Port report
Port 5222XMPP
7-day honeypot probe activity targeting destination port 5222. First seen 2026-07-02, most recent 2026-07-08 23:27.
460
Events 7d
143
Source IPs
21
Source ASNs
11
Countries
Top source ASNs
Top source countries
Top source IPs hitting port 5222
- 165.22.178.2946 eventsKnown scanner USseen Jul 3
- 64.225.120.11546 eventsKnown scanner USseen Jul 3
- 138.197.166.22846 eventsKnown scanner CAseen Jul 3
- 216.180.246.23516 eventsKnown scanner USseen Jul 8
- 216.180.246.6616 eventsKnown scanner USseen Jul 5
- 66.132.172.1409 eventsKnown scanner USseen Jul 4
- 167.94.146.629 eventsKnown scanner USseen Jul 2
- 66.132.172.1839 eventsKnown scanner USseen Jul 4
- 199.45.154.1299 eventsKnown scanner USseen Jul 7
- 66.132.195.879 eventsKnown scanner USseen Jul 4
- 66.132.224.859 eventsKnown scanner USseen Jul 7
- 66.132.186.1659 eventsKnown scanner USseen Jul 6
- 199.45.154.1549 eventsKnown scanner USseen Jul 2
- 199.45.154.1329 eventsKnown scanner USseen Jul 3
- 167.94.146.619 eventsKnown scanner USseen Jul 5
- 167.94.146.599 eventsKnown scanner USseen Jul 2
- 167.94.146.529 eventsKnown scanner USseen Jul 7
- 66.132.186.1768 eventsKnown scanner USseen Jul 7
- 79.124.58.1267 eventsProbing BG路 AS50360 Tamatiya EOODseen Jul 2
- 77.91.118.184 eventsProbing US路 AS209896 Contrust Solutions S.R.L.seen Jul 7
- 20.169.49.413 eventsKnown scanner USseen Jul 8
- 194.164.107.43 eventsProbing US路 AS50219 Valence Technology Co.seen Jul 3
- 45.156.129.853 eventsKnown scanner PTseen Jul 6
- 44.220.185.1533 eventsKnown scanner USseen Jul 4
- 71.6.134.2323 eventsProbing US路 AS10439 CariNet, Inc.seen Jul 3
Top user-agents on port 5222
- Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)77
- Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)32
- Mozilla/5.0 zgrab/0.x18
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.010
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity9
- Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_0; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.202.0 Safari/532.07
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.366
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.364
- python-httpx/0.28.14
- Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.364
JSON: /api/port/5222. CSV: /api/port/5222?format=csv.