iAnonymous lookups: 30/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.
Filtered actors
port=9002
186 unique IPs · 15.9K events · 21 countries · 23 ASNs
Activity · last 7d
peak 15.5K on 2026-06-29
Top source networks · click to refine
port: 9002×window1h24h7d30d🔒90d🔒
Turn this query into a daily email digest or an IOC feed URL.Save as feed
Sample payloads
top distinct probes matching this query| Protocol | Port | Probe / payload | Hits | Example |
|---|---|---|---|---|
| HTTP | 9002 | GET / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) obsidian/1.9.12 Chrome/138.0.7204.235 E… | 179 · 93 IPs | 45.82.78.100 → |
| TLS | 9002 | 0a | 31 · 8 IPs | 71.6.135.131 → |
| HTTP | 9002 | GET /favicon.ico UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 | 27 · 26 IPs | 45.131.155.110 → |
| - | 9002 | MGLNDD_<HONEYPOT>_9002 | 23 · 22 IPs | 20.62.198.61 → |
| HTTP | 9002 | GET /.well-known/security.txt UA: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpan… | 6 · 6 IPs | 162.216.149.211 → |
| HTTP | 9002 | GET /api/jolokia UA: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpan… | 5 · 5 IPs | 35.203.211.82 → |
| HTTP | 9002 | GET /api/jolokia/list UA: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpan… | 5 · 5 IPs | 147.185.133.230 → |
| HTTP | 9002 | GET /jolokia/version UA: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpan… | 5 · 5 IPs | 35.203.210.138 → |
| HTTP | 9002 | GET /actuator/jolokia/version UA: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpan… | 5 · 5 IPs | 35.203.211.196 → |
| HTTP | 9002 | GET /jolokia/exec UA: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpan… | 5 · 5 IPs | 35.203.211.229 → |
| HTTP | 9002 | GET /jolokia/write UA: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpan… | 5 · 5 IPs | 162.216.149.62 → |
| HTTP | 9002 | GET /config.json UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.80 Safari/537.36 | 5 · 5 IPs | 34.53.142.164 → |
IPCountryASNTop portsEvents