HoneyLabs
KEV
LookupKEVMCP
Data
The datasetDataset and methodCVEsCampaignsPayloadsPre-disclosureEmissions IndexPortsBlog
Integrations
OverviewFeeds
PricingDocs

Port 80 (HTTP)

HoneyLabs honeypots recorded 15,432 probes against destination port 80 (HTTP) from 1,049 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 08:30, most recently 2026-11-15 08:14 (UTC).

What the sensors show

The sources sat in 199 networks across 57 countries. One address, 85.155.14.31, sent 43% of them. The largest source network was AS199457 (SolidCore Hosting LTD), with 48% of the probes from 7 addresses. None of the 25 busiest addresses is a recognised research scanner.

Most active source addresses

Source IPProbesNetworkCountry
85.155.14.316,668SolidCore Hosting LTDDE
213.209.159.175656Feo Prest SRLDE
45.138.12.51445Tc Datacenter LimitedLT
85.155.14.58392SolidCore Hosting LTDDE
185.177.72.64344Bucklog SARLFR
20.214.165.240314Microsoft CorporationKR
134.19.179.211307Global Layer B.V.NL
102.133.224.63306Microsoft CorporationZA

Networks it comes from

ASNOrganisationProbesSource IPs
AS199457SolidCore Hosting LTD7,3577
AS8075Microsoft Corporation1,73099
AS208137Feo Prest SRL6561
AS218785Tc Datacenter Limited4546
AS211590Bucklog SARL3441
AS50360Tamatiya EOOD3432

Where it comes from

CountryProbes
Germany8,431
United States2,046
The Netherlands960
South Africa951
Bulgaria467
Lithuania454

Client strings seen on this port

User agentProbes
Mozilla/5.0 (X11; Linux x86_64; rv:126.0) Gecko/20100101 Firefox/126.0967
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0939
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36930
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0922
Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15917

Port report

Port report

Loading