Port report
Port 9004
7-day honeypot probe activity targeting destination port 9004. First seen 2026-06-29, most recent 2026-07-06 12:59.
954
Events 7d
88
Source IPs
18
Source ASNs
20
Countries
Top source ASNs
Top source countries
- India441
- United States288
- South Korea30
- Japan30
- Chile30
- Seychelles24
- France22
- Germany20
- China14
- United Kingdom12
Top source IPs hitting port 9004
- 8.231.91.50440 eventsProbing INseen Jun 30
- 34.174.33.36230 eventsProbing USseen Jun 30
- 34.176.25.1830 eventsProbing CLseen Jun 30
- 34.104.188.17430 eventsProbing JPseen Jun 30
- 34.47.66.8430 eventsProbing KRseen Jun 30
- 35.237.76.1430 eventsProbing USseen Jun 30
- 160.119.71.9212 eventsProbing SC· AS49870 Alsycon B.V.seen Jul 4
- 160.119.71.13612 eventsProbing SC· AS49870 Alsycon B.V.seen Jul 5
- 165.154.138.578 eventsProbing DE· AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 2
- 118.194.251.1418 eventsProbing TH· AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 2
- 152.32.235.908 eventsProbing US· AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 2
- 165.154.58.2517 eventsProbing PH· AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 2
- 35.198.119.1885 eventsProbing DEseen Jun 30
- 34.79.204.845 eventsProbing BEseen Jun 30
- 34.65.236.1025 eventsProbing CHseen Jun 30
- 35.187.34.585 eventsProbing BEseen Jun 30
- 123.160.223.754 eventsProbing CN· AS4134 Chinanetseen Jul 3
- 185.242.226.874 eventsKnown scanner USseen Jul 6
- 161.97.169.94 eventsProbing FRseen Jul 5
- 106.75.11.343 eventsProbing CN· AS4808 China Unicom Beijing Province Networkseen Jun 30
- 151.241.119.1133 eventsProbing US· AS174 Cogent Communications, LLCseen Jul 3
- 47.84.101.2472 eventsProbing SG· AS45102 Alibaba (US) Technology Co., Ltd.seen Jul 3
- 45.131.46.2452 eventsProbing RU· AS212913 Time-host Ltdseen Jul 5
- 47.251.77.202 eventsProbing US· AS45102 Alibaba (US) Technology Co., Ltd.seen Jul 2
- 45.134.225.162 eventsProbing DE· AS213438 ColocaTel Inc.seen Jul 6
Top user-agents on port 9004
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity18
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.015
- Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.08
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
- Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.367
- Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)6
- Mozilla/5.0 (Linux; U; Android 2.1; en-us; HTC Legend Build/cupcake) AppleWebKit/530.17 (KHTML, like Gecko) Version/4.0 Mobile Safari/530.175
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Edg/134.0.0.05
- Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) snap Chromium/76.0.3809.100 Chrome/76.0.3809.100 Safari/537.364
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.114
JSON: /api/port/9004. CSV: /api/port/9004?format=csv.