HoneyLabs
KEV
LookupKEVMCP
Data
The datasetDataset and methodCVEsCampaignsPayloadsPre-disclosureEmissions IndexPortsBlog
Integrations
OverviewFeeds
PricingDocs

Port 8008 (HTTP-alt)

HoneyLabs honeypots recorded 5,554 probes against destination port 8008 (HTTP-alt) from 279 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 08:31, most recently 2026-11-15 08:26 (UTC).

What the sensors show

The sources sat in 47 networks across 21 countries. One address, 80.94.95.211, sent 37% of them. The largest source network was AS204428 (SS-Net), with 37% of the probes from 2 addresses. 9 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
80.94.95.2112,072SS-NetRO
185.177.72.641,016Bucklog SARLFR
77.90.185.2431,016Limited Network LTDDE
93.152.223.44180RMP Protection LimitedBG
138.219.75.1156HOST PARA TU VIDA S.A.US
178.128.178.17547DigitalOcean, LLCUS
64.227.48.15747DigitalOcean, LLCUS
159.89.239.4947DigitalOcean, LLCUS

Networks it comes from

ASNOrganisationProbesSource IPs
AS204428SS-Net2,0732
AS213790Limited Network LTD1,0161
AS211590Bucklog SARL1,0161
AS15169Google LLC31542
AS14061DigitalOcean, LLC2059
AS135388RMP Protection Limited1801

Where it comes from

CountryProbes
Romania2,076
Germany1,041
France1,027
United States599
Belgium317
Bulgaria186

Client strings seen on this port

User agentProbes
Mozilla/5.0 (compatible)283
Mozilla/5.0 (X11; CrOS i686 0.13.587) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.14 Safari/535.1259
Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36 OPR/35.0.2066.82259
Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/27.0.1453.94 Safari/537.36259
Mozilla/5.0 (Linux; U; Android 4.2.2; en-us; GT-P5210 Build/JDQ39E) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30259

Port report

Port report

Loading