Port 445 (SMB)
HoneyLabs honeypots recorded 17,555 probes against destination port 445 (SMB) from 1,925 distinct source IP addresses in the last 7 days.
First observed 2026-11-08 08:32, most recently 2026-11-15 08:26 (UTC).
What the sensors show
The sources sat in 655 networks across 96 countries. No single address sent more than 5% of them. The largest source network was AS327934 (SOCIETE NATIONALE DES TELECOMMUNICATIONS (Tunisie Telecom)), with 6% of the probes from 3 addresses. None of the 25 busiest addresses is a recognised research scanner.
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 102.30.46.228 | 795 | SOCIETE NATIONALE DES TELECOMMUNICATIONS (Tunisie Telecom) | TN |
| 2.181.14.127 | 534 | Iran Telecommunication Company PJS | IR |
| 102.159.117.12 | 399 | TOPNET | TN |
| 171.221.160.175 | 362 | Chinanet | CN |
| 197.2.24.56 | 247 | TOPNET | TN |
| 197.0.71.1 | 223 | TOPNET | TN |
| 102.152.45.61 | 165 | SOCIETE NATIONALE DES TELECOMMUNICATIONS (Tunisie Telecom) | TN |
| 77.91.71.25 | 118 | Alferov Aleksey Aleksandrovich | RU |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS327934 | SOCIETE NATIONALE DES TELECOMMUNICATIONS (Tunisie Telecom) | 976 | 3 |
| AS37705 | TOPNET | 871 | 4 |
| AS12389 | Rostelecom | 697 | 77 |
| AS4134 | Chinanet | 674 | 41 |
| AS58224 | Iran Telecommunication Company PJS | 638 | 20 |
| AS7713 | PT Telekomunikasi Indonesia | 632 | 75 |
Where it comes from
| Country | Probes |
|---|---|
| Russia | 2,007 |
| Tunisia | 2,001 |
| Indonesia | 1,273 |
| India | 1,259 |
| China | 1,112 |
| Vietnam | 943 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| Go-http-client/1.1 | 153 |
| Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36 | 143 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.61 Safari/537.36 | 90 |
| Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) | 72 |
| visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36 | 46 |
Port report
Port report
Loading