Port 1066

HoneyLabs honeypots recorded 31 probes against destination port 1066 from 24 distinct source IP addresses in the last 7 days.

First observed 2026-11-09 00:15, most recently 2026-11-15 07:49 (UTC).

What the sensors show

The sources sat in 8 networks across 7 countries. No single address sent more than 19% of them. The largest source network was AS213412 (ONYPHE SAS), with 26% of the probes from 8 addresses. 18 of the 24 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
31.57.216.406VPS Dedicated LLCAE
117.181.50.982China Mobile Communications Group Co., Ltd.CN
185.136.15.1532AO ALMAZKZ
85.217.149.661Modat B.V.CA
104.152.52.2171Rethem Hosting LLCUS
85.217.149.611Modat B.V.CA
104.152.52.2211Rethem Hosting LLCUS
45.79.181.1791Akamai Connected CloudUS

Networks it comes from

ASNOrganisationProbesSource IPs
AS213412ONYPHE SAS88
AS197769VPS Dedicated LLC61
AS209334Modat B.V.55
AS14987Rethem Hosting LLC44
AS210328AO ALMAZ32
AS9808China Mobile Communications Group Co., Ltd.21

Where it comes from

CountryProbes
United States14
United Arab Emirates6
Kazakhstan3
Canada3
France2
China2

Client strings seen on this port

User agentProbes
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
curl/7.61.14
Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.362
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 ModatScanner/1.2 (+https://modat.io/)2
Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/538.1 (KHTML, like Gecko) PhantomJS/2.0.0 Safari/538.11

Port report

Port report

Loading