Port 9302
HoneyLabs honeypots recorded 557 probes against destination port 9302 from 48 distinct source IP addresses in the last 7 days.
First observed 2026-10-28 06:05, most recently 2026-11-03 21:25 (UTC).
What the sensors show
The sources sat in 5 networks across 6 countries. No single address sent more than 7% of them. The largest source network was AS14061 (DigitalOcean, LLC), with 96% of the probes from 30 addresses. None of the 25 busiest addresses is a recognised research scanner.
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 134.122.18.198 | 38 | DigitalOcean, LLC | US |
| 167.172.152.67 | 38 | DigitalOcean, LLC | US |
| 24.144.121.181 | 38 | DigitalOcean, LLC | US |
| 67.205.153.31 | 38 | DigitalOcean, LLC | US |
| 137.184.75.139 | 38 | DigitalOcean, LLC | US |
| 157.230.6.87 | 38 | DigitalOcean, LLC | US |
| 192.81.213.69 | 38 | DigitalOcean, LLC | US |
| 68.183.134.210 | 38 | DigitalOcean, LLC | US |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS14061 | DigitalOcean, LLC | 534 | 30 |
| AS396982 | Google LLC | 18 | 14 |
| AS23273 | HostPapa | 2 | 1 |
| AS51396 | Pfcloud UG (haftungsbeschrankt) | 2 | 2 |
| AS198953 | Proton66 OOO | 1 | 1 |
Where it comes from
| Country | Probes |
|---|---|
| United States | 526 |
| United Kingdom | 11 |
| Singapore | 11 |
| Germany | 6 |
| The Netherlands | 2 |
| Russia | 1 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| Go-http-client/1.1 | 99 |
| Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity | 18 |
| Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/) | 11 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 | 5 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:146.0) Gecko/20100101 Firefox/146.0 | 2 |
Port report
Port report
Loading live data…