Port 943

HoneyLabs honeypots recorded 138 probes against destination port 943 from 83 distinct source IP addresses in the last 7 days.

First observed 2026-10-28 19:02, most recently 2026-11-04 12:35 (UTC).

What the sensors show

The sources sat in 11 networks across 6 countries. No single address sent more than 12% of them. The largest source network was AS396982 (Google LLC), with 54% of the probes from 58 addresses. 7 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
216.180.246.4216Google LLCUS
66.132.195.1218Censys, Inc.US
66.132.159.918Censys, Inc.US
66.132.195.1228Censys, Inc.US
66.132.172.1408Censys, Inc.US
66.132.172.1068Censys, Inc.US
205.210.31.942Google LLCUS
47.251.140.22Alibaba (US) Technology Co., Ltd.US

Networks it comes from

ASNOrganisationProbesSource IPs
AS396982Google LLC7458
AS398324Censys, Inc.405
AS213412ONYPHE SAS88
AS4134Chinanet43
AS45102Alibaba (US) Technology Co., Ltd.42
AS210976Timeweb, LLP21

Where it comes from

CountryProbes
United States128
China4
Russia3
Canada1
Slovenia1
Bulgaria1

Client strings seen on this port

User agentProbes
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity58
Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)30
Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)16
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.364

Port report

Port report

Loading live data…