Port 9981

HoneyLabs honeypots recorded 287 probes against destination port 9981 from 44 distinct source IP addresses in the last 7 days.

First observed 2026-08-29 05:40:08, most recently 2026-09-05 01:41:33 (UTC).

Most active source addresses

Source IPProbesNetworkCountry
80.82.77.20254IP Volume incNL
165.232.63.9146DigitalOcean, LLCUS
24.199.85.15946DigitalOcean, LLCUS
165.227.206.20346DigitalOcean, LLCUS
174.138.41.20025DigitalOcean, LLCUS
93.174.93.1217IP Volume incNL
80.66.83.807Bashinskii Vadim RuslanovichRU
93.152.208.424Alferov Aleksey AleksandrovichBG

Networks it comes from

ASNOrganisationProbesSource IPs
AS14061DigitalOcean, LLC1645
AS202425IP Volume inc712
AS396982Google LLC2017
AS213412ONYPHE SAS88
AS21859Zenlayer Inc85
AS216473Bashinskii Vadim Ruslanovich71

Where it comes from

CountryProbes
United States186
The Netherlands71
Portugal8
Russia7
United Kingdom6
Bulgaria5

Client strings seen on this port

User agentProbes
Python/3.10 aiohttp/3.8.471
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity20
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.364
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.364

Port report

Port report

Loading live data…