Port 27017 (MongoDB)
HoneyLabs honeypots recorded 2,315 probes against destination port 27017 (MongoDB) from 353 distinct source IP addresses in the last 7 days.
First observed 2026-11-08 08:57, most recently 2026-11-15 07:38 (UTC).
What the sensors show
The sources sat in 54 networks across 23 countries. No single address sent more than 10% of them. The largest source network was AS14061 (DigitalOcean, LLC), with 25% of the probes from 43 addresses. 13 of the 25 busiest addresses are recognised research scanners.
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 209.141.59.162 | 226 | FranTech Solutions | US |
| 45.115.26.32 | 128 | SolidCore Hosting LTD | HK |
| 176.65.132.141 | 124 | TechTies Inc. | NL |
| 157.230.231.163 | 78 | DigitalOcean, LLC | US |
| 89.248.171.24 | 75 | IP Volume inc | NL |
| 93.174.93.12 | 56 | IP Volume inc | NL |
| 173.230.145.106 | 46 | Akamai Connected Cloud | US |
| 167.99.227.221 | 46 | DigitalOcean, LLC | US |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS14061 | DigitalOcean, LLC | 573 | 43 |
| AS53667 | FranTech Solutions | 226 | 1 |
| AS15169 | Google LLC | 193 | 34 |
| AS197170 | TechTies Inc. | 187 | 5 |
| AS202425 | IP Volume inc | 180 | 5 |
| AS199457 | SolidCore Hosting LTD | 128 | 1 |
Where it comes from
| Country | Probes |
|---|---|
| United States | 1,260 |
| The Netherlands | 375 |
| Belgium | 225 |
| Hong Kong | 163 |
| Panama | 52 |
| Canada | 49 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| Python/3.10 aiohttp/3.8.4 | 172 |
| Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) | 90 |
| visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36 | 62 |
| Go-http-client/1.1 | 36 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 | 23 |
Port report
Port report
Loading