Port 85
HoneyLabs honeypots recorded 628 probes against destination port 85 from 195 distinct source IP addresses in the last 7 days.
First observed 2026-08-29 04:56:00, most recently 2026-09-05 04:10:35 (UTC).
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 195.182.16.23 | 76 | Amarutu Technology Ltd | DE |
| 3.131.220.121 | 37 | Amazon.com, Inc. | US |
| 18.218.118.203 | 36 | Amazon.com, Inc. | US |
| 18.116.101.220 | 23 | Amazon.com, Inc. | US |
| 3.129.187.38 | 21 | Amazon.com, Inc. | US |
| 8.234.112.207 | 19 | Google LLC | IN |
| 34.148.211.101 | 19 | Google LLC | US |
| 34.182.210.52 | 19 | Google LLC | US |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS396982 | Google LLC | 160 | 33 |
| AS16509 | Amazon.com, Inc. | 117 | 4 |
| AS6939 | Hurricane Electric LLC | 112 | 74 |
| AS206264 | Amarutu Technology Ltd | 76 | 1 |
| AS14061 | DigitalOcean, LLC | 25 | 13 |
| AS45102 | Alibaba (US) Technology Co., Ltd. | 20 | 10 |
Where it comes from
| Country | Probes |
|---|---|
| United States | 434 |
| Germany | 94 |
| India | 21 |
| Hong Kong | 20 |
| Portugal | 8 |
| China | 7 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36 | 84 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 Edg/90.0.818.46 | 76 |
| crusader-worker/1.0 | 76 |
| Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler) | 57 |
| Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity | 22 |
Port report
Port report
Loading live data…