Port 9870
HoneyLabs honeypots recorded 19 probes against destination port 9870 from 17 distinct source IP addresses in the last 7 days.
First observed 2026-09-17 00:17:20, most recently 2026-09-23 07:30:05 (UTC).
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 44.220.188.84 | 2 | Amazon.com, Inc. | US |
| 18.97.5.118 | 2 | Amazon.com, Inc. | US |
| 147.185.133.74 | 1 | Google LLC | US |
| 35.203.210.23 | 1 | Google LLC | GB |
| 35.203.211.203 | 1 | Google LLC | GB |
| 162.216.149.161 | 1 | Google LLC | US |
| 35.203.210.85 | 1 | Google LLC | GB |
| 35.203.211.208 | 1 | Google LLC | GB |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS396982 | Google LLC | 13 | 13 |
| AS14618 | Amazon.com, Inc. | 4 | 2 |
| AS209334 | Modat B.V. | 1 | 1 |
| AS201814 | MEVSPACE sp. z o.o. | 1 | 1 |
Where it comes from
| Country | Probes |
|---|---|
| United States | 9 |
| United Kingdom | 8 |
| Canada | 1 |
| Azerbaijan | 1 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity | 13 |
| Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/59.0.3092.52 Safari/537.32 | 1 |
| Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/57.0.3026.74 Safari/537.32 | 1 |
| Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/54.0.3104.59 Safari/537.32 | 1 |
| Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/51.0.3069.69 Safari/537.32 | 1 |
Port report
Port report
Loading live data…