Port 8089 (Splunk)

HoneyLabs honeypots recorded 882 probes against destination port 8089 (Splunk) from 204 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 08:38, most recently 2026-11-15 08:13 (UTC).

What the sensors show

The sources sat in 41 networks across 24 countries. No single address sent more than 6% of them. The largest source network was AS135377 (UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED), with 36% of the probes from 60 addresses. 9 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
95.164.201.14556ISP4Life INCUS
18.116.101.22040Amazon.com, Inc.US
152.32.172.10828UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK
18.218.118.20324Amazon.com, Inc.US
128.1.132.22018UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK
170.231.237.21417GRUPO PANAGLOBAL 15 S.APA
152.32.189.12116UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK
167.94.146.5516Censys, Inc.US

Networks it comes from

ASNOrganisationProbesSource IPs
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED31760
AS398324Censys, Inc.8011
AS16509Amazon.com, Inc.774
AS394814ISP4Life INC561
AS398705Censys, Inc.485
AS212835Shesternin Vladimir Anatolievich445

Where it comes from

CountryProbes
United States395
Hong Kong204
Russia44
Thailand31
United Kingdom28
The Netherlands24

Client strings seen on this port

User agentProbes
Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)94
curl/7.29.076
Go-http-client/1.172
visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.3656
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.3654

Port report

Port report

Loading