HoneyLabs
KEV
LookupKEVMCP
Data
The datasetDataset and methodCVEsCampaignsPayloadsPre-disclosureEmissions IndexPortsBlog
Integrations
OverviewFeeds
PricingDocs

Port 40443

HoneyLabs honeypots recorded 912 probes against destination port 40443 from 46 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 10:49, most recently 2026-11-15 07:01 (UTC).

What the sensors show

The sources sat in 11 networks across 10 countries. One address, 185.136.15.80, sent 34% of them. The largest source network was AS210328 (AO ALMAZ), with 46% of the probes from 3 addresses. 3 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
185.136.15.80306AO ALMAZKZ
138.226.239.91306HOSTRAMGB
138.226.239.90102HOSTRAMGB
185.136.15.82102AO ALMAZKZ
193.8.186.2914PebbleHost LtdSG
185.136.15.213AO ALMAZKZ
87.251.64.1286Shesternin Vladimir AnatolievichRU
87.251.64.1264Shesternin Vladimir AnatolievichRU

Networks it comes from

ASNOrganisationProbesSource IPs
AS210328AO ALMAZ4213
AS403092HOSTRAM4082
AS212835Shesternin Vladimir Anatolievich225
AS396982Google LLC2018
AS201002PebbleHost Ltd182
AS47890Unmanaged Ltd74

Where it comes from

CountryProbes
Kazakhstan421
United Kingdom421
Russia22
Singapore18
United States12
Romania7

Client strings seen on this port

User agentProbes
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36768
Go-http-client/1.148
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.3641
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity20
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.3612

Port report

Port report

Loading