Port 9207

HoneyLabs honeypots recorded 103 probes against destination port 9207 from 34 distinct source IP addresses in the last 7 days.

First observed 2026-11-09 01:49, most recently 2026-11-15 16:59 (UTC).

What the sensors show

The sources sat in 7 networks across 7 countries. One address, 95.164.202.151, sent 54% of them. The largest source network was AS394814 (ISP4Life INC), with 55% of the probes from 2 addresses. 4 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
95.164.202.15156ISP4Life INCUS
207.90.244.46Cogent Communications, LLCUS
117.181.50.986China Mobile Communications Group Co., Ltd.CN
47.250.152.1702Alibaba (US) Technology Co., Ltd.MY
183.204.62.1212China Mobile Communications Group Co., Ltd.CN
47.74.20.572Alibaba (US) Technology Co., Ltd.JP
183.204.62.1222China Mobile Communications Group Co., Ltd.CN
162.216.149.1191Google LLCUS

Networks it comes from

ASNOrganisationProbesSource IPs
AS394814ISP4Life INC572
AS396982Google LLC1717
AS9808China Mobile Communications Group Co., Ltd.114
AS213412ONYPHE SAS77
AS174Cogent Communications, LLC61
AS45102Alibaba (US) Technology Co., Ltd.42

Where it comes from

CountryProbes
United States74
China11
France7
United Kingdom6
Japan2
Malaysia2

Client strings seen on this port

User agentProbes
Python/3.12 aiohttp/3.14.529
Mozilla/5.0 (compatible; scanner)27
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity16
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.07
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.365

Port report

Port report

Loading