Port 556

HoneyLabs honeypots recorded 48 probes against destination port 556 from 19 distinct source IP addresses in the last 7 days.

First observed 2026-11-09 07:52, most recently 2026-11-15 02:42 (UTC).

What the sensors show

The sources sat in 10 networks across 8 countries. One address, 185.136.15.2, sent 29% of them. The largest source network was AS210328 (AO ALMAZ), with 31% of the probes from 2 addresses. 10 of the 19 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
185.136.15.214AO ALMAZKZ
154.197.56.1636UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDSC
206.81.26.2236DigitalOcean, LLCDE
45.141.233.166MEVSPACE sp. z o.o.BG
195.184.76.312ONYPHE SASUS
102.220.162.1571VPS Dedicated LLCSI
195.184.76.1051ONYPHE SASUS
104.152.52.1121Rethem Hosting LLCUS

Networks it comes from

ASNOrganisationProbesSource IPs
AS210328AO ALMAZ152
AS213412ONYPHE SAS87
AS201814MEVSPACE sp. z o.o.61
AS14061DigitalOcean, LLC61
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED61
AS14987Rethem Hosting LLC22

Where it comes from

CountryProbes
Kazakhstan15
United States11
Bulgaria6
Seychelles6
Germany6
Romania2

Client strings seen on this port

User agentProbes
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.3613
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4 240.111 Safari/537.365
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.365
curl/7.61.12

Port report

Port report

Loading