Port 1000

HoneyLabs honeypots recorded 700 probes against destination port 1000 from 303 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 08:57, most recently 2026-11-15 07:26 (UTC).

What the sensors show

The sources sat in 33 networks across 17 countries. No single address sent more than 8% of them. The largest source network was AS25369 (Hydra Communications Ltd), with 26% of the probes from 165 addresses. 13 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
134.195.155.24256GLOBALHOSTINGSOLUTIONS INCUS
192.155.87.5446Akamai Connected CloudUS
45.56.100.17746Akamai Connected CloudUS
165.227.84.18146DigitalOcean, LLCUS
18.116.101.22028Amazon.com, Inc.US
216.180.246.10710Google LLCUS
3.129.187.389Amazon.com, Inc.US
66.132.159.898Censys, Inc.US

Networks it comes from

ASNOrganisationProbesSource IPs
AS25369Hydra Communications Ltd182165
AS63949Akamai Connected Cloud944
AS14061DigitalOcean, LLC7612
AS46918GLOBALHOSTINGSOLUTIONS INC561
AS16509Amazon.com, Inc.495
AS398324Censys, Inc.497

Where it comes from

CountryProbes
United States417
United Kingdom90
Germany70
The Netherlands63
Romania15
Hong Kong10

Client strings seen on this port

User agentProbes
Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)175
Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)36
visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.3636
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity35
Python/3.12 aiohttp/3.14.529

Port report

Port report

Loading