TCP 3100
Synopsis
- Grafana Loki uses TCP port 3100 as its default HTTP API for log ingestion and queries; agents like Promtail, Fluent Bit/Fluentd, Logstash, and Grafana Agent commonly send logs to Loki on 3100.
- In real deployments (Kubernetes, Docker, or bare metal), Loki typically listens on 0.0.0.0:3100 and is fronted by an ingress or reverse proxy.
- SMA Technologies OpCon/xps (enterprise workload automation) uses TCP 3100 (registered with IANA as opcon-xps) for server/agent and client communications.
- Security note: exposed Loki instances on 3100 have been targeted to harvest logs or abuse unauthenticated endpoints, so the service should be authenticated and not internet-facing.
Observed activity
Last 30 days
Detailed chart