Port report
Port 9411
7-day honeypot probe activity targeting destination port 9411. First seen 2026-06-29, most recent 2026-07-06 10:05.
1,531
Events 7d
42
Source IPs
6
Source ASNs
13
Countries
Top source ASNs
Top source countries
Top source IPs hitting port 9411
- 34.20.206.1563 eventsProbing USseen Jun 30
- 35.189.40.125563 eventsProbing AUseen Jun 30
- 34.174.193.147230 eventsProbing USseen Jun 30
- 34.182.105.1330 eventsProbing USseen Jun 30
- 34.104.188.17430 eventsProbing JPseen Jun 30
- 34.176.145.13230 eventsProbing CLseen Jun 30
- 34.53.53.19630 eventsProbing USseen Jun 30
- 34.90.3.1215 eventsProbing NLseen Jun 30
- 34.142.9.175 eventsProbing GBseen Jun 30
- 35.242.250.445 eventsProbing DEseen Jun 30
- 34.79.227.365 eventsProbing BEseen Jun 30
- 152.32.148.1403 eventsProbing USΒ· AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 6
- 93.152.208.382 eventsProbing BGΒ· AS211486 Alferov Aleksey Aleksandrovichseen Jul 2
- 93.152.208.422 eventsProbing BGΒ· AS211486 Alferov Aleksey Aleksandrovichseen Jul 1
- 35.203.210.1861 eventsProbing GBseen Jul 2
- 85.217.140.451 eventsKnown scanner FRseen Jul 3
- 85.217.140.481 eventsKnown scanner FRseen Jul 5
- 85.217.140.131 eventsKnown scanner FRseen Jul 5
- 162.216.150.2431 eventsProbing USseen Jul 1
- 35.203.210.1991 eventsProbing GBΒ· AS396982 Google LLCseen Jul 4
- 162.216.150.2221 eventsProbing USseen Jul 1
- 162.216.149.151 eventsProbing USseen Jul 2
- 35.203.211.61 eventsProbing GBseen Jul 5
- 85.217.149.181 eventsKnown scanner CAseen Jul 5
- 162.216.150.131 eventsProbing USseen Jul 5
Top user-agents on port 9411
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity18
- Mozilla/5.0 (Linux; Android 9; moto x4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.143 Mobile Safari/537.366
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.365
- Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)5
- Mozilla/5.0 (Linux; Android 9; G8341) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.365
- Mozilla/5.0 (compatible; Konqueror/4.5; Windows) KHTML/4.5.4 (like Gecko)4
- Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.2.14) Gecko/20110218 AlexaToolbar/alxf-2.0 Firefox/3.6.144
- Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.102404
- Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.364
- Mozilla/5.0 (X11; FreeBSD amd64) AppleWebKit/535.22+ (KHTML, like Gecko) Chromium/17.0.963.56 Chrome/17.0.963.56 Safari/535.22+ Epiphany/2.30.64
JSON: /api/port/9411. CSV: /api/port/9411?format=csv.