Port report
Port 9988
7-day honeypot probe activity targeting destination port 9988. First seen 2026-06-29, most recent 2026-07-06 08:19.
223
Events 7d
67
Source IPs
19
Source ASNs
18
Countries
Top source ASNs
Top source countries
Top source IPs hitting port 9988
- 35.194.246.3630 eventsProbing TWseen Jun 30
- 34.176.164.5230 eventsProbing CLseen Jun 30
- 34.176.211.12730 eventsProbing CLseen Jun 30
- 160.119.71.9212 eventsProbing SC· AS49870 Alsycon B.V.seen Jul 4
- 160.119.71.13612 eventsProbing SC· AS49870 Alsycon B.V.seen Jul 5
- 204.76.203.2148 eventsProbing NL· AS51396 Pfcloud UG (haftungsbeschrankt)seen Jun 30
- 152.42.132.376 eventsProbing NL· AS14061 DigitalOcean, LLCseen Jul 5
- 34.185.210.1425 eventsProbing DEseen Jun 30
- 34.178.236.1935 eventsProbing NLseen Jun 30
- 45.141.233.475 eventsProbing BG· AS201814 MEVSPACE sp. z o.o.seen Jul 4
- 35.228.153.1045 eventsProbing FIseen Jun 30
- 152.53.81.255 eventsProbing US· AS214996 netcup GmbHseen Jun 29
- 204.76.203.2134 eventsProbing NL· AS51396 Pfcloud UG (haftungsbeschrankt)seen Jun 30
- 204.76.203.2213 eventsProbing NL· AS51396 Pfcloud UG (haftungsbeschrankt)seen Jun 30
- 185.242.226.733 eventsKnown scanner USseen Jul 6
- 147.185.132.2272 eventsProbing US· AS396982 Google LLCseen Jul 6
- 47.250.119.1972 eventsProbing MY· AS45102 Alibaba (US) Technology Co., Ltd.seen Jul 3
- 79.164.41.1682 eventsProbing RU· AS8615 Central Telegraph Public Joint-stock Companyseen Jul 2
- 47.89.230.2262 eventsProbing US· AS45102 Alibaba (US) Technology Co., Ltd.seen Jul 1
- 123.160.223.752 eventsProbing CN· AS4134 Chinanetseen Jul 1
- 204.76.203.2222 eventsProbing NL· AS51396 Pfcloud UG (haftungsbeschrankt)seen Jun 30
- 47.84.143.1452 eventsProbing SG· AS45102 Alibaba (US) Technology Co., Ltd.seen Jul 5
- 207.90.244.192 eventsProbing US· AS174 Cogent Communications, LLCseen Jun 29
- 194.187.176.2281 eventsProbing DE· AS208843 Alpha Strike Labs GmbHseen Jul 5
- 162.216.149.1491 eventsProbing USseen Jul 1
Top user-agents on port 9988
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity16
- Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.08
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.366
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.06
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Edg/134.0.0.05
- Mozilla/5.0 (iPhone; CPU iPhone OS 17_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/134.0.6998.99 Mobile/15E148 Safari/604.15
- Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.6998.135 Mobile Safari/537.363
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.190 Safari/537.363
- Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)3
- curl/7.74.03
JSON: /api/port/9988. CSV: /api/port/9988?format=csv.