Port 1025

HoneyLabs honeypots recorded 509 probes against destination port 1025 from 83 distinct source IP addresses in the last 7 days.

First observed 2026-11-09 00:46, most recently 2026-11-15 20:24 (UTC).

What the sensors show

The sources sat in 27 networks across 20 countries. No single address sent more than 11% of them. The largest source network was AS14061 (DigitalOcean, LLC), with 29% of the probes from 4 addresses. 12 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
134.195.154.17156GLOBALHOSTINGSOLUTIONS INCUS
137.184.26.15847DigitalOcean, LLCUS
96.126.102.3747Akamai Connected CloudUS
165.22.167.18347DigitalOcean, LLCUS
134.209.52.7147DigitalOcean, LLCUS
18.116.101.22024Amazon.com, Inc.US
3.129.187.3817Amazon.com, Inc.US
18.218.118.20316Amazon.com, Inc.US

Networks it comes from

ASNOrganisationProbesSource IPs
AS14061DigitalOcean, LLC1474
AS16509Amazon.com, Inc.694
AS46918GLOBALHOSTINGSOLUTIONS INC561
AS63949Akamai Connected Cloud493
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED406
AS396982Google LLC3419

Where it comes from

CountryProbes
United States380
Hong Kong21
Russia19
Portugal16
Kazakhstan12
United Arab Emirates10

Client strings seen on this port

User agentProbes
visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.3650
Python/3.12 aiohttp/3.14.529
Mozilla/5.0 (compatible; scanner)27
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.3617
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity17

Port report

Port report

Loading