HoneyLabs
KEV
LookupKEVMCP
Data
The datasetDataset and methodCVEsCampaignsPayloadsPre-disclosureEmissions IndexPortsBlog
Integrations
OverviewFeeds
PricingDocs

Port 5801

HoneyLabs honeypots recorded 129 probes against destination port 5801 from 28 distinct source IP addresses in the last 7 days.

First observed 2026-11-10 09:03, most recently 2026-11-14 17:12 (UTC).

What the sensors show

The sources sat in 14 networks across 9 countries. One address, 134.195.153.138, sent 43% of them. The largest source network was AS46918 (GLOBALHOSTINGSOLUTIONS INC), with 43% of the probes from 1 address. 5 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
134.195.153.13856GLOBALHOSTINGSOLUTIONS INCUS
80.66.83.807Bashinskii Vadim RuslanovichRU
164.90.202.1436DigitalOcean, LLCNL
147.182.221.506DigitalOcean, LLCUS
86.54.31.406Black HOST LtdCA
157.230.221.1396DigitalOcean, LLCUS
128.1.132.843UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK
204.76.203.2133Pfcloud UG (haftungsbeschrankt)NL

Networks it comes from

ASNOrganisationProbesSource IPs
AS46918GLOBALHOSTINGSOLUTIONS INC561
AS14061DigitalOcean, LLC183
AS216473Bashinskii Vadim Ruslanovich71
AS51396Pfcloud UG (haftungsbeschrankt)63
AS12989Black HOST Ltd61
AS10439CariNet, Inc.63

Where it comes from

CountryProbes
United States75
The Netherlands18
Hong Kong12
Russia7
Canada6
France4

Client strings seen on this port

User agentProbes
Python/3.12 aiohttp/3.14.529
Mozilla/5.0 (compatible; scanner)27
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.3615
Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.368
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.366

Port report

Port report

Loading