Port 3395

HoneyLabs honeypots recorded 406 probes against destination port 3395 from 47 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 11:10, most recently 2026-11-15 05:26 (UTC).

What the sensors show

The sources sat in 20 networks across 9 countries. No single address sent more than 11% of them. The largest source network was AS14061 (DigitalOcean, LLC), with 48% of the probes from 7 addresses. 9 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
64.227.27.22046DigitalOcean, LLCUS
165.227.198.14846DigitalOcean, LLCUS
64.227.11.23846DigitalOcean, LLCUS
206.189.176.15846DigitalOcean, LLCUS
99.250.117.7133Rogers Communications Canada Inc.CA
80.66.83.8021Bashinskii Vadim RuslanovichRU
80.94.95.8318SS-NetRO
80.66.83.4317Bashinskii Vadim RuslanovichRU

Networks it comes from

ASNOrganisationProbesSource IPs
AS14061DigitalOcean, LLC1937
AS216473Bashinskii Vadim Ruslanovich423
AS211860Nerushenko Vyacheslav Nikolaevich335
AS812Rogers Communications Canada Inc.331
AS204428SS-Net192
AS51396Pfcloud UG (haftungsbeschrankt)151

Where it comes from

CountryProbes
United States229
Russia75
Canada33
Romania19
The Netherlands17
Bulgaria12

Client strings seen on this port

User agentProbes
Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)6
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.04
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity3
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.361
curl/7.61.11

Port report

Port report

Loading