HoneyLabs
KEV
LookupKEVMCP
Data
The datasetDataset and methodCVEsCampaignsPayloadsPre-disclosureEmissions IndexPortsBlog
Integrations
OverviewFeeds
PricingDocs

Port 9153

HoneyLabs honeypots recorded 136 probes against destination port 9153 from 26 distinct source IP addresses in the last 7 days.

First observed 2026-11-10 01:36, most recently 2026-11-15 18:55 (UTC).

What the sensors show

The sources sat in 4 networks across 4 countries. One address, 89.248.171.24, sent 39% of them. The largest source network was AS202425 (IP Volume inc), with 82% of the probes from 7 addresses. 7 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
89.248.171.2453IP Volume incNL
93.174.93.1243IP Volume incNL
80.82.77.2027IP Volume incNL
185.224.129.1106SpectraIP B.V.NL
89.248.172.333IP Volume incNL
89.248.172.92IP Volume incNL
35.203.211.1902Google LLCGB
93.174.93.342IP Volume incNL

Networks it comes from

ASNOrganisationProbesSource IPs
AS202425IP Volume inc1117
AS396982Google LLC1716
AS62068SpectraIP B.V.61
AS47890Unmanaged Ltd22

Where it comes from

CountryProbes
The Netherlands117
United States10
United Kingdom7
Romania2

Client strings seen on this port

User agentProbes
Python/3.10 aiohttp/3.8.499
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity17
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.366
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.362
Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.362

Port report

Port report

Loading