Port 16010

HoneyLabs honeypots recorded 91 probes against destination port 16010 from 43 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 11:03, most recently 2026-11-15 03:30 (UTC).

What the sensors show

The sources sat in 7 networks across 7 countries. No single address sent more than 11% of them. The largest source network was AS396982 (Google LLC), with 36% of the probes from 31 addresses. 3 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
93.174.95.10610IP Volume incNL
170.231.237.2149GRUPO PANAGLOBAL 15 S.APA
94.102.49.1938IP Volume incNL
80.66.83.807Bashinskii Vadim RuslanovichRU
152.32.156.1587UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDIN
170.231.236.985GRUPO PANAGLOBAL 15 S.APA
185.191.236.384GRUPO PANAGLOBAL 15 S.ACH
35.205.109.2082Google LLCBE

Networks it comes from

ASNOrganisationProbesSource IPs
AS396982Google LLC3331
AS264617GRUPO PANAGLOBAL 15 S.A183
AS202425IP Volume inc182
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED71
AS216473Bashinskii Vadim Ruslanovich71
AS51396Pfcloud UG (haftungsbeschrankt)64

Where it comes from

CountryProbes
United States28
The Netherlands24
Panama14
Belgium7
India7
Russia7

Client strings seen on this port

User agentProbes
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity26
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.3610
Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.3610
python-requests/2.34.27
ApcosysBot/1.0 (+https://apcosys.net)6

Port report

Port report

Loading