Port 10019

HoneyLabs honeypots recorded 61 probes against destination port 10019 from 39 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 21:11, most recently 2026-11-15 16:21 (UTC).

What the sensors show

The sources sat in 10 networks across 8 countries. No single address sent more than 13% of them. The largest source network was AS396982 (Google LLC), with 33% of the probes from 17 addresses. 6 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
167.94.146.618Censys, Inc.US
31.57.216.396VPS Dedicated LLCAE
204.76.203.2213Pfcloud UG (haftungsbeschrankt)NL
162.216.150.1802Google LLCUS
204.76.203.2222Pfcloud UG (haftungsbeschrankt)NL
8.211.7.2082Alibaba (US) Technology Co., Ltd.DE
204.76.203.2132Pfcloud UG (haftungsbeschrankt)NL
35.203.210.2362Google LLCGB

Networks it comes from

ASNOrganisationProbesSource IPs
AS396982Google LLC2017
AS51396Pfcloud UG (haftungsbeschrankt)105
AS398705Censys, Inc.81
AS213412ONYPHE SAS88
AS197769VPS Dedicated LLC61
AS9808China Mobile Communications Group Co., Ltd.33

Where it comes from

CountryProbes
United States24
The Netherlands12
France9
United Arab Emirates6
United Kingdom4
China3

Client strings seen on this port

User agentProbes
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity20
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)6
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.363
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 ModatScanner/1.2 (+https://modat.io/)2

Port report

Port report

Loading