Port 6002

HoneyLabs honeypots recorded 238 probes against destination port 6002 from 115 distinct source IP addresses in the last 7 days.

First observed 2026-08-29 01:14:54, most recently 2026-09-05 00:10:41 (UTC).

Most active source addresses

Source IPProbesNetworkCountry
148.153.56.17412CDS Global Cloud Co., LtdUS
165.154.138.1518UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDDE
66.132.195.528Censys, Inc.US
152.32.228.208UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDRU
165.154.164.798UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDDE
66.132.186.1638Censys, Inc.US
66.132.195.1218Censys, Inc.US
167.94.146.518Censys, Inc.US

Networks it comes from

ASNOrganisationProbesSource IPs
AS398324Censys, Inc.416
AS396982Google LLC3333
AS398705Censys, Inc.243
AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED243
AS398722Censys, Inc.183
AS45102Alibaba (US) Technology Co., Ltd.149

Where it comes from

CountryProbes
United States153
Germany28
The Netherlands9
Russia8
United Kingdom8
China7

Client strings seen on this port

User agentProbes
Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)58
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.013
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.012
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity11
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.3610

Port report

Port report

Loading live data…