HoneyLabs
Lookup
Explore
CVEsEarly actorsPayloadsCampaignsAEI IndexPortsUser-agents
Integrations
OverviewMCPFeedsAPI / EnrichSplunkMicrosoft SentinelElasticMISPOpenCTICrowdSec
DocsBlog

Port 5006

HoneyLabs honeypots recorded 148 probes against destination port 5006 from 83 distinct source IP addresses in the last 7 days.

First observed 2026-08-08 08:03:56, most recently 2026-08-15 05:48:35 (UTC).

Most active source addresses

Source IPProbesNetworkCountry
152.32.243.24516UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDKR
165.154.58.2518UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDPH
152.32.206.1818UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDUS
80.66.83.807Bashinskii Vadim RuslanovichRU
8.209.89.1085Alibaba (US) Technology Co., Ltd.DE
216.226.76.104Valence Technology Co.US
89.248.167.1314IP Volume incNL
71.6.158.1664CariNet, Inc.US

Networks it comes from

ASNOrganisationProbesSource IPs
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED323
AS8075Microsoft Corporation1919
AS396982Google LLC1919
AS45102Alibaba (US) Technology Co., Ltd.166
AS213412ONYPHE SAS1412
AS216473Bashinskii Vadim Ruslanovich92

Where it comes from

CountryProbes
United States66
South Korea16
The Netherlands10
Russia9
United Kingdom9
Philippines8

Client strings seen on this port

User agentProbes
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity17
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.016
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.015
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.3610
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.366

Port report

Port report

Loading live data…