Port 8546

HoneyLabs honeypots recorded 44 probes against destination port 8546 from 14 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 22:59, most recently 2026-11-15 19:43 (UTC).

What the sensors show

The sources sat in 10 networks across 7 countries. No single address sent more than 18% of them. The largest source network was AS398705 (Censys, Inc.), with 36% of the probes from 2 addresses. 4 of the 14 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
167.94.146.618Censys, Inc.US
167.94.146.568Censys, Inc.US
207.90.244.146Cogent Communications, LLCUS
85.239.151.145Interserver, IncER
195.182.16.1834Amarutu Technology LtdDE
5.181.86.603Internet Solutions & Innovations LTD.UA
106.75.24.2253China Unicom Beijing Province NetworkCN
162.216.149.1531Google LLCUS

Networks it comes from

ASNOrganisationProbesSource IPs
AS398705Censys, Inc.162
AS174Cogent Communications, LLC61
AS19318Interserver, Inc51
AS206264Amarutu Technology Ltd41
AS4808China Unicom Beijing Province Network31
AS211632Internet Solutions & Innovations LTD.31

Where it comes from

CountryProbes
United States27
Eritrea5
Germany4
Ukraine3
China3
Latvia1

Client strings seen on this port

User agentProbes
Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)12
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:146.0) Gecko/20100101 Firefox/146.04
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity3
Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.363
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.363

Port report

Port report

Loading