iAnonymous lookups: 10/min, 60/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.
Filtered actors
query: port:60006
97 unique IPs · 238 events · 12 countries · 14 ASNs
Activity · last 30d
peak 46 on 2026-05-16
Top source networks · click to refine
query: port:60006×window: 30d
Turn this query into a daily email digest or an IOC feed URL.Save as feed
Sample payloads
top distinct probes matching this query| Protocol | Port | Probe / payload | Hits | Example |
|---|---|---|---|---|
| HTTP | 60006 | GET / UA: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpan… | 74 · 64 IPs | 35.203.211.185 → |
| TPKT | 60006 | TPKT / COTP (ISO-TSAP)03 00 00 13 0e e0 00 00 00 00 00 01 00 08 00 02 00 00 00 | 33 · 11 IPs | 160.119.76.50 → |
| RDP | 60006 | /*� Cookie: mstshash=Administr | 16 · 5 IPs | 80.94.95.43 → |
| HTTP | 60006 | GET /.well-known/security.txt UA: Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpan… | 14 · 14 IPs | 162.216.149.153 → |
| HTTP | 60006 | GET /favicon.ico UA: Go-http-client/1.1 | 10 · 10 IPs | 152.32.213.68 → |
| HTTP | 60006 | GET /manage/account/login UA: Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler) | 6 · 6 IPs | 216.180.246.37 → |
| HTTP | 60006 | GET /admin/index.html UA: Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler) | 6 · 6 IPs | 216.180.246.37 → |
| HTTP | 60006 | GET /robots.txt UA: Go-http-client/1.1 | 6 · 6 IPs | 152.32.213.68 → |
| TLS | 60006 | 0a | 5 · 5 IPs | 85.217.140.4 → |
| HTTP | 60006 | GET /+CSCOE+/logon.html UA: Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler) | 5 · 5 IPs | 216.180.246.37 → |
| HTTP | 60006 | GET /cgi-bin/login.cgi UA: Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler) | 5 · 5 IPs | 216.180.246.37 → |
| HTTP | 60006 | GET /index.html UA: Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler) | 5 · 5 IPs | 216.180.246.37 → |
IPCountryASNTop portsEvents