Port 1444

HoneyLabs honeypots recorded 272 probes against destination port 1444 from 50 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 09:09, most recently 2026-11-15 03:13 (UTC).

What the sensors show

The sources sat in 18 networks across 10 countries. No single address sent more than 17% of them. The largest source network was AS14061 (DigitalOcean, LLC), with 34% of the probes from 2 addresses. 12 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
157.230.136.7746DigitalOcean, LLCUS
45.79.207.22346Akamai Connected CloudUS
161.35.123.10946DigitalOcean, LLCUS
104.237.154.5846Akamai Connected CloudUS
176.120.22.6111Proton66 OOORU
118.193.59.1947UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDDE
87.251.64.1266Shesternin Vladimir AnatolievichRU
185.224.129.1106SpectraIP B.V.NL

Networks it comes from

ASNOrganisationProbesSource IPs
AS14061DigitalOcean, LLC922
AS63949Akamai Connected Cloud922
AS396982Google LLC1414
AS212835Shesternin Vladimir Anatolievich143
AS198953Proton66 OOO111
AS213412ONYPHE SAS87

Where it comes from

CountryProbes
United States208
Russia31
Germany11
The Netherlands10
United Kingdom5
Hong Kong2

Client strings seen on this port

User agentProbes
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity14
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.3614
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.08
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.190 Safari/537.364

Port report

Port report

Loading