HoneyLabs
LookupEnrichFeedsCVEsCampaignsASN IndexMCPBlogDocs
Dashboard
iAnonymous lookups: 10/min, 100/hr per source IP. Sign in for a daily credit budget (free: 500, pro: 50,000) and history.

Filtered actors

query: port:3128

909 unique IPs · 5.7K events · 38 countries · 75 ASNs

Activity · last 30d

2026-05-05: 114 events2026-05-06: 171 events2026-05-07: 183 events2026-05-08: 259 events2026-05-09: 140 events2026-05-10: 266 events2026-05-11: 256 events2026-05-12: 212 events2026-05-13: 206 events2026-05-14: 217 events2026-05-15: 204 events2026-05-16: 313 events2026-05-17: 142 events2026-05-18: 119 events2026-05-19: 149 events2026-05-20: 147 events2026-05-21: 147 events2026-05-22: 179 events2026-05-23: 266 events2026-05-24: 171 events2026-05-25: 118 events2026-05-26: 153 events2026-05-27: 120 events2026-05-28: 122 events2026-05-29: 132 events2026-05-30: 298 events2026-05-31: 225 events2026-06-01: 198 events2026-06-02: 196 events2026-06-03: 183 events2026-06-04: 72 events

peak 313 on 2026-05-16

Top source networks · click to refine

AS202425 IP Volume inc24.3%
AS49581 Tube-Hosting15.6%
AS6939 Hurricane Electric LLC7.5%
AS51396 Pfcloud UG (haftungsbeschrankt)5.3%
query: port:3128×window: 30d
Refine
Turn this query into a daily email digest or an IOC feed URL.Save as feed
IPCountryASNTop portsEvents
185.91.127.85tube-hosting.com🇩🇪DEAS49581 Tube-Hosting3128/HTTP-proxy887
94.102.49.155🇳🇱NLAS202425 IP Volume inc3128/HTTP-proxy712
80.82.77.202rnd.group-ib.com🇳🇱NLAS202425 IP Volume inc3128/HTTP-proxy652
95.214.52.233🇵🇱PLAS201814 MEVSPACE sp. z o.o.3128/HTTP-proxy240
37.26.137.149149.137.26.37.dyn.idknet.com🇲🇩MDAS1547 INTERDNESTRKOM, Sovmestnoe Zakrytoe Akts3128/HTTP-proxy180
45.135.193.19345.135.193.193.ptr.pfcloud.network🇩🇪DEAS51396 Pfcloud UG (haftungsbeschrankt)3128/HTTP-proxy107
204.76.203.30204.76.203.30.ptr.pfcloud.network🇳🇱NLAS51396 Pfcloud UG (haftungsbeschrankt)3128/HTTP-proxy76
165.22.166.54prod-barium-sfo2-59.do.binaryedge.ninja🇺🇸USAS14061 DigitalOcean, LLC3128/HTTP-proxy46
185.3.95.90prod-bromine-eu-west-3.li.binaryedge.ninja🇬🇧GBAS63949 Akamai Connected Cloud3128/HTTP-proxy46
104.237.150.40prod-boron-us-east-23.li.binaryedge.ninja🇺🇸USAS63949 Akamai Connected Cloud3128/HTTP-proxy46
130.12.180.52🇺🇸USAS202412 Omegatech LTD3128/HTTP-proxy44
46.161.50.109scan.f6.security🇷🇺RUAS34665 Petersburg Internet Network ltd.3128/HTTP-proxy40
51.158.248.224e3e1252c-d089-41d6-adeb-b6dc07ad1a4b.nl-ams-2.baremetal.scw.clou🇳🇱NLAS12876 Scaleway S.a.s.3128/HTTP-proxy28
51.158.248.20544fc2c37-225a-4937-8e83-afec2517dd88.nl-ams-2.baremetal.scw.clou🇳🇱NLAS12876 Scaleway S.a.s.3128/HTTP-proxy28
89.190.156.34smtp-3.goinbox.in🇳🇱NLAS49870 Alsycon B.V.3128/HTTP-proxy27
167.94.146.5959.146.94.167.censys-scanner.com🇺🇸USAS398705 Censys, Inc.3128/HTTP-proxy24
167.94.146.4848.146.94.167.censys-scanner.com🇺🇸USAS398705 Censys, Inc.3128/HTTP-proxy24
176.65.148.2176.65.148.2.ptr.pfcloud.network🇳🇱NLAS51396 Pfcloud UG (haftungsbeschrankt)3128/HTTP-proxy24
