Port 7003

HoneyLabs honeypots recorded 289 probes against destination port 7003 from 34 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 16:10, most recently 2026-11-15 14:51 (UTC).

What the sensors show

The sources sat in 13 networks across 12 countries. One address, 89.248.171.24, sent 35% of them. The largest source network was AS202425 (IP Volume inc), with 79% of the probes from 4 addresses. 14 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
89.248.171.24102IP Volume incNL
93.174.93.1268IP Volume incNL
80.82.77.20244IP Volume incNL
193.29.13.19918Bunea TELECOM SRLRO
89.248.172.3315IP Volume incNL
150.107.38.2516UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK
204.76.203.2123Pfcloud UG (haftungsbeschrankt)NL
106.75.12.1063China Unicom Beijing Province NetworkCN

Networks it comes from

ASNOrganisationProbesSource IPs
AS202425IP Volume inc2294
AS42397Bunea TELECOM SRL181
AS213412ONYPHE SAS88
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED61
AS51396Pfcloud UG (haftungsbeschrankt)63
AS396982Google LLC44

Where it comes from

CountryProbes
The Netherlands236
Romania18
United States10
Hong Kong6
China5
Portugal4

Client strings seen on this port

User agentProbes
Python/3.10 aiohttp/3.8.4229
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4 240.111 Safari/537.365
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.364
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 ModatScanner/1.2 (+https://modat.io/)2

Port report

Port report

Loading