Port 5984 (CouchDB)

HoneyLabs honeypots recorded 569 probes against destination port 5984 (CouchDB) from 172 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 15:20, most recently 2026-11-15 14:05 (UTC).

What the sensors show

The sources sat in 31 networks across 18 countries. No single address sent more than 7% of them. The largest source network was AS14061 (DigitalOcean, LLC), with 27% of the probes from 10 addresses. 11 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
67.207.88.11938DigitalOcean, LLCUS
206.81.13.24638DigitalOcean, LLCUS
68.183.23.4038DigitalOcean, LLCUS
35.210.55.15623Google LLCBE
167.94.146.6216Censys, Inc.US
167.94.146.5316Censys, Inc.US
165.227.196.9913DigitalOcean, LLCUS
35.210.98.5011Google LLCBE

Networks it comes from

ASNOrganisationProbesSource IPs
AS14061DigitalOcean, LLC15610
AS398324Censys, Inc.7210
AS15169Google LLC7210
AS8075Microsoft Corporation6043
AS398705Censys, Inc.484
AS264617GRUPO PANAGLOBAL 15 S.A263

Where it comes from

CountryProbes
United States395
Belgium72
Panama16
China13
Portugal12
Hong Kong12

Client strings seen on this port

User agentProbes
Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)91
Mozilla/5.0 (compatible)64
Go-http-client/1.136
Mozilla/5.0 zgrab/0.x30
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.3622

Port report

Port report

Loading