Port report
Port 9002
7-day honeypot probe activity targeting destination port 9002. First seen 2026-07-02, most recent 2026-07-08 23:54.
297
Events 7d
145
Source IPs
28
Source ASNs
19
Countries
Top source ASNs
Top source countries
Top source IPs hitting port 9002
- 18.218.118.20337 eventsKnown scanner USseen Jul 7
- 160.119.71.9218 eventsProbing SC路 AS49870 Alsycon B.V.seen Jul 8
- 16.58.56.21416 eventsKnown scanner USseen Jul 6
- 152.32.198.2109 eventsProbing GB路 AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 2
- 165.154.119.1589 eventsProbing TH路 AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 2
- 165.154.36.1779 eventsProbing US路 AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 2
- 165.154.12.1279 eventsProbing AE路 AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 2
- 18.116.101.2208 eventsKnown scanner USseen Jul 5
- 179.43.134.1144 eventsProbing CH路 AS51852 Private Layer INCseen Jul 8
- 45.141.233.1174 eventsProbing BG路 AS201814 MEVSPACE sp. z o.o.seen Jul 7
- 80.82.77.334 eventsKnown scanner NLseen Jul 5
- 80.82.77.1394 eventsKnown scanner NLseen Jul 8
- 91.224.92.954 eventsProbing GB路 AS209605 UAB Host Balticseen Jul 8
- 3.129.187.384 eventsKnown scanner USseen Jul 7
- 161.97.169.94 eventsProbing FRseen Jul 5
- 3.17.153.44 eventsProbing USseen Jul 5
- 47.84.73.123 eventsProbing SG路 AS45102 Alibaba (US) Technology Co., Ltd.seen Jul 5
- 45.142.193.2393 eventsProbing RO路 AS213388 Iic Rail Limitedseen Jul 2
- 20.163.5.2432 eventsKnown scanner USseen Jul 5
- 20.98.152.1582 eventsKnown scanner USseen Jul 5
- 8.211.47.1772 eventsProbing DE路 AS45102 Alibaba (US) Technology Co., Ltd.seen Jul 5
- 45.134.225.162 eventsProbing DE路 AS213438 ColocaTel Inc.seen Jul 7
- 20.163.74.202 eventsKnown scanner USseen Jul 5
- 71.6.134.2352 eventsProbing US路 AS10439 CariNet, Inc.seen Jul 5
- 8.216.4.672 eventsProbing JP路 AS45102 Alibaba (US) Technology Co., Ltd.seen Jul 6
Top user-agents on port 9002
- visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.3651
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity44
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.017
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.016
- Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)7
- Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.366
- python-httpx/0.28.16
- Mozilla/5.0 zgrab/0.x5
- Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.365
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.364
JSON: /api/port/9002. CSV: /api/port/9002?format=csv.