Port 4043

HoneyLabs honeypots recorded 88 probes against destination port 4043 from 39 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 16:28, most recently 2026-11-15 12:35 (UTC).

What the sensors show

The sources sat in 12 networks across 10 countries. No single address sent more than 14% of them. The largest source network was AS135377 (UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED), with 34% of the probes from 4 addresses. 4 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
154.197.56.16312UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDSC
165.154.163.106UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDUS
150.107.36.2366UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK
36.156.22.26China Mobile communications corporationCN
148.153.56.1746CDS Global Cloud Co., LtdUS
150.107.38.2516UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK
148.153.188.2466CDS Global Cloud Co., LtdUS
204.76.203.2122Pfcloud UG (haftungsbeschrankt)NL

Networks it comes from

ASNOrganisationProbesSource IPs
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED304
AS396982Google LLC1914
AS63199CDS Global Cloud Co., Ltd122
AS213412ONYPHE SAS88
AS56046China Mobile communications corporation61
AS51396Pfcloud UG (haftungsbeschrankt)43

Where it comes from

CountryProbes
United States44
Seychelles12
Hong Kong12
China6
The Netherlands6
United Kingdom2

Client strings seen on this port

User agentProbes
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4 240.111 Safari/537.3640
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity19
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.362
curl/7.64.11

Port report

Port report

Loading