Port report
Port 999
7-day honeypot probe activity targeting destination port 999. First seen 2026-07-02, most recent 2026-07-08 23:56.
230
Events 7d
89
Source IPs
32
Source ASNs
17
Countries
Top source ASNs
Top source countries
Top source IPs hitting port 999
- 80.94.92.13033 eventsProbing RO路 AS47890 Unmanaged Ltdseen Jul 6
- 88.214.25.13817 eventsProbing DE路 AS35042 Layer7 Networks GmbHseen Jul 6
- 160.119.71.13612 eventsProbing SC路 AS49870 Alsycon B.V.seen Jul 6
- 160.119.71.9212 eventsProbing SC路 AS49870 Alsycon B.V.seen Jul 5
- 216.180.246.399 eventsKnown scanner USseen Jul 6
- 45.198.224.87 eventsProbing US路 AS215925 Vpsvault.host Ltdseen Jul 7
- 64.89.160.1115 eventsProbing US路 AS205759 Ghosty Networks LLCseen Jul 6
- 176.65.148.25 eventsProbing NL路 AS51396 Pfcloud UG (haftungsbeschrankt)seen Jul 8
- 216.180.246.645 eventsKnown scanner USseen Jul 5
- 185.242.226.744 eventsKnown scanner USseen Jul 4
- 102.220.160.384 eventsProbing SI路 AS197769 VPS Dedicated LLCseen Jul 7
- 176.65.134.34 eventsProbing DE路 AS51396 Pfcloud UG (haftungsbeschrankt)seen Jul 8
- 176.65.148.1444 eventsProbing NL路 AS51396 Pfcloud UG (haftungsbeschrankt)seen Jul 8
- 45.141.233.1174 eventsProbing BG路 AS201814 MEVSPACE sp. z o.o.seen Jul 6
- 179.43.134.1144 eventsProbing CH路 AS51852 Private Layer INCseen Jul 8
- 176.65.148.254 eventsProbing NL路 AS51396 Pfcloud UG (haftungsbeschrankt)seen Jul 8
- 85.11.167.1543 eventsProbing NL路 AS197170 TechTies Inc.seen Jul 7
- 185.242.3.1213 eventsProbing NL路 AS401626 Netiface America, Inc.seen Jul 2
- 45.156.87.1633 eventsProbing NL路 AS197170 TechTies Inc.seen Jul 2
- 94.26.106.2523 eventsProbing DE路 AS197170 TechTies Inc.seen Jul 2
- 106.75.21.803 eventsProbing CN路 AS4808 China Unicom Beijing Province Networkseen Jul 3
- 47.84.65.683 eventsProbing SG路 AS45102 Alibaba (US) Technology Co., Ltd.seen Jul 5
- 130.12.182.983 eventsProbing SI路 AS197769 VPS Dedicated LLCseen Jul 6
- 102.220.160.423 eventsProbing SI路 AS197769 VPS Dedicated LLCseen Jul 6
- 79.164.41.1682 eventsProbing RU路 AS8615 Central Telegraph Public Joint-stock Companyseen Jul 2
Top user-agents on port 999
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity18
- Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)14
- Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.368
- Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.08
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.368
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
- Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)5
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.190 Safari/537.364
- Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.6998.135 Mobile Safari/537.364
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.364
JSON: /api/port/999. CSV: /api/port/999?format=csv.