Port report
Port 5200
7-day honeypot probe activity targeting destination port 5200. First seen 2026-07-02, most recent 2026-07-08 23:20.
278
Events 7d
36
Source IPs
12
Source ASNs
9
Countries
Top source ASNs
Top source countries
Top source IPs hitting port 5200
- 165.22.185.11546 eventsKnown scanner USseen Jul 3
- 157.230.208.7046 eventsKnown scanner USseen Jul 3
- 45.79.2.23246 eventsKnown scanner USseen Jul 3
- 147.182.134.22346 eventsKnown scanner USseen Jul 3
- 159.89.132.7112 eventsKnown scanner USseen Jul 3
- 45.56.69.8012 eventsKnown scanner USseen Jul 3
- 157.230.142.12612 eventsKnown scanner USseen Jul 3
- 165.22.146.14612 eventsKnown scanner USseen Jul 3
- 45.141.233.1174 eventsProbing BG路 AS201814 MEVSPACE sp. z o.o.seen Jul 6
- 94.154.43.364 eventsProbing NL路 AS219502 Storm Industries LLCseen Jul 4
- 156.59.197.1024 eventsProbing HK路 AS21859 Zenlayer Incseen Jul 8
- 152.32.128.2144 eventsProbing HK路 AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 4
- 37.19.197.2103 eventsProbing US路 AS212238 Datacamp Limitedseen Jul 5
- 152.32.189.1283 eventsProbing HK路 AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 4
- 101.36.108.93 eventsProbing HK路 AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 2
- 91.230.168.1411 eventsKnown scanner USseen Jul 6
- 91.230.168.951 eventsKnown scanner USseen Jul 6
- 5.101.64.61 eventsKnown scanner RUseen Jul 6
- 35.203.210.1441 eventsProbing GBseen Jul 7
- 147.185.133.531 eventsProbing US路 AS396982 Google LLCseen Jul 6
- 45.82.78.1071 eventsProbing DE路 AS212512 Detai Prosperous Technologies Limitedseen Jul 8
- 85.217.149.581 eventsKnown scanner CAseen Jul 4
- 45.131.155.1111 eventsProbing DE路 AS212512 Detai Prosperous Technologies Limitedseen Jul 8
- 35.203.211.1471 eventsProbing GBseen Jul 4
- 91.230.168.181 eventsKnown scanner USseen Jul 8
Top user-agents on port 5200
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity6
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.364
- Go-http-client/1.13
- Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)3
- curl/7.29.02
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.01
- Mozilla/5.0 (Linux; Android 4.4; Nexus 5 Build/BuildID) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/30.0.0.0 Mobile Safari/537.361
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 OPR/121.0.0.01
- Mozilla/5.0 (Windows NT 9_2_1; Win64; x64) AppleWebKit/566.39 (KHTML, like Gecko) Chrome/86.0.366 Safari/537.361
JSON: /api/port/5200. CSV: /api/port/5200?format=csv.