Port report
Port 28888
7-day honeypot probe activity targeting destination port 28888. First seen 2026-06-29, most recent 2026-07-06 09:37.
300
Events 7d
25
Source IPs
6
Source ASNs
6
Countries
Top source ASNs
Top source countries
Top source IPs hitting port 28888
- 80.82.77.202164 eventsKnown scanner NLseen Jul 6
- 94.102.49.15598 eventsProbing NL· AS202425 IP Volume incseen Jul 6
- 204.76.203.796 eventsProbing NL· AS51396 Pfcloud UG (haftungsbeschrankt)seen Jul 1
- 204.76.203.785 eventsProbing NL· AS51396 Pfcloud UG (haftungsbeschrankt)seen Jul 1
- 35.203.211.702 eventsProbing GBseen Jul 1
- 35.203.211.412 eventsProbing GBseen Jul 4
- 204.76.203.802 eventsProbing NL· AS51396 Pfcloud UG (haftungsbeschrankt)seen Jul 1
- 94.26.68.912 eventsProbing BG· AS201814 MEVSPACE sp. z o.o.seen Jul 6
- 162.216.150.282 eventsProbing USseen Jun 29
- 162.216.150.2422 eventsProbing USseen Jul 5
- 80.82.77.481 eventsProbing NL· AS202425 IP Volume incseen Jul 1
- 45.91.64.71 eventsKnown scanner RUseen Jun 29
- 147.185.132.1631 eventsProbing US· AS396982 Google LLCseen Jul 4
- 147.185.132.2111 eventsProbing US· AS396982 Google LLCseen Jul 3
- 35.203.211.2111 eventsProbing GBseen Jul 3
- 35.203.210.1221 eventsProbing GBseen Jul 5
- 162.216.150.531 eventsProbing USseen Jun 29
- 147.185.132.1941 eventsProbing US· AS396982 Google LLCseen Jul 2
- 35.203.210.911 eventsProbing GBseen Jul 5
- 147.185.132.351 eventsProbing US· AS396982 Google LLCseen Jul 5
- 162.216.150.1501 eventsProbing USseen Jun 30
- 147.185.133.1341 eventsProbing US· AS396982 Google LLCseen Jul 5
- 35.203.210.631 eventsProbing GBseen Jul 4
- 162.216.150.2331 eventsProbing USseen Jul 2
- 85.217.149.631 eventsKnown scanner CAseen Jul 3
Top user-agents on port 28888
- Python/3.10 aiohttp/3.8.4259
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity20
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.362
- fasthttp1
- Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)1
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1664.3 Safari/537.361
- Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.77 Safari/537.361
JSON: /api/port/28888. CSV: /api/port/28888?format=csv.