Port 5172
HoneyLabs honeypots recorded 82 probes against destination port 5172 from 37 distinct source IP addresses in the last 7 days.
First observed 2026-11-09 05:58, most recently 2026-11-15 12:00 (UTC).
What the sensors show
The sources sat in 5 networks across 4 countries. One address, 93.174.95.106, sent 40% of them. The largest source network was AS202425 (IP Volume inc), with 44% of the probes from 2 addresses. 7 of the 25 busiest addresses are recognised research scanners.
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 93.174.95.106 | 33 | IP Volume inc | NL |
| 67.205.185.245 | 6 | DigitalOcean, LLC | US |
| 80.82.77.139 | 3 | IP Volume inc | NL |
| 162.216.149.36 | 3 | Google LLC | US |
| 35.241.246.219 | 2 | Google LLC | BE |
| 35.187.20.200 | 2 | Google LLC | BE |
| 34.140.22.116 | 2 | Google LLC | BE |
| 162.216.150.239 | 2 | Google LLC | US |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS202425 | IP Volume inc | 36 | 2 |
| AS396982 | Google LLC | 31 | 25 |
| AS213412 | ONYPHE SAS | 8 | 8 |
| AS14061 | DigitalOcean, LLC | 6 | 1 |
| AS63949 | Akamai Connected Cloud | 1 | 1 |
Where it comes from
| Country | Probes |
|---|---|
| The Netherlands | 36 |
| United States | 28 |
| Belgium | 11 |
| United Kingdom | 7 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| python-requests/2.23.0 | 24 |
| Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity | 20 |
| Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:82.0) Gecko/20100101 Firefox/82.0 | 12 |
| python-requests/2.34.2 | 11 |
| Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0 | 8 |
Port report
Port report
Loading