Port 4431

HoneyLabs honeypots recorded 237 probes against destination port 4431 from 34 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 08:36, most recently 2026-11-14 14:55 (UTC).

What the sensors show

The sources sat in 12 networks across 8 countries. One address, 77.91.71.25, sent 50% of them. The largest source network was AS211486 (Alferov Aleksey Aleksandrovich), with 57% of the probes from 2 addresses. 10 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
77.91.71.25119Alferov Aleksey AleksandrovichRU
77.91.71.2417Alferov Aleksey AleksandrovichRU
185.136.15.8017AO ALMAZKZ
185.136.15.216AO ALMAZKZ
193.8.186.3110PebbleHost LtdSG
66.132.172.2158Censys, Inc.US
66.132.172.1857Censys, Inc.US
204.76.203.2214Pfcloud UG (haftungsbeschrankt)NL

Networks it comes from

ASNOrganisationProbesSource IPs
AS211486Alferov Aleksey Aleksandrovich1362
AS210328AO ALMAZ332
AS398324Censys, Inc.183
AS51396Pfcloud UG (haftungsbeschrankt)147
AS201002PebbleHost Ltd142
AS213412ONYPHE SAS88

Where it comes from

CountryProbes
Russia140
Kazakhstan33
United States21
The Netherlands16
Singapore14
France9

Client strings seen on this port

User agentProbes
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36144
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.3618
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.3614
Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)11
Go-http-client/1.19

Port report

Port report

Loading