iAnonymous lookups: 10/min, 60/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.
Filtered actors
query: port:9990
159 unique IPs · 110.5K events · 22 countries · 15 ASNs
Activity · last 7d
peak 109.5K on 2026-06-25
Top source networks · click to refine
query: port:9990×window1h24h7d30d🔒90d🔒
Turn this query into a daily email digest or an IOC feed URL.Save as feed
Sample payloads
top distinct probes matching this query| Protocol | Port | Probe / payload | Hits | Example |
|---|---|---|---|---|
| HTTP | 9990 | GET / UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36 | 65 · 55 IPs | 35.199.78.25 → |
| HTTP | 9990 | GET /favicon.ico UA: Mozilla/5.0 (Windows NT 10.0.0; Win64; x64; ) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.63 Chrome/124.0.6… | 29 · 29 IPs | 65.49.1.184 → |
| - | 9990 | MGLNDD_<HONEYPOT>_9990 | 21 · 21 IPs | 20.14.82.143 → |
| RDP | 9990 | /*� Cookie: mstshash=Administr | 11 · 3 IPs | 213.209.159.83 → |
| HTTP | 9990 | GET /portal/.git/config UA: Mozilla/5.0 (Windows NT 6.0; WOW64; rv:40.0) Gecko/20100101 Firefox/40.0 | 10 · 10 IPs | 34.95.143.249 → |
| HTTP | 9990 | GET /wp-content/.git/config UA: Mozilla/5.0 (X11; U; Linux i586; en-US; rv:1.7.3) Gecko/20040924 Epiphany/1.4.4 (Ubuntu) | 10 · 10 IPs | 34.95.143.249 → |
| HTTP | 9990 | GET /.git/config UA: Mozilla/5.0 (Linux; U; Android 2.1; en-us; Nexus One Build/ERD62) AppleWebKit/530.17 (KHTML, like Gecko) Version/4.0 Mob… | 10 · 10 IPs | 34.95.143.249 → |
| HTTP | 9990 | GET /html/.git/config UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 | 10 · 10 IPs | 34.95.143.249 → |
| HTTP | 9990 | GET /blog/.git/config UA: Mozilla/5.0 (Linux U; en-US) AppleWebKit/528.5 (KHTML, like Gecko, Safari/528.5 ) Version/4.0 Kindle/3.0 (screen 600x8… | 10 · 10 IPs | 34.95.143.249 → |
| HTTP | 9990 | GET /frontend/.git/config UA: Mozilla/5.0 (X11; OpenBSD amd64; rv:28.0) Gecko/20100101 Firefox/28.0 | 10 · 10 IPs | 34.95.143.249 → |
| HTTP | 9990 | GET /shop/.git/config UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3844.0 Safari/537.36 | 10 · 10 IPs | 34.95.143.249 → |
| HTTP | 9990 | GET /www/.git/config UA: Googlebot-Video/1.0 | 10 · 10 IPs | 34.95.143.249 → |
IPCountryASNTop portsEvents