Port 8889
HoneyLabs honeypots recorded 196 probes against destination port 8889 from 116 distinct source IP addresses in the last 7 days.
First observed 2026-08-30 07:54:59, most recently 2026-09-06 02:54:53 (UTC).
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 199.45.155.52 | 8 | Censys, Inc. | US |
| 66.132.172.99 | 8 | Censys, Inc. | US |
| 66.132.172.132 | 8 | Censys, Inc. | US |
| 176.120.22.61 | 5 | Proton66 OOO | RU |
| 71.6.199.23 | 4 | CariNet, Inc. | US |
| 93.174.95.106 | 4 | IP Volume inc | NL |
| 66.240.192.138 | 4 | CariNet, Inc. | US |
| 86.54.31.38 | 4 | Black HOST Ltd | GB |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS8075 | Microsoft Corporation | 26 | 22 |
| AS45102 | Alibaba (US) Technology Co., Ltd. | 21 | 9 |
| AS396982 | Google LLC | 21 | 20 |
| AS213412 | ONYPHE SAS | 16 | 16 |
| AS398324 | Censys, Inc. | 16 | 2 |
| AS10439 | CariNet, Inc. | 10 | 3 |
Where it comes from
| Country | Probes |
|---|---|
| United States | 109 |
| The Netherlands | 12 |
| Portugal | 10 |
| United Kingdom | 9 |
| Hong Kong | 9 |
| China | 9 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity | 18 |
| Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) | 18 |
| Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0 | 16 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0 | 8 |
| Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36 | 6 |
Port report
Port report
Loading live data…