Port 9095

HoneyLabs honeypots recorded 295 probes against destination port 9095 from 43 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 22:32, most recently 2026-11-15 19:47 (UTC).

What the sensors show

The sources sat in 10 networks across 9 countries. One address, 89.248.171.24, sent 37% of them. The largest source network was AS202425 (IP Volume inc), with 80% of the probes from 5 addresses. 11 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
89.248.171.24110IP Volume incNL
93.174.93.1271IP Volume incNL
80.82.77.20243IP Volume incNL
185.136.15.15312AO ALMAZKZ
89.248.172.339IP Volume incNL
86.54.31.406Black HOST LtdCA
80.82.77.333IP Volume incNL
47.251.20.292Alibaba (US) Technology Co., Ltd.US

Networks it comes from

ASNOrganisationProbesSource IPs
AS202425IP Volume inc2365
AS396982Google LLC2320
AS210328AO ALMAZ121
AS213412ONYPHE SAS88
AS12989Black HOST Ltd61
AS47890Unmanaged Ltd22

Where it comes from

CountryProbes
The Netherlands236
United States21
Kazakhstan12
United Kingdom11
Canada6
Belgium3

Client strings seen on this port

User agentProbes
Python/3.10 aiohttp/3.8.4233
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity20
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.363
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.363

Port report

Port report

Loading