Port 5017
HoneyLabs honeypots recorded 141 probes against destination port 5017 from 8 distinct source IP addresses in the last 7 days.
First observed 2026-09-27 22:38:19, most recently 2026-10-03 06:59:01 (UTC).
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 165.227.173.41 | 32 | DigitalOcean, LLC | DE |
| 146.190.63.248 | 32 | DigitalOcean, LLC | US |
| 157.245.105.107 | 32 | DigitalOcean, LLC | IN |
| 159.65.144.72 | 31 | DigitalOcean, LLC | IN |
| 80.66.66.38 | 10 | Soldatov Alexey Valerevich | RU |
| 192.253.248.251 | 2 | Limited Network LTD | NL |
| 168.144.77.101 | 1 | DigitalOcean, LLC | IN |
| 157.245.163.64 | 1 | DigitalOcean, LLC | US |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS14061 | DigitalOcean, LLC | 129 | 6 |
| AS209702 | Soldatov Alexey Valerevich | 10 | 1 |
| AS213790 | Limited Network LTD | 2 | 1 |
Where it comes from
| Country | Probes |
|---|---|
| India | 64 |
| United States | 33 |
| Germany | 32 |
| Russia | 10 |
| The Netherlands | 2 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| Mozilla/5.0 (l9scan/2.0.634313e2831313e233e2239313; +https://leakix.net) | 30 |
| Mozilla/5.0 (l9scan/2.0.732323e27333e24393e23323; +https://leakix.net) | 30 |
| Mozilla/5.0 (l9scan/2.0.130323e21383e2832323e2538313; +https://leakix.net) | 30 |
| Mozilla/5.0 (l9scan/2.0.233313e2338313e2537313e253; +https://leakix.net) | 29 |
| Mozilla/5.0 zgrab/0.x | 1 |
Port report
Port report
Loading live data…