Port 443 (HTTPS)

HoneyLabs honeypots recorded 22,000 probes against destination port 443 (HTTPS) from 1,350 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 08:32, most recently 2026-11-15 08:29 (UTC).

What the sensors show

The sources sat in 188 networks across 56 countries. One address, 85.155.14.31, sent 30% of them. The largest source network was AS199457 (SolidCore Hosting LTD), with 35% of the probes from 7 addresses. None of the 25 busiest addresses is a recognised research scanner.

Most active source addresses

Source IPProbesNetworkCountry
85.155.14.316,622SolidCore Hosting LTDDE
104.22.72.16548Cloudflare, Inc.US
45.61.182.56532RouterHosting LLCUS
45.148.10.5513Techoff Srv LimitedNL
195.178.110.159461Techoff Srv LimitedBG
95.214.53.196440MEVSPACE sp. z o.o.PL
85.155.14.60377SolidCore Hosting LTDDE
194.180.49.41373MEVSPACE sp. z o.o.BG

Networks it comes from

ASNOrganisationProbesSource IPs
AS199457SolidCore Hosting LTD7,6667
AS13335Cloudflare, Inc.1,54177
AS396982Google LLC1,283100
AS48090Techoff Srv Limited1,2699
AS201814MEVSPACE sp. z o.o.8193
AS14956RouterHosting LLC5906

Where it comes from

CountryProbes
Germany8,469
United States5,058
The Netherlands1,532
Bulgaria1,355
Canada507
Hong Kong498

Client strings seen on this port

User agentProbes
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.361,301
Mozilla/5.0 (X11; Linux x86_64; rv:126.0) Gecko/20100101 Firefox/126.0998
Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36976
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0975
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36974

Port report

Port report

Loading