Port report
Port 90
7-day honeypot probe activity targeting destination port 90. First seen 2026-07-08, most recent 2026-07-15 05:52.
592
Events 7d
159
Source IPs
29
Source ASNs
20
Countries
Top source ASNs
Top source countries
Top source IPs hitting port 90
- 5.61.209.9263 eventsProbing SC路 AS206264 Amarutu Technology Ltdseen Jul 14
- 16.58.56.21457 eventsKnown scanner USseen Jul 14
- 5.61.209.4322 eventsProbing SC路 AS206264 Amarutu Technology Ltdseen Jul 14
- 3.130.168.218 eventsKnown scanner USseen Jul 13
- 216.180.246.10716 eventsKnown scanner USseen Jul 10
- 160.119.71.9212 eventsProbing SC路 AS49870 Alsycon B.V.seen Jul 11
- 94.154.43.24312 eventsProbing NL路 AS219502 Storm Industries LLCseen Jul 14
- 160.119.71.13612 eventsProbing SC路 AS49870 Alsycon B.V.seen Jul 11
- 151.243.11.23512 eventsProbing AE路 AS209630 LLC Vash Kredit Bankseen Jul 13
- 18.116.101.22012 eventsKnown scanner USseen Jul 12
- 45.194.67.2712 eventsProbing US路 AS215925 Vpsvault.host Ltdseen Jul 13
- 216.180.246.1529 eventsKnown scanner USseen Jul 12
- 45.205.1.2428 eventsProbing BR路 AS215925 Vpsvault.host Ltdseen Jul 12
- 45.205.1.2458 eventsProbing BR路 AS215925 Vpsvault.host Ltdseen Jul 10
- 151.243.11.2318 eventsProbing AE路 AS209630 LLC Vash Kredit Bankseen Jul 14
- 45.205.1.2448 eventsProbing BR路 AS215925 Vpsvault.host Ltdseen Jul 11
- 151.243.11.2368 eventsProbing AE路 AS209630 LLC Vash Kredit Bankseen Jul 12
- 45.194.67.298 eventsProbing US路 AS215925 Vpsvault.host Ltdseen Jul 12
- 45.205.1.2408 eventsProbing BR路 AS215925 Vpsvault.host Ltdseen Jul 11
- 45.194.67.288 eventsProbing US路 AS215925 Vpsvault.host Ltdseen Jul 11
- 45.205.1.2478 eventsProbing BRseen Jul 11
- 216.218.206.667 eventsProbing USseen Jul 10
- 80.66.83.807 eventsProbing RU路 AS216473 Bashinskii Vadim Ruslanovichseen Jul 9
- 152.32.131.2457 eventsProbing HK路 AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 12
- 152.32.207.2347 eventsProbing US路 AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 12
Top user-agents on port 90
- Mozilla/5.0 (compatible; FlowIQLabsBot/1.0; +https://flowiq-labs.com/scanning-info)106
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.4697
- visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.3673
- Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)26
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.016
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity14
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.012
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.367
- Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.364
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.114
JSON: /api/port/90. CSV: /api/port/90?format=csv.