Port 446

HoneyLabs honeypots recorded 2,324 probes against destination port 446 from 32 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 13:43, most recently 2026-11-15 00:17 (UTC).

What the sensors show

The sources sat in 12 networks across 8 countries. One address, 80.94.95.211, sent 89% of them. The largest source network was AS204428 (SS-Net), with 89% of the probes from 1 address. 15 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
80.94.95.2112,072SS-NetRO
165.22.140.15746DigitalOcean, LLCUS
66.228.43.6246Akamai Connected CloudUS
68.183.163.5046DigitalOcean, LLCUS
45.56.100.24746Akamai Connected CloudUS
185.136.15.214AO ALMAZKZ
148.153.56.17412CDS Global Cloud Co., LtdUS
87.251.64.1326Shesternin Vladimir AnatolievichRU

Networks it comes from

ASNOrganisationProbesSource IPs
AS204428SS-Net2,0721
AS63949Akamai Connected Cloud955
AS14061DigitalOcean, LLC922
AS210328AO ALMAZ152
AS212835Shesternin Vladimir Anatolievich143
AS63199CDS Global Cloud Co., Ltd121

Where it comes from

CountryProbes
Romania2,072
United States210
Kazakhstan15
Russia14
China7
France4

Client strings seen on this port

User agentProbes
Mozilla/5.0 (Linux; Android 4.4.2; en-us; SAMSUNG-SGH-I257 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Version/1.5 Chrome/28.0.1500.94 Mobile Safari/537.36259
Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_8; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.203.0 Safari/532.0259
Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)259
Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_2; nb-no) AppleWebKit/533.16 (KHTML, like Gecko) Version/4.1 Safari/533.16259
Mozilla/5.0 (Windows NT 6.3; WOW64; rv:34.0) Gecko/20100101 Firefox/34.0259

Port report

Port report

Loading