Port 9433

HoneyLabs honeypots recorded 68 probes against destination port 9433 from 26 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 10:12, most recently 2026-11-15 04:27 (UTC).

What the sensors show

The sources sat in 6 networks across 4 countries. No single address sent more than 13% of them. The largest source network was AS135377 (UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED), with 40% of the probes from 6 addresses. 2 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Source IPProbesNetworkCountry
176.120.22.619Proton66 OOORU
66.132.195.938Censys, Inc.US
152.32.172.1086UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK
152.32.170.555UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK
128.1.132.2204UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK
152.32.128.2144UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK
118.193.44.1124UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK
152.32.135.814UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDHK

Networks it comes from

ASNOrganisationProbesSource IPs
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED276
AS396982Google LLC2016
AS198953Proton66 OOO91
AS398324Censys, Inc.81
AS202425IP Volume inc31
AS63023GTHost11

Where it comes from

CountryProbes
Hong Kong27
United States23
United Kingdom9
Russia9

Client strings seen on this port

User agentProbes
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity20
Go-http-client/1.19
Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)6
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.190 Safari/537.363
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.1 Safari/605.1.151

Port report

Port report

Loading