HoneyLabs
KEV
LookupKEVMCP
Data
The datasetDataset and methodCVEsCampaignsPayloadsPre-disclosureEmissions IndexPortsBlog
Integrations
OverviewFeeds
PricingDocs

Port 10009

HoneyLabs honeypots recorded 132 probes against destination port 10009 from 47 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 19:38, most recently 2026-11-15 04:05 (UTC).

What the sensors show

The sources sat in 12 networks across 11 countries. One address, 134.195.153.61, sent 42% of them. The largest source network was AS46918 (GLOBALHOSTINGSOLUTIONS INC), with 42% of the probes from 1 address. 4 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
134.195.153.6156GLOBALHOSTINGSOLUTIONS INCUS
80.66.83.439Bashinskii Vadim RuslanovichRU
80.66.83.807Bashinskii Vadim RuslanovichRU
204.76.203.2137Pfcloud UG (haftungsbeschrankt)NL
204.76.203.533Pfcloud UG (haftungsbeschrankt)NL
117.181.50.982China Mobile Communications Group Co., Ltd.CN
183.204.62.1242China Mobile Communications Group Co., Ltd.CN
204.76.203.2222Pfcloud UG (haftungsbeschrankt)NL

Networks it comes from

ASNOrganisationProbesSource IPs
AS46918GLOBALHOSTINGSOLUTIONS INC561
AS396982Google LLC1818
AS216473Bashinskii Vadim Ruslanovich162
AS51396Pfcloud UG (haftungsbeschrankt)166
AS213412ONYPHE SAS88
AS9808China Mobile Communications Group Co., Ltd.42

Where it comes from

CountryProbes
United States78
Russia16
The Netherlands16
China7
United Kingdom5
Romania2

Client strings seen on this port

User agentProbes
Python/3.12 aiohttp/3.14.529
Mozilla/5.0 (compatible; scanner)27
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity18
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.364

Port report

Port report

Loading