HoneyLabs
iAnonymous lookups: 30/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.

Filtered actors

port=808

201 unique IPs · 487 events · 11 countries · 29 ASNs

Activity · last 7d

2026-06-28: 8 events2026-06-29: 89 events2026-06-30: 104 events2026-07-01: 51 events2026-07-02: 68 events2026-07-03: 59 events2026-07-04: 42 events2026-07-05: 66 events

peak 104 on 2026-06-30

Top source networks · click to refine

Refine
Turn this query into a daily email digest or an IOC feed URL.Save as feed

Sample payloads

top distinct probes matching this query
ProtocolPortProbe / payloadHitsExample
HTTP808GET /
UA: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpan…
182 · 97 IPs147.185.132.234 →
HTTP808GET /favicon.ico
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
81 · 50 IPs111.7.96.178 →
-808MGLNDD_<HONEYPOT>_80823 · 22 IPs20.119.72.191 →
-8080a23 · 7 IPs3.130.168.2 →
HTTP808GET http://api.ipify.org/?format=json
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
19 · 19 IPs64.62.156.68 →
TLS80850 52 49 20 2a 20 48 54 54 50 2f 32 2e 30 0d 0a 0d 0a 53 4d 0d 0a 0d 0a …(57 bytes)18 · 18 IPs66.132.172.190 →
SOCKS5808SOCKS505 01 0012 · 6 IPs204.76.203.212 →
HTTP808CONNECT proxy2.proxiesfood.com:443 HTTP/1.1 Host: proxy2.proxiesfood.com:4439 · 4 IPs204.76.203.212 →
HTTP808GET /login
UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
8 · 7 IPs66.132.172.190 →
HTTP808GET /.well-known/security.txt
UA: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpan…
5 · 5 IPs198.235.24.194 →
HTTP808GET /api/jolokia/list
UA: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpan…
4 · 4 IPs205.210.31.36 →
HTTP808GET http://146.56.180.42:3333/
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
494.154.43.36 →
IPCountryASNTop portsEvents
Showing top 50 by event count. Window is the last 7d. Add or remove filters by clicking any value on a per-IP report.