Port 5555

HoneyLabs honeypots recorded 2,135 probes against destination port 5555 from 270 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 08:53, most recently 2026-11-15 08:10 (UTC).

What the sensors show

The sources sat in 94 networks across 36 countries. One address, 185.177.72.64, sent 36% of them. The largest source network was AS211590 (Bucklog SARL), with 36% of the probes from 1 address. 6 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
185.177.72.64762Bucklog SARLFR
67.213.122.211362Latitude.shSG
168.228.47.17956Udasha S.A.US
154.80.128.12453Vpsvault.host LtdHK
154.80.128.12149Vpsvault.host LtdHK
157.230.165.12647DigitalOcean, LLCUS
104.248.236.9247DigitalOcean, LLCUS
157.230.225.6147DigitalOcean, LLCUS

Networks it comes from

ASNOrganisationProbesSource IPs
AS211590Bucklog SARL7621
AS396356Latitude.sh3621
AS14061DigitalOcean, LLC18718
AS15169Google LLC10813
AS215925Vpsvault.host Ltd1022
AS202425IP Volume inc935

Where it comes from

CountryProbes
France787
United States402
Singapore375
Hong Kong110
Belgium109
The Netherlands109

Client strings seen on this port

User agentProbes
Mozilla/5.0 (Linux; Android 4.3; Nexus 10 Build/JSS15Q) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2307.2 Safari/537.36127
Mozilla/5.0 (Linux; Android 6.0; LG-D855 Build/MRA58K; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/55.0.2883.91 Mobile Safari/537.36127
Mozilla/5.0 (Linux; Android 4.2.2; en-us; SAMSUNG SCH-I545 Build/JDQ39) AppleWebKit/535.19 (KHTML, like Gecko) Version/1.0 Chrome/18.0.1025.308 Mobile Safari/535.19127
Mozilla/5.0 (Linux; U; Android 4.2.2; en-gb; Vodafone 785 Build/JDQ39) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.2 Mobile Safari/534.30 SVN/120HEG1127
Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; NP07; NP07)127

Port report

Port report

Loading