Port report
Port 5000Web-alt
7-day honeypot probe activity targeting destination port 5000. First seen 2026-05-14, most recent 2026-05-21 11:59.
Events 7d
1,749
Source IPs
289
Source ASNs
58
Countries
33
Top source ASNs
Top source countries
- United States566
- Netherlands316
- Seychelles178
- China141
- Germany97
- Canada95
- Russia64
- Romania60
- Sweden48
- United Arab Emirates38
Top source IPs hitting port 5000
- 94.102.49.155148 eventsNL· AS202425 IP Volume inc
- 160.119.71.12143 eventsSC· AS49870 Alsycon B.V.
- 80.82.77.202126 eventsNL· AS202425 IP Volume inc
- 101.27.96.209114 eventsCN· AS4837 CHINA UNICOM China169 Backbone
- 45.198.224.948 eventsSE
- 194.195.211.19647 eventsUS· AS63949 Akamai Connected Cloud
- 147.182.147.19347 eventsCA· AS14061 DigitalOcean, LLC
- 161.35.5.7347 eventsUS· AS14061 DigitalOcean, LLC
- 178.128.230.1947 eventsCA· AS14061 DigitalOcean, LLC
- 66.228.38.14946 eventsUS· AS63949 Akamai Connected Cloud
- 18.116.101.22032 eventsUS· AS16509 Amazon.com, Inc.
- 151.243.11.3531 eventsAE· AS209630 LLC Vash Kredit Bank
- 193.32.162.10424 eventsRO· AS47890 Unmanaged Ltd
- 18.218.118.20323 eventsUS· AS16509 Amazon.com, Inc.
- 164.92.176.4322 eventsDE· AS14061 DigitalOcean, LLC
- 161.35.199.25022 eventsDE· AS14061 DigitalOcean, LLC
- 128.136.131.8420 eventsUS· AS13649 Flexential Colorado Corp.
- 80.94.95.8317 eventsRO· AS204428 SS-Net
- 16.58.56.21416 eventsUS· AS16509 Amazon.com, Inc.
- 95.215.0.14414 eventsRU· AS34665 Petersburg Internet Network ltd.
- 45.205.1.7114 eventsSC· AS328608 Africa-on-Cloud-AS
- 80.66.83.4313 eventsRU· AS216473 Bashinskii Vadim Ruslanovich
- 66.132.172.21713 eventsUS· AS398324 Censys, Inc.
- 193.32.162.2812 eventsRO· AS47890 Unmanaged Ltd
- 35.153.183.1712 eventsUS· AS14618 Amazon.com, Inc.
Top user-agents on port 5000
- Python/3.10 aiohttp/3.8.4274
- Python/3.11 aiohttp/3.13.5114
- curl/7.68.0106
- visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.3677
- Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)63
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity60
- Go-http-client/1.138
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.3636
- Mozilla/5.030
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.027
JSON: /api/port/5000. CSV: /api/port/5000?format=csv.