HoneyLabs
iAnonymous lookups: 10/min, 60/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.

Filtered actors

query: port:8140

173 unique IPs · 25.7K events · 20 countries · 16 ASNs

Activity · last 7d

2026-06-24: 21 events2026-06-25: 1.4K events2026-06-26: 34 events2026-06-27: 19 events2026-06-28: 24 events2026-06-29: 23.4K events2026-06-30: 884 events

peak 23.4K on 2026-06-29

Top source networks · click to refine

Refine
Turn this query into a daily email digest or an IOC feed URL.Save as feed

Sample payloads

top distinct probes matching this query
ProtocolPortProbe / payloadHitsExample
HTTP8140GET /
UA: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpan…
69 · 63 IPs162.216.150.95 →
-8140MGLNDD_<HONEYPOT>_814023 · 23 IPs20.65.194.103 →
HTTP8140GET /favicon.ico
UA: Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)
18 · 14 IPs216.180.246.126 →
HTTP8140GET /portal/.git/config
UA: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:6.0a2) Gecko/20110622 Firefox/6.0a2
11 · 11 IPs34.96.181.177 →
HTTP8140GET /v2/.git/config
UA: Mozilla/5.0 (Linux; Android 9; REVVLRY) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36
11 · 11 IPs34.96.181.177 →
HTTP8140GET /api/.git/config
UA: Mozilla/5.0 (Linux; Android 9; ONEPLUS 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.89 Mobile Safari/537.3…
11 · 11 IPs34.96.181.177 →
HTTP8140GET /v1/.git/config
UA: Mozilla/5.0 (X11; FreeBSD amd64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36
11 · 11 IPs34.96.181.177 →
HTTP8140GET /wp-content/.git/config
UA: NokiaN70-1/5.0609.2.0.1 Series60/2.8 Profile/MIDP-2.0 Configuration/CLDC-1.1 UP.Link/6.3.1.13.0
11 · 11 IPs34.96.181.177 →
HTTP8140GET /dashboard/.git/config
UA: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.142 Safari/537.36
11 · 11 IPs34.96.181.177 →
HTTP8140GET /.git/config
UA: Mozilla/5.0 (iPhone; CPU iPhone OS 10_0 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/18.0.130791545 Mobile…
11 · 11 IPs34.96.181.177 →
HTTP8140GET /site/.git/config
UA: Mozilla/4.8 [en] (Windows NT 5.1; U)
11 · 11 IPs34.96.181.177 →
HTTP8140GET /frontend/.git/config
UA: Mozilla/5.0 (Windows NT 6.2; rv:20.0) Gecko/20121202 Firefox/20.0
11 · 11 IPs34.96.181.177 →
IPCountryASNTop portsEvents
Showing top 50 by event count. Window is the last 7d. Add or remove filters by clicking any value on a per-IP report.