HoneyLabs
LookupEnrichFeedsCVEsCampaignsASN IndexMCPBlogDocs
Dashboard
iAnonymous lookups: 10/min, 100/hr per source IP. Sign in for a daily credit budget (free: 500, pro: 50,000) and history.

Filtered actors

query: port:9000

1.2K unique IPs · 5.6K events · 38 countries · 110 ASNs

Activity · last 30d

2026-05-05: 41 events2026-05-06: 198 events2026-05-07: 170 events2026-05-08: 199 events2026-05-09: 270 events2026-05-10: 296 events2026-05-11: 265 events2026-05-12: 220 events2026-05-13: 174 events2026-05-14: 181 events2026-05-15: 182 events2026-05-16: 201 events2026-05-17: 171 events2026-05-18: 122 events2026-05-19: 153 events2026-05-20: 232 events2026-05-21: 155 events2026-05-22: 165 events2026-05-23: 160 events2026-05-24: 137 events2026-05-25: 140 events2026-05-26: 111 events2026-05-27: 147 events2026-05-28: 161 events2026-05-29: 201 events2026-05-30: 221 events2026-05-31: 201 events2026-06-01: 172 events2026-06-02: 243 events2026-06-03: 200 events2026-06-04: 141 events

peak 296 on 2026-05-10

Top source networks · click to refine

AS6939 Hurricane Electric LLC20.5%
AS50360 Tamatiya EOOD11.2%
AS202425 IP Volume inc8.7%
AS8075 Microsoft Corporation5.8%
query: port:9000×window: 30d
Refine
Turn this query into a daily email digest or an IOC feed URL.Save as feed
IPCountryASNTop portsEvents
79.124.40.174ip-40-174.4vendeta.com🇧🇬BGAS50360 Tamatiya EOOD9000/Web-alt630
140.233.190.89🇺🇸USAS214209 Internet Magnate (Pty) Ltd9000/Web-alt313
94.102.49.155🇳🇱NLAS202425 IP Volume inc9000/Web-alt247
80.82.77.202rnd.group-ib.com🇳🇱NLAS202425 IP Volume inc9000/Web-alt225
204.76.203.6204.76.203.6.ptr.pfcloud.network🇳🇱NLAS51396 Pfcloud UG (haftungsbeschrankt)9000/Web-alt80
45.205.1.35🇸🇨SCAS328608 Africa-on-Cloud-AS9000/Web-alt72
162.243.213.195🇺🇸USAS14061 DigitalOcean, LLC9000/Web-alt60
184.105.139.70scan-04.shadowserver.org🇺🇸USAS6939 Hurricane Electric LLC9000/Web-alt52
184.105.247.196scan-15.shadowserver.org🇺🇸USAS6939 Hurricane Electric LLC9000/Web-alt52
185.93.89.79🇮🇷IRAS213790 Limited Network LTD9000/Web-alt52
134.209.11.245prod-boron-sfo2-107.do.binaryedge.ninja🇺🇸USAS14061 DigitalOcean, LLC9000/Web-alt46
23.239.29.116prod-boron-us-central-5.li.binaryedge.ninja🇺🇸USAS63949 Akamai Connected Cloud9000/Web-alt46
81.161.239.13🇺🇸USAS215292 Gravhosting LLC9000/Web-alt45
45.148.10.200🇳🇱NLAS48090 Techoff Srv Limited9000/Web-alt44
16.58.56.214scan.visionheight.com🇺🇸USAS16509 Amazon.com, Inc.9000/Web-alt43
74.82.47.3scan-10.shadowserver.org🇺🇸USAS6939 Hurricane Electric LLC9000/Web-alt41
216.218.206.66scan-05.shadowserver.org🇺🇸USAS6939 Hurricane Electric LLC9000/Web-alt41
65.49.20.68scan-19.shadowserver.org🇺🇸USAS6939 Hurricane Electric LLC9000/Web-alt39
