TCP 4001
Synopsis
- IPFS (Kubo/go-ipfs) uses TCP 4001 as its default libp2p “swarm” port for peer-to-peer connections; IPFS Desktop and public IPFS nodes commonly expose this port for peer traffic.
- Applications that run on top of a local IPFS node (e.g., OrbitDB setups that rely on IPFS) also use the same 4001 swarm listener for connectivity.
- Moxa NPort serial device servers (e.g., NPort 5110/5150A/5450 series) use TCP 4001 by default as the data port for serial port 1 (with 4002, 4003, etc. for additional serial ports), providing raw TCP-to-RS‑232/422/485 bridging.
- Because many industrial serial gateways expose 4001, it is a frequent target for Internet scans; attackers have abused open 4001 endpoints to interact with attached serial/industrial equipment when devices are left unsecured.
Observed activity
Last 30 days
Detailed chart