Port report
Port 5002
7-day honeypot probe activity targeting destination port 5002. First seen 2026-05-14, most recent 2026-05-21 11:34.
Events 7d
522
Source IPs
126
Source ASNs
21
Countries
15
Top source ASNs
- AS16509Amazon.com, Inc.133
- AS14061DigitalOcean, LLC97
- AS63949Akamai Connected Cloud93
- AS6939Hurricane Electric LLC74
- AS396982Google LLC25
- AS14618Amazon.com, Inc.18
- AS45102Alibaba US Technology Co., Ltd.13
- AS216473Bashinskii Vadim Ruslanovich12
- AS47890Unmanaged Ltd12
- AS135377UCLOUD INFORMATION TECHNOLOGY HK LIMITED10
Top source countries
Top source IPs hitting port 5002
- 185.3.95.9846 eventsGB· AS63949 Akamai Connected Cloud
- 138.197.196.446 eventsUS· AS14061 DigitalOcean, LLC
- 134.209.62.3046 eventsUS· AS14061 DigitalOcean, LLC
- 45.33.64.5046 eventsUS· AS63949 Akamai Connected Cloud
- 3.129.187.3840 eventsUS· AS16509 Amazon.com, Inc.
- 3.130.168.224 eventsUS· AS16509 Amazon.com, Inc.
- 18.116.101.22021 eventsUS· AS16509 Amazon.com, Inc.
- 18.218.118.20315 eventsUS· AS16509 Amazon.com, Inc.
- 16.58.56.21412 eventsUS· AS16509 Amazon.com, Inc.
- 35.153.183.1712 eventsUS· AS14618 Amazon.com, Inc.
- 193.32.162.2812 eventsRO· AS47890 Unmanaged Ltd
- 80.66.83.4312 eventsRU· AS216473 Bashinskii Vadim Ruslanovich
- 118.193.40.19110 eventsHK· AS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 216.180.246.1899 eventsUS· AS396982 Google LLC
- 3.151.241.1539 eventsUS· AS16509 Amazon.com, Inc.
- 18.118.147.2388 eventsUS· AS16509 Amazon.com, Inc.
- 45.227.254.1326 eventsPA· AS267784 Flyservers S.A.
- 64.62.156.1925 eventsUS· AS6939 Hurricane Electric LLC
- 3.81.150.104 eventsUS· AS14618 Amazon.com, Inc.
- 3.131.220.1214 eventsUS· AS16509 Amazon.com, Inc.
- 8.216.8.1143 eventsJP· AS45102 Alibaba US Technology Co., Ltd.
- 8.216.15.413 eventsJP· AS45102 Alibaba US Technology Co., Ltd.
- 47.251.94.813 eventsUS· AS45102 Alibaba US Technology Co., Ltd.
- 47.250.95.2043 eventsMY· AS45102 Alibaba US Technology Co., Ltd.
- 65.49.20.663 eventsUS· AS6939 Hurricane Electric LLC
Top user-agents on port 5002
- visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36100
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity16
- Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)9
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.06
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.366
- Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.05
- Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.04
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.364
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.364
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.04
JSON: /api/port/5002. CSV: /api/port/5002?format=csv.