Port report
Port 9020
7-day honeypot probe activity targeting destination port 9020. First seen 2026-06-29, most recent 2026-07-06 13:17.
249
Events 7d
70
Source IPs
20
Source ASNs
15
Countries
Top source ASNs
Top source countries
Top source IPs hitting port 9020
- 16.58.56.21421 eventsKnown scanner USseen Jul 5
- 3.143.162.21019 eventsKnown scanner USseen Jul 5
- 79.124.58.12614 eventsProbing BG· AS50360 Tamatiya EOODseen Jul 3
- 160.119.71.13612 eventsProbing SC· AS49870 Alsycon B.V.seen Jul 4
- 3.130.168.212 eventsKnown scanner USseen Jul 1
- 160.119.71.9212 eventsProbing SC· AS49870 Alsycon B.V.seen Jul 4
- 18.218.118.2039 eventsKnown scanner USseen Jun 29
- 3.131.220.1219 eventsKnown scanner USseen Jun 30
- 192.253.248.1808 eventsProbing IR· AS213790 Limited Network LTDseen Jul 4
- 165.154.221.1517 eventsProbing VN· AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 2
- 152.32.206.647 eventsProbing US· AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 2
- 165.154.120.2267 eventsProbing TH· AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 2
- 216.180.246.637 eventsKnown scanner USseen Jul 5
- 165.154.174.2067 eventsProbing GB· AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 2
- 45.134.225.166 eventsProbing DE· AS213438 ColocaTel Inc.seen Jul 5
- 18.116.101.2206 eventsKnown scanner USseen Jul 4
- 118.193.38.1786 eventsProbing HK· AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 6
- 152.42.132.375 eventsProbing NL· AS14061 DigitalOcean, LLCseen Jul 5
- 161.97.169.94 eventsProbing FRseen Jul 5
- 45.142.154.913 eventsProbing HK· AS9465 AGOTOZ PTE. LTD.seen Jul 6
- 45.142.154.403 eventsProbing HK· AS9465 AGOTOZ PTE. LTD.seen Jul 5
- 45.142.154.1003 eventsProbing HK· AS9465 AGOTOZ PTE. LTD.seen Jul 6
- 151.240.63.1613 eventsProbing US· AS137409 GSL Networks Pty LTDseen Jul 3
- 3.17.72.1083 eventsProbing USseen Jul 5
- 45.195.83.1373 eventsProbing IN· AS140641 YOTTA NETWORK SERVICES PRIVATE LIMITEDseen Jul 2
Top user-agents on port 9020
- visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.3679
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.016
- Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_0; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.202.0 Safari/532.014
- Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.3614
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity14
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.011
- Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)7
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.366
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.366
- Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.366
JSON: /api/port/9020. CSV: /api/port/9020?format=csv.