HoneyLabs
iAnonymous lookups: 10/min, 60/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.

Filtered actors

query: port:8081

466 unique IPs · 3.5K events · 30 countries · 68 ASNs

Activity · last 7d

2026-06-10: 290 events2026-06-11: 487 events2026-06-12: 405 events2026-06-13: 486 events2026-06-14: 1.2K events2026-06-15: 266 events2026-06-16: 299 events2026-06-17: 97 events

peak 1.2K on 2026-06-14

Top source networks · click to refine

Refine
Turn this query into a daily email digest or an IOC feed URL.Save as feed

Sample payloads

top distinct probes matching this query
ProtocolPortProbe / payloadHitsExample
HTTP8081GET /
UA: curl/7.68.0
871 · 258 IPs45.205.1.244 →
HTTP8081GET /SDK/webLanguage
UA: Mozilla/5.0
407 · 6 IPs93.123.72.183 →
HTTP8081GET /favicon.ico
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 Edg/140.…
162 · 111 IPs65.49.20.118 →
HTTP8081GET /login
UA: Go-http-client/1.1
93 · 9 IPs45.198.224.5 →
HTTP8081CONNECT httpbin.org:443 HTTP/1.1 Host: httpbin.org:443 Proxy-Connection: keep-alive6545.135.193.193 →
HTTP8081POST /
UA: Mozilla/5.0 (Linux; U; Android 4.2.2; he-il; NEO-X5-116A Build/JDQ39) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0…
56 · 5 IPs160.119.71.12 →
HTTP8081POST /app
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36
48 · 2 IPs160.119.71.12 →
HTTP8081POST /api
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:136.0) Gecko/20100101 Firefox/136.
48 · 2 IPs160.119.71.12 →
HTTP8081POST /api/route
UA: Mozilla/5.0 (Linux; Android 14; SM-F9560 Build/UP1A.231005.007; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 C…
47 · 2 IPs160.119.71.12 →
HTTP8081POST /_next/server
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:136.0) Gecko/20100101 Firefox/136.
47 · 2 IPs160.119.71.12 →
HTTP8081POST /_next
UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.6998.135 Mobile Safari/537.36
47 · 2 IPs160.119.71.12 →
HTTP8081GET /jars
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
3679.124.40.174 →
IPCountryASNTop portsEvents
Showing top 50 by event count. Window is the last 7d. Add or remove filters by clicking any value on a per-IP report.