Port 5985
HoneyLabs honeypots recorded 1,374 probes against destination port 5985 from 760 distinct source IP addresses in the last 7 days.
First observed 2026-09-23 02:20:06, most recently 2026-09-30 01:28:17 (UTC).
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 93.174.93.12 | 57 | IP Volume inc | NL |
| 152.32.146.166 | 18 | UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED | JP |
| 89.248.171.24 | 18 | IP Volume inc | NL |
| 80.82.77.202 | 14 | IP Volume inc | NL |
| 124.106.67.118 | 11 | Philippine Long Distance Telephone Company | PH |
| 66.132.186.191 | 9 | Censys, Inc. | US |
| 66.132.186.199 | 9 | Censys, Inc. | US |
| 66.132.172.46 | 9 | Censys, Inc. | US |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS8075 | Microsoft Corporation | 170 | 124 |
| AS6939 | Hurricane Electric LLC | 112 | 92 |
| AS202425 | IP Volume inc | 109 | 10 |
| AS45090 | Shenzhen Tencent Computer Systems Company Limited | 106 | 90 |
| AS398324 | Censys, Inc. | 97 | 12 |
| AS135377 | UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED | 90 | 20 |
Where it comes from
| Country | Probes |
|---|---|
| United States | 471 |
| China | 197 |
| The Netherlands | 112 |
| India | 89 |
| Hong Kong | 78 |
| Japan | 24 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| Microsoft WinRM Client | 555 |
| Python WinRM client | 154 |
| Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) | 101 |
| Python/3.10 aiohttp/3.8.4 | 81 |
| Mozilla/5.0 zgrab/0.x | 17 |
Port report
Port report
Loading live data…