Port 8101

HoneyLabs honeypots recorded 272 probes against destination port 8101 from 44 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 11:27, most recently 2026-11-15 05:46 (UTC).

What the sensors show

The sources sat in 14 networks across 10 countries. No single address sent more than 17% of them. The largest source network was AS14061 (DigitalOcean, LLC), with 34% of the probes from 2 addresses. 11 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
167.172.213.5446DigitalOcean, LLCUS
45.79.218.20046Akamai Connected CloudUS
157.230.135.7946DigitalOcean, LLCUS
66.228.58.10046Akamai Connected CloudUS
193.29.13.19916Bunea TELECOM SRLRO
148.153.56.17412CDS Global Cloud Co., LtdUS
150.107.36.2366UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK
151.243.11.1806LLC Vash Kredit BankAE

Networks it comes from

ASNOrganisationProbesSource IPs
AS14061DigitalOcean, LLC922
AS63949Akamai Connected Cloud922
AS63199CDS Global Cloud Co., Ltd223
AS42397Bunea TELECOM SRL161
AS396982Google LLC1515
AS209630LLC Vash Kredit Bank92

Where it comes from

CountryProbes
United States214
Romania17
France10
United Arab Emirates9
United Kingdom8
Hong Kong6

Client strings seen on this port

User agentProbes
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4 240.111 Safari/537.3620
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity15
Mozilla/5.0 (compatible; FlowIQLabsBot/1.0; +https://flowiq-labs.com/scanning-info)9
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:32.0) Gecko/20100101 Firefox/32.04

Port report

Port report

Loading