Port 1002
HoneyLabs honeypots recorded 70 probes against destination port 1002 from 26 distinct source IP addresses in the last 7 days.
First observed 2026-11-01 01:12, most recently 2026-11-06 22:16 (UTC).
What the sensors show
The sources sat in 12 networks across 10 countries. No single address sent more than 17% of them. The largest source network was AS396982 (Google LLC), with 21% of the probes from 12 addresses. 2 of the 25 busiest addresses are recognised research scanners.
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 185.136.15.153 | 12 | AO ALMAZ | KZ |
| 121.43.118.248 | 10 | Hangzhou Alibaba Advertising Co.,Ltd. | CN |
| 176.120.22.61 | 9 | Proton66 OOO | RU |
| 167.71.79.124 | 6 | DigitalOcean, LLC | NL |
| 35.203.211.60 | 3 | Google LLC | GB |
| 93.123.109.123 | 3 | Techoff Srv Limited | BG |
| 149.36.51.4 | 3 | Datacamp Limited | NL |
| 213.177.179.195 | 3 | Feo Prest SRL | IR |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS396982 | Google LLC | 15 | 12 |
| AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | 12 | 2 |
| AS210328 | AO ALMAZ | 12 | 1 |
| AS198953 | Proton66 OOO | 9 | 1 |
| AS14061 | DigitalOcean, LLC | 6 | 1 |
| AS63949 | Akamai Connected Cloud | 3 | 3 |
Where it comes from
| Country | Probes |
|---|---|
| China | 13 |
| Kazakhstan | 12 |
| United States | 12 |
| The Netherlands | 9 |
| Russia | 9 |
| United Kingdom | 6 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity | 15 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 | 5 |
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html) | 4 |
| Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 | 3 |
| Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/3.0.195.4 Safari/532.0 | 3 |
Port report
Port report
Loading