TCP 9191
Synopsis
- PaperCut NG/MF (print management software) uses TCP 9191 by default for its application server web UI (HTTP), with 9192 for HTTPS; in 2023, RCE vulnerabilities (e.g., CVE-2023-27350) were widely exploited by attackers scanning these ports.
- Sierra Wireless AirLink routers (ALEOS) expose the ACEmanager web interface on TCP 9191 (HTTP) by default; many devices have been compromised in the wild via default credentials and ACEmanager vulnerabilities, making this port a frequent target.
Observed activity
Last 30 days
Detailed chart