Port 9030

HoneyLabs honeypots recorded 71 probes against destination port 9030 from 46 distinct source IP addresses in the last 7 days.

First observed 2026-11-01 18:11, most recently 2026-11-08 16:19 (UTC).

What the sensors show

The sources sat in 10 networks across 8 countries. No single address sent more than 11% of them. The largest source network was AS8075 (Microsoft Corporation), with 27% of the probes from 18 addresses. 5 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
167.94.146.598Censys, Inc.US
165.154.163.106UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDUS
43.106.103.743Alibaba (US) Technology Co., Ltd.SG
121.40.42.1243Hangzhou Alibaba Advertising Co.,Ltd.CN
104.248.210.243DigitalOcean, LLCUS
47.77.216.1892Alibaba (US) Technology Co., Ltd.US
47.254.149.302Alibaba (US) Technology Co., Ltd.DE
20.84.49.732Microsoft CorporationUS

Networks it comes from

ASNOrganisationProbesSource IPs
AS8075Microsoft Corporation1918
AS396982Google LLC1715
AS45102Alibaba (US) Technology Co., Ltd.126
AS398705Censys, Inc.81
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED61
AS37963Hangzhou Alibaba Advertising Co.,Ltd.31

Where it comes from

CountryProbes
United States50
United Kingdom7
Singapore4
China4
Germany2
Japan2

Client strings seen on this port

User agentProbes
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity17
Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)6
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4 240.111 Safari/537.365
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.363
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.115 Safari/537.363

Port report

Port report

Loading