Port 6040

HoneyLabs honeypots recorded 18 probes against destination port 6040 from 10 distinct source IP addresses in the last 7 days.

First observed 2026-10-29 18:03, most recently 2026-11-03 06:20 (UTC).

What the sensors show

The sources sat in 6 networks across 5 countries. One address, 62.73.93.254, sent 28% of them. The largest source network was AS8866 (Vivacom Bulgaria EAD), with 28% of the probes from 1 address. None of the 10 busiest addresses is a recognised research scanner.

Most active source addresses

Source IPProbesNetworkCountry
62.73.93.2545Vivacom Bulgaria EADBG
123.160.223.742ChinanetCN
47.251.184.1272Alibaba (US) Technology Co., Ltd.US
123.160.223.732ChinanetCN
47.251.59.32Alibaba (US) Technology Co., Ltd.US
176.120.22.1791Proton66 OOORU
162.216.149.1361Google LLCUS
162.216.150.1841Google LLCUS

Networks it comes from

ASNOrganisationProbesSource IPs
AS8866Vivacom Bulgaria EAD51
AS4134Chinanet42
AS45102Alibaba (US) Technology Co., Ltd.42
AS396982Google LLC33
AS211486Alferov Aleksey Aleksandrovich11
AS198953Proton66 OOO11

Where it comes from

CountryProbes
United States6
Bulgaria5
China4
Russia2
United Kingdom1

Client strings seen on this port

User agentProbes
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.364
Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity3
curl/7.64.12
curl/7.74.02

Port report

Port report

Loading live data…