iAnonymous lookups: 10/min, 60/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.
Filtered actors
query: port:3000
318 unique IPs · 3.0K events · 28 countries · 64 ASNs
Activity · last 7d
peak 1.3K on 2026-06-15
Top source networks · click to refine
query: port:3000×window1h24h7d30d🔒90d🔒
Turn this query into a daily email digest or an IOC feed URL.Save as feed
Sample payloads
top distinct probes matching this query| Protocol | Port | Probe / payload | Hits | Example |
|---|---|---|---|---|
| HTTP | 3000/Web-alt | GET / UA: Python/3.10 aiohttp/3.8.4 | 611 · 206 IPs | 94.102.49.155 → |
| HTTP | 3000/Web-alt | POST / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 | 75 · 21 IPs | 160.119.71.12 → |
| HTTP | 3000/Web-alt | GET /favicon.ico UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 | 75 · 61 IPs | 64.62.156.229 → |
| HTTP | 3000/Web-alt | POST /_next/server UA: Mozilla/5.0 (iPhone; CPU iPhone OS 17_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/134.0.6998.99 Mobi… | 45 · 4 IPs | 160.119.71.12 → |
| HTTP | 3000/Web-alt | POST /api/route UA: Mozilla/5.0 (Linux; Android 14; SM-F9560 Build/UP1A.231005.007; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 C… | 43 · 5 IPs | 160.119.71.12 → |
| HTTP | 3000/Web-alt | POST /app UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 | 41 · 4 IPs | 160.119.71.12 → |
| HTTP | 3000/Web-alt | POST /api UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.6998.135 Mobile Safari/537.36 | 41 · 5 IPs | 160.119.71.12 → |
| HTTP | 3000/Web-alt | POST /_next UA: Mozilla/5.0 (Linux; Android 9; AFTWMST22 Build/PS7233; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/88.… | 41 · 4 IPs | 160.119.71.12 → |
| - | 3000/Web-alt | 0a | 35 · 17 IPs | 67.207.88.175 → |
| - | 3000/Web-alt | 02 01 00 00 00 00 00 06 62 75 69 6c 64 0a | 26 | 79.124.40.174 → |
| HTTP | 3000/Web-alt | GET /migadmin/lang/legacy/legacy/filechecksum UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15 | 18 · 16 IPs | 65.49.1.52 → |
| HTTP | 3000/Web-alt | GET /fonts/ftnt-icons.woff UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/120.0.6099.28 Safari/537.36 | 18 · 16 IPs | 65.49.1.52 → |
IPCountryASNTop portsEvents
3.19.185.80ec2-3-19-185-80.us-east-2.compute.amazonaws.com🇺🇸USAS16509 Amazon.com, Inc.3000/Web-alt12
13.58.97.223ec2-13-58-97-223.us-east-2.compute.amazonaws.com🇺🇸USAS16509 Amazon.com, Inc.3000/Web-alt12
3.21.167.54ec2-3-21-167-54.us-east-2.compute.amazonaws.com🇺🇸USAS16509 Amazon.com, Inc.3000/Web-alt12
18.118.169.37ec2-18-118-169-37.us-east-2.compute.amazonaws.com🇺🇸USAS16509 Amazon.com, Inc.3000/Web-alt12
18.226.90.69ec2-18-226-90-69.us-east-2.compute.amazonaws.com🇺🇸USAS16509 Amazon.com, Inc.3000/Web-alt12