Port 5008

HoneyLabs honeypots recorded 79 probes against destination port 5008 from 55 distinct source IP addresses in the last 7 days.

First observed 2026-08-08 09:56:46, most recently 2026-08-14 22:53:15 (UTC).

Most active source addresses

Source IPProbesNetworkCountry
204.76.203.2125Pfcloud UG (haftungsbeschrankt)NL
204.76.203.2145Pfcloud UG (haftungsbeschrankt)NL
45.156.128.2304Sistemas Informaticos, S.A.PT
109.105.210.724Zenlayer IncPT
204.76.203.2213Pfcloud UG (haftungsbeschrankt)NL
204.76.203.2133Pfcloud UG (haftungsbeschrankt)NL
45.156.128.2322Sistemas Informaticos, S.A.PT
45.156.129.752Sistemas Informaticos, S.A.PT

Networks it comes from

ASNOrganisationProbesSource IPs
AS396982Google LLC1919
AS51396Pfcloud UG (haftungsbeschrankt)185
AS211680Sistemas Informaticos, S.A.1610
AS21859Zenlayer Inc84
AS213412ONYPHE SAS77
AS209334Modat B.V.44

Where it comes from

CountryProbes
Portugal24
The Netherlands18
United States17
United Kingdom9
China5
Canada4

Client strings seen on this port

User agentProbes
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity19
python-httpx/0.28.112
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.3612
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.07
Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)4

Port report

Port report

Loading live data…