- transport
- tcp · udp
- in transit
- encrypted
- assignment
- official
- risk
- 7/10
- lookups
- 0
2 transports registered
payload protected on the wire
registered with iana
risk
rank 994 of 1,159 · top 86%
also known as cf-serverd
Technical Details
what runs on :5308CFEngine uses its native agent-to-server protocol, normally over TCP port 5308. A connecting agent authenticates to cf-serverd using CFEngine host keys, after which the session provides encrypted and authenticated transfer of policy files and other requested data. TCP is the customary deployment; the IANA assignment also covers UDP, although cf-serverd deployments are generally associated with TCP.
Security Information
exposure of :5308risk score
7/ 10risk
treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.
security averages 3.8 across 220 ports — this one sits 3.2 above.
in transit
encrypted
payloads are protected on the wire
assignment
official
registered with iana for this service — scanners fingerprint it by number
reachable over
tcp · udp
udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite
security overview
This is a remote configuration-management interface and should not be exposed directly to the internet. CFEngine's key-based authentication and encrypted protocol reduce credential disclosure and unauthorized access, but a compromised or misconfigured server can provide policy or file content to agents and may enable administrative control of managed hosts.
Related Ports
the 8 most looked-up other ports in security — 220 ports carry that label.
| port | service | risk | |||
|---|---|---|---|---|---|
| :8881 | Atlasz Secure Server | TCP | Web Services | caution | 67.6k |
| :443 | HTTPS | TCPtls | Web Services | caution | 65.9k |
| :8291 | Winbox MikroTik Admin | TCP | Security | caution | 62.9k |
| :3268 | Microsoft Global Catalog (GC) | TCPUDP | Security | caution | 54.6k |
| :135 | Microsoft EPMAP | TCPUDP | Security | caution | 51.9k |
| :3128 | Squid Proxy HTTP | TCP | Web Services | caution | 45.8k |
| :8080 | HTTP Alternate | TCPtls | Web Services | caution | 44.9k |
| :7000 | Vuze HTTPS Tracker | TCPtls | Security | caution | 28.9k |
risk mix of the 8 listed
- caution100%
3 of 8 encrypted