Port 848

HoneyLabs honeypots recorded 24 probes against destination port 848 from 14 distinct source IP addresses in the last 7 days.

First observed 2026-11-05 02:17, most recently 2026-11-11 06:08 (UTC).

What the sensors show

The sources sat in 8 networks across 7 countries. One address, 167.94.146.63, sent 33% of them. The largest source network was AS398705 (Censys, Inc.), with 33% of the probes from 1 address. 3 of the 14 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
167.94.146.638Censys, Inc.US
109.236.48.2233CAFER ESERTR
45.141.233.162MEVSPACE sp. z o.o.BG
31.57.37.551VPS Dedicated LLCAE
185.224.129.1101SpectraIP B.V.NL
147.185.133.1181Google LLCUS
104.152.52.2341Rethem Hosting LLCUS
35.203.211.2011Google LLCGB

Networks it comes from

ASNOrganisationProbesSource IPs
AS398705Censys, Inc.81
AS396982Google LLC66
AS215391CAFER ESER31
AS201814MEVSPACE sp. z o.o.21
AS197769VPS Dedicated LLC22
AS209334Modat B.V.11

Where it comes from

CountryProbes
United States12
United Kingdom3
Türkiye3
Bulgaria2
United Arab Emirates2
France1

Client strings seen on this port

User agentProbes
Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)6
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity6
curl/7.61.11

Port report

Port report

Loading