Port report
Port 99
7-day honeypot probe activity targeting destination port 99. First seen 2026-07-20, most recent 2026-07-27 14:59.
231
Events 7d
72
Source IPs
25
Source ASNs
18
Countries
Top source ASNs
Top source countries
Top source IPs hitting port 99
- 45.194.67.2916 eventsProbing US路 AS215925 Vpsvault.host Ltdseen Jul 27
- 45.205.1.24116 eventsProbing BR路 AS215925 Vpsvault.host Ltdseen Jul 26
- 45.194.67.2716 eventsProbing US路 AS215925 Vpsvault.host Ltdseen Jul 26
- 45.205.1.24016 eventsProbing BR路 AS215925 Vpsvault.host Ltdseen Jul 24
- 216.180.246.15915 eventsKnown scanner USseen Jul 25
- 45.205.1.24614 eventsProbing BRseen Jul 27
- 151.243.11.2358 eventsProbing AE路 AS209630 LLC Vash Kredit Bankseen Jul 26
- 45.205.1.2478 eventsProbing BRseen Jul 25
- 45.205.1.2428 eventsProbing BR路 AS215925 Vpsvault.host Ltdseen Jul 27
- 45.194.67.308 eventsProbing US路 AS215925 Vpsvault.host Ltdseen Jul 25
- 45.205.1.2438 eventsProbing BR路 AS215925 Vpsvault.host Ltdseen Jul 25
- 193.8.186.298 eventsProbing SG路 AS201002 PebbleHost Ltdseen Jul 24
- 45.205.1.2448 eventsProbing BR路 AS215925 Vpsvault.host Ltdseen Jul 22
- 151.243.11.2308 eventsProbing AE路 AS209630 LLC Vash Kredit Bankseen Jul 26
- 193.8.186.316 eventsProbing SG路 AS201002 PebbleHost Ltdseen Jul 24
- 80.66.83.806 eventsProbing RU路 AS216473 Bashinskii Vadim Ruslanovichseen Jul 26
- 151.241.119.1333 eventsProbing US路 AS174 Cogent Communications, LLCseen Jul 25
- 213.21.239.702 eventsProbing LV路 AS211443 Sino Worldwide Trading Limitedseen Jul 23
- 47.84.198.1102 eventsProbing SG路 AS45102 Alibaba (US) Technology Co., Ltd.seen Jul 22
- 45.131.155.1112 eventsProbing DE路 AS212512 Detai Prosperous Technologies Limitedseen Jul 26
- 123.160.223.752 eventsProbing CN路 AS4134 Chinanetseen Jul 23
- 1.80.146.1101 eventsProbing CN路 AS4134 Chinanetseen Jul 26
- 91.196.152.271 eventsKnown scanner FRseen Jul 22
- 147.185.133.2101 eventsProbing US路 AS396982 Google LLCseen Jul 20
- 35.203.211.1141 eventsProbing GBseen Jul 22
Top user-agents on port 99
- Mozilla/5.0 (compatible; FlowIQLabsBot/1.0; +https://flowiq-labs.com/scanning-info)134
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity19
- Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)15
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.3614
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
- Microsoft WinRM Client3
- Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.362
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.362
- Mozilla/5.0 zgrab/0.x2
- Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.361
JSON: /api/port/99. CSV: /api/port/99?format=csv.