Port report
Port 5800VNC-HTTP
7-day honeypot probe activity targeting destination port 5800. First seen 2026-06-29, most recent 2026-07-06 10:52.
1,227
Events 7d
142
Source IPs
23
Source ASNs
17
Countries
Top source ASNs
Top source countries
Top source IPs hitting port 5800
- 34.154.234.140563 eventsProbing ITseen Jun 30
- 34.88.7.176230 eventsProbing FIseen Jun 30
- 170.187.147.11446 eventsKnown scanner USseen Jul 3
- 194.195.208.3246 eventsKnown scanner USseen Jul 3
- 66.228.47.25046 eventsKnown scanner USseen Jul 3
- 8.231.162.3830 eventsProbing USseen Jun 30
- 8.229.192.2430 eventsProbing USseen Jun 30
- 34.148.177.15630 eventsProbing USseen Jun 30
- 96.126.101.12718 eventsKnown scanner USseen Jul 3
- 165.154.11.1217 eventsProbing NG· AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 1
- 45.134.225.166 eventsProbing DE· AS213438 ColocaTel Inc.seen Jul 5
- 34.142.92.305 eventsProbing GBseen Jun 30
- 34.62.132.1635 eventsProbing BEseen Jun 30
- 34.185.155.1165 eventsProbing DEseen Jun 30
- 94.154.43.364 eventsProbing NL· AS219502 Storm Industries LLCseen Jul 4
- 35.203.211.1534 eventsProbing GBseen Jul 3
- 216.180.246.1034 eventsKnown scanner USseen Jul 5
- 80.94.92.164 eventsProbing RO· AS47890 Unmanaged Ltdseen Jul 5
- 47.237.87.593 eventsProbing SG· AS45102 Alibaba (US) Technology Co., Ltd.seen Jun 30
- 47.237.191.83 eventsProbing SG· AS45102 Alibaba (US) Technology Co., Ltd.seen Jul 5
- 162.216.150.2423 eventsProbing USseen Jun 30
- 79.164.41.1682 eventsProbing RU· AS8615 Central Telegraph Public Joint-stock Companyseen Jul 2
- 97.107.131.2482 eventsKnown scanner USseen Jul 3
- 91.231.89.1382 eventsKnown scanner FRseen Jul 2
- 71.6.134.2372 eventsProbing US· AS10439 CariNet, Inc.seen Jul 4
Top user-agents on port 5800
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity54
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.014
- Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.08
- Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.366
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.366
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.71 Safari/537.36 Edge/12.05
- Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.364
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.04
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36 OPR/63.0.3368.354
- Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.108 Safari/537.364
JSON: /api/port/5800. CSV: /api/port/5800?format=csv.