Port 5236

HoneyLabs honeypots recorded 60 probes against destination port 5236 from 32 distinct source IP addresses in the last 7 days.

First observed 2026-11-09 12:24, most recently 2026-11-14 15:41 (UTC).

What the sensors show

The sources sat in 8 networks across 6 countries. No single address sent more than 13% of them. The largest source network was AS135377 (UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED), with 37% of the probes from 4 addresses. 6 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
101.36.97.1878UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDGB
167.94.146.588Censys, Inc.US
152.32.189.1216UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK
185.242.226.904IP Volume incUS
118.193.38.1344UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK
165.154.182.924UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDUS
220.202.112.1801CHINA UNICOM China169 BackboneCN
43.248.108.1931CHINA UNICOM China169 BackboneCN

Networks it comes from

ASNOrganisationProbesSource IPs
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED224
AS4837CHINA UNICOM China169 Backbone1010
AS398705Censys, Inc.81
AS213412ONYPHE SAS88
AS4134Chinanet55
AS202425IP Volume inc41

Where it comes from

CountryProbes
United States17
China15
Hong Kong10
France8
United Kingdom8
Romania2

Client strings seen on this port

User agentProbes
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)6
Go-http-client/1.16
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.04
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.190 Safari/537.364

Port report

Port report

Loading