Port report
Port 2222SSH-alt
7-day honeypot probe activity targeting destination port 2222. First seen 2026-05-14, most recent 2026-05-21 11:49.
Events 7d
998
Source IPs
288
Source ASNs
88
Countries
40
Top source ASNs
- AS202425IP Volume inc177
- AS4837CHINA UNICOM China169 Backbone121
- AS14061DigitalOcean, LLC79
- AS48090Techoff Srv Limited66
- AS45102Alibaba US Technology Co., Ltd.49
- AS63949Akamai Connected Cloud48
- AS8075Microsoft Corporation39
- AS398324Censys, Inc.35
- AS37963Hangzhou Alibaba Advertising Co.,Ltd.33
- AS396982Google LLC24
Top source countries
- United States334
- Netherlands255
- China202
- Russia30
- Singapore26
- Hong Kong25
- Germany14
- France13
- United Kingdom11
- Romania9
Top source IPs hitting port 2222
- 101.27.96.209114 eventsCN· AS4837 CHINA UNICOM China169 Backbone
- 94.102.49.15590 eventsNL· AS202425 IP Volume inc
- 80.82.77.20278 eventsNL· AS202425 IP Volume inc
- 45.148.10.12166 eventsNL· AS48090 Techoff Srv Limited
- 143.198.160.17846 eventsUS· AS14061 DigitalOcean, LLC
- 23.239.4.12046 eventsUS· AS63949 Akamai Connected Cloud
- 46.161.50.10919 eventsRU· AS34665 Petersburg Internet Network ltd.
- 128.136.131.8410 eventsUS· AS13649 Flexential Colorado Corp.
- 156.245.207.809 eventsHK· AS54801 Zillion Network Inc.
- 167.94.146.548 eventsUS· AS398705 Censys, Inc.
- 199.45.155.788 eventsUS· AS398722 Censys, Inc.
- 66.132.172.1788 eventsUS· AS398324 Censys, Inc.
- 66.132.172.1008 eventsUS· AS398324 Censys, Inc.
- 167.94.146.508 eventsUS· AS398705 Censys, Inc.
- 66.132.186.1898 eventsUS
- 66.132.195.438 eventsUS
- 199.45.155.758 eventsUS· AS398722 Censys, Inc.
- 66.132.172.378 eventsUS· AS398324 Censys, Inc.
- 199.45.155.918 eventsUS· AS398722 Censys, Inc.
- 167.94.146.638 eventsUS· AS398705 Censys, Inc.
- 66.132.172.2167 eventsUS· AS398324 Censys, Inc.
- 47.77.182.547 eventsUS· AS45102 Alibaba US Technology Co., Ltd.
- 152.32.199.1127 eventsBR· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 165.154.164.797 eventsDE· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 93.174.95.1066 eventsNL· AS202425 IP Volume inc
Top user-agents on port 2222
- Python/3.10 aiohttp/3.8.4168
- Python/3.11 aiohttp/3.13.5114
- Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)73
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.025
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.3615
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity12
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.08
- Mozilla/5.0 zgrab/0.x6
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.364
- Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.04
JSON: /api/port/2222. CSV: /api/port/2222?format=csv.