ZoomEye finds 1.44M exposed Memcached instances online
A ZoomEye scan dated September 28, 2026 found 1,441,421 assets matching the Memcached signature and 1,129,100 hosts with port 11211 open. Memcached ships with no authentication by default, letting anyone read cached data or issue flush_all.
- ZoomEye: 1,441,421 fingerprint matches for Memcached
- Port 11211 exposed on 1,129,100 assets
- Memcached listens on all interfaces with no auth by default
- flush_all command acts as denial of service for all cache users
Read next
Security