Port 2086

HoneyLabs honeypots recorded 436 probes against destination port 2086 from 160 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 12:17, most recently 2026-11-15 09:56 (UTC).

What the sensors show

The sources sat in 33 networks across 18 countries. No single address sent more than 17% of them. The largest source network was AS135388 (RMP Protection Limited), with 17% of the probes from 1 address. 16 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
93.152.223.4472RMP Protection LimitedBG
18.218.118.20317Amazon.com, Inc.US
167.94.146.5216Censys, Inc.US
185.191.236.3810GRUPO PANAGLOBAL 15 S.ACH
18.116.101.2209Amazon.com, Inc.US
167.94.146.598Censys, Inc.US
66.132.159.698Censys, Inc.US
66.132.159.748Censys, Inc.US

Networks it comes from

ASNOrganisationProbesSource IPs
AS135388RMP Protection Limited721
AS398324Censys, Inc.6910
AS16509Amazon.com, Inc.408
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED306
AS6939Hurricane Electric LLC3018
AS8075Microsoft Corporation2723

Where it comes from

CountryProbes
United States275
Bulgaria72
Portugal13
Panama11
Switzerland10
Hong Kong10

Client strings seen on this port

User agentProbes
Go-http-client/1.172
Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)68
visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.3637
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity23
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.3613

Port report

Port report

Loading