HoneyLabs
LookupMCP
Data
The datasetDataset and methodCVEsCampaignsPayloadsPre-disclosureEmissions IndexPortsBlog
Integrations
OverviewFeeds
PricingDocs

Port 3031

HoneyLabs honeypots recorded 62 probes against destination port 3031 from 28 distinct source IP addresses in the last 7 days.

First observed 2026-10-29 01:04, most recently 2026-11-04 16:49 (UTC).

What the sensors show

The sources sat in 11 networks across 7 countries. No single address sent more than 19% of them. The largest source network was AS63199 (CDS Global Cloud Co., Ltd), with 29% of the probes from 2 addresses. 9 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
148.153.188.25412CDS Global Cloud Co., LtdUS
36.156.22.27China Mobile communications corporationCN
148.153.189.626CDS Global Cloud Co., LtdUS
87.251.64.1314Shesternin Vladimir AnatolievichRU
87.251.64.1284Shesternin Vladimir AnatolievichRU
94.26.68.902MEVSPACE sp. z o.o.BG
87.251.64.1322Shesternin Vladimir AnatolievichRU
151.240.44.1502GSL Networks Pty LTDUS

Networks it comes from

ASNOrganisationProbesSource IPs
AS63199CDS Global Cloud Co., Ltd182
AS212835Shesternin Vladimir Anatolievich145
AS213412ONYPHE SAS88
AS56046China Mobile communications corporation71
AS396982Google LLC44
AS23273HostPapa21

Where it comes from

CountryProbes
United States35
Russia14
China7
France2
Bulgaria2
Germany1

Client strings seen on this port

User agentProbes
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4 240.111 Safari/537.3621
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.3614
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity4
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:146.0) Gecko/20100101 Firefox/146.02

Port report

Port report

Loading live data…