Port 10809Network Block Device (NBD)
NBD exposes a remote block device over TCP, commonly on port 10809, for Linux systems and virtual machines.
- transport
- tcp
- in transit
- cleartext
- assignment
- official
- risk
- 8/10
- lookups
- 0
single transport
payload readable on path
registered with iana
risk
rank 993 of 6,247 · top 16%
also known as nbd, nbd-server
Technical Details
what runs on :10809NBD runs over TCP, conventionally on port 10809, with no UDP counterpart. In the new-style protocol, the server begins with a fixed handshake and the client negotiates an export and features; the connection then carries framed block requests and replies, including operations such as reads, writes, and flushes. Linux nbd-server and QEMU are common implementations. NBD itself does not encrypt traffic by default, though protocol versions with STARTTLS support can negotiate TLS.
Security Information
exposure of :10809risk score
8/ 10risk
treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.
system averages 2.7 across 1,001 ports — this one sits 5.3 above.
in transit
cleartext
credentials and payloads are readable by anyone on path
assignment
official
registered with iana for this service — scanners fingerprint it by number
reachable over
tcp
every listening transport is another surface to filter at the edge
security overview
An exposed NBD export can give a remote client direct access to block data, potentially including the ability to modify it; the base protocol does not provide authentication. Do not expose it to the public internet: restrict access with firewall rules or a private network, and use TLS and appropriate access controls where supported.
Related Ports
the 8 most looked-up other ports in system — 1,001 ports carry that label.
| port | service | risk | |||
|---|---|---|---|---|---|
| :8888 | Sun Answerbook & Alt HTTP | TCP | Web Services | caution | 123.9k |
| :4664 | Google Desktop Search | TCP | System | caution | 67.2k |
| :8008 | IBM HTTP Server Admin | TCP | Web Services | caution | 58.3k |
| :3268 | Microsoft Global Catalog (GC) | TCPUDP | Security | caution | 54.6k |
| :135 | Microsoft EPMAP | TCPUDP | Security | caution | 51.9k |
| :9080 | WebSphere HTTP Transport (default) | TCP | Web Services | caution | 51.6k |
| :23 | Telnet | TCP | Remote Access | caution | 34.8k |
| :12489 | NSClient Monitoring Agent | TCP | Network Services | caution | 30.0k |
risk mix of the 8 listed
- caution100%
0 of 8 encrypted