HoneyLabs
KEV
LookupKEVMCP
Data
The datasetDataset and methodCVEsCampaignsPayloadsPre-disclosureEmissions IndexPortsBlog
Integrations
OverviewFeeds
PricingDocs

Port 3002

HoneyLabs honeypots recorded 2,224 probes against destination port 3002 from 66 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 08:34, most recently 2026-11-15 03:55 (UTC).

What the sensors show

The sources sat in 22 networks across 16 countries. One address, 185.177.72.64, sent 46% of them. The largest source network was AS213790 (Limited Network LTD), with 46% of the probes from 1 address. 1 of the 25 busiest addresses is a recognised research scanner.

Most active source addresses

Source IPProbesNetworkCountry
185.177.72.641,016Bucklog SARLFR
77.90.185.2431,016Limited Network LTDDE
191.44.114.2024Node Host LimitedSE
45.198.224.8517Vpsvault.host LtdUS
198.199.79.19014DigitalOcean, LLCUS
168.76.20.22912ASLINE LIMITEDZA
45.140.185.10911Contabo GmbHFR
79.143.191.16510Contabo GmbHFR

Networks it comes from

ASNOrganisationProbesSource IPs
AS213790Limited Network LTD1,0161
AS211590Bucklog SARL1,0161
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED284
AS198550Node Host Limited241
AS51167Contabo GmbH233
AS396982Google LLC2221

Where it comes from

CountryProbes
France1,051
Germany1,023
United States60
Sweden24
The Netherlands14
South Africa12

Client strings seen on this port

User agentProbes
Mozilla/5.0 (X11; U; Linux x86_64; fr; rv:1.9.1.5) Gecko/20091109 Ubuntu/9.10 (karmic) Firefox/3.5.3pre127
Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows NT 4.0) Opera 7.0 [en]127
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:52.0) Gecko/20100101 Firefox/52.0127
Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36127
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_5) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/6.2.2 Safari/537.85.11127

Port report

Port report

Loading