Port 9997

HoneyLabs honeypots recorded 162 probes against destination port 9997 from 109 distinct source IP addresses in the last 7 days.

First observed 2026-08-29 05:55:47, most recently 2026-09-05 01:56:31 (UTC).

Most active source addresses

Source IPProbesNetworkCountry
80.94.95.2217SS-NetRO
148.153.188.2466CDS Global Cloud Co., LtdUS
165.154.163.106UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDUS
123.160.223.753ChinanetCN
123.160.223.723ChinanetCN
47.89.225.1612Alibaba (US) Technology Co., Ltd.US
20.29.29.892Microsoft CorporationUS
167.99.107.572DigitalOcean, LLCUS

Networks it comes from

ASNOrganisationProbesSource IPs
AS396982Google LLC4644
AS8075Microsoft Corporation4221
AS213412ONYPHE SAS1616
AS4134Chinanet115
AS45102Alibaba (US) Technology Co., Ltd.105
AS204428SS-Net71

Where it comes from

CountryProbes
United States115
China12
Romania7
Canada6
France5
United Kingdom5

Client strings seen on this port

User agentProbes
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity46
Mozilla/5.0 zgrab/0.x24
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.017
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.3610
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4 240.111 Safari/537.3610

Port report

Port report

Loading live data…