Ports being probed

Top 100 destination ports across our honeypot network, ranked by 7-day event volume. Click any port for the top source ASNs, IPs, countries, and user-agents hammering it.

Port	Service	Events 7d	Source IPs	Source ASNs
21	FTP	118,883	217	31
445	SMB	33,492	2,502	829
80	HTTP	19,389	1,171	200
443	HTTPS	15,884	987	180
135	MSRPC	12,900	199	46
22	SSH	9,959	1,063	292
8728	—	7,804	23	12
1433	MSSQL	6,048	567	207
8080	HTTP-alt	4,687	625	117
4444	—	4,326	260	46
8554	—	3,176	53	19
11413	—	2,998	11	7
5432	Postgres	2,966	221	43
1723	PPTP	2,952	193	38
3389	RDP	2,939	705	227
8888	HTTP-alt	2,909	484	66
3000	Web-alt	2,484	270	49
8443	HTTPS-alt	2,439	488	85
8081	—	2,268	494	71
9200	Elastic	2,157	541	63
554	—	2,064	215	33
8000	HTTP-alt	2,006	396	64
27017	MongoDB	1,907	302	46
2375	Docker	1,809	263	82
5000	Web-alt	1,749	289	58
6379	Redis	1,744	336	75
10001	—	1,714	206	37
4000	—	1,615	156	30
9999	—	1,412	245	54
3128	HTTP-proxy	1,268	240	47
7777	Oracle	1,261	194	33
9090	Prometheus	1,230	207	34
9000	Web-alt	1,230	298	53
1080	SOCKS	1,155	210	42
5060	SIP	1,135	192	39
25565	Minecraft	1,121	148	36
3388	—	1,120	99	26
9443	—	1,114	335	43
7443	—	1,111	296	45
8083	—	1,088	183	41
8090	—	1,080	277	37
83	—	1,075	276	45
4443	—	1,057	260	48
3306	MySQL	1,039	169	36
502	—	1,023	160	31
5901	—	1,021	125	31
7000	—	1,021	149	36
5001	—	1,016	234	43
2222	SSH-alt	998	288	88
6443	k8s API	992	242	40
88	—	985	262	49
3001	—	975	186	35
37777	—	963	79	40
5555	—	962	238	60
81	—	950	209	44
25	SMTP	919	226	20
23	Telnet	918	205	35
53	DNS	911	211	38
17000	—	904	49	21
5984	CouchDB	904	159	23
10000	Webmin	904	205	45
8085	—	903	188	35
82	—	888	269	39
2083	—	880	173	33
11211	Memcached	874	175	26
8181	—	863	206	39
1962	—	862	159	25
5985	—	855	294	56
9042	Cassandra	854	156	28
110	POP3	849	181	24
143	IMAP	847	147	27
2087	—	835	208	78
2376	Docker-TLS	825	113	40
9001	Tor	803	154	29
7547	TR-069	794	282	33
1521	Oracle	794	217	34
1234	—	793	141	29
6000	X11	789	169	36
1194	OpenVPN	777	142	30
1883	MQTT	774	146	20
5900	VNC	774	116	31
9100	Printer	771	207	29
500	—	770	159	23
444	—	760	234	39
8001	—	752	208	35
3390	—	750	146	36
8088	Hadoop	744	212	32
60000	—	738	124	23
7001	WebLogic	734	172	31
2082	—	731	133	27
8883	—	730	173	26
1337	—	726	188	20
8086	InfluxDB	712	191	31
84	—	710	143	27
8087	—	706	148	26
8180	—	698	53	15
5433	—	692	59	14
8123	—	686	172	21
2181	—	683	129	20
18789	—	683	199	22

JSON: /api/ports. CSV: /api/ports?format=csv.