Port 65443

HoneyLabs honeypots recorded 413 probes against destination port 65443 from 91 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 12:18, most recently 2026-11-15 07:23 (UTC).

What the sensors show

The sources sat in 9 networks across 7 countries. No single address sent more than 9% of them. The largest source network was AS6939 (Hurricane Electric LLC), with 60% of the probes from 39 addresses. 21 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
216.218.206.6739Hurricane Electric LLCUS
185.136.15.229AO ALMAZKZ
184.105.139.6826Hurricane Electric LLCUS
74.82.47.226Hurricane Electric LLCUS
199.165.159.3318The Shadowserver Foundation, Inc.US
65.49.1.14217Hurricane Electric LLCUS
65.49.20.6913Hurricane Electric LLCUS
184.105.139.6913Hurricane Electric LLCUS

Networks it comes from

ASNOrganisationProbesSource IPs
AS6939Hurricane Electric LLC24739
AS22168The Shadowserver Foundation, Inc.10437
AS210328AO ALMAZ291
AS201002PebbleHost Ltd122
AS212835Shesternin Vladimir Anatolievich123
AS42969Alpha Strike Labs GmbH44

Where it comes from

CountryProbes
United States355
Kazakhstan29
Russia12
Singapore12
Germany2
Hong Kong2

Client strings seen on this port

User agentProbes
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.3632
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.3628
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.3611
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.3610
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.84 Safari/537.369

Port report

Port report

Loading