Port 8009

HoneyLabs honeypots recorded 534 probes against destination port 8009 from 182 distinct source IP addresses in the last 7 days.

First observed 2026-08-08 08:53:15, most recently 2026-08-15 08:48:30 (UTC).

Most active source addresses

Source IPProbesNetworkCountry
45.33.16.3239Akamai Connected CloudUS
74.207.243.11739Akamai Connected CloudUS
198.199.67.22739DigitalOcean, LLCUS
161.35.111.22039DigitalOcean, LLCUS
150.107.36.8222UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK
216.180.246.16416Google LLCUS
216.180.246.18816Google LLCUS
62.210.142.16516Scaleway SASFR

Networks it comes from

ASNOrganisationProbesSource IPs
AS396982Google LLC9762
AS14061DigitalOcean, LLC803
AS63949Akamai Connected Cloud803
AS8075Microsoft Corporation5631
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED535
AS213412ONYPHE SAS2623

Where it comes from

CountryProbes
United States360
Hong Kong39
France35
The Netherlands18
United Kingdom15
Russia13

Client strings seen on this port

User agentProbes
Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)51
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity34
Mozilla/5.0 zgrab/0.x27
Mozilla/5.0 (X11; Linux x86_64; rv:135.0) Gecko/20100101 Firefox/135.022
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.019

Port report

Port report

Loading live data…