Ports being probed

The busiest destination ports across our honeypot network, ranked by 7-day event volume. Click any port for the top source ASNs, IPs, countries, and user-agents hammering it.

Port	Service	Events 7d	Source IPs	Source ASNs
39131	-	181,292	975	257
5173	-	68,522	23	10
443	HTTPS	51,485	1,406	193
445	SMB	37,171	2,205	749
80	HTTP	33,156	1,367	209
1723	PPTP	16,615	227	40
1433	MSSQL	16,094	833	323
1080	SOCKS	14,806	279	54
5000	Web-alt	13,460	333	68
22	SSH	13,210	954	270
40000	-	13,182	109	30
10808	-	13,036	11	8
5123	-	13,031	22	7
6493	-	13,001	5	4
6750	-	12,980	5	3
5234	-	12,975	19	11
6179	-	12,966	5	3
5588	-	12,964	17	8
6143	-	12,964	16	7
9299	-	12,954	25	8
5955	-	12,944	18	16
5185	-	12,940	4	4
6860	-	12,931	4	3
5706	-	12,882	12	5
5759	-	12,865	8	5
6437	-	12,855	6	4
7462	-	12,846	5	3
6485	-	12,811	19	6
5831	-	12,794	7	3
3000	Web-alt	10,790	492	78
135	MSRPC	7,596	229	45
8080	HTTP-alt	7,103	924	145
3389	RDP	5,928	608	138
8000	HTTP-alt	5,120	486	92
5432	Postgres	4,164	384	52
2053	-	3,983	94	31
17000	-	3,661	59	18
23	Telnet	2,900	210	50
10001	-	2,746	330	52
8443	HTTPS-alt	2,351	625	90
8081	-	2,254	497	66
27017	MongoDB	2,120	388	50
34567	-	1,909	52	19
17001	-	1,901	32	7
8888	HTTP-alt	1,863	535	87
5434	-	1,856	19	6
9090	Prometheus	1,822	311	57
6036	-	1,819	75	34
9200	Elastic	1,800	571	47
6379	Redis	1,617	323	64
554	-	1,613	262	38
5060	SIP	1,598	242	41
54321	-	1,521	50	23
8090	-	1,412	411	38
4444	-	1,403	417	57
9999	-	1,378	313	66
5985	-	1,347	751	223
8001	-	1,277	321	45
9000	Web-alt	1,267	356	59
9001	Tor	1,237	286	38
5678	-	1,235	213	31
4443	-	1,219	321	60
10443	-	1,211	359	57
18789	-	1,168	254	29
3306	MySQL	1,163	265	49
9443	-	1,160	395	60
8880	-	1,158	257	37
81	-	1,117	298	54
5435	-	1,114	19	9
7443	-	1,111	336	51
25565	Minecraft	1,104	136	39
20000	-	1,061	237	28
3388	-	1,020	127	28
11211	Memcached	1,006	205	38
10000	Webmin	995	298	62
12345	-	988	116	29
4433	-	988	339	57
54320	-	979	12	8
3390	-	977	135	33
8088	Hadoop	970	363	49
6443	k8s API	955	333	69
8181	-	941	256	41
53	DNS	905	236	34
11434	-	897	200	30
60000	-	890	196	31
10250	-	875	181	32
5001	-	869	258	52
7777	Oracle	853	271	46
82	-	799	301	43
2083	-	798	269	38
83	-	790	292	35
2345	-	775	53	17
5436	-	772	8	5
9100	Printer	771	232	28
8082	-	760	224	46
7547	TR-069	760	317	31
21	FTP	759	226	30
3128	HTTP-proxy	755	264	48
9042	Cassandra	751	187	26
2222	SSH-alt	751	295	79

Every other port with activity

The remaining 500 destination ports our sensors recorded in the last 7 days, by port number.

JSON: /api/ports. CSV: /api/ports?format=csv.