Port 9011

HoneyLabs honeypots recorded 117 probes against destination port 9011 from 36 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 18:25, most recently 2026-11-15 05:59 (UTC).

What the sensors show

The sources sat in 12 networks across 10 countries. One address, 186.179.61.243, sent 48% of them. The largest source network was AS52393 (Corporacion Dana S.A.), with 48% of the probes from 1 address. 9 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
186.179.61.24356Corporacion Dana S.A.US
62.210.142.6516Scaleway SASFR
104.248.210.243DigitalOcean, LLCUS
35.203.211.913Google LLCGB
162.216.150.1853Google LLCUS
162.216.149.1563Google LLCUS
8.219.125.1552Alibaba (US) Technology Co., Ltd.SG
8.216.4.2412Alibaba (US) Technology Co., Ltd.JP

Networks it comes from

ASNOrganisationProbesSource IPs
AS52393Corporacion Dana S.A.561
AS396982Google LLC1913
AS12876Scaleway SAS161
AS213412ONYPHE SAS88
AS45102Alibaba (US) Technology Co., Ltd.42
AS9808China Mobile Communications Group Co., Ltd.33

Where it comes from

CountryProbes
United States71
France26
United Kingdom7
China3
Canada2
Japan2

Client strings seen on this port

User agentProbes
Python/3.12 aiohttp/3.14.529
Mozilla/5.0 (compatible; scanner)27
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity18
Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)16
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08

Port report

Port report

Loading