Port 8888 (HTTP-alt)
HoneyLabs honeypots recorded 1,643 probes against destination port 8888 (HTTP-alt) from 425 distinct source IP addresses in the last 7 days.
First observed 2026-11-08 08:46, most recently 2026-11-15 08:27 (UTC).
What the sensors show
The sources sat in 82 networks across 30 countries. No single address sent more than 8% of them. The largest source network was AS22168 (The Shadowserver Foundation, Inc.), with 11% of the probes from 69 addresses. 12 of the 25 busiest addresses are recognised research scanners.
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 134.19.179.211 | 135 | Global Layer B.V. | NL |
| 45.135.193.193 | 58 | Pfcloud UG (haftungsbeschrankt) | DE |
| 95.164.203.59 | 56 | ISP4Life INC | US |
| 95.164.201.139 | 52 | ISP4Life INC | US |
| 89.248.171.24 | 38 | IP Volume inc | NL |
| 177.112.215.133 | 31 | TELEFONICA BRASIL S.A | BR |
| 240e:c2:1800:84:0:1:3:2 | 30 | No.293,Wanbao Avenue | CN |
| 93.174.93.12 | 28 | IP Volume inc | NL |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS22168 | The Shadowserver Foundation, Inc. | 174 | 69 |
| AS6939 | Hurricane Electric LLC | 169 | 60 |
| AS49453 | Global Layer B.V. | 155 | 2 |
| AS394814 | ISP4Life INC | 108 | 2 |
| AS202425 | IP Volume inc | 90 | 5 |
| AS51396 | Pfcloud UG (haftungsbeschrankt) | 83 | 11 |
Where it comes from
| Country | Probes |
|---|---|
| United States | 771 |
| The Netherlands | 285 |
| Germany | 89 |
| Belgium | 75 |
| China | 61 |
| Hong Kong | 59 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| Mozilla/5.0 | 166 |
| Python/3.10 aiohttp/3.8.4 | 87 |
| Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity | 76 |
| Mozilla/5.0 (compatible) | 68 |
| Python/3.12 aiohttp/3.14.5 | 54 |
Port report
Port report
Loading