Port report
Port 5900VNC
7-day honeypot probe activity targeting destination port 5900. First seen 2026-05-14, most recent 2026-05-21 11:38.
Events 7d
774
Source IPs
116
Source ASNs
31
Countries
18
Top source ASNs
Top source countries
Top source IPs hitting port 5900
- 94.102.49.155114 eventsNL· AS202425 IP Volume inc
- 80.82.77.202100 eventsNL· AS202425 IP Volume inc
- 74.207.252.10946 eventsUS· AS63949 Akamai Connected Cloud
- 67.205.129.25446 eventsUS· AS14061 DigitalOcean, LLC
- 45.79.192.24346 eventsUS· AS63949 Akamai Connected Cloud
- 146.190.210.12846 eventsUS· AS14061 DigitalOcean, LLC
- 159.65.71.11246 eventsUS· AS14061 DigitalOcean, LLC
- 216.180.246.22816 eventsUS· AS396982 Google LLC
- 167.94.146.5116 eventsUS· AS398705 Censys, Inc.
- 80.66.83.4312 eventsRU· AS216473 Bashinskii Vadim Ruslanovich
- 143.198.117.9410 eventsUS· AS14061 DigitalOcean, LLC
- 199.45.154.1348 eventsUS· AS398722 Censys, Inc.
- 66.132.186.1608 eventsUS
- 167.94.146.528 eventsUS· AS398705 Censys, Inc.
- 66.132.186.1688 eventsUS
- 199.45.155.758 eventsUS· AS398722 Censys, Inc.
- 66.132.172.1038 eventsUS· AS398324 Censys, Inc.
- 66.132.195.398 eventsUS
- 167.94.146.538 eventsUS· AS398705 Censys, Inc.
- 66.132.172.1908 eventsUS· AS398324 Censys, Inc.
- 199.45.155.738 eventsUS· AS398722 Censys, Inc.
- 66.132.186.1948 eventsUS
- 167.94.146.498 eventsUS· AS398705 Censys, Inc.
- 167.94.146.608 eventsUS· AS398705 Censys, Inc.
- 167.94.146.598 eventsUS· AS398705 Censys, Inc.
Top user-agents on port 5900
- Python/3.10 aiohttp/3.8.4211
- Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)107
- Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)16
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.012
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity9
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.368
- curl/7.61.16
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.366
- fasthttp5
JSON: /api/port/5900. CSV: /api/port/5900?format=csv.