Port 55000

HoneyLabs honeypots recorded 38 probes against destination port 55000 from 24 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 19:20, most recently 2026-11-15 05:24 (UTC).

What the sensors show

The sources sat in 10 networks across 9 countries. No single address sent more than 16% of them. The largest source network was AS396982 (Google LLC), with 39% of the probes from 13 addresses. 2 of the 24 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
46.101.119.146DigitalOcean, LLCDE
213.177.179.1954Feo Prest SRLIR
165.154.138.33UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDDE
162.216.149.2172Google LLCUS
87.251.64.1322Shesternin Vladimir AnatolievichRU
185.136.15.1532AO ALMAZKZ
162.216.150.102Google LLCUS
35.203.211.911Google LLCGB

Networks it comes from

ASNOrganisationProbesSource IPs
AS396982Google LLC1513
AS14061DigitalOcean, LLC61
AS208137Feo Prest SRL41
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED31
AS209334Modat B.V.22
AS210328AO ALMAZ21

Where it comes from

CountryProbes
United States11
Germany9
United Kingdom4
Iran4
Russia3
France2

Client strings seen on this port

User agentProbes
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.367
curl/7.29.02
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 ModatScanner/1.2 (+https://modat.io/)1
Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Mobile/12H321 OverDrive Media Console/3.3.11
Mozilla/5.0 (Unknown; Linux x86_64) AppleWebKit/538.1 (KHTML, like Gecko) PhantomJS/2.0.0 Safari/538.11

Port report

Port report

Loading