Port report
Port 999
7-day honeypot probe activity targeting destination port 999. First seen 2026-05-14, most recent 2026-05-21 09:40.
Events 7d
401
Source IPs
60
Source ASNs
26
Countries
18
Top source ASNs
Top source countries
Top source IPs hitting port 999
- 185.91.127.85244 eventsDE· AS49581 Tube-Hosting
- 51.158.203.24514 eventsNL· AS12876 Scaleway S.a.s.
- 151.115.99.17114 eventsPL· AS12876 Scaleway S.a.s.
- 62.210.198.22714 eventsFR· AS12876 Scaleway S.a.s.
- 193.32.162.2812 eventsRO· AS47890 Unmanaged Ltd
- 77.91.118.468 eventsRU· AS61436 Mikron-Media LLC
- 92.63.197.226 eventsUA· AS211736 FOP Dmytro Nedilskyi
- 176.65.148.25 eventsNL· AS51396 Pfcloud UG (haftungsbeschrankt)
- 77.91.118.184 eventsRU· AS61436 Mikron-Media LLC
- 77.91.118.424 eventsRU· AS61436 Mikron-Media LLC
- 93.152.208.384 eventsZA· AS209854 Cyberzone S.A.
- 185.242.226.744 eventsUS· AS202425 IP Volume inc
- 47.77.238.383 eventsUS· AS45102 Alibaba US Technology Co., Ltd.
- 47.251.115.23 eventsUS· AS45102 Alibaba US Technology Co., Ltd.
- 176.65.134.33 eventsSI· AS36680 Netiface LLC
- 204.76.203.732 eventsNL· AS51396 Pfcloud UG (haftungsbeschrankt)
- 45.198.224.122 eventsSE
- 87.121.84.1022 eventsUS· AS215925 Vpsvault.host Ltd
- 35.203.210.62 eventsGB· AS396982 Google LLC
- 172.94.9.2422 eventsIR· AS213790 Limited Network LTD
- 45.142.193.62 eventsRO· AS214295 Skynet Network Ltd
- 47.250.53.692 eventsMY· AS45102 Alibaba US Technology Co., Ltd.
- 84.233.216.1422 eventsDE· AS212238 Datacamp Limited
- 204.76.203.2242 eventsNL· AS51396 Pfcloud UG (haftungsbeschrankt)
- 194.180.232.352 eventsUS· AS26548 PureVoltage Hosting Inc.
Top user-agents on port 999
- Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.336
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.3622
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity15
- curl/7.81.06
- Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)4
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.190 Safari/537.364
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.364
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Edg/134.0.0.03
- Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.6998.135 Mobile Safari/537.363
- curl/7.64.12
JSON: /api/port/999. CSV: /api/port/999?format=csv.