Port report
Port 9099
7-day honeypot probe activity targeting destination port 9099. First seen 2026-06-29, most recent 2026-07-06 09:36.
249
Events 7d
48
Source IPs
15
Source ASNs
10
Countries
Top source ASNs
Top source countries
Top source IPs hitting port 9099
- 172.245.21.30167 eventsProbing US· AS36352 HostPapaseen Jul 3
- 160.119.71.13612 eventsProbing SC· AS49870 Alsycon B.V.seen Jun 29
- 80.66.83.809 eventsProbing RU· AS216473 Bashinskii Vadim Ruslanovichseen Jul 2
- 204.76.203.2124 eventsProbing NL· AS51396 Pfcloud UG (haftungsbeschrankt)seen Jun 30
- 161.97.169.94 eventsProbing FRseen Jul 5
- 204.76.203.2134 eventsProbing NL· AS51396 Pfcloud UG (haftungsbeschrankt)seen Jun 30
- 91.196.152.392 eventsKnown scanner FRseen Jul 1
- 47.251.245.582 eventsProbing US· AS45102 Alibaba (US) Technology Co., Ltd.seen Jul 4
- 35.203.211.1732 eventsProbing GBseen Jul 6
- 79.164.41.1682 eventsProbing RU· AS8615 Central Telegraph Public Joint-stock Companyseen Jul 2
- 8.216.3.2182 eventsProbing JP· AS45102 Alibaba (US) Technology Co., Ltd.seen Jul 4
- 35.203.210.1552 eventsProbing GBseen Jul 4
- 204.76.203.2212 eventsProbing NL· AS51396 Pfcloud UG (haftungsbeschrankt)seen Jun 30
- 185.126.82.2011 eventsProbing US· AS63473 HostHatch, LLCseen Jul 4
- 85.217.149.631 eventsKnown scanner CAseen Jun 30
- 162.216.150.1921 eventsProbing USseen Jul 2
- 85.217.140.181 eventsKnown scanner FRseen Jul 1
- 35.203.210.2381 eventsProbing GBseen Jul 5
- 91.231.89.801 eventsKnown scanner FRseen Jul 1
- 162.216.149.1291 eventsProbing USseen Jul 4
- 47.251.90.481 eventsProbing US· AS45102 Alibaba (US) Technology Co., Ltd.seen Jul 4
- 147.185.133.171 eventsProbing US· AS396982 Google LLCseen Jul 2
- 204.76.203.2141 eventsProbing NL· AS51396 Pfcloud UG (haftungsbeschrankt)seen Jun 30
- 162.216.149.1011 eventsProbing USseen Jul 5
- 91.231.89.1511 eventsKnown scanner FRseen Jun 30
Top user-agents on port 9099
- Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36167
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity20
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.364
- Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)4
- Mozilla/5.0 (Linux; Android 14; SM-F9560 Build/UP1A.231005.007; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/127.0.6533.103 Mobile Safari/537.363
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.363
- curl/7.74.02
- curl/7.64.12
- Mozilla/5.0 (iPhone; CPU iPhone OS 17_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/134.0.6998.99 Mobile/15E148 Safari/604.12
JSON: /api/port/9099. CSV: /api/port/9099?format=csv.