Port 9014

HoneyLabs honeypots recorded 54 probes against destination port 9014 from 40 distinct source IP addresses in the last 7 days.

First observed 2026-11-02 00:37, most recently 2026-11-08 06:02 (UTC).

What the sensors show

The sources sat in 13 networks across 9 countries. No single address sent more than 7% of them. The largest source network was AS396982 (Google LLC), with 33% of the probes from 17 addresses. 6 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
185.242.226.1264IP Volume incUS
123.160.223.743ChinanetCN
121.199.162.333Hangzhou Alibaba Advertising Co.,Ltd.CN
104.248.210.243DigitalOcean, LLCUS
47.254.152.1292Alibaba (US) Technology Co., Ltd.DE
162.216.150.1672Google LLCUS
47.254.36.1302Alibaba (US) Technology Co., Ltd.US
207.90.244.192Cogent Communications, LLCUS

Networks it comes from

ASNOrganisationProbesSource IPs
AS396982Google LLC1817
AS213412ONYPHE SAS88
AS45102Alibaba (US) Technology Co., Ltd.63
AS202425IP Volume inc41
AS4134Chinanet42
AS37963Hangzhou Alibaba Advertising Co.,Ltd.31

Where it comes from

CountryProbes
United States31
China9
United Kingdom5
Germany4
The Netherlands1
Russia1

Client strings seen on this port

User agentProbes
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity17
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.366
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.190 Safari/537.364
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.115 Safari/537.363

Port report

Port report

Loading