HoneyLabs
KEV
LookupKEVMCP
Data
The datasetDataset and methodCVEsCampaignsPayloadsPre-disclosureEmissions IndexPortsBlog
Integrations
OverviewFeeds
PricingDocs

Port 3001

HoneyLabs honeypots recorded 2,529 probes against destination port 3001 from 210 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 08:58, most recently 2026-11-15 06:35 (UTC).

What the sensors show

The sources sat in 46 networks across 19 countries. One address, 185.177.72.64, sent 40% of them. The largest source network was AS211590 (Bucklog SARL), with 40% of the probes from 1 address. 11 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
185.177.72.641,016Bucklog SARLFR
77.90.185.243507Limited Network LTDDE
87.192.41.18066Fontaine, LLCNL
95.164.200.5656ISP4Life INCUS
18.218.118.20355Amazon.com, Inc.US
95.164.202.6855ISP4Life INCUS
138.68.14.2847DigitalOcean, LLCUS
143.110.194.10747DigitalOcean, LLCUS

Networks it comes from

ASNOrganisationProbesSource IPs
AS211590Bucklog SARL1,0161
AS213790Limited Network LTD5071
AS14061DigitalOcean, LLC17413
AS394814ISP4Life INC1112
AS16509Amazon.com, Inc.867
AS218751Fontaine, LLC661

Where it comes from

CountryProbes
France1,060
United States694
Germany519
The Netherlands89
Russia28
Canada24

Client strings seen on this port

User agentProbes
Opera/9.60 (Windows NT 5.1; U; en-GB) Presto/2.1.1169
Mozilla/5.0 (Android 6.0.1;) AppleWebKit/1.1 Version/4.0 Mobile Safari/1.1169
Mozilla/5.0 (Linux; U; Android 4.0.4; en-us; DROID RAZR Build/6.7.2-180_DHD-16_M4-31) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30169
Mozilla/5.0 (Linux; Android 7.1.1; SAMSUNG SM-T350 Build/NMF26X) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/6.4 Chrome/56.0.2924.87 Safari/537.36127
Mozilla/5.0 (Linux; U; Android 4.0.3; en-us; A500 Build/IML74K) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Safari/534.30127

Port report

Port report

Loading