Port 587 (SMTP)

HoneyLabs honeypots recorded 439 probes against destination port 587 (SMTP) from 167 distinct source IP addresses in the last 7 days.

First observed 2026-08-29 04:35:44, most recently 2026-09-05 01:29:14 (UTC).

Most active source addresses

Source IPProbesNetworkCountry
18.116.101.22035Amazon.com, Inc.US
3.129.187.3827Amazon.com, Inc.US
164.52.24.18020CDS Global Cloud Co., LtdJP
3.130.168.219Amazon.com, Inc.US
123.58.219.829UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK
156.225.1.179AGOTOZ PTE. LTD.HK
156.225.1.1029AGOTOZ PTE. LTD.HK
123.58.212.2389UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK

Networks it comes from

ASNOrganisationProbesSource IPs
AS16509Amazon.com, Inc.955
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED688
AS14061DigitalOcean, LLC3321
AS396982Google LLC2827
AS9465AGOTOZ PTE. LTD.273
AS14987Rethem Hosting LLC2411

Where it comes from

CountryProbes
United States243
Hong Kong66
Japan22
United Arab Emirates18
China16
Germany15

Client strings seen on this port

User agentProbes
visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.3667
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity28
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.3618
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.3613
Mozilla/5.0 (compatible; FlowIQ/1.0; +https://flowiq-labs.com/scanning-info)12

Port report

Port report

Loading live data…