Ports being probed

The busiest destination ports across our honeypot network, ranked by 7-day event volume. Click any port for the top source ASNs, IPs, countries, and user-agents hammering it.

Port	Service	Events 7d	Source IPs	Source ASNs
443	HTTPS	175,079	1,104	158
39131	-	171,900	956	247
445	SMB	47,372	2,264	770
80	HTTP	37,587	1,210	174
1433	MSSQL	35,808	1,071	395
8080	HTTP-alt	34,029	741	115
22	SSH	10,634	562	113
3389	RDP	9,815	592	148
8140	-	9,405	112	21
53	DNS	9,182	191	37
8417	-	9,051	26	7
50050	-	7,610	61	23
135	MSRPC	7,194	204	45
1111	-	4,815	80	24
554	-	3,596	247	40
3000	Web-alt	2,903	338	69
8000	HTTP-alt	2,650	467	80
5432	Postgres	2,426	276	48
9200	Elastic	2,402	559	53
8443	HTTPS-alt	2,361	542	81
37777	-	2,040	80	36
8888	HTTP-alt	2,037	451	72
1723	PPTP	1,993	174	37
27017	MongoDB	1,873	305	40
21	FTP	1,824	183	28
9090	Prometheus	1,734	296	49
9443	-	1,708	372	41
8081	-	1,707	416	68
9000	Web-alt	1,435	340	52
4443	-	1,372	303	48
8090	-	1,355	343	38
4433	-	1,343	379	41
83	-	1,317	286	37
11211	Memcached	1,290	233	36
6379	Redis	1,282	297	67
5000	Web-alt	1,271	266	57
10001	-	1,249	280	44
1080	SOCKS	1,223	243	53
4444	-	1,203	274	47
81	-	1,201	292	51
8087	-	1,181	176	29
3128	HTTP-proxy	1,163	244	49
8088	Hadoop	1,156	346	45
5985	-	1,127	413	108
6443	k8s API	1,126	267	37
5984	CouchDB	1,115	220	31
3306	MySQL	1,104	212	45
82	-	1,085	310	48
7547	TR-069	1,084	327	36
25565	Minecraft	1,077	167	29
8086	InfluxDB	1,076	246	40
10443	-	1,068	274	43
9042	Cassandra	1,054	222	30
9999	-	1,050	251	51
45554	-	1,027	14	6
6000	X11	1,023	168	48
5555	-	1,009	249	69
5901	-	989	117	29
20000	-	989	212	40
5678	-	985	201	30
139	SMB	969	195	35
18789	-	967	209	18
84	-	962	179	32
7777	Oracle	953	235	39
3001	-	952	199	42
10000	Webmin	946	278	52
636	LDAPS	935	204	30
5060	SIP	932	225	37
2222	SSH-alt	924	292	69
8181	-	903	255	39
8089	Splunk	880	186	52
143	IMAP	878	123	22
23	Telnet	863	161	36
9100	Printer	860	247	41
465	SMTPS	852	190	34
8880	-	850	213	36
8083	-	846	167	48
1194	OpenVPN	838	154	25
85	-	837	188	36
3333	-	836	157	36
7443	-	831	228	40
3388	-	812	89	24
2087	-	799	210	45
444	-	795	243	38
60001	-	792	110	33
9001	Tor	791	196	35
60000	-	790	157	25
49152	-	789	188	42
8883	-	784	199	25
88	-	776	222	41
5900	VNC	776	137	34
5001	-	762	206	47
8085	-	759	214	33
7000	-	758	149	44
110	POP3	757	135	21
18245	-	753	167	17
1962	-	744	153	23
9092	Kafka	744	172	20
11434	-	741	212	20
990	FTPS	731	83	14

Every other port with activity

The remaining 500 destination ports our sensors recorded in the last 7 days, by port number.

JSON: /api/ports. CSV: /api/ports?format=csv.