Port 5001

HoneyLabs honeypots recorded 821 probes against destination port 5001 from 208 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 08:35, most recently 2026-11-15 07:26 (UTC).

What the sensors show

The sources sat in 44 networks across 21 countries. No single address sent more than 9% of them. The largest source network was AS202425 (IP Volume inc), with 21% of the probes from 4 addresses. 9 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
89.248.171.2475IP Volume incNL
95.164.203.5956ISP4Life INCUS
93.174.93.1256IP Volume incNL
18.116.101.22034Amazon.com, Inc.US
80.82.77.20229IP Volume incNL
35.206.146.10723Google LLCBE
35.210.188.25322Google LLCBE
18.218.118.20321Amazon.com, Inc.US

Networks it comes from

ASNOrganisationProbesSource IPs
AS202425IP Volume inc1724
AS15169Google LLC13218
AS16509Amazon.com, Inc.717
AS394814ISP4Life INC561
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED546
AS396982Google LLC4545

Where it comes from

CountryProbes
United States331
The Netherlands192
Belgium132
Hong Kong44
Panama16
Russia15

Client strings seen on this port

User agentProbes
Python/3.10 aiohttp/3.8.4172
Mozilla/5.0 (compatible)121
visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.3649
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity45
Python/3.12 aiohttp/3.14.529

Port report

Port report

Loading