Port 9301

HoneyLabs honeypots recorded 272 probes against destination port 9301 from 65 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 21:29, most recently 2026-11-15 17:51 (UTC).

What the sensors show

The sources sat in 12 networks across 8 countries. No single address sent more than 7% of them. The largest source network was AS14061 (DigitalOcean, LLC), with 44% of the probes from 11 addresses. 16 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
134.122.122.17820DigitalOcean, LLCUS
159.223.104.18420DigitalOcean, LLCUS
104.248.57.25120DigitalOcean, LLCUS
206.189.177.5020DigitalOcean, LLCUS
165.227.196.9914DigitalOcean, LLCUS
174.138.46.14711DigitalOcean, LLCUS
165.227.194.13611DigitalOcean, LLCUS
66.132.195.528Censys, Inc.US

Networks it comes from

ASNOrganisationProbesSource IPs
AS14061DigitalOcean, LLC12011
AS398324Censys, Inc.8512
AS398705Censys, Inc.233
AS396982Google LLC1917
AS213412ONYPHE SAS88
AS42969Alpha Strike Labs GmbH44

Where it comes from

CountryProbes
United States244
United Kingdom13
Singapore4
Canada3
Germany2
France2

Client strings seen on this port

User agentProbes
Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)78
Go-http-client/1.136
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity17
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.08

Port report

Port report

Loading