Port report
Port 9997
7-day honeypot probe activity targeting destination port 9997. First seen 2026-07-20, most recent 2026-07-27 10:50.
322
Events 7d
110
Source IPs
14
Source ASNs
9
Countries
Top source ASNs
Top source countries
Top source IPs hitting port 9997
- 139.177.205.7146 eventsKnown scanner USseen Jul 23
- 45.79.207.14746 eventsKnown scanner USseen Jul 23
- 66.228.38.20046 eventsKnown scanner USseen Jul 23
- 192.53.121.24146 eventsKnown scanner CAseen Jul 23
- 15.204.244.835 eventsProbing US路 AS16276 OVH SASseen Jul 20
- 138.197.101.953 eventsKnown scanner USseen Jul 27
- 20.80.105.502 eventsKnown scanner USseen Jul 22
- 20.55.35.2172 eventsKnown scanner USseen Jul 27
- 20.14.78.2532 eventsKnown scanner USseen Jul 22
- 20.84.145.612 eventsKnown scanner USseen Jul 23
- 20.65.194.572 eventsKnown scanner USseen Jul 25
- 135.237.126.2192 eventsKnown scanner USseen Jul 25
- 172.215.145.1622 eventsKnown scanner USseen Jul 23
- 20.15.162.2042 eventsKnown scanner USseen Jul 24
- 20.14.90.842 eventsKnown scanner USseen Jul 27
- 20.29.23.942 eventsKnown scanner USseen Jul 23
- 20.118.216.532 eventsKnown scanner USseen Jul 25
- 20.14.73.632 eventsKnown scanner USseen Jul 20
- 91.238.181.722 eventsProbing FR路 AS49434 Fbw Networks SASseen Jul 25
- 20.168.12.1692 eventsKnown scanner USseen Jul 20
- 20.106.57.1222 eventsKnown scanner USseen Jul 20
- 138.91.107.72 eventsKnown scanner USseen Jul 24
- 20.80.83.1152 eventsKnown scanner USseen Jul 27
- 47.84.138.342 eventsProbing SG路 AS45102 Alibaba (US) Technology Co., Ltd.seen Jul 21
- 20.65.195.382 eventsKnown scanner USseen Jul 22
Top user-agents on port 9997
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity47
- Mozilla/5.0 zgrab/0.x27
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.020
- Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)3
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.362
- python-requests/2.32.51
- curl/7.74.01
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.361
- curl/7.64.11
- Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.01
JSON: /api/port/9997. CSV: /api/port/9997?format=csv.