Port report
Port 9999
7-day honeypot probe activity targeting destination port 9999. First seen 2026-05-14, most recent 2026-05-21 11:07.
Events 7d
1,412
Source IPs
245
Source ASNs
54
Countries
26
Top source ASNs
Top source countries
Top source IPs hitting port 9999
- 185.91.127.85259 eventsDE· AS49581 Tube-Hosting
- 101.27.96.209114 eventsCN· AS4837 CHINA UNICOM China169 Backbone
- 67.205.149.4148 eventsUS· AS14061 DigitalOcean, LLC
- 167.99.228.18348 eventsUS· AS14061 DigitalOcean, LLC
- 173.230.135.4648 eventsUS· AS63949 Akamai Connected Cloud
- 18.218.118.20330 eventsUS· AS16509 Amazon.com, Inc.
- 3.129.187.3830 eventsUS· AS16509 Amazon.com, Inc.
- 89.205.21.20124 eventsMK· AS41557 Drustvo za telekomunikaciski uslugi TELEKABEL DOOEL Stip
- 193.32.162.10424 eventsRO· AS47890 Unmanaged Ltd
- 66.132.224.23119 eventsUS
- 18.116.101.22019 eventsUS· AS16509 Amazon.com, Inc.
- 3.132.26.23218 eventsUS· AS16509 Amazon.com, Inc.
- 3.130.168.216 eventsUS· AS16509 Amazon.com, Inc.
- 16.58.56.21416 eventsUS· AS16509 Amazon.com, Inc.
- 152.53.81.2514 eventsUS· AS214996 netcup GmbH
- 80.66.83.4313 eventsRU· AS216473 Bashinskii Vadim Ruslanovich
- 193.32.162.2812 eventsRO· AS47890 Unmanaged Ltd
- 35.153.183.1712 eventsUS· AS14618 Amazon.com, Inc.
- 148.153.56.17012 eventsUS· AS63199 CDS Global Cloud Co., Ltd
- 66.132.195.3611 eventsUS
- 66.132.172.18711 eventsUS· AS398324 Censys, Inc.
- 167.94.146.5410 eventsUS· AS398705 Censys, Inc.
- 199.45.155.8910 eventsUS· AS398722 Censys, Inc.
- 199.45.155.10510 eventsUS· AS398722 Censys, Inc.
- 167.94.146.4810 eventsUS· AS398705 Censys, Inc.
Top user-agents on port 9999
- Python/3.11 aiohttp/3.13.5114
- Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)107
- visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36102
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.3643
- curl/7.74.023
- curl/7.64.123
- Mozilla/5.0 (X11; Linux; rv:74.0) Gecko/20100101 Firefox/74.012
- Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_8; de-at) AppleWebKit/533.21.1 (KHTML, like Gecko) Version/5.0.5 Safari/533.21.112
- Go-http-client/1.112
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity10
JSON: /api/port/9999. CSV: /api/port/9999?format=csv.