Port 29443

HoneyLabs honeypots recorded 102 probes against destination port 29443 from 28 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 10:48, most recently 2026-11-15 04:50 (UTC).

What the sensors show

The sources sat in 7 networks across 7 countries. No single address sent more than 16% of them. The largest source network was AS212835 (Shesternin Vladimir Anatolievich), with 29% of the probes from 5 addresses. 1 of the 25 busiest addresses is a recognised research scanner.

Most active source addresses

Source IPProbesNetworkCountry
193.8.186.3116PebbleHost LtdSG
193.8.186.2912PebbleHost LtdSG
87.251.64.13212Shesternin Vladimir AnatolievichRU
87.251.64.1278Shesternin Vladimir AnatolievichRU
167.94.146.588Censys, Inc.US
118.193.72.1877UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDPH
31.57.216.406VPS Dedicated LLCAE
178.159.37.704Slobozhenyuk B.Y. PEUA

Networks it comes from

ASNOrganisationProbesSource IPs
AS212835Shesternin Vladimir Anatolievich305
AS201002PebbleHost Ltd282
AS396982Google LLC1917
AS398705Censys, Inc.81
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED71
AS197769VPS Dedicated LLC61

Where it comes from

CountryProbes
Russia30
Singapore28
United States21
Philippines7
United Kingdom6
United Arab Emirates6

Client strings seen on this port

User agentProbes
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.3658
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity19
Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)6
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.04
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.111

Port report

Port report

Loading