HoneyLabs
KEV
LookupKEVMCP
Data
The datasetDataset and methodCVEsCampaignsPayloadsPre-disclosureEmissions IndexPortsBlog
Integrations
OverviewFeeds
PricingDocs

Port 2443

HoneyLabs honeypots recorded 1,129 probes against destination port 2443 from 159 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 08:40, most recently 2026-11-15 08:16 (UTC).

What the sensors show

The sources sat in 23 networks across 17 countries. One address, 77.91.71.92, sent 30% of them. The largest source network was AS211486 (Alferov Aleksey Aleksandrovich), with 36% of the probes from 3 addresses. 6 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
77.91.71.92339Alferov Aleksey AleksandrovichRU
45.56.75.1838Akamai Connected CloudUS
24.199.88.12438DigitalOcean, LLCUS
45.33.54.11438Akamai Connected CloudUS
23.239.4.4638Akamai Connected CloudUS
77.91.71.9134Alferov Aleksey AleksandrovichRU
77.91.71.9034Alferov Aleksey AleksandrovichRU
35.206.151.19122Google LLCBE

Networks it comes from

ASNOrganisationProbesSource IPs
AS211486Alferov Aleksey Aleksandrovich4073
AS398324Censys, Inc.15223
AS15169Google LLC12017
AS63949Akamai Connected Cloud1165
AS14061DigitalOcean, LLC7415
AS396982Google LLC7444

Where it comes from

CountryProbes
Russia449
United States428
Belgium120
United Kingdom38
Singapore18
Kazakhstan15

Client strings seen on this port

User agentProbes
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36383
Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)111
Mozilla/5.0 (compatible)108
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.3667
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity40

Port report

Port report

Loading