65.49.1.202scan-76-00.shadowserver.org🇺🇸USAS6939 Hurricane Electric LLC9000/Web-alt32
184.105.247.254scan-13o.shadowserver.org🇺🇸USAS6939 Hurricane Electric LLC9000/Web-alt32
103.203.57.26scan-57-26.security.ipip.net🇨🇳CNAS136180 Beijing Tiantexin Tech. Co., Ltd.9000/Web-alt32
74.82.47.5scan-12.shadowserver.org🇺🇸USAS6939 Hurricane Electric LLC9000/Web-alt30
193.32.162.28🇷🇴ROAS47890 Unmanaged Ltd9000/Web-alt30
184.105.139.69scan-03.shadowserver.org🇺🇸USAS6939 Hurricane Electric LLC9000/Web-alt28
184.105.139.67scan-01.shadowserver.org🇺🇸USAS6939 Hurricane Electric LLC9000/Web-alt28
3.143.162.210scan.visionheight.com🇺🇸USAS16509 Amazon.com, Inc.9000/Web-alt25
64.62.156.10scan-60-0.shadowserver.org🇺🇸USAS6939 Hurricane Electric LLC9000/Web-alt25
3.130.168.2scan.visionheight.com🇺🇸USAS16509 Amazon.com, Inc.9000/Web-alt24
193.32.162.104🇷🇴ROAS47890 Unmanaged Ltd9000/Web-alt24
167.94.146.5858.146.94.167.censys-scanner.com🇺🇸USAS398705 Censys, Inc.9000/Web-alt24
138.68.182.214🇬🇧GBAS14061 DigitalOcean, LLC9000/Web-alt21
64.62.197.137scan-48a.shadowserver.org🇺🇸USAS6939 Hurricane Electric LLC9000/Web-alt18
3.131.220.121scan.visionheight.com🇺🇸USAS16509 Amazon.com, Inc.9000/Web-alt18
64.62.197.227scan-51a.shadowserver.org🇺🇸USAS6939 Hurricane Electric LLC9000/Web-alt17
65.49.1.222scan-78-00.shadowserver.org🇺🇸USAS6939 Hurricane Electric LLC9000/Web-alt17
64.62.156.66scan-64-0.shadowserver.org🇺🇸USAS6939 Hurricane Electric LLC9000/Web-alt17
64.62.156.94scan-66-0.shadowserver.org🇺🇸USAS6939 Hurricane Electric LLC9000/Web-alt17
216.218.206.67scan-06.shadowserver.org🇺🇸USAS6939 Hurricane Electric LLC9000/Web-alt17
167.94.146.6262.146.94.167.censys-scanner.com🇺🇸USAS398705 Censys, Inc.9000/Web-alt16
167.94.146.5252.146.94.167.censys-scanner.com🇺🇸USAS398705 Censys, Inc.9000/Web-alt16
64.62.156.212scan-89-0.shadowserver.org🇺🇸USAS6939 Hurricane Electric LLC9000/Web-alt16
93.152.208.26🇿🇦ZAAS209854 Cyberzone S.A.9000/Web-alt16
64.62.156.108scan-67-0.shadowserver.org🇺🇸USAS6939 Hurricane Electric LLC9000/Web-alt15
64.62.197.182scan-42a.shadowserver.org🇺🇸USAS6939 Hurricane Electric LLC9000/Web-alt15
64.62.156.152scan-83-0.shadowserver.org🇺🇸USAS6939 Hurricane Electric LLC9000/Web-alt15
192.253.248.180🇮🇷IRAS213790 Limited Network LTD9000/Web-alt15
65.49.1.66scan-56a.shadowserver.org🇺🇸USAS6939 Hurricane Electric LLC9000/Web-alt15
64.62.156.132scan-81-0.shadowserver.org🇺🇸USAS6939 Hurricane Electric LLC9000/Web-alt15
65.49.1.172scan-73-00.shadowserver.org🇺🇸USAS6939 Hurricane Electric LLC9000/Web-alt15
123.58.210.106jfywzcp.cn🇭🇰HKAS135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED9000/Web-alt14
Showing top 50 by event count. Window is the last 30d. Add or remove filters by clicking any value on a per-IP report.