TCP 5555
Synopsis
- Android Debug Bridge (ADB) uses TCP 5555 for network debugging; it’s used on Android phones/tablets, Android TV and Amazon Fire TV devices, and by emulators such as the Android Studio Emulator, Genymotion, and BlueStacks.
- When exposed to the internet, ADB on 5555 has been widely abused by attackers (e.g., ADB.Miner cryptominer worm and Satori/Mirai variants) to gain shell access and deploy malware.
- HPE Data Protector (formerly HP Data Protector) uses TCP 5555 for its “Inet” client service that receives backup/restore commands from the backup server on Windows and Unix systems.
- The Data Protector Inet service on 5555 has had multiple remote code execution vulnerabilities in older versions and is a known target when left accessible.
Observed activity
Last 30 days
Detailed chart