 Censys, Inc.
- 167.94.146.508 eventsUS· AS398705 Censys, Inc.
- 199.45.155.1068 eventsUS· AS398722 Censys, Inc.
Top user-agents on port 18789
- Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)201
- Go-http-client/1.126
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.024
- Mozilla/5.0 zgrab/0.x23
- Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.3614
- python-httpx/0.28.114
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity12
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.3612
- Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.010
- Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.133 Safari/534.1610
JSON: /api/port/18789. CSV: /api/port/18789?format=csv.