Port report
Port 9900
7-day honeypot probe activity targeting destination port 9900. First seen 2026-06-29, most recent 2026-07-06 13:59.
211
Events 7d
61
Source IPs
17
Source ASNs
17
Countries
Top source ASNs
Top source countries
Top source IPs hitting port 9900
- 35.221.223.6631 eventsProbing TWseen Jun 30
- 136.109.225.15730 eventsProbing USseen Jun 30
- 34.84.86.20030 eventsProbing JPseen Jun 30
- 160.119.71.9212 eventsProbing SC· AS49870 Alsycon B.V.seen Jul 4
- 160.119.71.13612 eventsProbing SC· AS49870 Alsycon B.V.seen Jul 5
- 80.94.95.439 eventsProbing RO· AS204428 SS-Netseen Jul 1
- 66.132.224.2348 eventsKnown scanner USseen Jun 30
- 34.107.126.1595 eventsProbing DEseen Jun 30
- 34.91.179.295 eventsProbing NLseen Jun 30
- 34.12.226.1365 eventsProbing NLseen Jun 30
- 183.36.35.2074 eventsProbing CN· AS4134 Chinanetseen Jul 4
- 171.244.48.1373 eventsProbing VN· AS38731 CHT Compamy Ltdseen Jul 4
- 45.141.233.473 eventsProbing BG· AS201814 MEVSPACE sp. z o.o.seen Jul 4
- 183.36.35.2062 eventsProbing CN· AS4134 Chinanetseen Jul 4
- 79.164.41.1682 eventsProbing RU· AS8615 Central Telegraph Public Joint-stock Companyseen Jul 2
- 14.18.16.1502 eventsProbing CN· AS4134 Chinanetseen Jul 5
- 35.203.210.912 eventsProbing GBseen Jul 5
- 14.18.16.1542 eventsProbing CN· AS4134 Chinanetseen Jul 3
- 14.18.16.1552 eventsProbing CN· AS4134 Chinanetseen Jul 3
- 162.216.150.2391 eventsProbing USseen Jul 1
- 47.84.137.561 eventsProbing SG· AS45102 Alibaba (US) Technology Co., Ltd.seen Jul 3
- 194.187.176.731 eventsProbing DE· AS208843 Alpha Strike Labs GmbHseen Jul 4
- 194.187.178.2471 eventsProbing HK· AS215778 Alpha Strike Labs GmbHseen Jul 4
- 147.185.133.1491 eventsProbing US· AS396982 Google LLCseen Jul 2
- 35.203.210.1261 eventsProbing GBseen Jun 30
Top user-agents on port 9900
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity17
- Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.08
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:52.0) Gecko/20100101 Firefox/52.06
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.366
- Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)6
- Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)5
- Mozilla/5.0 (iPhone; CPU iPhone OS 17_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/134.0.6998.99 Mobile/15E148 Safari/604.15
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.364
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.364
JSON: /api/port/9900. CSV: /api/port/9900?format=csv.