Attacked services and protocols, ranked by observed volume
Live leaderboard of services ranked by attacks observed by the OffSeq global honeypot fleet in the last 7 days.
Ranked by attacks observed by the OffSeq honeypot fleet · last 7 days
| # | Service | Attacks | Source IPs |
|---|---|---|---|
| 1 | VNC | 3,674,705 | 1,300 |
| 2 | SIP | 1,664,924 | 580 |
| 3 | HTTPS | 1,095,777 | 9,202 |
| 4 | Microsoft SQL Server | 545,768 | 1,117 |
| 5 | HTTP | 221,019 | 7,868 |
| 6 | SMTP | 171,760 | 931 |
| 7 | SMB | 120,709 | 1,097 |
| 8 | TFTP | 72,298 | 203 |
| 9 | RDP | 56,381 | 1,603 |
| 10 | PostgreSQL | 31,079 | 693 |
| 11 | SSH | 24,585 | 537 |
| 12 | SNMP | 23,804 | 305 |
| 13 | Telnet | 19,860 | 385 |
| 14 | MongoDB | 13,299 | 646 |
| 15 | FTP | 8,783 | 660 |
| 16 | Redis | 7,876 | 642 |
| 17 | MySQL | 6,502 | 718 |
| 18 | IMAP | 6,254 | 784 |
| 19 | POP3 | 4,153 | 523 |
| 20 | Memcached | 3,369 | 397 |
| 21 | rsync | 2,234 | 293 |
| 22 | Modbus | 1,992 | 381 |
| 23 | MQTT | 1,313 | 346 |
| 24 | NTP | 1,253 | 380 |
Every row links to a live-updating profile of what OffSeq honeypot sensors captured worldwide. See all planes on the threat-intelligence index.