Port 50443

HoneyLabs honeypots recorded 75 probes against destination port 50443 from 52 distinct source IP addresses in the last 7 days.

First observed 2026-11-01 19:12, most recently 2026-11-08 14:06 (UTC).

What the sensors show

The sources sat in 14 networks across 10 countries. No single address sent more than 11% of them. The largest source network was AS396982 (Google LLC), with 24% of the probes from 18 addresses. 4 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
93.123.109.1238Techoff Srv LimitedBG
45.74.28.1182SULAVI LTDUS
47.84.136.872Alibaba (US) Technology Co., Ltd.SG
45.74.28.1262SULAVI LTDUS
183.204.62.1212China Mobile Communications Group Co., Ltd.CN
78.128.114.662Tamatiya EOODBG
87.251.64.1312Shesternin Vladimir AnatolievichRU
45.74.28.1052SULAVI LTDUS

Networks it comes from

ASNOrganisationProbesSource IPs
AS396982Google LLC1818
AS219326SULAVI LTD126
AS45102Alibaba (US) Technology Co., Ltd.116
AS213412ONYPHE SAS1010
AS48090Techoff Srv Limited81
AS9808China Mobile Communications Group Co., Ltd.32

Where it comes from

CountryProbes
United States36
Singapore10
Bulgaria10
United Kingdom6
China5
Japan2

Client strings seen on this port

User agentProbes
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity18
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3612
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.010
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.367
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.366

Port report

Port report

Loading