HoneyLabs
KEV
LookupKEVMCP
Data
The datasetDataset and methodCVEsCampaignsPayloadsPre-disclosureEmissions IndexPortsBlog
Integrations
OverviewFeeds
PricingDocs

Port 50006

HoneyLabs honeypots recorded 49 probes against destination port 50006 from 19 distinct source IP addresses in the last 7 days.

First observed 2026-11-02 04:36, most recently 2026-11-08 12:53 (UTC).

What the sensors show

The sources sat in 7 networks across 8 countries. No single address sent more than 16% of them. The largest source network was AS135377 (UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED), with 39% of the probes from 5 addresses. 2 of the 19 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
87.251.64.1288Shesternin Vladimir AnatolievichRU
87.251.64.1326Shesternin Vladimir AnatolievichRU
152.32.189.1286UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK
165.154.120.2534UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDTH
192.253.248.2513Limited Network LTDNL
165.154.42.2093UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK
152.32.148.2503UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDUS
118.193.65.1753UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDGB

Networks it comes from

ASNOrganisationProbesSource IPs
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED195
AS212835Shesternin Vladimir Anatolievich163
AS51396Pfcloud UG (haftungsbeschrankt)44
AS45102Alibaba (US) Technology Co., Ltd.43
AS213790Limited Network LTD31
AS209334Modat B.V.22

Where it comes from

CountryProbes
Russia16
Hong Kong9
United States7
The Netherlands7
Thailand4
United Kingdom3

Client strings seen on this port

User agentProbes
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.3616
curl/7.29.06
Go-http-client/1.13
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.362
curl/7.64.11

Port report

Port report

Loading