Port report
Port 9201
7-day honeypot probe activity targeting destination port 9201. First seen 2026-07-02, most recent 2026-07-08 23:47.
380
Events 7d
73
Source IPs
15
Source ASNs
10
Countries
Top source ASNs
Top source countries
Top source IPs hitting port 9201
- 80.82.77.20299 eventsKnown scanner NLseen Jul 6
- 94.102.49.15561 eventsProbing NL路 AS202425 IP Volume incseen Jul 6
- 167.94.146.5716 eventsKnown scanner USseen Jul 8
- 167.94.146.628 eventsKnown scanner USseen Jul 5
- 66.132.172.988 eventsKnown scanner USseen Jul 2
- 66.132.224.2268 eventsKnown scanner USseen Jul 3
- 66.132.195.818 eventsKnown scanner USseen Jul 4
- 167.94.146.558 eventsKnown scanner USseen Jul 6
- 199.45.154.1448 eventsKnown scanner USseen Jul 5
- 66.132.172.2068 eventsKnown scanner USseen Jul 8
- 66.132.195.548 eventsKnown scanner USseen Jul 3
- 167.94.146.488 eventsKnown scanner USseen Jul 3
- 66.132.195.678 eventsKnown scanner USseen Jul 3
- 66.132.195.828 eventsKnown scanner USseen Jul 4
- 66.132.172.1438 eventsKnown scanner USseen Jul 4
- 199.45.155.968 eventsKnown scanner USseen Jul 2
- 199.45.154.1328 eventsKnown scanner USseen Jul 3
- 167.94.146.598 eventsKnown scanner USseen Jul 7
- 66.132.186.1597 eventsKnown scanner USseen Jul 7
- 66.132.195.346 eventsKnown scanner USseen Jul 7
- 45.141.233.1175 eventsProbing BG路 AS201814 MEVSPACE sp. z o.o.seen Jul 6
- 44.220.188.163 eventsKnown scanner USseen Jul 8
- 142.93.224.1783 eventsProbing NL路 AS14061 DigitalOcean, LLCseen Jul 5
- 98.80.4.93 eventsKnown scanner USseen Jul 4
- 18.97.5.103 eventsKnown scanner USseen Jul 4
Top user-agents on port 9201
- Python/3.10 aiohttp/3.8.4160
- Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)111
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity20
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.016
- elasticsearch-py/7.13.4 (Python 3.10.20)9
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.366
- curl/7.64.13
- curl/8.16.03
- curl/7.74.03
- Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)2
JSON: /api/port/9201. CSV: /api/port/9201?format=csv.