Port 6381
HoneyLabs honeypots recorded 25 probes against destination port 6381 from 7 distinct source IP addresses in the last 7 days.
First observed 2026-11-08 19:36, most recently 2026-11-14 08:53 (UTC).
What the sensors show
The sources sat in 6 networks across 4 countries. One address, 121.41.169.123, sent 40% of them. The largest source network was AS37963 (Hangzhou Alibaba Advertising Co.,Ltd.), with 48% of the probes from 2 addresses. None of the 7 busiest addresses is a recognised research scanner.
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 121.41.169.123 | 10 | Hangzhou Alibaba Advertising Co.,Ltd. | CN |
| 149.102.140.160 | 3 | Contabo GmbH | FR |
| 3.148.214.227 | 3 | Amazon.com, Inc. | US |
| 175.27.241.203 | 3 | Shenzhen Tencent Computer Systems Company Limited | CN |
| 135.119.216.27 | 3 | Microsoft Corporation | US |
| 47.95.199.141 | 2 | Hangzhou Alibaba Advertising Co.,Ltd. | CN |
| 85.11.167.7 | 1 | TechTies Inc. | NL |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | 12 | 2 |
| AS45090 | Shenzhen Tencent Computer Systems Company Limited | 3 | 1 |
| AS16509 | Amazon.com, Inc. | 3 | 1 |
| AS8075 | Microsoft Corporation | 3 | 1 |
| AS51167 | Contabo GmbH | 3 | 1 |
| AS197170 | TechTies Inc. | 1 | 1 |
Where it comes from
| Country | Probes |
|---|---|
| China | 15 |
| United States | 6 |
| France | 3 |
| The Netherlands | 1 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html) | 4 |
| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.115 Safari/537.36 | 2 |
Port report
Port report
Loading