Port 4449

HoneyLabs honeypots recorded 191 probes against destination port 4449 from 40 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 11:49, most recently 2026-11-15 06:13 (UTC).

What the sensors show

The sources sat in 14 networks across 9 countries. No single address sent more than 21% of them. The largest source network was AS16509 (Amazon.com, Inc.), with 54% of the probes from 4 addresses. 5 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
18.116.101.22040Amazon.com, Inc.US
18.218.118.20338Amazon.com, Inc.US
3.131.220.12115Amazon.com, Inc.US
185.136.15.213AO ALMAZKZ
3.129.187.3811Amazon.com, Inc.US
66.132.172.2098Censys, Inc.US
152.32.172.1086UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK
67.205.185.2456DigitalOcean, LLCUS

Networks it comes from

ASNOrganisationProbesSource IPs
AS16509Amazon.com, Inc.1044
AS14061DigitalOcean, LLC2812
AS210328AO ALMAZ152
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED102
AS213412ONYPHE SAS88
AS398324Censys, Inc.81

Where it comes from

CountryProbes
United States153
Kazakhstan15
Hong Kong6
China6
Romania4
India2

Client strings seen on this port

User agentProbes
visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.3675
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.3614
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.3613
Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.08
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08

Port report

Port report

Loading