HoneyLabs
LookupMCP
Data
The datasetDataset and methodCVEsCampaignsPayloadsPre-disclosureEmissions IndexPortsBlog
Integrations
OverviewFeeds
PricingDocs

Port 5533

HoneyLabs honeypots recorded 50 probes against destination port 5533 from 27 distinct source IP addresses in the last 7 days.

First observed 2026-10-28 10:28, most recently 2026-11-03 19:26 (UTC).

What the sensors show

The sources sat in 8 networks across 6 countries. No single address sent more than 20% of them. The largest source network was AS212835 (Shesternin Vladimir Anatolievich), with 40% of the probes from 4 addresses. 5 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
87.251.64.12610Shesternin Vladimir AnatolievichRU
87.251.64.1324Shesternin Vladimir AnatolievichRU
87.251.64.1314Shesternin Vladimir AnatolievichRU
192.253.248.2513Limited Network LTDNL
94.26.68.902MEVSPACE sp. z o.o.BG
162.216.150.1932Google LLCUS
35.203.211.112Google LLCGB
87.251.64.1282Shesternin Vladimir AnatolievichRU

Networks it comes from

ASNOrganisationProbesSource IPs
AS212835Shesternin Vladimir Anatolievich204
AS396982Google LLC1714
AS42969Alpha Strike Labs GmbH44
AS213790Limited Network LTD31
AS215778Alpha Strike Labs GmbH21
AS201814MEVSPACE sp. z o.o.21

Where it comes from

CountryProbes
Russia20
United States12
United Kingdom10
The Netherlands4
Hong Kong2
Bulgaria2

Client strings seen on this port

User agentProbes
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.3620
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity17
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.06
Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.361

Port report

Port report

Loading live data…