Port report
Port 6002
7-day honeypot probe activity targeting destination port 6002. First seen 2026-06-29, most recent 2026-07-06 13:41.
234
Events 7d
90
Source IPs
21
Source ASNs
14
Countries
Top source ASNs
Top source countries
Top source IPs hitting port 6002
- 165.154.172.8716 eventsProbing US· AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 3
- 199.45.154.1408 eventsKnown scanner USseen Jul 2
- 66.132.186.1908 eventsKnown scanner USseen Jul 2
- 167.94.146.628 eventsKnown scanner USseen Jul 1
- 199.45.155.848 eventsKnown scanner USseen Jul 4
- 167.94.146.558 eventsKnown scanner USseen Jul 4
- 167.94.146.588 eventsKnown scanner USseen Jul 3
- 66.132.172.1018 eventsKnown scanner USseen Jun 29
- 66.132.224.2298 eventsKnown scanner USseen Jun 30
- 118.193.72.1878 eventsProbing PH· AS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDseen Jul 3
- 66.132.186.1708 eventsKnown scanner USseen Jul 2
- 66.132.195.918 eventsKnown scanner USseen Jul 1
- 79.124.58.1267 eventsProbing BG· AS50360 Tamatiya EOODseen Jul 5
- 66.132.224.2387 eventsKnown scanner USseen Jun 30
- 204.76.203.2127 eventsProbing NL· AS51396 Pfcloud UG (haftungsbeschrankt)seen Jun 30
- 160.119.71.1366 eventsProbing SC· AS49870 Alsycon B.V.seen Jul 1
- 66.132.195.946 eventsKnown scanner USseen Jul 5
- 160.119.71.926 eventsProbing SC· AS49870 Alsycon B.V.seen Jul 1
- 204.76.203.2135 eventsProbing NL· AS51396 Pfcloud UG (haftungsbeschrankt)seen Jun 30
- 47.250.82.1343 eventsProbing MY· AS45102 Alibaba (US) Technology Co., Ltd.seen Jun 30
- 47.84.65.133 eventsProbing SG· AS45102 Alibaba (US) Technology Co., Ltd.seen Jun 30
- 47.84.57.583 eventsProbing SG· AS45102 Alibaba (US) Technology Co., Ltd.seen Jul 5
- 8.209.90.193 eventsProbing DE· AS45102 Alibaba (US) Technology Co., Ltd.seen Jul 2
- 80.82.77.1392 eventsKnown scanner NLseen Jul 6
- 45.134.225.162 eventsProbing DE· AS213438 ColocaTel Inc.seen Jul 4
Top user-agents on port 6002
- Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)69
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.013
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity12
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.012
- Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_0; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.202.0 Safari/532.07
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.364
- Mozilla/5.0 (compatible; ModatScanner/1.2; +https://modat.io/)3
- Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.363
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.113
- Mozilla/5.0 (iPhone; CPU iPhone OS 17_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/134.0.6998.99 Mobile/15E148 Safari/604.12
JSON: /api/port/6002. CSV: /api/port/6002?format=csv.