Port 3996
HoneyLabs honeypots recorded 4 probes against destination port 3996 from 3 distinct source IP addresses in the last 7 days.
First observed 2026-11-10 00:17, most recently 2026-11-14 15:42 (UTC).
What the sensors show
The sources sat in 1 network across 1 country. One address, 104.152.52.134, sent 50% of them.
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 104.152.52.134 | 2 | Rethem Hosting LLC | US |
| 104.152.52.235 | 1 | Rethem Hosting LLC | US |
| 104.152.52.149 | 1 | Rethem Hosting LLC | US |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS14987 | Rethem Hosting LLC | 4 | 3 |
Where it comes from
| Country | Probes |
|---|---|
| United States | 4 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| Microsoft WinRM Client | 2 |
| curl/7.61.1 | 2 |
Port report
Port report
Loading