HoneyLabs
KEV
LookupKEVMCP
Data
The datasetDataset and methodCVEsCampaignsPayloadsPre-disclosureEmissions IndexPortsBlog
Integrations
OverviewFeeds
PricingDocs

Port 9081

HoneyLabs honeypots recorded 126 probes against destination port 9081 from 39 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 18:59, most recently 2026-11-15 04:23 (UTC).

What the sensors show

The sources sat in 14 networks across 10 countries. One address, 134.195.155.159, sent 44% of them. The largest source network was AS46918 (GLOBALHOSTINGSOLUTIONS INC), with 45% of the probes from 2 addresses. 4 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
134.195.155.15956GLOBALHOSTINGSOLUTIONS INCUS
150.107.38.2516UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK
151.243.11.1926LLC Vash Kredit BankAE
36.156.22.26China Mobile communications corporationCN
117.181.50.984China Mobile Communications Group Co., Ltd.CN
204.76.203.2214Pfcloud UG (haftungsbeschrankt)NL
35.203.210.1473Google LLCGB
104.248.210.243DigitalOcean, LLCUS

Networks it comes from

ASNOrganisationProbesSource IPs
AS46918GLOBALHOSTINGSOLUTIONS INC572
AS396982Google LLC1813
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED61
AS209630LLC Vash Kredit Bank61
AS51396Pfcloud UG (haftungsbeschrankt)62
AS9808China Mobile Communications Group Co., Ltd.63

Where it comes from

CountryProbes
United States71
China14
United Kingdom9
France7
Hong Kong6
United Arab Emirates6

Client strings seen on this port

User agentProbes
Python/3.12 aiohttp/3.14.529
Mozilla/5.0 (compatible; scanner)27
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity18
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4 240.111 Safari/537.3610
Mozilla/5.0 (compatible; FlowIQLabsBot/1.0; +https://flowiq-labs.com/scanning-info)6

Port report

Port report

Loading