Port report
Port 9901
7-day honeypot probe activity targeting destination port 9901. First seen 2026-06-29, most recent 2026-07-05 21:59.
220
Events 7d
39
Source IPs
10
Source ASNs
12
Countries
Top source ASNs
Top source countries
Top source IPs hitting port 9901
- 34.22.95.14730 eventsProbing KRseen Jun 30
- 34.134.20.1230 eventsProbing USseen Jun 30
- 34.176.139.20930 eventsProbing CLseen Jun 30
- 8.231.158.22030 eventsProbing USseen Jun 30
- 160.119.71.9212 eventsProbing SC· AS49870 Alsycon B.V.seen Jul 1
- 160.119.71.13611 eventsProbing SC· AS49870 Alsycon B.V.seen Jul 1
- 204.76.203.807 eventsProbing NL· AS51396 Pfcloud UG (haftungsbeschrankt)seen Jun 30
- 79.124.58.1267 eventsProbing BG· AS50360 Tamatiya EOODseen Jul 4
- 66.132.186.1847 eventsKnown scanner USseen Jul 5
- 204.76.203.787 eventsProbing NL· AS51396 Pfcloud UG (haftungsbeschrankt)seen Jun 30
- 34.32.217.695 eventsProbing NLseen Jun 30
- 35.246.43.1285 eventsProbing GBseen Jun 30
- 34.40.55.565 eventsProbing DEseen Jun 30
- 34.163.148.755 eventsProbing FRseen Jun 30
- 209.99.188.1472 eventsProbing CH· AS402253 SKN Subnet & Telecom Ltdseen Jul 2
- 147.185.133.182 eventsProbing US· AS396982 Google LLCseen Jul 5
- 204.76.203.792 eventsProbing NL· AS51396 Pfcloud UG (haftungsbeschrankt)seen Jun 30
- 79.164.41.1682 eventsProbing RU· AS8615 Central Telegraph Public Joint-stock Companyseen Jul 2
- 85.217.149.231 eventsKnown scanner CAseen Jun 29
- 91.231.89.1581 eventsKnown scanner FRseen Jun 30
- 35.203.211.1451 eventsProbing GBseen Jul 1
- 162.216.149.2011 eventsProbing USseen Jul 5
- 85.217.140.341 eventsKnown scanner FRseen Jun 29
- 68.183.5.1011 eventsProbing NL· AS14061 DigitalOcean, LLCseen Jul 1
- 35.203.210.511 eventsProbing GBseen Jun 30
Top user-agents on port 9901
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity14
- Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_0; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.202.0 Safari/532.07
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.06
- Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)5
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.364
- Mozilla/5.0 (Linux; Android 14; SM-F9560 Build/UP1A.231005.007; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/127.0.6533.103 Mobile Safari/537.364
- Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.363
- Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:136.0) Gecko/20100101 Firefox/136.3
- Mozilla/5.0 (Linux; U; Android 4.2.2; he-il; NEO-X5-116A Build/JDQ39) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Safari/534.303
- Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)2
JSON: /api/port/9901. CSV: /api/port/9901?format=csv.