Port report
Port 9400
7-day honeypot probe activity targeting destination port 9400. First seen 2026-06-30, most recent 2026-07-06 00:56.
190
Events 7d
45
Source IPs
10
Source ASNs
13
Countries
Top source ASNs
Top source countries
Top source IPs hitting port 9400
- 34.125.166.20230 eventsProbing USseen Jun 30
- 34.104.216.18430 eventsProbing JPseen Jun 30
- 34.176.47.1230 eventsProbing CLseen Jun 30
- 35.201.139.8230 eventsProbing TWseen Jun 30
- 66.132.172.2208 eventsKnown scanner USseen Jun 30
- 34.159.34.2055 eventsProbing DEseen Jun 30
- 34.65.24.955 eventsProbing CHseen Jun 30
- 35.234.110.1815 eventsProbing DEseen Jun 30
- 34.107.44.1085 eventsProbing DEseen Jun 30
- 151.241.119.1133 eventsProbing US· AS174 Cogent Communications, LLCseen Jul 3
- 35.203.210.1542 eventsProbing GBseen Jul 2
- 93.152.208.422 eventsProbing BG· AS211486 Alferov Aleksey Aleksandrovichseen Jul 5
- 79.164.41.1682 eventsProbing RU· AS8615 Central Telegraph Public Joint-stock Companyseen Jul 2
- 35.203.210.1212 eventsProbing GBseen Jun 30
- 162.216.149.821 eventsProbing USseen Jul 5
- 91.196.152.1781 eventsKnown scanner FRseen Jul 2
- 85.217.149.121 eventsKnown scanner CAseen Jul 4
- 91.231.89.841 eventsKnown scanner FRseen Jul 1
- 91.231.89.1921 eventsKnown scanner FRseen Jul 2
- 91.231.89.1471 eventsKnown scanner FRseen Jul 1
- 162.216.150.321 eventsProbing USseen Jul 5
- 151.240.102.641 eventsProbing US· AS137409 GSL Networks Pty LTDseen Jul 1
- 147.185.132.351 eventsProbing US· AS396982 Google LLCseen Jul 5
- 91.196.152.51 eventsKnown scanner FRseen Jul 2
- 85.217.140.81 eventsKnown scanner FRseen Jul 2
Top user-agents on port 9400
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity18
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
- Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)6
- Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)6
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0 Safari/605.1.152
- Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36 OPR/63.0.3368.352
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.362
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.1 Safari/605.1.152
- Mozilla/5.0 (Linux; Android 9; Redmi Note 5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.143 Mobile Safari/537.362
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.362
JSON: /api/port/9400. CSV: /api/port/9400?format=csv.