Port report
Port 9009
7-day honeypot probe activity targeting destination port 9009. First seen 2026-06-29, most recent 2026-07-06 14:28.
319
Events 7d
90
Source IPs
26
Source ASNs
22
Countries
Top source ASNs
- AS396982Google LLC172
- AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED29
- AS49870Alsycon B.V.24
- AS211680Sistemas Informaticos, S.A.13
- AS213412ONYPHE SAS8
- AS45102Alibaba (US) Technology Co., Ltd.8
- AS208843Alpha Strike Labs GmbH8
- AS50219Valence Technology Co.6
- AS213790Limited Network LTD5
- AS10439CariNet, Inc.4
Top source countries
Top source IPs hitting port 9009
- 34.64.248.10530 eventsProbing KRseen Jun 30
- 34.176.48.22530 eventsProbing CLseen Jun 30
- 35.189.143.3230 eventsProbing JPseen Jun 30
- 104.196.127.13230 eventsProbing USseen Jun 30
- 216.180.246.713 eventsKnown scanner USseen Jul 5
- 160.119.71.13612 eventsProbing SC· AS49870 Alsycon B.V.seen Jul 5
- 160.119.71.9212 eventsProbing SC· AS49870 Alsycon B.V.seen Jul 4
- 152.32.156.1177 eventsProbing IN· AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 2
- 152.32.245.447 eventsProbing TH· AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 2
- 152.32.235.907 eventsProbing US· AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 2
- 165.154.59.1687 eventsProbing PH· AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 2
- 34.79.227.365 eventsProbing BEseen Jun 30
- 34.105.203.1915 eventsProbing GBseen Jun 30
- 34.155.100.1975 eventsProbing FRseen Jun 30
- 35.242.217.2205 eventsProbing DEseen Jun 30
- 71.6.134.2334 eventsProbing US· AS10439 CariNet, Inc.seen Jul 5
- 80.94.95.434 eventsProbing RO· AS204428 SS-Netseen Jul 1
- 86.54.31.384 eventsKnown scanner CAseen Jul 3
- 161.97.169.94 eventsProbing FRseen Jul 5
- 47.237.120.863 eventsProbing SG· AS45102 Alibaba (US) Technology Co., Ltd.seen Jul 5
- 185.226.197.323 eventsKnown scanner PTseen Jul 2
- 45.156.128.513 eventsKnown scanner PTseen Jul 2
- 192.253.248.1803 eventsProbing IR· AS213790 Limited Network LTDseen Jul 2
- 45.142.193.1983 eventsProbing RO· AS213388 Iic Rail Limitedseen Jul 4
- 45.156.129.753 eventsKnown scanner PTseen Jul 6
Top user-agents on port 9009
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity17
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.016
- Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)13
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.3610
- Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.369
- Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.08
- python-httpx/0.28.18
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
- Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)5
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.114
JSON: /api/port/9009. CSV: /api/port/9009?format=csv.