Port report
Port 18789
7-day honeypot probe activity targeting destination port 18789. First seen 2026-07-08, most recent 2026-07-15 15:44.
922
Events 7d
222
Source IPs
21
Source ASNs
13
Countries
Top source ASNs
- AS14061DigitalOcean, LLC246
- AS398324Censys, Inc.190
- AS45102Alibaba (US) Technology Co., Ltd.86
- AS23470ReliableSite.Net LLC69
- AS398722Censys, Inc.63
- AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED56
- AS6939Hurricane Electric LLC55
- AS14618Amazon.com, Inc.36
- AS398705Censys, Inc.32
- AS4538China Education and Research Network Center28
Top source countries
Top source IPs hitting port 18789
- 185.150.191.23669 eventsProbing US路 AS23470 ReliableSite.Net LLCseen Jul 14
- 46.101.169.4238 eventsProbing DE路 AS14061 DigitalOcean, LLCseen Jul 15
- 161.35.28.9938 eventsProbing DE路 AS14061 DigitalOcean, LLCseen Jul 12
- 64.226.100.7738 eventsProbing DE路 AS14061 DigitalOcean, LLCseen Jul 11
- 165.245.216.13637 eventsProbing DE路 AS14061 DigitalOcean, LLCseen Jul 11
- 202.112.47.5428 eventsProbing CN路 AS4538 China Education and Research Network Centerseen Jul 15
- 138.68.66.8526 eventsProbing DE路 AS14061 DigitalOcean, LLCseen Jul 12
- 118.193.37.5012 eventsProbing HK路 AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 10
- 18.97.5.7312 eventsKnown scanner USseen Jul 10
- 165.154.163.1012 eventsProbing US路 AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 10
- 44.220.188.21312 eventsKnown scanner USseen Jul 11
- 44.220.188.16412 eventsKnown scanner USseen Jul 12
- 167.94.146.518 eventsKnown scanner USseen Jul 15
- 66.132.172.358 eventsKnown scanner USseen Jul 13
- 66.132.195.778 eventsKnown scanner USseen Jul 15
- 66.132.195.598 eventsKnown scanner USseen Jul 11
- 66.132.195.428 eventsKnown scanner USseen Jul 13
- 66.132.186.1968 eventsKnown scanner USseen Jul 12
- 199.45.155.748 eventsKnown scanner USseen Jul 14
- 199.45.155.698 eventsKnown scanner USseen Jul 12
- 66.132.224.938 eventsKnown scanner USseen Jul 10
- 66.132.195.348 eventsKnown scanner USseen Jul 14
- 66.132.195.758 eventsKnown scanner USseen Jul 12
- 66.132.172.1108 eventsKnown scanner USseen Jul 9
- 167.94.146.558 eventsKnown scanner USseen Jul 11
Top user-agents on port 18789
- Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)213
- Umai-Scanner/2.0 (+https://umai.entelijan.com/methodology)68
- Go-http-client/1.135
- Mozilla/5.0 zgrab/0.x28
- Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.3618
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity17
- Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4 240.111 Safari/537.3615
- Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.1112
- Mozilla/5.0 (compatible; foda-scanner/0.1)12
- Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.122 Safari/537.3610
JSON: /api/port/18789. CSV: /api/port/18789?format=csv.