iAnonymous lookups: 30/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.
Filtered actors
port=6005
48 unique IPs · 252 events · 11 countries · 17 ASNs
Activity · last 7d
peak 56 on 2026-06-30
Top source networks · click to refine
port: 6005×window1h24h7d30d🔒90d🔒
Turn this query into a daily email digest or an IOC feed URL.Save as feed
Sample payloads
top distinct probes matching this query| Protocol | Port | Probe / payload | Hits | Example |
|---|---|---|---|---|
| HTTP | 6005 | GET /favicon.ico UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 | 65 · 26 IPs | 123.160.223.74 → |
| HTTP | 6005 | GET / UA: curl/7.64.1 | 64 · 37 IPs | 8.216.1.228 → |
| - | 6005 | Content-Length: 991 {"jsonrpc":"2.0","method":"initialize","params":{"processId":0,"rootUri":"file:///tmp/test","capabilities":{"workspace":{"didChangeConfiguration":{},"didChan… | 19 · 16 IPs | 66.132.172.108 → |
| TLS | 6005 | 50 52 49 20 2a 20 48 54 54 50 2f 32 2e 30 0d 0a 0d 0a 53 4d 0d 0a 0d 0a …(57 bytes) | 18 · 15 IPs | 167.94.146.63 → |
| RDP | 6005 | /*� Cookie: mstshash=Administr | 11 · 2 IPs | 152.53.81.25 → |
| HTTP | 6005 | GET /login UA: Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler) | 8 · 8 IPs | 216.180.246.191 → |
| - | 6005 | l | 6 · 6 IPs | 8.216.1.228 → |
| HTTP | 6005 | GET /wiki UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) | 4 · 4 IPs | 66.132.172.108 → |
| HTTP | 6005 | GET /robots.txt UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Ed… | 3 · 3 IPs | 118.194.250.31 → |
| HTTP | 6005 | GET /security.txt UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) | 3 · 3 IPs | 66.132.195.37 → |
| HTTP | 6005 | GET /.well-known/security.txt UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) | 2 · 2 IPs | 199.45.154.125 → |
| HTTP | 6005 | POST /_next/server UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Edg/134.… | 2 | 160.119.71.136 → |
IPCountryASNTop portsEvents