Port 8889

HoneyLabs honeypots recorded 711 probes against destination port 8889 from 138 distinct source IP addresses in the last 7 days.

First observed 2026-10-21 05:38:05.185000, most recently 2026-10-28 00:08:55.505000 (UTC).

Most active source addresses

Source IPProbesNetworkCountry
109.120.179.192150Aeza Group LLCFR
104.28.243.197111Cloudflare, Inc.FR
104.28.211.19784Cloudflare, Inc.FR
94.154.43.9982Storm Industries LLCNL
86.54.31.3212Black HOST LtdCA
109.105.209.129Zenlayer IncPT
150.107.36.829UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK
66.132.172.2028Censys, Inc.US

Networks it comes from

ASNOrganisationProbesSource IPs
AS13335Cloudflare, Inc.1952
AS210644Aeza Group LLC1501
AS219502Storm Industries LLC821
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED334
AS8075Microsoft Corporation2824
AS396982Google LLC2522

Where it comes from

CountryProbes
France350
The Netherlands109
United States103
Portugal34
Canada19
Hong Kong11

Client strings seen on this port

User agentProbes
Mozilla/5.0 (Windows NT 10.0; Win64; x64) RouterAudit/1.0335
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.81 Safari/537.3666
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.3622
Mozilla/5.020
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity18

Port report

Port report

Loading live data…