Port 10566

HoneyLabs honeypots recorded 75 probes against destination port 10566 from 10 distinct source IP addresses in the last 7 days.

First observed 2026-11-09 04:14, most recently 2026-11-13 21:43 (UTC).

What the sensors show

The sources sat in 6 networks across 4 countries. One address, 95.164.128.204, sent 75% of them. The largest source network was AS54903 (globalroutesolutions), with 75% of the probes from 1 address. None of the 10 busiest addresses is a recognised research scanner.

Most active source addresses

Source IPProbesNetworkCountry
95.164.128.20456globalroutesolutionsUS
152.32.199.207UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDBR
117.181.50.985China Mobile Communications Group Co., Ltd.CN
35.203.210.1601Google LLCGB
147.185.132.1671Google LLCUS
134.195.154.131GLOBALHOSTINGSOLUTIONS INCUS
183.204.62.1211China Mobile Communications Group Co., Ltd.CN
162.216.149.2321Google LLCUS

Networks it comes from

ASNOrganisationProbesSource IPs
AS54903globalroutesolutions561
AS9808China Mobile Communications Group Co., Ltd.73
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED71
AS396982Google LLC33
AS4134Chinanet11
AS46918GLOBALHOSTINGSOLUTIONS INC11

Where it comes from

CountryProbes
United States59
China8
Brazil7
United Kingdom1

Client strings seen on this port

User agentProbes
Python/3.12 aiohttp/3.14.529
Mozilla/5.0 (compatible; scanner)27
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.04
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity3
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.362

Port report

Port report

Loading