Port 3142

HoneyLabs honeypots recorded 38 probes against destination port 3142 from 23 distinct source IP addresses in the last 7 days.

First observed 2026-11-09 02:04, most recently 2026-11-15 13:35 (UTC).

What the sensors show

The sources sat in 7 networks across 6 countries. No single address sent more than 21% of them. The largest source network was AS51396 (Pfcloud UG (haftungsbeschrankt)), with 32% of the probes from 5 addresses. 8 of the 23 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
165.154.12.1278UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDAE
204.76.203.2214Pfcloud UG (haftungsbeschrankt)NL
204.76.203.2123Pfcloud UG (haftungsbeschrankt)NL
204.76.203.2133Pfcloud UG (haftungsbeschrankt)NL
47.245.137.2282Alibaba (US) Technology Co., Ltd.DE
195.184.76.1631ONYPHE SASUS
91.230.168.2411ONYPHE SASUS
195.184.76.2151ONYPHE SASUS

Networks it comes from

ASNOrganisationProbesSource IPs
AS51396Pfcloud UG (haftungsbeschrankt)125
AS213412ONYPHE SAS88
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED81
AS396982Google LLC66
AS45102Alibaba (US) Technology Co., Ltd.21
AS63018Dedicated.com11

Where it comes from

CountryProbes
The Netherlands12
United States11
United Arab Emirates9
United Kingdom3
Germany2
Canada1

Client strings seen on this port

User agentProbes
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity6
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.04
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.111
curl/7.64.11

Port report

Port report

Loading