Port 3390

HoneyLabs honeypots recorded 1,076 probes against destination port 3390 from 150 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 09:21, most recently 2026-11-15 08:02 (UTC).

What the sensors show

The sources sat in 39 networks across 23 countries. No single address sent more than 10% of them. The largest source network was AS396982 (Google LLC), with 25% of the probes from 32 addresses. 5 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
80.66.83.80106Bashinskii Vadim RuslanovichRU
80.66.83.4391Bashinskii Vadim RuslanovichRU
192.34.60.12346DigitalOcean, LLCUS
165.232.63.9146DigitalOcean, LLCUS
137.184.26.15846DigitalOcean, LLCUS
157.230.135.7946DigitalOcean, LLCUS
99.250.117.7133Rogers Communications Canada Inc.CA
82.147.85.10126Nerushenko Vyacheslav NikolaevichRU

Networks it comes from

ASNOrganisationProbesSource IPs
AS396982Google LLC27232
AS14061DigitalOcean, LLC21629
AS216473Bashinskii Vadim Ruslanovich2013
AS398324Censys, Inc.9113
AS398705Censys, Inc.404
AS211860Nerushenko Vyacheslav Nikolaevich383

Where it comes from

CountryProbes
United States634
Russia239
United Kingdom37
Canada36
The Netherlands25
Panama21

Client strings seen on this port

User agentProbes
Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)96
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.014
ApcosysBot/1.0 (+https://apcosys.net)8
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4 240.111 Safari/537.365
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.04

Port report

Port report

Loading