Port 2070AH and ESP Encapsulated in UDP

UDP encapsulation for Authentication Header (AH) and Encapsulating Security Payload (ESP) packets.

transport: tcp · udp
in transit: cleartext
assignment: official
risk: 1/10
lookups: 0

also known as ah-esp-encap, AH/ESP over UDP

Technical Details

what runs on :2070

AH and ESP Encapsulated in UDP is registered on port :2070 over tcp and udp to Amy Weaver. We don't have a technical write-up for it beyond the IANA registry entry.

In nmap's internet-wide scan data this port is found open rarely. What's listening is often not the registered service, so check before you assume.

find what's listening on :2070

this machine

# linux
sudo ss -tulpn 'sport = :2070'

# macos / bsd
sudo lsof -nP -i :2070

# windows (then: tasklist /FI "PID eq <pid>")
netstat -ano | findstr :2070

another host

nmap -sV -p T:2070 <host>
sudo nmap -sU -sV -p U:2070 <host>

run it? the handshake, the implementations you meet in the wild and the flags that matter come from the engineers who do.

add technical details

Security Information

exposure of :2070

risk score

1/ 10safe

routine exposure. this port is rarely the way in on its own — keep it patched and logged and move on.

security averages 3.1 across 342 ports — this one sits 2.1 below.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

no security notes recorded for :2070 yet

known exploits, hardening advice, what a compromise looks like — suggest an edit if you know its exposure.

Record

iana registry entry

port: :2070
service: AH and ESP Encapsulated in UDP
transport: TCPUDP
encryption: cleartext
assignment: iana registered
risk: 1/10safe
category: Security Network Services
usage: This assignment identifies TCP and UDP port 2070 for AH and ESP packets encapsulated in UDP. It is registered to Amy Weaver; no broader product or deployment context is recorded.
lookups: 0rank 993
added: 2026-09-02
updated: 2026-09-02
references: IANA service name registry — port 2070

Something wrong?

This record is maintained by the engineers who use port 2070. Every field on it is editable — change what's wrong, say how you know, and a reviewer publishes it, usually within a minute. Last touched 2026-09-02.

01edit any field on a page of its own
02a model checks it for accuracy and spam
03clean and confident goes live immediately

edit this record →back to the registry

Related Ports

all 342 in security →

the 8 most looked-up other ports in security — 342 ports carry that label.

port	service	proto	category	risk	views
:8881	Atlasz Secure Server	TCP	Web Services	caution	67.6k
:443	HTTPS	TCPtls	Web Services	caution	65.9k
:8291	Winbox MikroTik Admin	TCP	Security	caution	62.9k
:3268	Microsoft Global Catalog (GC)	TCPUDP	Security	caution	54.6k
:135	Microsoft EPMAP	TCPUDP	Security	caution	51.9k
:3128	Squid Proxy HTTP	TCP	Web Services	caution	45.8k
:8080	HTTP Alternate	TCP	Web Services	caution	44.9k
:7000	Vuze HTTPS Tracker	TCPtls	Security	caution	28.9k

risk mix of the 8 listed

caution100%

2 of 8 encrypted

Port :2070AH and ESP Encapsulated in UDP

Technical Details

Security Information

Related Ports

Port 2070AH and ESP Encapsulated in UDP