Port 5433

HoneyLabs honeypots recorded 1,397 probes against destination port 5433 from 80 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 09:59, most recently 2026-11-15 04:42 (UTC).

What the sensors show

The sources sat in 23 networks across 13 countries. One address, 85.11.167.7, sent 89% of them. The largest source network was AS197170 (TechTies Inc.), with 89% of the probes from 2 addresses. 1 of the 25 busiest addresses is a recognised research scanner.

Most active source addresses

Source IPProbesNetworkCountry
85.11.167.71,237TechTies Inc.NL
209.141.46.15711FranTech SolutionsUS
176.120.22.619Proton66 OOORU
87.251.64.1316Shesternin Vladimir AnatolievichRU
151.243.11.1606LLC Vash Kredit BankAE
159.89.225.1856DigitalOcean, LLCUS
146.190.221.2406DigitalOcean, LLCUS
164.90.202.1436DigitalOcean, LLCNL

Networks it comes from

ASNOrganisationProbesSource IPs
AS197170TechTies Inc.1,2422
AS396982Google LLC5337
AS14061DigitalOcean, LLC183
AS209630LLC Vash Kredit Bank154
AS212835Shesternin Vladimir Anatolievich124
AS53667FranTech Solutions111

Where it comes from

CountryProbes
The Netherlands1,252
United States38
Belgium35
Russia23
United Arab Emirates15
France10

Client strings seen on this port

User agentProbes
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.3627
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity18
Mozilla/5.0 (compatible; FlowIQLabsBot/1.0; +https://flowiq-labs.com/scanning-info)15
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.364

Port report

Port report

Loading