Port report
Port 389LDAP
7-day honeypot probe activity targeting destination port 389. First seen 2026-07-10, most recent 2026-07-17 20:33.
630
Events 7d
154
Source IPs
23
Source ASNs
10
Countries
Top source ASNs
Top source countries
Top source IPs hitting port 389
- 167.172.124.18648 eventsKnown scanner USseen Jul 16
- 206.189.72.10348 eventsKnown scanner USseen Jul 16
- 18.116.101.22030 eventsKnown scanner USseen Jul 16
- 80.82.77.20221 eventsKnown scanner NLseen Jul 17
- 199.45.155.10118 eventsKnown scanner USseen Jul 16
- 16.58.56.21417 eventsKnown scanner USseen Jul 13
- 34.38.64.5716 eventsProbing BEseen Jul 14
- 94.102.49.15515 eventsProbing NL路 AS202425 IP Volume incseen Jul 17
- 34.53.134.17014 eventsProbing BEseen Jul 13
- 34.79.79.1669 eventsProbing BEseen Jul 12
- 66.132.186.1699 eventsKnown scanner USseen Jul 11
- 167.94.146.499 eventsKnown scanner USseen Jul 16
- 35.241.171.409 eventsProbing BEseen Jul 11
- 104.199.102.1319 eventsProbing BEseen Jul 16
- 167.94.146.639 eventsKnown scanner USseen Jul 15
- 34.78.44.789 eventsProbing BEseen Jul 12
- 199.45.154.1349 eventsKnown scanner USseen Jul 14
- 34.62.36.1109 eventsProbing BEseen Jul 16
- 66.132.172.1039 eventsKnown scanner USseen Jul 17
- 167.94.146.529 eventsKnown scanner USseen Jul 11
- 66.132.186.1899 eventsKnown scanner USseen Jul 13
- 66.132.195.439 eventsKnown scanner USseen Jul 12
- 66.132.186.2029 eventsKnown scanner USseen Jul 15
- 66.132.172.1088 eventsKnown scanner USseen Jul 15
- 66.132.186.1738 eventsKnown scanner USseen Jul 13
Top user-agents on port 389
- Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)76
- visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.3653
- Python/3.10 aiohttp/3.8.432
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.3622
- python-httpx/0.28.16
- Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.366
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.04
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.364
- Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)4
- fasthttp4
JSON: /api/port/389. CSV: /api/port/389?format=csv.