Port report
Port 5222XMPP
7-day honeypot probe activity targeting destination port 5222. First seen 2026-07-10, most recent 2026-07-17 21:36.
346
Events 7d
138
Source IPs
22
Source ASNs
12
Countries
Top source ASNs
Top source countries
Top source IPs hitting port 5222
- 167.94.146.4818 eventsKnown scanner USseen Jul 17
- 216.180.246.22016 eventsKnown scanner USseen Jul 12
- 66.132.195.8810 eventsKnown scanner USseen Jul 15
- 199.45.155.659 eventsKnown scanner USseen Jul 13
- 66.132.224.2299 eventsKnown scanner USseen Jul 17
- 167.94.146.549 eventsKnown scanner USseen Jul 11
- 66.132.172.469 eventsKnown scanner USseen Jul 14
- 199.45.154.1439 eventsKnown scanner USseen Jul 15
- 167.94.146.569 eventsKnown scanner USseen Jul 16
- 199.45.155.1069 eventsKnown scanner USseen Jul 11
- 167.94.146.539 eventsKnown scanner USseen Jul 11
- 66.132.186.2039 eventsKnown scanner USseen Jul 13
- 66.132.172.1119 eventsKnown scanner USseen Jul 11
- 66.132.186.1979 eventsKnown scanner USseen Jul 15
- 66.132.224.2378 eventsKnown scanner USseen Jul 15
- 118.194.234.297 eventsProbing SG路 AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 13
- 152.32.250.217 eventsProbing VN路 AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 13
- 66.132.172.377 eventsKnown scanner USseen Jul 11
- 152.32.141.1547 eventsProbing NG路 AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 13
- 66.132.186.1985 eventsKnown scanner USseen Jul 14
- 71.6.134.2304 eventsProbing US路 AS10439 CariNet, Inc.seen Jul 16
- 93.152.208.424 eventsProbing BG路 AS211486 Alferov Aleksey Aleksandrovichseen Jul 12
- 216.226.77.303 eventsProbing US路 AS50219 Valence Technology Co.seen Jul 16
- 216.226.76.203 eventsProbing US路 AS50219 Valence Technology Co.seen Jul 16
- 44.220.188.1703 eventsKnown scanner USseen Jul 16
Top user-agents on port 5222
- Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)97
- Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)16
- Mozilla/5.0 zgrab/0.x14
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.012
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity11
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.3610
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.09
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.364
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.113
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.362
JSON: /api/port/5222. CSV: /api/port/5222?format=csv.