HoneyLabs
iAnonymous lookups: 10/min, 60/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.

Filtered actors

port=9668

53 unique IPs · 58 events · 7 countries · 7 ASNs

Activity · last 7d

2026-06-24: 5 events2026-06-25: 4 events2026-06-26: 11 events2026-06-27: 13 events2026-06-28: 12 events2026-06-29: 2 events2026-06-30: 5 events2026-07-01: 6 events

peak 13 on 2026-06-27

Top source networks · click to refine

Refine
Turn this query into a daily email digest or an IOC feed URL.Save as feed

Sample payloads

top distinct probes matching this query
ProtocolPortProbe / payloadHitsExample
HTTP9668GET /
UA: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpan…
29 · 27 IPs162.216.150.63 →
HTTP9668GET /favicon.ico
UA: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36
7 · 7 IPs58.19.141.201 →
HTTP9668GET /.well-known/security.txt
UA: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpan…
4 · 4 IPs147.185.133.237 →
RDP9668/*�Cookie: mstshash=Administr 3213.209.159.83 →
HTTP9668GET /jolokia/list
UA: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpan…
2 · 2 IPs162.216.149.208 →
HTTP9668GET /actuator/jolokia/version
UA: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpan…
2 · 2 IPs162.216.149.12 →
HTTP9668GET /jolokia
UA: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpan…
2 · 2 IPs35.203.211.107 →
HTTP9668GET /api/jolokia/version
UA: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpan…
2 · 2 IPs147.185.133.17 →
HTTP9668GET /jolokia/write
UA: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpan…
2 · 2 IPs147.185.133.169 →
HTTP9668GET /squid-internal-mgr/cachemgr.cgi
UA: Mozilla/5.0 zgrab/0.x
168.183.5.101 →
HTTP9668GET /api/jolokia
UA: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpan…
1162.216.149.215 →
HTTP9668GET /jolokia/exec
UA: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpan…
135.203.211.173 →
IPCountryASNTop portsEvents
Showing top 50 by event count. Window is the last 7d. Add or remove filters by clicking any value on a per-IP report.