Port report
Port 89
7-day honeypot probe activity targeting destination port 89. First seen 2026-07-08, most recent 2026-07-15 10:22.
469
Events 7d
155
Source IPs
23
Source ASNs
13
Countries
Top source ASNs
Top source countries
Top source IPs hitting port 89
- 16.58.56.21433 eventsKnown scanner USseen Jul 13
- 18.116.101.22023 eventsKnown scanner USseen Jul 12
- 115.231.78.1120 eventsProbing CN路 AS58461 CT-HangZhou-IDCseen Jul 14
- 3.130.168.218 eventsKnown scanner USseen Jul 14
- 216.180.246.19016 eventsKnown scanner USseen Jul 10
- 45.194.67.2714 eventsProbing US路 AS215925 Vpsvault.host Ltdseen Jul 13
- 216.180.246.8913 eventsKnown scanner USseen Jul 12
- 160.119.71.13612 eventsProbing SC路 AS49870 Alsycon B.V.seen Jul 12
- 160.119.71.9212 eventsProbing SC路 AS49870 Alsycon B.V.seen Jul 12
- 45.205.1.24010 eventsProbing BR路 AS215925 Vpsvault.host Ltdseen Jul 12
- 45.194.67.269 eventsProbing US路 AS215925 Vpsvault.host Ltdseen Jul 12
- 184.105.139.708 eventsProbing USseen Jul 10
- 45.194.67.308 eventsProbing US路 AS215925 Vpsvault.host Ltdseen Jul 12
- 66.132.195.338 eventsKnown scanner USseen Jul 9
- 45.205.1.2458 eventsProbing BRseen Jul 11
- 151.243.11.2318 eventsProbing AE路 AS209630 LLC Vash Kredit Bankseen Jul 11
- 151.243.11.2378 eventsProbing AE路 AS209630 LLC Vash Kredit Bankseen Jul 13
- 45.205.1.2478 eventsProbing BR路 AS215925 Vpsvault.host Ltdseen Jul 14
- 45.205.1.2468 eventsProbing BR路 AS215925 Vpsvault.host Ltdseen Jul 13
- 151.243.11.2368 eventsProbing AE路 AS209630 LLC Vash Kredit Bankseen Jul 13
- 45.205.1.2418 eventsProbing BR路 AS215925 Vpsvault.host Ltdseen Jul 13
- 65.49.20.668 eventsProbing USseen Jul 12
- 216.180.246.1936 eventsKnown scanner USseen Jul 12
- 45.205.1.2434 eventsProbing BR路 AS215925 Vpsvault.host Ltdseen Jul 9
- 74.82.47.44 eventsProbing USseen Jul 11
Top user-agents on port 89
- Mozilla/5.0 (compatible; FlowIQLabsBot/1.0; +https://flowiq-labs.com/scanning-info)101
- visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.3683
- Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)36
- Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 QIHU 360SE15
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity15
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.013
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.368
- Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)6
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.366
- Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:136.0) Gecko/20100101 Firefox/136.5
JSON: /api/port/89. CSV: /api/port/89?format=csv.