Port report
Port 28017
7-day honeypot probe activity targeting destination port 28017. First seen 2026-06-29, most recent 2026-07-06 15:02.
1,258
Events 7d
96
Source IPs
22
Source ASNs
19
Countries
Top source ASNs
Top source countries
- India563
- United States448
- Japan62
- Hong Kong33
- China31
- Chile30
- Seychelles24
- The Netherlands13
- Germany10
- Bulgaria9
Top source IPs hitting port 28017
- 34.93.75.106563 eventsProbing INseen Jun 30
- 8.230.115.84230 eventsProbing USseen Jun 30
- 96.126.102.16546 eventsKnown scanner USseen Jul 6
- 170.187.147.24046 eventsKnown scanner USseen Jul 6
- 142.93.59.5846 eventsKnown scanner USseen Jul 6
- 34.132.209.25131 eventsProbing USseen Jun 30
- 34.84.251.12330 eventsProbing JPseen Jun 30
- 34.176.181.11330 eventsProbing CLseen Jun 30
- 35.221.93.16630 eventsProbing JPseen Jun 30
- 97.107.135.24115 eventsKnown scanner USseen Jul 6
- 160.119.71.9212 eventsProbing SC· AS49870 Alsycon B.V.seen Jul 5
- 160.119.71.13612 eventsProbing SC· AS49870 Alsycon B.V.seen Jul 6
- 115.231.78.1111 eventsProbing CN· AS58461 CT-HangZhou-IDCseen Jul 5
- 79.124.58.1267 eventsProbing BG· AS50360 Tamatiya EOODseen Jul 2
- 45.134.225.166 eventsProbing DE· AS213438 ColocaTel Inc.seen Jul 5
- 34.6.51.1405 eventsProbing NLseen Jun 30
- 35.246.103.555 eventsProbing GBseen Jun 30
- 34.90.48.75 eventsProbing NLseen Jun 30
- 35.228.5.885 eventsProbing FIseen Jun 30
- 185.226.197.275 eventsKnown scanner PTseen Jun 29
- 47.237.186.1473 eventsProbing SG· AS45102 Alibaba (US) Technology Co., Ltd.seen Jul 5
- 152.32.251.1743 eventsProbing HK· AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 3
- 45.142.154.1033 eventsProbing HK· AS9465 AGOTOZ PTE. LTD.seen Jul 3
- 101.36.111.1793 eventsProbing HK· AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jun 29
- 123.160.223.723 eventsProbing CN· AS4134 Chinanetseen Jul 3
Top user-agents on port 28017
- Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.3630
- Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_0; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.202.0 Safari/532.07
- Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.366
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.366
- Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_4; en-US) AppleWebKit/534.3 (KHTML, like Gecko) Chrome/6.0.464.0 Safari/534.35
- Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)5
- Mozilla/5.0 (iPhone; CPU iPhone OS 12_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/74.0.3729.155 Mobile/15E148 Safari/605.14
- Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.364
- Mozilla/5.0 (X11; Linux i686; rv:28.0) Gecko/20100101 Firefox/28.04
- W3C_Validator/1.305.2.12 libwww-perl/5.644
JSON: /api/port/28017. CSV: /api/port/28017?format=csv.