Port 50997

HoneyLabs honeypots recorded 62 probes against destination port 50997 from 43 distinct source IP addresses in the last 7 days.

First observed 2026-09-17 16:06:59, most recently 2026-09-24 10:54:41 (UTC).

Most active source addresses

Source IPProbesNetworkCountry
118.193.56.1977UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDTH
45.43.60.2347UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDJP
107.155.48.67UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDUS
198.235.24.872Google LLCUS
198.235.24.2021Google LLCUS
194.187.178.1331Alpha Strike Labs GmbHHK
194.187.176.1621Alpha Strike Labs GmbHDE
198.235.24.771Google LLCUS

Networks it comes from

ASNOrganisationProbesSource IPs
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED213
AS396982Google LLC2019
AS208843Alpha Strike Labs GmbH66
AS213412ONYPHE SAS66
AS215778Alpha Strike Labs GmbH22
AS14618Amazon.com, Inc.22

Where it comes from

CountryProbes
United States29
Japan7
Thailand7
Germany6
France6
Hong Kong2

Client strings seen on this port

User agentProbes
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity20
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.012
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.08
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.06
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.113

Port report

Port report

Loading live data…