Port 5946

HoneyLabs honeypots recorded 8 probes against destination port 5946 from 8 distinct source IP addresses in the last 7 days.

First observed 2026-11-01 21:58, most recently 2026-11-08 02:26 (UTC).

What the sensors show

The sources sat in 6 networks across 7 countries. No single address sent more than 13% of them. The largest source network was AS396982 (Google LLC), with 38% of the probes from 3 addresses. None of the 8 busiest addresses is a recognised research scanner.

Most active source addresses

Source IPProbesNetworkCountry
94.26.68.901MEVSPACE sp. z o.o.BG
35.203.210.2171Google LLCGB
162.216.149.2051Google LLCUS
27.37.113.2111China Unicom IP network China169 Guangdong provinceCN
176.120.22.1791Proton66 OOORU
80.94.95.2371SS-NetRO
162.216.149.1651Google LLCUS
37.32.42.211Peyman Ertebatat Pouya Company (Ltd)IR

Networks it comes from

ASNOrganisationProbesSource IPs
AS396982Google LLC33
AS201814MEVSPACE sp. z o.o.11
AS17816China Unicom IP network China169 Guangdong province11
AS198953Proton66 OOO11
AS204428SS-Net11
AS213732Peyman Ertebatat Pouya Company (Ltd)11

Where it comes from

CountryProbes
United States2
United Kingdom1
China1
Bulgaria1
Romania1
Russia1

Client strings seen on this port

User agentProbes
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity3

Port report

Port report

Loading