Port 9009

HoneyLabs honeypots recorded 305 probes against destination port 9009 from 68 distinct source IP addresses in the last 7 days.

First observed 2026-10-08 18:07:21, most recently 2026-10-15 14:39:34.011000 (UTC).

Most active source addresses

Source IPProbesNetworkCountry
185.3.95.7746Akamai Connected CloudGB
138.197.146.5946DigitalOcean, LLCCA
64.227.6.21246DigitalOcean, LLCUS
178.62.38.9646DigitalOcean, LLCGB
118.193.56.18414UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDTH
152.32.206.647UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDUS
118.194.250.27UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDTH
148.153.56.1706CDS Global Cloud Co., LtdUS

Networks it comes from

ASNOrganisationProbesSource IPs
AS14061DigitalOcean, LLC1394
AS63949Akamai Connected Cloud472
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED283
AS396982Google LLC1615
AS213412ONYPHE SAS88
AS21859Zenlayer Inc86

Where it comes from

CountryProbes
United Kingdom96
United States91
Canada48
Thailand21
Portugal9
The Netherlands8

Client strings seen on this port

User agentProbes
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.016
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity15
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.368
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.366

Port report

Port report

Loading live data…