Port 50996

HoneyLabs honeypots recorded 74 probes against destination port 50996 from 54 distinct source IP addresses in the last 7 days.

First observed 2026-09-17 19:42:54, most recently 2026-09-24 09:55:36 (UTC).

Most active source addresses

Source IPProbesNetworkCountry
45.40.57.247UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDIN
80.238.200.1087HUAWEI CLOUDSSA
128.1.47.1657UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDUS
47.251.160.12Alibaba (US) Technology Co., Ltd.US
47.251.64.1202Alibaba (US) Technology Co., Ltd.US
194.187.176.1201Alpha Strike Labs GmbHDE
194.187.178.1081Alpha Strike Labs GmbHHK
85.217.149.291Modat B.V.CA

Networks it comes from

ASNOrganisationProbesSource IPs
AS396982Google LLC1919
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED142
AS213412ONYPHE SAS1313
AS136907HUAWEI CLOUDS71
AS45102Alibaba (US) Technology Co., Ltd.53
AS208843Alpha Strike Labs GmbH44

Where it comes from

CountryProbes
United States38
France12
Saudi Arabia7
India7
Germany4
Canada2

Client strings seen on this port

User agentProbes
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity19
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.014
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.012
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.08
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.364

Port report

Port report

Loading live data…