Port report
Port 389LDAP
7-day honeypot probe activity targeting destination port 389. First seen 2026-05-14, most recent 2026-05-21 10:22.
Events 7d
659
Source IPs
129
Source ASNs
33
Countries
18
Top source ASNs
Top source countries
Top source IPs hitting port 389
- 94.102.49.15590 eventsNL· AS202425 IP Volume inc
- 80.82.77.20281 eventsNL· AS202425 IP Volume inc
- 206.189.78.9048 eventsUS· AS14061 DigitalOcean, LLC
- 173.255.234.25248 eventsUS· AS63949 Akamai Connected Cloud
- 159.89.142.24448 eventsUS· AS14061 DigitalOcean, LLC
- 3.131.220.12113 eventsUS· AS16509 Amazon.com, Inc.
- 3.129.187.3812 eventsUS· AS16509 Amazon.com, Inc.
- 167.94.146.529 eventsUS· AS398705 Censys, Inc.
- 199.45.155.679 eventsUS· AS398722 Censys, Inc.
- 16.58.56.2149 eventsUS· AS16509 Amazon.com, Inc.
- 199.45.155.849 eventsUS· AS398722 Censys, Inc.
- 66.132.195.549 eventsUS
- 199.45.154.1359 eventsUS· AS398722 Censys, Inc.
- 66.132.186.2059 eventsUS
- 66.132.195.679 eventsUS
- 199.45.155.739 eventsUS· AS398722 Censys, Inc.
- 199.45.154.1469 eventsUS· AS398722 Censys, Inc.
- 66.132.195.849 eventsUS
- 66.132.224.899 eventsUS
- 199.45.155.939 eventsUS· AS398722 Censys, Inc.
- 66.132.186.1659 eventsUS
- 3.134.216.1089 eventsUS· AS16509 Amazon.com, Inc.
- 3.132.26.2328 eventsUS· AS16509 Amazon.com, Inc.
- 3.130.168.26 eventsUS· AS16509 Amazon.com, Inc.
- 3.151.241.1536 eventsUS· AS16509 Amazon.com, Inc.
Top user-agents on port 389
- Python/3.10 aiohttp/3.8.4168
- Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)78
- visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.3669
- Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.368
- python-httpx/0.28.18
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.366
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.364
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.363
- fasthttp3
- curl/7.64.13
JSON: /api/port/389. CSV: /api/port/389?format=csv.