Port report
Port 4949
7-day honeypot probe activity targeting destination port 4949. First seen 2026-06-30, most recent 2026-07-06 12:24.
232
Events 7d
31
Source IPs
15
Source ASNs
11
Countries
Top source ASNs
- AS63949Akamai Connected Cloud93
- AS14061DigitalOcean, LLC74
- AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED20
- AS214996netcup GmbH16
- AS213412ONYPHE SAS8
- AS45102Alibaba (US) Technology Co., Ltd.6
- AS209334Modat B.V.3
- AS213438ColocaTel Inc.2
- AS12989Black HOST Ltd2
- AS212512Detai Prosperous Technologies Limited2
Top source IPs hitting port 4949
- 198.58.111.25046 eventsKnown scanner USseen Jul 2
- 167.172.158.1146 eventsKnown scanner USseen Jul 2
- 66.228.53.20746 eventsKnown scanner USseen Jul 2
- 159.223.125.20526 eventsKnown scanner USseen Jul 2
- 152.53.81.2516 eventsProbing US· AS214996 netcup GmbHseen Jul 4
- 150.107.36.23612 eventsProbing HK· AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 2
- 165.154.182.2198 eventsProbing US· AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 1
- 47.237.186.1903 eventsProbing SG· AS45102 Alibaba (US) Technology Co., Ltd.seen Jul 5
- 47.236.244.1973 eventsProbing SG· AS45102 Alibaba (US) Technology Co., Ltd.seen Jun 30
- 157.230.26.2292 eventsProbing DE· AS14061 DigitalOcean, LLCseen Jul 4
- 86.54.31.322 eventsKnown scanner CAseen Jul 5
- 45.134.225.162 eventsProbing DE· AS213438 ColocaTel Inc.seen Jul 6
- 192.253.248.1802 eventsProbing IR· AS213790 Limited Network LTDseen Jul 4
- 85.217.149.601 eventsKnown scanner CAseen Jul 3
- 80.94.95.2211 eventsProbing RO· AS204428 SS-Netseen Jul 1
- 79.164.41.1681 eventsProbing RU· AS8615 Central Telegraph Public Joint-stock Companyseen Jul 2
- 91.196.152.2171 eventsKnown scanner FRseen Jul 4
- 45.82.78.1051 eventsProbing DE· AS212512 Detai Prosperous Technologies Limitedseen Jul 4
- 85.217.149.471 eventsKnown scanner CAseen Jun 30
- 147.45.112.1751 eventsProbing VU· AS209132 Alviva Holding Limitedseen Jun 30
- 91.231.89.2041 eventsKnown scanner FRseen Jul 2
- 91.196.152.1071 eventsKnown scanner FRseen Jul 1
- 104.155.11.1011 eventsProbing BEseen Jul 6
- 91.231.89.1131 eventsKnown scanner FRseen Jul 1
- 91.196.152.1211 eventsKnown scanner FRseen Jul 2
Top user-agents on port 4949
- Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4 240.111 Safari/537.3610
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.04
- Mozilla/5.0 zgrab/0.x3
- Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)3
- fasthttp2
- Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.362
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.362
- Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.361
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.111
JSON: /api/port/4949. CSV: /api/port/4949?format=csv.