Port 9200 (Elastic)
HoneyLabs honeypots recorded 1,780 probes against destination port 9200 (Elastic) from 564 distinct source IP addresses in the last 7 days.
First observed 2026-09-23 07:54:01, most recently 2026-09-30 07:46:37 (UTC).
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 97.107.136.223 | 46 | Akamai Connected Cloud | US |
| 157.245.80.102 | 46 | DigitalOcean, LLC | US |
| 159.89.128.133 | 46 | DigitalOcean, LLC | US |
| 96.126.96.45 | 46 | Akamai Connected Cloud | US |
| 45.79.2.232 | 46 | Akamai Connected Cloud | US |
| 66.228.62.61 | 46 | Akamai Connected Cloud | US |
| 146.190.214.88 | 38 | DigitalOcean, LLC | US |
| 137.184.111.43 | 38 | DigitalOcean, LLC | US |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS14061 | DigitalOcean, LLC | 460 | 38 |
| AS63949 | Akamai Connected Cloud | 229 | 15 |
| AS8075 | Microsoft Corporation | 187 | 150 |
| AS6939 | Hurricane Electric LLC | 181 | 103 |
| AS396982 | Google LLC | 91 | 54 |
| AS135377 | UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED | 91 | 10 |
Where it comes from
| Country | Probes |
|---|---|
| United States | 1,373 |
| Hong Kong | 96 |
| Belgium | 61 |
| Germany | 56 |
| Portugal | 21 |
| Russia | 20 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| Mozilla/5.0 zgrab/0.x | 161 |
| Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) | 106 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 | 77 |
| Go-http-client/1.1 | 70 |
| Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0 | 56 |
Port report
Port report
Loading live data…