Port report
Port 3128HTTP-proxy
7-day honeypot probe activity targeting destination port 3128. First seen 2026-07-08, most recent 2026-07-15 21:08.
1,070
Events 7d
261
Source IPs
55
Source ASNs
22
Countries
Top source ASNs
Top source countries
- United States412
- Bulgaria191
- The Netherlands124
- Germany80
- Poland68
- Russia43
- France29
- Vietnam21
- Portugal21
- United Kingdom17
Top source IPs hitting port 3128
- 195.178.110.137191 eventsProbing BG路 AS48090 Techoff Srv Limitedseen Jul 15
- 95.214.53.19668 eventsProbing PL路 AS201814 MEVSPACE sp. z o.o.seen Jul 15
- 45.135.193.19357 eventsProbing DE路 AS51396 Pfcloud UG (haftungsbeschrankt)seen Jul 15
- 90.151.171.10835 eventsProbing RU路 AS12389 Rostelecomseen Jul 15
- 204.76.203.3017 eventsProbing NL路 AS51396 Pfcloud UG (haftungsbeschrankt)seen Jul 15
- 66.132.172.18715 eventsKnown scanner USseen Jul 13
- 91.92.42.14915 eventsProbing NL路 AS197170 TechTies Inc.seen Jul 15
- 204.76.203.4914 eventsProbing NL路 AS51396 Pfcloud UG (haftungsbeschrankt)seen Jul 15
- 192.227.229.6314 eventsProbing US路 AS36352 HostPapaseen Jul 14
- 23.95.35.4112 eventsProbing US路 AS36352 HostPapaseen Jul 10
- 91.92.42.808 eventsProbing NL路 AS197170 TechTies Inc.seen Jul 15
- 66.132.172.1888 eventsKnown scanner USseen Jul 9
- 199.45.155.838 eventsKnown scanner USseen Jul 9
- 66.132.172.1358 eventsKnown scanner USseen Jul 11
- 65.49.20.698 eventsProbing USseen Jul 15
- 66.132.186.1968 eventsKnown scanner USseen Jul 11
- 80.82.77.2028 eventsKnown scanner NLseen Jul 15
- 199.45.154.1418 eventsKnown scanner USseen Jul 13
- 167.94.146.518 eventsKnown scanner USseen Jul 11
- 66.132.172.368 eventsKnown scanner USseen Jul 11
- 66.132.172.1428 eventsKnown scanner USseen Jul 10
- 167.94.146.628 eventsKnown scanner USseen Jul 12
- 204.76.203.788 eventsProbing NL路 AS51396 Pfcloud UG (haftungsbeschrankt)seen Jul 11
- 199.45.154.1528 eventsKnown scanner USseen Jul 9
- 66.132.172.1088 eventsKnown scanner USseen Jul 11
Top user-agents on port 3128
- Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)118
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity19
- Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.318
- Go-http-client/1.118
- Mozilla/5.0 zgrab/0.x16
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.016
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.016
- python-httpx/0.28.113
- Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:146.0) Gecko/20100101 Firefox/146.012
- Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.3612
JSON: /api/port/3128. CSV: /api/port/3128?format=csv.