Port report
Port 4991
7-day honeypot probe activity targeting destination port 4991. First seen 2026-06-29, most recent 2026-07-06 05:20.
204
Events 7d
22
Source IPs
8
Source ASNs
6
Countries
Top source ASNs
Top source countries
Top source IPs hitting port 4991
- 50.116.54.6146 eventsKnown scanner USseen Jul 2
- 159.89.80.24246 eventsKnown scanner USseen Jul 2
- 157.245.245.22845 eventsKnown scanner USseen Jul 2
- 147.182.179.18629 eventsKnown scanner USseen Jul 2
- 66.132.172.968 eventsKnown scanner USseen Jul 1
- 118.194.251.374 eventsProbing THΒ· AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 6
- 151.240.102.644 eventsProbing USΒ· AS137409 GSL Networks Pty LTDseen Jul 1
- 165.154.36.1053 eventsProbing USΒ· AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 4
- 162.216.150.1272 eventsProbing USseen Jul 2
- 162.216.150.2212 eventsProbing USseen Jul 4
- 162.216.149.1952 eventsProbing USseen Jun 30
- 151.240.63.1612 eventsProbing USΒ· AS137409 GSL Networks Pty LTDseen Jul 3
- 79.164.41.1682 eventsProbing RUΒ· AS8615 Central Telegraph Public Joint-stock Companyseen Jul 2
- 147.185.133.1411 eventsProbing USΒ· AS396982 Google LLCseen Jul 4
- 85.217.149.551 eventsKnown scanner CAseen Jul 1
- 157.230.26.2291 eventsProbing DEΒ· AS14061 DigitalOcean, LLCseen Jul 4
- 85.217.149.401 eventsKnown scanner CAseen Jul 1
- 147.185.133.1661 eventsProbing USΒ· AS396982 Google LLCseen Jun 29
- 162.216.150.1901 eventsProbing USseen Jul 6
- 85.217.149.491 eventsKnown scanner CAseen Jul 1
- 162.216.149.1431 eventsProbing USseen Jul 1
- 68.183.5.1011 eventsProbing NLΒ· AS14061 DigitalOcean, LLCseen Jul 1
Top user-agents on port 4991
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity10
- Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)6
- Go-http-client/1.13
- Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)3
- curl/7.29.02
- Mozilla/5.0 zgrab/0.x2
- Mozilla/5.0 (Windows NT 7_0; Win64; x64) AppleWebKit/579.54 (KHTML, like Gecko) Chrome/57.0.1217 Safari/537.361
JSON: /api/port/4991. CSV: /api/port/4991?format=csv.