Port 5050

HoneyLabs honeypots recorded 484 probes against destination port 5050 from 107 distinct source IP addresses in the last 7 days.

First observed 2026-11-01 09:51, most recently 2026-11-08 07:59 (UTC).

What the sensors show

The sources sat in 27 networks across 17 countries. No single address sent more than 10% of them. The largest source network was AS14061 (DigitalOcean, LLC), with 41% of the probes from 7 addresses. 6 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
167.172.215.546DigitalOcean, LLCUS
159.223.111.12246DigitalOcean, LLCUS
64.227.14.16046DigitalOcean, LLCUS
104.248.74.25546DigitalOcean, LLCUS
93.174.93.1241IP Volume incNL
89.248.172.3340IP Volume incNL
31.56.20.12318BreezeHostUS
176.65.134.678Pfcloud UG (haftungsbeschrankt)DE

Networks it comes from

ASNOrganisationProbesSource IPs
AS14061DigitalOcean, LLC1977
AS202425IP Volume inc812
AS396982Google LLC2929
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED277
AS45102Alibaba (US) Technology Co., Ltd.2511
AS51396Pfcloud UG (haftungsbeschrankt)217

Where it comes from

CountryProbes
United States283
The Netherlands106
Russia24
Singapore15
Hong Kong13
Thailand11

Client strings seen on this port

User agentProbes
Python/3.10 aiohttp/3.8.481
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity29
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.3626
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3620
Go-http-client/1.116

Port report

Port report

Loading