Port 10809Network Block Device (NBD)

NBD exposes a remote block device over TCP, commonly on port 10809, for Linux systems and virtual machines.

transport
tcp

single transport

in transit
cleartext

payload readable on path

assignment
official

registered with iana

risk
8/10

risk

lookups
0

rank 993 of 6,247 · top 16%

also known as nbd, nbd-server

Technical Details

what runs on :10809

NBD runs over TCP, conventionally on port 10809, with no UDP counterpart. In the new-style protocol, the server begins with a fixed handshake and the client negotiates an export and features; the connection then carries framed block requests and replies, including operations such as reads, writes, and flushes. Linux nbd-server and QEMU are common implementations. NBD itself does not encrypt traffic by default, though protocol versions with STARTTLS support can negotiate TLS.

Security Information

exposure of :10809

risk score

8/ 10risk

treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.

system averages 2.7 across 1,001 ports — this one sits 5.3 above.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp

every listening transport is another surface to filter at the edge

security overview

An exposed NBD export can give a remote client direct access to block data, potentially including the ability to modify it; the base protocol does not provide authentication. Do not expose it to the public internet: restrict access with firewall rules or a private network, and use TLS and appropriate access controls where supported.

the 8 most looked-up other ports in system — 1,001 ports carry that label.

risk mix of the 8 listed

  • caution100%

0 of 8 encrypted