Port report
Port 6688
7-day honeypot probe activity targeting destination port 6688. First seen 2026-06-29, most recent 2026-07-06 04:52.
1,588
Events 7d
56
Source IPs
13
Source ASNs
18
Countries
Top source ASNs
- AS396982Google LLC1,530
- AS51396Pfcloud UG (haftungsbeschrankt)18
- AS49870Alsycon B.V.12
- AS213412ONYPHE SAS8
- AS201814MEVSPACE sp. z o.o.5
- AS137409GSL Networks Pty LTD4
- AS212512Detai Prosperous Technologies Limited4
- AS8615Central Telegraph Public Joint-stock Company2
- AS201401NewVM B.V.1
- AS209132Alviva Holding Limited1
Top source countries
- Italy574
- India563
- Canada231
- Japan60
- United States56
- South Korea32
- The Netherlands20
- Seychelles12
- Finland10
- Germany5
Top source IPs hitting port 6688
- 34.17.177.169574 eventsProbing ITseen Jun 30
- 34.14.139.76563 eventsProbing INseen Jun 30
- 35.203.43.92230 eventsProbing CAseen Jun 30
- 34.47.95.11631 eventsProbing KRseen Jun 30
- 34.125.194.13630 eventsProbing USseen Jun 30
- 34.146.209.2730 eventsProbing JPseen Jun 30
- 35.243.109.12330 eventsProbing JPseen Jun 30
- 160.119.71.9212 eventsProbing SC· AS49870 Alsycon B.V.seen Jul 6
- 204.76.203.787 eventsProbing NL· AS51396 Pfcloud UG (haftungsbeschrankt)seen Jun 30
- 204.76.203.806 eventsProbing NL· AS51396 Pfcloud UG (haftungsbeschrankt)seen Jun 30
- 34.155.26.1455 eventsProbing FRseen Jun 30
- 45.141.233.475 eventsProbing BG· AS201814 MEVSPACE sp. z o.o.seen Jul 4
- 34.158.24.1915 eventsProbing CHseen Jun 30
- 34.88.187.1095 eventsProbing FIseen Jun 30
- 35.228.203.495 eventsProbing FIseen Jun 30
- 204.76.203.795 eventsProbing NL· AS51396 Pfcloud UG (haftungsbeschrankt)seen Jun 30
- 151.240.63.1614 eventsProbing US· AS137409 GSL Networks Pty LTDseen Jul 3
- 79.164.41.1682 eventsProbing RU· AS8615 Central Telegraph Public Joint-stock Companyseen Jul 2
- 162.216.150.1132 eventsProbing USseen Jul 4
- 91.230.168.1241 eventsKnown scanner USseen Jul 3
- 35.203.210.921 eventsProbing GBseen Jul 1
- 162.216.150.691 eventsProbing USseen Jun 30
- 85.217.149.41 eventsKnown scanner CAseen Jul 4
- 45.131.155.1101 eventsProbing DE· AS212512 Detai Prosperous Technologies Limitedseen Jul 6
- 45.131.155.1111 eventsProbing DE· AS212512 Detai Prosperous Technologies Limitedseen Jul 2
Top user-agents on port 6688
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity19
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
- Mozilla/5.0 (Linux; U; Android 7.0; en-US; PRA-LX1 Build/HUAWEIPRA-LX1) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 UCBrowser/12.13.0.1207 Mobile Safari/537.365
- Gaisbot/3.0 (robot@gais.cs.ccu.edu.tw; http://gais.cs.ccu.edu.tw/robot.php)5
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1944.0 Safari/537.365
- Mozilla/5.0 (Linux; Android 6.0; ALE-L21 Build/HuaweiALE-L21) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.89 Mobile Safari/537.365
- Mozilla/5.0 (Linux; Android 4.4.2; LGMS323 Build/KOT49I.MS32310b) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/30.0.1599.103 Mobile Safari/537.364
- Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.50 Safari/537.364
- Mozilla/5.0 (Linux; Android 9; LG-H930) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.364
- Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko4
JSON: /api/port/6688. CSV: /api/port/6688?format=csv.