Port 5985
HoneyLabs honeypots recorded 1,153 probes against destination port 5985 from 420 distinct source IP addresses in the last 7 days.
First observed 2026-08-08 19:03:34, most recently 2026-08-15 18:39:55 (UTC).
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 80.82.77.202 | 159 | IP Volume inc | NL |
| 93.174.93.12 | 52 | IP Volume inc | NL |
| 167.94.146.63 | 18 | Censys, Inc. | US |
| 89.248.172.13 | 18 | IP Volume inc | NL |
| 66.132.195.43 | 17 | Censys, Inc. | US |
| 117.40.212.10 | 15 | Chinanet | CN |
| 152.32.153.228 | 11 | UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED | ID |
| 58.221.146.170 | 11 | China Telecom Next Generation Carrier Network | CN |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS202425 | IP Volume inc | 244 | 6 |
| AS398324 | Censys, Inc. | 161 | 19 |
| AS6939 | Hurricane Electric LLC | 112 | 90 |
| AS135377 | UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED | 69 | 15 |
| AS398705 | Censys, Inc. | 63 | 6 |
| AS396982 | Google LLC | 49 | 45 |
Where it comes from
| Country | Probes |
|---|---|
| United States | 522 |
| The Netherlands | 236 |
| China | 82 |
| Hong Kong | 45 |
| India | 28 |
| Germany | 21 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| Python WinRM client | 219 |
| Python/3.10 aiohttp/3.8.4 | 207 |
| Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) | 161 |
| Microsoft WinRM Client | 36 |
| Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0 | 21 |
Port report
Port report
Loading live data…