Port 5038

HoneyLabs honeypots recorded 104 probes against destination port 5038 from 9 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 14:40, most recently 2026-11-14 07:50 (UTC).

What the sensors show

The sources sat in 9 networks across 8 countries. One address, 5.135.108.213, sent 37% of them. The largest source network was AS16276 (OVH SAS), with 37% of the probes from 1 address. None of the 9 busiest addresses is a recognised research scanner.

Most active source addresses

Source IPProbesNetworkCountry
5.135.108.21338OVH SASFR
45.149.204.25318Contabo GmbHDE
89.126.220.15411Uzbektelekom Joint Stock CompanyUZ
38.41.3.11411MDS TELECOM C.A.VE
185.187.155.1128KuroitUS
103.158.121.48PT Anugerah Cimanuk RayaID
118.193.59.1947UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDDE
204.76.203.2132Pfcloud UG (haftungsbeschrankt)NL

Networks it comes from

ASNOrganisationProbesSource IPs
AS16276OVH SAS381
AS51167Contabo GmbH181
AS269832MDS TELECOM C.A.111
AS202660Uzbektelekom Joint Stock Company111
AS141127PT Anugerah Cimanuk Raya81
AS152586Kuroit81

Where it comes from

CountryProbes
France38
Germany25
Uzbekistan11
Venezuela11
Indonesia8
United States8

Client strings seen on this port

User agentProbes
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.368
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.04
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.111

Port report

Port report

Loading