Port report
Port 4444
7-day honeypot probe activity targeting destination port 4444. First seen 2026-05-14, most recent 2026-05-21 11:53.
Events 7d
4,326
Source IPs
260
Source ASNs
46
Countries
20
Top source ASNs
Top source countries
- United States3,787
- Netherlands306
- Romania56
- Russia34
- South Africa33
- Portugal20
- Seychelles17
- Iran16
- Singapore14
- Hong Kong10
Top source IPs hitting port 4444
- 130.12.180.1113,270 eventsUS· AS202412 Omegatech LTD
- 94.102.49.155147 eventsNL· AS202425 IP Volume inc
- 80.82.77.202127 eventsNL· AS202425 IP Volume inc
- 3.129.187.3828 eventsUS· AS16509 Amazon.com, Inc.
- 18.116.101.22028 eventsUS· AS16509 Amazon.com, Inc.
- 80.94.95.22119 eventsRO· AS204428 SS-Net
- 216.180.246.14716 eventsUS· AS396982 Google LLC
- 152.53.81.2516 eventsUS· AS214996 netcup GmbH
- 167.94.146.5416 eventsUS· AS398705 Censys, Inc.
- 18.218.118.20315 eventsUS· AS16509 Amazon.com, Inc.
- 185.93.89.7914 eventsIR· AS213790 Limited Network LTD
- 93.152.208.4214 eventsZA· AS209854 Cyberzone S.A.
- 16.58.56.21412 eventsUS· AS16509 Amazon.com, Inc.
- 35.153.183.1712 eventsUS· AS14618 Amazon.com, Inc.
- 80.66.83.4312 eventsRU· AS216473 Bashinskii Vadim Ruslanovich
- 193.32.162.2812 eventsRO· AS47890 Unmanaged Ltd
- 44.220.188.13010 eventsUS· AS14618 Amazon.com, Inc.
- 44.220.185.5610 eventsUS· AS14618 Amazon.com, Inc.
- 66.132.172.1908 eventsUS· AS398324 Censys, Inc.
- 66.132.172.1408 eventsUS· AS398324 Censys, Inc.
- 167.94.146.498 eventsUS· AS398705 Censys, Inc.
- 66.132.172.1118 eventsUS· AS398324 Censys, Inc.
- 199.45.155.948 eventsUS· AS398722 Censys, Inc.
- 3.130.168.28 eventsUS· AS16509 Amazon.com, Inc.
- 109.105.211.28 eventsPT
Top user-agents on port 4444
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.363,270
- Python/3.10 aiohttp/3.8.4274
- Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)89
- visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.3671
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.3656
- Mozilla/5.0 zgrab/0.x53
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity35
- Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)16
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.20313
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.012
JSON: /api/port/4444. CSV: /api/port/4444?format=csv.