ZoomEye finds 1.69M hosts exposing rsync port 873
ZoomEye returned 1,689,755 hosts answering on TCP port 873, where the rsync daemon listens. The daemon lists its modules before asking for credentials, letting unauthenticated clients enumerate exports; some modules may be readable or writable without a password.
- ZoomEye counted 1,689,755 hosts on port 873 as of October 25, 2026
- The rsync daemon reveals its module list before requesting credentials
- Module protection relies on read only, auth users with secrets file, and hosts allow
- The figure counts listeners, not confirmed open exports
Read next
Security