HoneyLabs
KEV
LookupKEVMCP
Data
The datasetDataset and methodCVEsCampaignsPayloadsPre-disclosureEmissions IndexPortsBlog
Integrations
OverviewFeeds
PricingDocs

Port 8001

HoneyLabs honeypots recorded 2,500 probes against destination port 8001 from 342 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 09:10, most recently 2026-11-15 08:04 (UTC).

What the sensors show

The sources sat in 54 networks across 24 countries. One address, 80.94.95.211, sent 47% of them. The largest source network was AS204428 (SS-Net), with 48% of the probes from 3 addresses. 10 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
80.94.95.2111,170SS-NetRO
95.164.202.856ISP4Life INCUS
95.164.202.6856ISP4Life INCUS
192.155.89.5347Akamai Connected CloudUS
45.56.83.4647Akamai Connected CloudUS
206.81.13.3847DigitalOcean, LLCUS
66.228.56.10547Akamai Connected CloudUS
18.116.101.22036Amazon.com, Inc.US

Networks it comes from

ASNOrganisationProbesSource IPs
AS204428SS-Net1,1893
AS15169Google LLC15224
AS63949Akamai Connected Cloud1466
AS6939Hurricane Electric LLC11956
AS394814ISP4Life INC1122
AS16509Amazon.com, Inc.868

Where it comes from

CountryProbes
Romania1,213
United States773
Belgium158
Hong Kong106
The Netherlands90
Portugal29

Client strings seen on this port

User agentProbes
Mozilla/5.0 (X11; FreeBSD i686) Firefox/3.6259
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.87 Safari/537.36259
Mozilla/5.0 (X11; U; Linux x86_64; pl; rv:1.8.1.4) Gecko/20070611 Firefox/2.0.0.4259
Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.1 (KHTML like Gecko) Maxthon/4.0.0.2000 Chrome/22.0.1229.79 Safari/537.1259
Mozilla/5.0 (X11; U; DragonFly i386; de; rv:1.9.1b2) Gecko/20081201 Firefox/3.1b2134

Port report

Port report

Loading