Port report
Port 8889
7-day honeypot probe activity targeting destination port 8889. First seen 2026-06-30, most recent 2026-07-06 14:54.
238
Events 7d
120
Source IPs
32
Source ASNs
19
Countries
Top source ASNs
Top source countries
Top source IPs hitting port 8889
- 160.119.71.9212 eventsProbing SC· AS49870 Alsycon B.V.seen Jul 1
- 160.119.71.13612 eventsProbing SC· AS49870 Alsycon B.V.seen Jul 2
- 152.32.228.208 eventsProbing RU· AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jun 30
- 118.193.59.108 eventsProbing DE· AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jun 30
- 152.32.245.1708 eventsProbing TH· AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jun 30
- 152.32.156.1588 eventsProbing IN· AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jun 30
- 150.107.36.2366 eventsProbing HK· AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 6
- 204.76.203.2215 eventsProbing NL· AS51396 Pfcloud UG (haftungsbeschrankt)seen Jun 30
- 204.76.203.2125 eventsProbing NL· AS51396 Pfcloud UG (haftungsbeschrankt)seen Jun 30
- 151.241.119.1135 eventsProbing US· AS174 Cogent Communications, LLCseen Jul 3
- 45.141.233.474 eventsProbing BG· AS201814 MEVSPACE sp. z o.o.seen Jul 4
- 161.97.169.94 eventsProbing FRseen Jul 5
- 45.134.225.164 eventsProbing DE· AS213438 ColocaTel Inc.seen Jul 6
- 71.6.135.1314 eventsKnown scanner USseen Jul 5
- 216.126.239.174 eventsProbing US· AS14956 RouterHosting LLCseen Jul 5
- 204.76.203.2224 eventsProbing NL· AS51396 Pfcloud UG (haftungsbeschrankt)seen Jun 30
- 80.82.77.334 eventsKnown scanner NLseen Jun 30
- 77.77.43.2153 eventsProbing BG· AS39184 UltraNET Ltdseen Jul 3
- 45.156.129.903 eventsKnown scanner PTseen Jul 1
- 204.76.203.2143 eventsProbing NL· AS51396 Pfcloud UG (haftungsbeschrankt)seen Jun 30
- 47.237.188.2253 eventsProbing SG· AS45102 Alibaba (US) Technology Co., Ltd.seen Jul 5
- 45.156.129.1053 eventsKnown scanner PTseen Jul 2
- 91.224.92.953 eventsProbing GB· AS209605 UAB Host Balticseen Jul 6
- 47.245.139.1902 eventsProbing DE· AS45102 Alibaba (US) Technology Co., Ltd.seen Jul 6
- 172.202.114.342 eventsKnown scanner USseen Jul 1
Top user-agents on port 8889
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.016
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.016
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity12
- Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.3612
- Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)6
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.366
- Mozilla/5.0 zgrab/0.x6
- Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4 240.111 Safari/537.365
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.364
- python-httpx/0.28.14
JSON: /api/port/8889. CSV: /api/port/8889?format=csv.