Port report
Port 25SMTP
7-day honeypot probe activity targeting destination port 25. First seen 2026-05-14, most recent 2026-05-21 10:59.
Events 7d
919
Source IPs
226
Source ASNs
20
Countries
15
Top source ASNs
Top source countries
Top source IPs hitting port 25
- 94.102.49.155132 eventsNL· AS202425 IP Volume inc
- 80.82.77.202114 eventsNL· AS202425 IP Volume inc
- 46.161.50.10930 eventsRU· AS34665 Petersburg Internet Network ltd.
- 16.58.56.21428 eventsUS· AS16509 Amazon.com, Inc.
- 46.101.226.17921 eventsDE· AS14061 DigitalOcean, LLC
- 64.226.110.1221 eventsDE· AS14061 DigitalOcean, LLC
- 167.99.247.17821 eventsDE· AS14061 DigitalOcean, LLC
- 167.94.146.5616 eventsUS· AS398705 Censys, Inc.
- 3.129.187.3815 eventsUS· AS16509 Amazon.com, Inc.
- 3.131.220.12112 eventsUS· AS16509 Amazon.com, Inc.
- 18.218.118.20312 eventsUS· AS16509 Amazon.com, Inc.
- 3.132.26.23212 eventsUS· AS16509 Amazon.com, Inc.
- 152.32.189.12812 eventsHK· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 123.58.196.499 eventsTW· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 165.154.128.179 eventsGB· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 123.58.200.219 eventsKR· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 152.32.206.2479 eventsUS· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 152.32.160.2529 eventsVN· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 118.194.248.49 eventsKR· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 152.32.162.1429 eventsVN· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 3.134.216.1088 eventsUS· AS16509 Amazon.com, Inc.
- 66.132.172.378 eventsUS· AS398324 Censys, Inc.
- 199.45.155.918 eventsUS· AS398722 Censys, Inc.
- 66.132.172.418 eventsUS· AS398324 Censys, Inc.
- 66.132.172.988 eventsUS· AS398324 Censys, Inc.
Top user-agents on port 25
- Python/3.10 aiohttp/3.8.4246
- Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)101
- visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.3665
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.028
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.3620
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.020
- Go-http-client/1.116
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity13
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.117
- curl/7.29.04
JSON: /api/port/25. CSV: /api/port/25?format=csv.