Port 4094Linux SysRq daemon

TCP 4094 is used by sysrqd to send Linux kernel SysRq commands remotely.

transport
tcp · udp

2 transports registered

in transit
cleartext

payload readable on path

assignment
official

registered with iana

risk
8/10

risk

lookups
0

rank 993 of 5,043 · top 20%

Technical Details

what runs on :4094

sysrqd is a Linux daemon that exposes kernel Magic SysRq actions over a text-based interactive TCP connection, normally on port 4094. A client authenticates with the configured password and can request SysRq commands; the available actions depend on kernel configuration. The IANA registration lists both TCP and UDP, but typical sysrqd deployments use TCP. The connection is not encrypted.

Security Information

exposure of :4094

risk score

8/ 10risk

treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.

remote access averages 3.7 across 199 ports — this one sits 4.3 above.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

SysRq commands can perform high-impact operations such as syncing disks, remounting filesystems, terminating processes, or rebooting the machine. Password authentication does not make an internet-facing service safe, particularly because the session is unencrypted; restrict access to trusted management networks or disable the daemon when it is not needed.

the 8 most looked-up other ports in remote access — 199 ports carry that label.

risk mix of the 8 listed

  • safe13%
  • caution88%

0 of 8 encrypted