Port 55552

HoneyLabs honeypots recorded 23 probes against destination port 55552 from 11 distinct source IP addresses in the last 7 days.

First observed 2026-11-09 08:20, most recently 2026-11-15 17:04 (UTC).

What the sensors show

The sources sat in 5 networks across 6 countries. One address, 101.36.114.222, sent 35% of them. The largest source network was AS135377 (UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED), with 35% of the probes from 1 address. None of the 11 busiest addresses is a recognised research scanner.

Most active source addresses

Source IPProbesNetworkCountry
101.36.114.2228UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDKR
36.156.22.26China Mobile communications corporationCN
204.76.203.2121Pfcloud UG (haftungsbeschrankt)NL
31.57.37.551VPS Dedicated LLCAE
147.185.132.681Google LLCUS
204.76.203.2141Pfcloud UG (haftungsbeschrankt)NL
204.76.203.2131Pfcloud UG (haftungsbeschrankt)NL
35.203.210.2341Google LLCGB

Networks it comes from

ASNOrganisationProbesSource IPs
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED81
AS56046China Mobile communications corporation61
AS51396Pfcloud UG (haftungsbeschrankt)44
AS396982Google LLC44
AS197769VPS Dedicated LLC11

Where it comes from

CountryProbes
South Korea8
China6
The Netherlands4
United States2
United Kingdom2
United Arab Emirates1

Client strings seen on this port

User agentProbes
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4 240.111 Safari/537.365
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.04
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity4
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.111

Port report

Port report

Loading