Port 1270

HoneyLabs honeypots recorded 55 probes against destination port 1270 from 37 distinct source IP addresses in the last 7 days.

First observed 2026-11-09 00:15, most recently 2026-11-15 14:07 (UTC).

What the sensors show

The sources sat in 8 networks across 5 countries. No single address sent more than 13% of them. The largest source network was AS8075 (Microsoft Corporation), with 35% of the probes from 12 addresses. 13 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
165.154.162.1027UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDUS
147.185.133.2052Google LLCUS
195.184.76.642ONYPHE SASUS
162.216.149.262Google LLCUS
35.203.211.1702Google LLCGB
20.65.171.512Microsoft CorporationUS
20.84.68.762Microsoft CorporationUS
40.124.186.1692Microsoft CorporationUS

Networks it comes from

ASNOrganisationProbesSource IPs
AS8075Microsoft Corporation1912
AS213412ONYPHE SAS1211
AS396982Google LLC117
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED71
AS14987Rethem Hosting LLC33
AS210328AO ALMAZ11

Where it comes from

CountryProbes
United States49
United Kingdom3
United Arab Emirates1
Romania1
Kazakhstan1

Client strings seen on this port

User agentProbes
Mozilla/5.0 zgrab/0.x12
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity11
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.04
curl/7.61.13

Port report

Port report

Loading