Port 5601 (Kibana)
HoneyLabs honeypots recorded 1,731 probes against destination port 5601 (Kibana) from 155 distinct source IP addresses in the last 7 days.
First observed 2026-08-21 13:38:17, most recently 2026-08-28 10:31:26 (UTC).
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 35.220.252.100 | 542 | Google LLC | HK |
| 136.85.19.232 | 542 | Google LLC | SG |
| 34.39.14.208 | 24 | Google LLC | GB |
| 34.30.210.63 | 24 | Google LLC | US |
| 34.139.155.224 | 24 | Google LLC | US |
| 136.108.77.61 | 24 | Google LLC | US |
| 35.194.73.49 | 24 | Google LLC | US |
| 35.200.11.249 | 24 | Google LLC | JP |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS396982 | Google LLC | 1,344 | 34 |
| AS9465 | AGOTOZ PTE. LTD. | 56 | 6 |
| AS135377 | UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED | 54 | 6 |
| AS8075 | Microsoft Corporation | 28 | 20 |
| AS14618 | Amazon.com, Inc. | 24 | 2 |
| AS212238 | Datacamp Limited | 24 | 4 |
Where it comes from
| Country | Probes |
|---|---|
| Hong Kong | 652 |
| Singapore | 549 |
| United States | 300 |
| United Kingdom | 51 |
| France | 31 |
| Japan | 24 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36 | 1,088 |
| crusader-worker/1.0 | 239 |
| Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36 | 34 |
| Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0 | 17 |
| Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity | 16 |
Port report
Port report
Loading live data…