TCP 33890
Synopsis
- There is no IANA-assigned service for TCP 33890, but in practice it’s commonly used for Microsoft Remote Desktop Protocol (RDP) when admins change the default port 3389.
- Real-world example: Windows Remote Desktop Services on Windows Server/Windows 10/11 are often configured to listen on 33890.
- Internet scan platforms (e.g., Shodan, Censys) regularly show hosts on 33890 presenting RDP banners, including from Windows RDP and xrdp deployments.
- Some organizations deliberately choose 33890 for RDP to reduce noise from default-port scans, though it does not add security.
- The port is associated with exploitation: attackers and botnets routinely scan and brute-force RDP on nonstandard ports (including 33890), and such exposures are a common entry point for ransomware intrusions.
Observed activity
Last 30 days
Detailed chart