Port 9119

HoneyLabs honeypots recorded 69 probes against destination port 9119 from 32 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 10:37, most recently 2026-11-15 05:08 (UTC).

What the sensors show

The sources sat in 8 networks across 5 countries. One address, 39.106.215.228, sent 51% of them. The largest source network was AS37963 (Hangzhou Alibaba Advertising Co.,Ltd.), with 51% of the probes from 1 address. 7 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
39.106.215.22835Hangzhou Alibaba Advertising Co.,Ltd.CN
152.32.234.394UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDUS
91.230.168.201ONYPHE SASUS
162.216.149.1301Google LLCUS
47.89.195.1831Alibaba (US) Technology Co., Ltd.US
35.203.210.881Google LLCGB
195.184.76.2091ONYPHE SASUS
91.230.168.1651ONYPHE SASUS

Networks it comes from

ASNOrganisationProbesSource IPs
AS37963Hangzhou Alibaba Advertising Co.,Ltd.351
AS396982Google LLC1616
AS213412ONYPHE SAS88
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED41
AS45102Alibaba (US) Technology Co., Ltd.22
AS47890Unmanaged Ltd22

Where it comes from

CountryProbes
China35
United States24
United Kingdom6
Portugal2
Romania2

Client strings seen on this port

User agentProbes
Python-urllib/3.635
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity16
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
Go-http-client/1.13
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.362

Port report

Port report

Loading