Port 7002AFS Protection Server
AFS Protection Server for managing the users and groups database in an OpenAFS cell.
- transport
- tcp · udp
- in transit
- cleartext
- assignment
- official
- risk
- 7/10
- lookups
- 0
2 transports registered
payload readable on path
registered with iana
risk
rank 994 of 1,633 · top 61%
also known as afs3-prserver, ptserver, AFS PTS
1 other service is registered on port 7002. compare all 2 →
Technical Details
what runs on :7002The service uses the AFS RX RPC protocol over both UDP and TCP, normally listening on port 7002. It handles authenticated requests to the Protection Database, including user and group lookup, membership queries, and administrative updates; RX provides the RPC framing and connection management rather than a line-oriented protocol. Authentication commonly uses rxkad with Kerberos-derived AFS tokens, while related AFS servers conventionally use adjacent fixed ports such as 7000 for FileServer, 7001 for callbacks, and 7003 for the Volume Location Server.
Security Information
exposure of :7002risk score
7/ 10risk
treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.
network services averages 3.4 across 768 ports — this one sits 3.6 above.
in transit
cleartext
credentials and payloads are readable by anyone on path
assignment
official
registered with iana for this service — scanners fingerprint it by number
reachable over
tcp · udp
udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite
security overview
This service should normally be reachable only by hosts in the AFS cell or through tightly controlled administrative paths, not from the public Internet. Protection Database contents can disclose account and group relationships, and compromised credentials or weaknesses in legacy AFS authentication and authorization can permit unauthorized queries or changes; traffic is not encrypted by default unless an appropriate RX security class is configured.
Related Ports
the 8 most looked-up other ports in network services — 768 ports carry that label.
| port | service | risk | |||
|---|---|---|---|---|---|
| :9080 | Groove RPC | TCPUDP | Web Services | caution | 70.8k |
| :6543 | Jetnet | UDP | Network Services | caution | 65.3k |
| :5938 | TeamViewer | TCPUDP | Remote Access | caution | 65.0k |
| :8291 | Winbox MikroTik Admin | TCP | Security | caution | 62.9k |
| :3233 | WhiskerControl Protocol | TCPUDP | Network Services | caution | 61.9k |
| :3268 | Microsoft Global Catalog (GC) | TCPUDP | Security | caution | 54.6k |
| :135 | Microsoft EPMAP | TCPUDP | Security | caution | 51.9k |
| :3128 | Tatsoft Default HTTP Proxy | TCP | Web Services | caution | 46.8k |
risk mix of the 8 listed
- caution100%
0 of 8 encrypted