Port 8009

HoneyLabs honeypots recorded 293 probes against destination port 8009 from 160 distinct source IP addresses in the last 7 days.

First observed 2026-09-23 10:34:09, most recently 2026-09-30 09:15:18 (UTC).

Most active source addresses

Source IPProbesNetworkCountry
71.6.199.2316CariNet, Inc.US
43.224.66.2477UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK
165.154.194.2097Scloud Pte LtdTW
118.193.68.1447UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDKR
134.168.246.47UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK
118.194.248.1427UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDKR
152.32.150.57UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDUS
128.1.48.2037UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDJP

Networks it comes from

ASNOrganisationProbesSource IPs
AS396982Google LLC5956
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED568
AS8075Microsoft Corporation5029
AS10439CariNet, Inc.275
AS213412ONYPHE SAS1514
AS212835Shesternin Vladimir Anatolievich144

Where it comes from

CountryProbes
United States152
South Korea21
Japan16
United Kingdom14
Hong Kong14
Russia14

Client strings seen on this port

User agentProbes
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.036
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity29
Mozilla/5.0 zgrab/0.x22
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.3614
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.011

Port report

Port report

Loading live data…