Port 5000 (Web-alt)

HoneyLabs honeypots recorded 13,472 probes against destination port 5000 (Web-alt) from 330 distinct source IP addresses in the last 7 days.

First observed 2026-09-23 08:01:17, most recently 2026-09-30 07:28:06 (UTC).

Most active source addresses

Source IPProbesNetworkCountry
192.253.248.17312,009Limited Network LTDNL
93.174.93.1299IP Volume incNL
161.118.214.19651Oracle CorporationSG
168.107.72.18851Oracle CorporationSG
161.118.205.24951Oracle CorporationSG
161.118.232.8351Oracle CorporationSG
159.89.28.18244DigitalOcean, LLCDE
77.91.71.9033Alferov Aleksey AleksandrovichRU

Networks it comes from

ASNOrganisationProbesSource IPs
AS213790Limited Network LTD12,0091
AS14061DigitalOcean, LLC23344
AS31898Oracle Corporation2044
AS202425IP Volume inc1639
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED8510
AS396982Google LLC8276

Where it comes from

CountryProbes
The Netherlands12,203
United States514
Singapore214
Germany165
Russia110
Hong Kong80

Client strings seen on this port

User agentProbes
Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.361,544
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.361,520
Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.151,511
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.01,510
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.361,494

Port report

Port report

Loading live data…