HoneyLabs
KEV
LookupKEVMCP
Data
The datasetDataset and methodCVEsCampaignsPayloadsPre-disclosureEmissions IndexPortsBlog
Integrations
OverviewFeeds
PricingDocs

Port 4433

HoneyLabs honeypots recorded 3,816 probes against destination port 4433 from 311 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 08:32, most recently 2026-11-15 07:34 (UTC).

What the sensors show

The sources sat in 51 networks across 24 countries. One address, 80.94.95.211, sent 54% of them. The largest source network was AS204428 (SS-Net), with 55% of the probes from 2 addresses. 8 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
80.94.95.2112,072SS-NetRO
77.91.71.92255Alferov Aleksey AleksandrovichRU
185.136.15.81204AO ALMAZKZ
185.136.15.80102AO ALMAZKZ
185.136.15.82102AO ALMAZKZ
185.136.15.267AO ALMAZKZ
77.91.71.9034Alferov Aleksey AleksandrovichRU
77.91.71.9134Alferov Aleksey AleksandrovichRU

Networks it comes from

ASNOrganisationProbesSource IPs
AS204428SS-Net2,0892
AS210328AO ALMAZ4856
AS211486Alferov Aleksey Aleksandrovich3233
AS6939Hurricane Electric LLC9760
AS398324Censys, Inc.719
AS398705Censys, Inc.646

Where it comes from

CountryProbes
Romania2,123
United States575
Kazakhstan485
Russia366
United Kingdom66
Hong Kong37

Client strings seen on this port

User agentProbes
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36688
Mozilla/5.0 (Linux; U; Android 4.2.2; nl-nl; GT-P5110 Build/JDQ39) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Safari/534.30259
Opera/9.60 (X11; Linux x86_64; U)259
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1;MyIE2; .NET CLR 2.0.50727; .NET CLR 1.1.4322)259
Mozilla/5.0 (Linux; Android 6.0.1; SAMSUNG SM-J700T1 Build/MMB29K) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/4.0 Chrome/44.0.2403.133 Mobile Safari/537.36259

Port report

Port report

Loading