Port 5173

HoneyLabs honeypots recorded 1,317 probes against destination port 5173 from 54 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 10:46, most recently 2026-11-15 08:07 (UTC).

What the sensors show

The sources sat in 20 networks across 12 countries. One address, 77.90.185.243, sent 77% of them. The largest source network was AS213790 (Limited Network LTD), with 77% of the probes from 1 address. 2 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
77.90.185.2431,014Limited Network LTDDE
129.213.151.23451Oracle CorporationUS
167.99.244.4636DigitalOcean, LLCDE
93.152.223.4436RMP Protection LimitedBG
191.44.114.2020Node Host LimitedSE
79.143.191.16513Contabo GmbHFR
45.140.185.10912Contabo GmbHFR
164.92.211.9812DigitalOcean, LLCNL

Networks it comes from

ASNOrganisationProbesSource IPs
AS213790Limited Network LTD1,0141
AS14061DigitalOcean, LLC8916
AS31898Oracle Corporation511
AS135388RMP Protection Limited361
AS51167Contabo GmbH315
AS198550Node Host Limited201

Where it comes from

CountryProbes
Germany1,069
United States101
Bulgaria36
The Netherlands36
France31
Sweden20

Client strings seen on this port

User agentProbes
Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; MATP)169
Mozilla/5.0 (Linux; U; Android 4.1.2; en-us; SCH-I535 Build/JZO54K) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30evme-launcher169
Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; )169
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:47.0) Gecko/20100101 Firefox/47.0169
Mozilla/5.0 (Linux; Android 7.0; SAMSUNG SM-G930F Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/5.0 Chrome/51.0.2704.106 Mobile Safari/537.36169

Port report

Port report

Loading