Port 3972
HoneyLabs honeypots recorded 24 probes against destination port 3972 from 9 distinct source IP addresses in the last 7 days.
First observed 2026-09-17 15:08:09, most recently 2026-09-24 09:39:17 (UTC).
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 167.94.146.54 | 8 | Censys, Inc. | US |
| 217.60.78.89 | 6 | Throttle Limited | AE |
| 165.154.172.244 | 3 | UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED | US |
| 104.152.52.211 | 2 | Rethem Hosting LLC | US |
| 104.152.52.244 | 1 | Rethem Hosting LLC | US |
| 104.152.52.205 | 1 | Rethem Hosting LLC | US |
| 104.152.52.200 | 1 | Rethem Hosting LLC | US |
| 104.152.52.201 | 1 | Rethem Hosting LLC | US |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS398705 | Censys, Inc. | 8 | 1 |
| AS14987 | Rethem Hosting LLC | 6 | 5 |
| AS198189 | Throttle Limited | 6 | 1 |
| AS135377 | UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED | 3 | 1 |
| AS19318 | Interserver, Inc | 1 | 1 |
Where it comes from
| Country | Probes |
|---|---|
| United States | 17 |
| United Arab Emirates | 6 |
| Eritrea | 1 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) | 6 |
| curl/7.29.0 | 2 |
| curl/7.61.1 | 1 |
| Microsoft WinRM Client | 1 |
Port report
Port report
Loading live data…