Ports being probed

The busiest destination ports across our honeypot network, ranked by 7-day event volume. Click any port for the top source ASNs, IPs, countries, and user-agents hammering it.

Port	Service	Events 7d	Source IPs	Source ASNs
39131	-	198,119	897	260
443	HTTPS	79,985	1,132	190
80	HTTP	68,279	1,253	190
8080	HTTP-alt	62,541	857	117
445	SMB	37,638	2,421	793
5173	-	20,630	40	14
1080	SOCKS	17,148	257	49
40000	-	14,560	109	26
5234	-	14,481	17	9
5123	-	14,477	30	10
6485	-	14,440	17	7
5759	-	14,388	12	7
9299	-	14,356	28	9
6143	-	14,340	16	7
10808	-	14,292	12	8
5706	-	14,282	14	6
6750	-	14,270	5	5
5955	-	14,261	4	3
5588	-	14,259	11	7
6179	-	14,252	6	4
5831	-	14,251	8	5
6437	-	14,237	9	6
6493	-	14,227	4	4
5185	-	14,226	6	5
7462	-	14,199	5	5
6860	-	14,176	4	4
22	SSH	12,070	1,150	504
53	DNS	12,050	210	30
1433	MSSQL	12,024	881	298
8000	HTTP-alt	11,855	493	78
8443	HTTPS-alt	11,837	642	86
3000	Web-alt	10,959	351	56
9443	-	10,547	425	46
5000	Web-alt	9,048	295	53
9090	Prometheus	8,861	312	55
8888	HTTP-alt	8,810	449	63
8081	-	8,380	409	53
135	MSRPC	8,044	171	38
9000	Web-alt	7,978	337	48
3389	RDP	7,423	566	133
2376	Docker-TLS	5,544	133	36
2375	Docker	5,413	205	63
4443	-	4,945	335	47
5601	Kibana	4,905	149	31
9800	-	4,601	73	7
8190	-	4,466	71	13
82	-	4,417	318	41
8448	-	4,326	68	9
1723	PPTP	4,256	190	44
554	-	4,080	295	41
7443	-	3,857	245	44
4567	-	3,782	203	34
27017	MongoDB	3,757	341	40
8085	-	3,719	231	43
5001	-	3,345	214	46
9202	-	3,338	73	4
4848	-	3,288	174	19
7860	-	3,156	49	16
8282	-	3,108	119	20
8447	-	3,093	55	7
12000	-	3,079	75	19
2379	-	3,055	149	24
50000	SAP	3,006	185	30
10001	-	3,000	291	37
5432	Postgres	2,946	294	57
7272	-	2,882	50	16
37778	-	2,811	27	3
81	-	2,641	296	56
84	-	2,598	169	30
3306	MySQL	2,596	190	46
8020	-	2,551	261	32
7000	-	2,550	136	38
5984	CouchDB	2,540	228	29
7373	-	2,523	40	13
9080	-	2,437	183	30
9200	Elastic	2,437	570	50
8082	-	2,427	195	42
88	-	2,415	247	37
49152	-	2,401	198	34
9999	-	2,361	228	50
27018	MongoDB	2,348	101	12
10000	Webmin	2,334	215	37
8090	-	2,311	364	50
9001	Tor	2,309	194	31
6080	-	2,169	187	23
6443	k8s API	2,162	313	39
8554	-	2,133	82	21
8787	-	2,115	74	18
8140	-	2,070	111	15
2086	-	2,063	185	31
8160	-	2,055	63	9
9004	-	2,052	80	16
7171	-	2,036	59	19
7575	-	2,019	46	11
8280	-	2,002	68	14
9006	-	1,993	67	11
9008	-	1,978	76	18
8030	-	1,975	155	21
8110	-	1,964	65	13
50080	-	1,964	56	8

Every other port with activity

The remaining 500 destination ports our sensors recorded in the last 7 days, by port number.

JSON: /api/ports. CSV: /api/ports?format=csv.