Port 4420NVMe over Fabrics (NVMe-oF)

NVMe over Fabrics storage access, typically using NVMe/TCP to connect hosts to remote NVMe storage.

transport
tcp · udp

2 transports registered

in transit
cleartext

payload readable on path

assignment
official

registered with iana

risk
8/10

risk

lookups
0

rank 993 of 5,176 · top 19%

also known as NVMe/TCP

Technical Details

what runs on :4420

NVMe/TCP targets typically listen on TCP port 4420. After the TCP connection, the peers exchange NVMe/TCP initialization request and response PDUs, then carry NVMe commands and data in framed protocol data units over the stream. Hosts connect to an NVMe subsystem, commonly using discovery to find available subsystems. The registry also lists UDP, but ordinary NVMe/TCP target traffic uses TCP.

Security Information

exposure of :4420

risk score

8/ 10risk

treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.

system averages 2.7 across 933 ports — this one sits 5.3 above.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

A reachable target may expose block-storage namespaces for reading and writing, so access can reveal sensitive data or permit destructive modification. NVMe-oF should normally be restricted to trusted storage networks, with authentication and any configured encryption enabled; it should not be exposed directly to the internet.

the 8 most looked-up other ports in system — 933 ports carry that label.

risk mix of the 8 listed

  • caution100%

0 of 8 encrypted