Port report
Port 5985
7-day honeypot probe activity targeting destination port 5985. First seen 2026-05-14, most recent 2026-05-21 10:20.
Events 7d
855
Source IPs
294
Source ASNs
56
Countries
32
Top source ASNs
Top source countries
- United States327
- Netherlands285
- Seychelles29
- China27
- Hong Kong26
- Russia24
- South Africa20
- France18
- Portugal16
- India10
Top source IPs hitting port 5985
- 94.102.49.155148 eventsNL· AS202425 IP Volume inc
- 80.82.77.202128 eventsNL· AS202425 IP Volume inc
- 80.66.83.4312 eventsRU· AS216473 Bashinskii Vadim Ruslanovich
- 66.132.172.2149 eventsUS· AS398324 Censys, Inc.
- 66.132.186.2049 eventsUS
- 66.132.172.2229 eventsUS· AS398324 Censys, Inc.
- 167.94.146.549 eventsUS· AS398705 Censys, Inc.
- 66.132.186.2069 eventsUS
- 66.132.195.889 eventsUS
- 167.94.146.509 eventsUS· AS398705 Censys, Inc.
- 199.45.154.1489 eventsUS· AS398722 Censys, Inc.
- 66.132.186.1979 eventsUS
- 66.132.195.909 eventsUS
- 167.94.146.599 eventsUS· AS398705 Censys, Inc.
- 167.94.146.619 eventsUS· AS398705 Censys, Inc.
- 66.132.186.1998 eventsUS
- 93.152.221.68 eventsBG
- 160.119.76.506 eventsSC· AS49870 Alsycon B.V.
- 93.174.95.1066 eventsNL· AS202425 IP Volume inc
- 93.152.208.386 eventsZA· AS209854 Cyberzone S.A.
- 165.154.163.106 eventsUS· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 160.119.76.586 eventsSC· AS49870 Alsycon B.V.
- 152.32.172.1086 eventsHK· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 212.83.140.905 eventsFR· AS12876 Scaleway S.a.s.
- 183.134.40.825 eventsCN· AS58461 CT-HangZhou-IDC
Top user-agents on port 5985
- Python/3.10 aiohttp/3.8.4276
- Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)78
- Python WinRM client49
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.3632
- Go-http-client/1.119
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity16
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.015
- Mozilla/5.0 zgrab/0.x11
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.369
- Microsoft WinRM Client8
JSON: /api/port/5985. CSV: /api/port/5985?format=csv.