Port report
Port 587SMTP
7-day honeypot probe activity targeting destination port 587. First seen 2026-05-14, most recent 2026-05-21 11:26.
Events 7d
525
Source IPs
144
Source ASNs
26
Countries
19
Top source ASNs
Top source countries
Top source IPs hitting port 587
- 3.131.220.12130 eventsUS· AS16509 Amazon.com, Inc.
- 207.154.247.8221 eventsDE· AS14061 DigitalOcean, LLC
- 159.223.30.1121 eventsDE· AS14061 DigitalOcean, LLC
- 3.134.216.10820 eventsUS· AS16509 Amazon.com, Inc.
- 3.129.187.3819 eventsUS· AS16509 Amazon.com, Inc.
- 16.58.56.21419 eventsUS· AS16509 Amazon.com, Inc.
- 66.132.186.16812 eventsUS
- 3.130.168.212 eventsUS· AS16509 Amazon.com, Inc.
- 152.32.250.2110 eventsVN· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 101.36.107.6510 eventsHK· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 104.218.165.18810 eventsGB· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 118.193.65.20910 eventsGB· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 118.194.248.410 eventsKR· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 152.32.156.13610 eventsIN· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 165.154.51.24310 eventsTH· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 165.154.129.13010 eventsGB· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 118.193.35.20210 eventsHK· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 66.132.172.1338 eventsUS· AS398324 Censys, Inc.
- 66.132.172.1848 eventsUS· AS398324 Censys, Inc.
- 66.132.195.418 eventsUS
- 66.132.172.378 eventsUS· AS398324 Censys, Inc.
- 167.94.146.548 eventsUS· AS398705 Censys, Inc.
- 66.132.172.1318 eventsUS· AS398324 Censys, Inc.
- 199.45.155.748 eventsUS· AS398722 Censys, Inc.
- 66.132.195.458 eventsUS
Top user-agents on port 587
- visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.3685
- Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)78
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.036
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity22
- Go-http-client/1.120
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.012
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.119
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.366
- Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)3
- curl/7.74.03
JSON: /api/port/587. CSV: /api/port/587?format=csv.