Port 1050

HoneyLabs honeypots recorded 246 probes against destination port 1050 from 46 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 09:27, most recently 2026-11-15 06:44 (UTC).

What the sensors show

The sources sat in 13 networks across 12 countries. No single address sent more than 19% of them. The largest source network was AS63949 (Akamai Connected Cloud), with 57% of the probes from 4 addresses. 11 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
204.48.20.22246DigitalOcean, LLCUS
172.104.27.17646Akamai Connected CloudUS
45.33.54.20846Akamai Connected CloudUS
173.255.226.19446Akamai Connected CloudUS
165.154.164.217UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDDE
165.154.100.587UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDPH
204.76.203.2123Pfcloud UG (haftungsbeschrankt)NL
85.217.149.252Modat B.V.CA

Networks it comes from

ASNOrganisationProbesSource IPs
AS63949Akamai Connected Cloud1394
AS14061DigitalOcean, LLC461
AS396982Google LLC1818
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED142
AS213412ONYPHE SAS87
AS51396Pfcloud UG (haftungsbeschrankt)63

Where it comes from

CountryProbes
United States194
France10
United Kingdom9
Germany7
Philippines7
The Netherlands6

Client strings seen on this port

User agentProbes
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity17
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.08
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 ModatScanner/1.2 (+https://modat.io/)4
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.112

Port report

Port report

Loading