Port 8291

HoneyLabs honeypots recorded 1,094 probes against destination port 8291 from 201 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 08:59, most recently 2026-11-15 08:17 (UTC).

What the sensors show

The sources sat in 36 networks across 21 countries. No single address sent more than 7% of them. The largest source network was AS135377 (UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED), with 44% of the probes from 51 addresses. 1 of the 25 busiest addresses is a recognised research scanner.

Most active source addresses

Source IPProbesNetworkCountry
79.127.218.20179Datacamp LimitedGR
152.32.172.10872UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK
84.17.41.2566Datacamp LimitedUS
128.1.132.22060UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK
95.164.202.9356ISP4Life INCUS
91.240.67.553Hostek ABSE
185.206.227.18043M247 Europe SRLGB
152.32.189.12136UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK

Networks it comes from

ASNOrganisationProbesSource IPs
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED48251
AS60068Datacamp Limited1452
AS394814ISP4Life INC561
AS61207Hostek AB531
AS396982Google LLC5031
AS8075Microsoft Corporation4728

Where it comes from

CountryProbes
Hong Kong365
United States329
Greece79
Thailand72
Sweden65
United Kingdom51

Client strings seen on this port

User agentProbes
Go-http-client/1.1153
Python/3.12 aiohttp/3.14.529
Mozilla/5.0 (compatible; scanner)27
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.016
Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)16

Port report

Port report

Loading