84.17.55.211🇵🇱PLAS60068 Datacamp Limited3128/HTTP-proxy21
179.43.134.114hostedby.privatelayer.com🇨🇭CHAS51852 Private Layer INC3128/HTTP-proxy20
185.93.89.152🇮🇷IRAS213790 Limited Network LTD3128/HTTP-proxy18
66.132.172.221221.172.132.66.censys-scanner.com🇺🇸USAS398324 Censys, Inc.3128/HTTP-proxy16
167.94.146.6363.146.94.167.censys-scanner.com🇺🇸USAS398705 Censys, Inc.3128/HTTP-proxy16
66.132.172.201201.172.132.66.censys-scanner.com🇺🇸USAS398324 Censys, Inc.3128/HTTP-proxy16
66.132.172.202202.172.132.66.censys-scanner.com🇺🇸USAS398324 Censys, Inc.3128/HTTP-proxy16
213.209.159.74🇹🇼TWAS208137 Feo Prest SRL3128/HTTP-proxy16
66.132.172.3636.172.132.66.censys-scanner.com🇺🇸USAS398324 Censys, Inc.3128/HTTP-proxy16
95.214.53.196🇵🇱PLAS201814 MEVSPACE sp. z o.o.3128/HTTP-proxy16
167.94.146.6262.146.94.167.censys-scanner.com🇺🇸USAS398705 Censys, Inc.3128/HTTP-proxy16
66.132.195.9494.195.132.66.censys-scanner.com🇺🇸USAS0 3128/HTTP-proxy16
167.94.146.5656.146.94.167.censys-scanner.com🇺🇸USAS398705 Censys, Inc.3128/HTTP-proxy16
167.94.146.4949.146.94.167.censys-scanner.com🇺🇸USAS398705 Censys, Inc.3128/HTTP-proxy16
51.159.108.197a6b0492f-0f64-4271-a701-b4bae10e4a4f.fr-par-2.baremetal.scw.clou🇫🇷FRAS12876 Scaleway S.a.s.3128/HTTP-proxy14
62.210.198.22608305514-5ee8-41f5-b03f-671e30e2341e.fr-par-1.baremetal.scw.clou🇫🇷FRAS12876 Scaleway S.a.s.3128/HTTP-proxy14
62.210.198.229a72e0c3e-4be5-4e47-8a26-d108d58e94fd.fr-par-1.baremetal.scw.clou🇫🇷FRAS12876 Scaleway S.a.s.3128/HTTP-proxy14
51.158.248.201307d5b9a-0502-4fd9-a368-d63aa4e5c49c.nl-ams-2.baremetal.scw.clou🇳🇱NLAS12876 Scaleway S.a.s.3128/HTTP-proxy14
151.115.100.31🇵🇱PLAS12876 Scaleway S.a.s.3128/HTTP-proxy14
51.159.96.126bb91cdaf-0156-40a2-9e5c-1cb2fd93909a.fr-par-2.baremetal.scw.clou🇫🇷FRAS12876 Scaleway S.a.s.3128/HTTP-proxy14
51.158.203.24692003856-eb8f-4497-86c0-dc9121df9866.nl-ams-1.baremetal.scw.clou🇳🇱NLAS12876 Scaleway S.a.s.3128/HTTP-proxy14
51.158.248.207e3579112-0782-4bec-8120-234e49b3f54a.nl-ams-2.baremetal.scw.clou🇳🇱NLAS12876 Scaleway S.a.s.3128/HTTP-proxy14
176.65.134.3🇸🇮SIAS36680 Netiface LLC3128/HTTP-proxy13
151.115.99.198ef216040-eb19-48e8-b8ac-b9bb31bb868b.pl-waw-3.baremetal.scw.clou🇵🇱PLAS12876 Scaleway S.a.s.3128/HTTP-proxy13
74.82.47.5scan-12.shadowserver.org🇺🇸USAS6939 Hurricane Electric LLC3128/HTTP-proxy12
45.135.194.11345.135.194.113.ptr.pfcloud.network🇩🇪DEAS51396 Pfcloud UG (haftungsbeschrankt)3128/HTTP-proxy12
65.49.20.68scan-19.shadowserver.org🇺🇸USAS6939 Hurricane Electric LLC3128/HTTP-proxy12
184.105.247.195scan-14.shadowserver.org🇺🇸USAS6939 Hurricane Electric LLC3128/HTTP-proxy12
184.105.247.194scan-13.shadowserver.org🇺🇸USAS6939 Hurricane Electric LLC3128/HTTP-proxy12
37.44.238.68ssd4-3080.10204🇫🇷FRAS34534 Fbw Networks SAS3128/HTTP-proxy12
160.119.76.60🇸🇨SCAS49870 Alsycon B.V.3128/HTTP-proxy11
64.89.160.111🇬🇧GBAS205759 Ghosty Networks LLC3128/HTTP-proxy11
Showing top 50 by event count. Window is the last 30d. Add or remove filters by clicking any value on a per-IP report.