Port report
Port 85
7-day honeypot probe activity targeting destination port 85. First seen 2026-05-14, most recent 2026-05-21 10:41.
Events 7d
544
Source IPs
165
Source ASNs
33
Countries
21
Top source ASNs
- AS51396Pfcloud UG (haftungsbeschrankt)125
- AS6939Hurricane Electric LLC104
- AS16509Amazon.com, Inc.102
- AS206264Amarutu Technology Ltd41
- AS135377UCLOUD INFORMATION TECHNOLOGY HK LIMITED22
- AS49870Alsycon B.V.18
- AS396982Google LLC15
- AS14061DigitalOcean, LLC14
- AS47890Unmanaged Ltd13
- AS45102Alibaba US Technology Co., Ltd.12
Top source countries
Top source IPs hitting port 85
- 204.76.203.212125 eventsNL· AS51396 Pfcloud UG (haftungsbeschrankt)
- 45.139.122.8024 eventsNL· AS206264 Amarutu Technology Ltd
- 16.58.56.21424 eventsUS· AS16509 Amazon.com, Inc.
- 18.218.118.20320 eventsUS· AS16509 Amazon.com, Inc.
- 3.131.220.12117 eventsUS· AS16509 Amazon.com, Inc.
- 3.129.187.3817 eventsUS· AS16509 Amazon.com, Inc.
- 3.130.168.216 eventsUS· AS16509 Amazon.com, Inc.
- 193.32.162.2812 eventsRO· AS47890 Unmanaged Ltd
- 92.63.197.228 eventsUA· AS211736 FOP Dmytro Nedilskyi
- 160.119.76.248 eventsSC· AS49870 Alsycon B.V.
- 65.49.20.678 eventsUS· AS6939 Hurricane Electric LLC
- 5.187.35.1427 eventsNL· AS206264 Amarutu Technology Ltd
- 152.32.159.977 eventsIN· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 165.154.12.1277 eventsAE· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 152.32.159.797 eventsIN· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 160.119.76.586 eventsSC· AS49870 Alsycon B.V.
- 104.251.180.176 eventsUS
- 93.152.208.186 eventsZA· AS209854 Cyberzone S.A.
- 65.49.20.694 eventsUS· AS6939 Hurricane Electric LLC
- 5.61.209.2244 eventsSC· AS206264 Amarutu Technology Ltd
- 5.61.209.1024 eventsSC· AS206264 Amarutu Technology Ltd
- 18.116.101.2204 eventsUS· AS16509 Amazon.com, Inc.
- 216.218.206.664 eventsUS· AS6939 Hurricane Electric LLC
- 3.132.26.2324 eventsUS· AS16509 Amazon.com, Inc.
- 184.105.247.1954 eventsUS· AS6939 Hurricane Electric LLC
Top user-agents on port 85
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46155
- visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.3676
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.3616
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity15
- Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.3612
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.012
- Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:146.0) Gecko/20100101 Firefox/146.011
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.368
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.06
- Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.06
JSON: /api/port/85. CSV: /api/port/85?format=csv.