Port report
Port 522
HoneyLabs honeypots recorded 223 probes against destination port 522 from 24 distinct source IP addresses in the last 7 days. The largest source network was DigitalOcean, LLC (AS14061). Most probes came from United States. First seen 2026-07-30, most recent 2026-08-05 17:23.
223
Events 7d
24
Source IPs
9
Source ASNs
7
Countries
Top source ASNs
Top source countries
Top source IPs hitting port 522
- 165.22.146.5446 eventsRecognized scanner USseen Aug 2
- 157.230.239.13146 eventsRecognized scanner USseen Aug 2
- 165.232.52.20146 eventsRecognized scanner USseen Aug 2
- 157.245.167.3625 eventsRecognized scanner USseen Aug 2
- 66.132.186.2058 eventsRecognized scanner USseen Aug 5
- 199.45.155.698 eventsRecognized scanner USseen Jul 30
- 66.132.195.1128 eventsRecognized scanner USseen Aug 1
- 194.180.49.1046 eventsObserved BG路 AS201814 MEVSPACE sp. z o.o.seen Aug 4
- 199.45.154.1306 eventsRecognized scanner USseen Jul 31
- 86.54.31.365 eventsRecognized scanner GBseen Aug 1
- 147.185.132.2482 eventsObserved US路 AS396982 Google LLCseen Aug 5
- 35.203.211.522 eventsObserved GBseen Aug 1
- 141.98.83.1112 eventsObserved PA路 AS209588 Flyservers S.A.seen Jul 31
- 104.152.52.2282 eventsRecognized scanner USseen Jul 30
- 147.185.133.852 eventsObserved US路 AS396982 Google LLCseen Aug 3
- 146.190.106.1381 eventObserved SG路 AS14061 DigitalOcean, LLCseen Aug 3
- 91.196.152.221 eventRecognized scanner FRseen Aug 4
- 34.76.20.2141 eventObserved BEseen Aug 2
- 68.183.36.2521 eventObserved GB路 AS14061 DigitalOcean, LLCseen Jul 30
- 91.231.89.1161 eventRecognized scanner FRseen Jul 30
- 104.152.52.2141 eventRecognized scanner USseen Jul 30
- 91.231.89.1381 eventRecognized scanner FRseen Aug 4
- 91.196.152.1821 eventRecognized scanner FRseen Jul 30
- 91.231.89.101 eventRecognized scanner FRseen Aug 4
Top user-agents on port 522
- Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)22
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity6
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.05
- Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.363
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.362
- Mozilla/5.0 zgrab/0.x2
- Microsoft WinRM Client2
- curl/7.61.11
- python-requests/2.32.51
JSON: /api/port/522. CSV: /api/port/522?format=csv.