Port 9100 (Printer)

HoneyLabs honeypots recorded 2,434 probes against destination port 9100 (Printer) from 183 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 08:48, most recently 2026-11-15 06:33 (UTC).

What the sensors show

The sources sat in 35 networks across 20 countries. One address, 80.94.95.211, sent 76% of them. The largest source network was AS204428 (SS-Net), with 76% of the probes from 1 address. 10 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
80.94.95.2111,855SS-NetRO
195.178.110.20468Techoff Srv LimitedBG
168.0.215.8756Corporacion Dana S.A.US
89.248.171.2438IP Volume incNL
93.174.93.1232IP Volume incNL
123.58.215.7420UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK
45.156.129.9011Sistemas Informaticos, S.A.PT
185.191.236.3811GRUPO PANAGLOBAL 15 S.ACH

Networks it comes from

ASNOrganisationProbesSource IPs
AS204428SS-Net1,8551
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED908
AS202425IP Volume inc899
AS48090Techoff Srv Limited681
AS6939Hurricane Electric LLC6747
AS52393Corporacion Dana S.A.561

Where it comes from

CountryProbes
Romania1,857
United States219
The Netherlands96
Bulgaria71
Hong Kong50
Portugal36

Client strings seen on this port

User agentProbes
Mozilla/5.0 (X11; U; Linux i686; es-AR; rv:1.8.1.11) Gecko/20071204 Ubuntu/7.10 (gutsy) Firefox/2.0.0.11259
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36 OPR/44.0.2510.1218259
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; GTB7.5; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.2; .NET4.0C; .NET4.0E)259
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Opera 8.65 [en]259
Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Maxthon/4.4.6.1000 Chrome/30.0.1599.101 Safari/537.36259

Port report

Port report

Loading