1,551 Elasticsearch and 1,462 Memcached Endpoints Exposed
A ZoomEye search on September 18, 2026 found 1,551 exposed services on port 9200 (Elasticsearch) and 1,462 on port 11211 (Memcached). Elasticsearch now enables authentication by default, while Memcached has none, making all open instances vulnerable.
- Port 9200: 1,551 open Elasticsearch; port 11211: 1,462 Memcached
- Modern Elasticsearch enables authentication and TLS by default
- Memcached has no authentication—protection only at network level
- Open Memcached also used for amplification attacks
Read next
Security