Port 1010

HoneyLabs honeypots recorded 102 probes against destination port 1010 from 52 distinct source IP addresses in the last 7 days.

First observed 2026-11-01 18:30, most recently 2026-11-08 14:20 (UTC).

What the sensors show

The sources sat in 17 networks across 12 countries. No single address sent more than 8% of them. The largest source network was AS396982 (Google LLC), with 17% of the probes from 17 addresses. 3 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
193.8.186.298PebbleHost LtdSG
93.174.93.128IP Volume incNL
165.154.138.858UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDDE
89.248.172.337IP Volume incNL
45.156.129.807Sistemas Informaticos, S.A.PT
193.8.186.316PebbleHost LtdSG
192.253.248.2513Limited Network LTDNL
43.106.80.213Alibaba (US) Technology Co., Ltd.SG

Networks it comes from

ASNOrganisationProbesSource IPs
AS396982Google LLC1717
AS202425IP Volume inc152
AS201002PebbleHost Ltd142
AS45102Alibaba (US) Technology Co., Ltd.115
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED81
AS211680Sistemas Informaticos, S.A.82

Where it comes from

CountryProbes
Singapore20
The Netherlands18
United States18
France10
Germany10
Portugal8

Client strings seen on this port

User agentProbes
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity17
Python/3.10 aiohttp/3.8.415
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.3614
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.365

Port report

Port report

Loading