Port 8000 (HTTP-alt)

HoneyLabs honeypots recorded 3,734 probes against destination port 8000 (HTTP-alt) from 456 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 08:29, most recently 2026-11-15 08:25 (UTC).

What the sensors show

The sources sat in 84 networks across 34 countries. One address, 217.60.242.44, sent 46% of them. The largest source network was AS218970 (Amin NezhadKahnoji), with 46% of the probes from 1 address. 3 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
217.60.242.441,728Amin NezhadKahnojiAE
134.19.179.211154Global Layer B.V.NL
195.178.110.7884Techoff Srv LimitedBG
129.213.151.23483Oracle CorporationUS
87.192.41.18064Fontaine, LLCNL
45.135.193.19358Pfcloud UG (haftungsbeschrankt)DE
95.164.202.16856ISP4Life INCUS
95.164.201.17156ISP4Life INCUS

Networks it comes from

ASNOrganisationProbesSource IPs
AS218970Amin NezhadKahnoji1,7281
AS15169Google LLC21234
AS14061DigitalOcean, LLC18131
AS49453Global Layer B.V.1541
AS48090Techoff Srv Limited1393
AS394814ISP4Life INC1122

Where it comes from

CountryProbes
United Arab Emirates1,735
United States668
The Netherlands275
Germany225
Belgium214
Bulgaria139

Client strings seen on this port

User agentProbes
opencode/1.17.131,728
Mozilla/5.0214
Mozilla/5.0 (compatible)191
Mozilla/5.0 (compatible; research-scan/1.0)83
Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)72

Port report

Port report

Loading