Port 8080 (HTTP-alt)

HoneyLabs honeypots recorded 7,647 probes against destination port 8080 (HTTP-alt) from 754 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 08:32, most recently 2026-11-15 08:29 (UTC).

What the sensors show

The sources sat in 130 networks across 41 countries. One address, 85.155.14.49, sent 38% of them. The largest source network was AS199457 (SolidCore Hosting LTD), with 38% of the probes from 3 addresses. 3 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
85.155.14.492,916SolidCore Hosting LTDDE
134.19.179.211733Global Layer B.V.NL
45.198.224.125173Vpsvault.host LtdUS
79.124.58.82150Tamatiya EOODBG
129.213.151.234143Oracle CorporationUS
160.119.66.206135Alsycon B.V.SC
172.236.28.161117Akamai Connected CloudGB
89.248.171.24110IP Volume incNL

Networks it comes from

ASNOrganisationProbesSource IPs
AS199457SolidCore Hosting LTD2,9223
AS49453Global Layer B.V.7331
AS14061DigitalOcean, LLC29377
AS202425IP Volume inc2514
AS6939Hurricane Electric LLC22096
AS63949Akamai Connected Cloud2165

Where it comes from

CountryProbes
Germany3,151
United States1,588
The Netherlands1,122
Bulgaria248
Belgium204
United Kingdom179

Client strings seen on this port

User agentProbes
Mozilla/5.0426
Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15384
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36380
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36374
Mozilla/5.0 (X11; Linux x86_64; rv:126.0) Gecko/20100101 Firefox/126.0371

Port report

Port report

Loading