Port 8123

HoneyLabs honeypots recorded 865 probes against destination port 8123 from 182 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 09:07, most recently 2026-11-15 06:36 (UTC).

What the sensors show

The sources sat in 33 networks across 19 countries. No single address sent more than 15% of them. The largest source network was AS202425 (IP Volume inc), with 36% of the probes from 6 addresses. 15 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
89.248.171.24130IP Volume incNL
93.174.93.1291IP Volume incNL
80.82.77.20259IP Volume incNL
142.93.95.9546DigitalOcean, LLCUS
161.35.116.22446DigitalOcean, LLCUS
104.237.138.22546Akamai Connected CloudUS
45.79.218.3846Akamai Connected CloudUS
89.248.172.3324IP Volume incNL

Networks it comes from

ASNOrganisationProbesSource IPs
AS202425IP Volume inc3086
AS14061DigitalOcean, LLC1055
AS63949Akamai Connected Cloud944
AS6939Hurricane Electric LLC8542
AS22168The Shadowserver Foundation, Inc.4936
AS264617GRUPO PANAGLOBAL 15 S.A423

Where it comes from

CountryProbes
United States400
The Netherlands329
Switzerland35
Panama30
Romania22
Kazakhstan14

Client strings seen on this port

User agentProbes
Python/3.10 aiohttp/3.8.4304
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity19
Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)16
ApcosysBot/1.0 (+https://apcosys.net)14
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.014

Port report

Port report

Loading