HoneyLabs
iAnonymous lookups: 30/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.

Filtered actors

port=9014

33 unique IPs · 37 events · 9 countries · 8 ASNs

Activity · last 7d

2026-06-26: 6 events2026-06-27: 1 events2026-06-28: 5 events2026-06-29: 5 events2026-06-30: 2 events2026-07-01: 8 events2026-07-02: 10 events

peak 10 on 2026-07-02

Top source networks · click to refine

Refine
Turn this query into a daily email digest or an IOC feed URL.Save as feed

Sample payloads

top distinct probes matching this query
ProtocolPortProbe / payloadHitsExample
HTTP9014GET /
UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0
28 · 25 IPs195.184.76.37 →
HTTP9014GET /favicon.ico
UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0
5 · 5 IPs195.184.76.132 →
HTTP9014GET /.well-known/security.txt
UA: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpan…
2 · 2 IPs162.216.150.54 →
HTTP9014GET /squid-internal-mgr/cachemgr.cgi
UA: Mozilla/5.0 zgrab/0.x
2 · 2 IPs198.211.98.87 →
IPCountryASNTop portsEvents
Showing top 50 by event count. Window is the last 7d. Add or remove filters by clicking any value on a per-IP report.