Port 6000 (X11)
HoneyLabs honeypots recorded 860 probes against destination port 6000 (X11) from 153 distinct source IP addresses in the last 7 days.
First observed 2026-08-08 19:44:12, most recently 2026-08-15 17:24:21 (UTC).
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 94.154.43.146 | 140 | Storm Industries LLC | NL |
| 172.105.184.93 | 47 | Akamai Connected Cloud | AU |
| 157.245.229.117 | 47 | DigitalOcean, LLC | US |
| 172.105.23.218 | 47 | Akamai Connected Cloud | CA |
| 124.198.132.108 | 27 | 1337 Services GmbH | US |
| 188.166.160.126 | 22 | DigitalOcean, LLC | DE |
| 161.35.22.127 | 21 | DigitalOcean, LLC | DE |
| 206.189.58.194 | 21 | DigitalOcean, LLC | DE |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS14061 | DigitalOcean, LLC | 219 | 34 |
| AS219502 | Storm Industries LLC | 156 | 3 |
| AS63949 | Akamai Connected Cloud | 97 | 5 |
| AS398324 | Censys, Inc. | 72 | 8 |
| AS396982 | Google LLC | 48 | 30 |
| AS210558 | 1337 Services GmbH | 44 | 3 |
Where it comes from
| Country | Probes |
|---|---|
| United States | 292 |
| The Netherlands | 199 |
| Germany | 161 |
| Canada | 51 |
| Australia | 47 |
| France | 18 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) | 74 |
| Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler) | 32 |
| beyondmemory-research (+https://beyondmemory.io/opt-out) | 20 |
| Go-http-client/1.1 | 20 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.3 | 19 |
Port report
Port report
Loading live data…