Port 5552

HoneyLabs honeypots recorded 121 probes against destination port 5552 from 48 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 10:29, most recently 2026-11-14 20:55 (UTC).

What the sensors show

The sources sat in 7 networks across 3 countries. One address, 66.240.205.34, sent 26% of them. The largest source network was AS15169 (Google LLC), with 55% of the probes from 34 addresses. 1 of the 25 busiest addresses is a recognised research scanner.

Most active source addresses

Source IPProbesNetworkCountry
66.240.205.3432CariNet, Inc.US
35.210.122.254Google LLCBE
35.210.12.1364Google LLCBE
35.210.41.2094Google LLCBE
35.210.58.1433Google LLCBE
35.206.163.2513Google LLCBE
35.210.253.2363Google LLCBE
35.210.10.1173Google LLCBE

Networks it comes from

ASNOrganisationProbesSource IPs
AS15169Google LLC6734
AS10439CariNet, Inc.321
AS14061DigitalOcean, LLC147
AS45102Alibaba (US) Technology Co., Ltd.43
AS9808China Mobile Communications Group Co., Ltd.11
AS63949Akamai Connected Cloud11

Where it comes from

CountryProbes
Belgium67
United States53
China1

Client strings seen on this port

User agentProbes
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.3625
Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.08
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.368
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.363
curl/7.64.11

Port report

Port report

Loading