Port 9200 (Elastic)
HoneyLabs honeypots recorded 2,855 probes against destination port 9200 (Elastic) from 474 distinct source IP addresses in the last 7 days.
First observed 2026-11-08 08:38, most recently 2026-11-15 08:26 (UTC).
What the sensors show
The sources sat in 50 networks across 24 countries. One address, 185.177.72.64, sent 27% of them. The largest source network was AS211590 (Bucklog SARL), with 27% of the probes from 1 address. 9 of the 25 busiest addresses are recognised research scanners.
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 185.177.72.64 | 762 | Bucklog SARL | FR |
| 77.90.185.243 | 520 | Limited Network LTD | DE |
| 89.248.171.24 | 83 | IP Volume inc | NL |
| 93.174.93.12 | 65 | IP Volume inc | NL |
| 95.164.202.168 | 56 | ISP4Life INC | US |
| 167.172.204.47 | 46 | DigitalOcean, LLC | US |
| 50.116.24.43 | 46 | Akamai Connected Cloud | US |
| 157.230.217.30 | 46 | DigitalOcean, LLC | US |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS211590 | Bucklog SARL | 762 | 1 |
| AS213790 | Limited Network LTD | 520 | 1 |
| AS14061 | DigitalOcean, LLC | 284 | 22 |
| AS202425 | IP Volume inc | 196 | 4 |
| AS8075 | Microsoft Corporation | 173 | 141 |
| AS15169 | Google LLC | 94 | 27 |
Where it comes from
| Country | Probes |
|---|---|
| United States | 1,013 |
| France | 777 |
| Germany | 532 |
| The Netherlands | 208 |
| Belgium | 138 |
| Hong Kong | 35 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| Python/3.10 aiohttp/3.8.4 | 188 |
| Mozilla/5.0 zgrab/0.x | 149 |
| Mozilla/4.0 (compatible; MSIE 6.0; Windows CE; PPC; 320x320)Opera 8.65 [en] | 127 |
| Mozilla/5.0 (Linux; U; Android 4.3; en-us; SAMSUNG-SM-N900A Build/JSS15J) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30 | 127 |
| Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36 OPR/47.0.2631.71 | 127 |
Port report
Port report
Loading