Port 8118

HoneyLabs honeypots recorded 413 probes against destination port 8118 from 83 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 21:56, most recently 2026-11-15 21:09 (UTC).

What the sensors show

The sources sat in 22 networks across 12 countries. No single address sent more than 12% of them. The largest source network was AS202425 (IP Volume inc), with 25% of the probes from 6 addresses. 11 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
89.248.171.2448IP Volume incNL
157.230.218.17446DigitalOcean, LLCUS
139.177.205.7146Akamai Connected CloudUS
173.230.145.10646Akamai Connected CloudUS
157.230.85.2746DigitalOcean, LLCUS
93.174.93.1244IP Volume incNL
177.112.215.13316TELEFONICA BRASIL S.ABR
130.210.118.7612Oracle CorporationIN

Networks it comes from

ASNOrganisationProbesSource IPs
AS202425IP Volume inc1046
AS14061DigitalOcean, LLC965
AS63949Akamai Connected Cloud922
AS8075Microsoft Corporation1717
AS26599TELEFONICA BRASIL S.A161
AS51396Pfcloud UG (haftungsbeschrankt)167

Where it comes from

CountryProbes
United States226
The Netherlands121
Brazil22
France13
India12
United Kingdom6

Client strings seen on this port

User agentProbes
Python/3.10 aiohttp/3.8.488
proxy-prefilter/122
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity15
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.014
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.367

Port report

Port report

Loading