Port 7004AFS/Kerberos Authentication Service

Legacy AFS authentication service using Kerberos to authenticate users and issue AFS credentials.

transport: tcp · udp
in transit: cleartext
assignment: official
risk: 6/10
lookups: 0

also known as afs3-kaserver, AFS kaserver, AFS authentication server

Technical Details

what runs on :7004

The kaserver provides the AFS authentication service using the AFS Kerberos-based protocol, normally over UDP and also supporting TCP. It is part of the traditional AFS service-port group, alongside services such as the protection server on 7002 and the volume location server on 7003. Authentication exchanges use Kerberos cryptographic protection for tickets and password-derived data, but the transport itself is not a general-purpose encrypted channel.

Security Information

exposure of :7004

risk score

6/ 10risk

treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.

security averages 3.7 across 237 ports — this one sits 2.3 above.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

This is a sensitive legacy authentication endpoint and should not be exposed directly to the public Internet. An exposed service can be subject to principal enumeration, password-guessing, denial-of-service, and attacks against old AFS or Kerberos implementations; restrict it to trusted AFS clients and replace kaserver with a maintained Kerberos-based design where possible.

Record

iana registry entry

port: :7004
service: AFS/Kerberos Authentication Service
transport: TCPUDP
encryption: cleartext
assignment: iana registered
risk: 6/10risk
category: Security System
usage: Port 7004 is used by the AFS kaserver, the authentication service in classic AFS and older OpenAFS deployments. It handles Kerberos-based user authentication and related credential operations; modern deployments generally use an external Kerberos realm instead.
lookups: 0rank 994
added: 2026-08-29
updated: 2026-08-29
references: IANA service name registry — port 7004

Something wrong?

This record is maintained by the engineers who use port 7004. Every field on it is editable — change what's wrong, say how you know, and a reviewer publishes it, usually within a minute. Last touched 2026-08-29.

01edit any field on a page of its own
02a model checks it for accuracy and spam
03clean and confident goes live immediately

edit this record →back to the registry

Related Ports

all 237 in security →

the 8 most looked-up other ports in security — 237 ports carry that label.

port	service	proto	category	risk	views
:8881	Atlasz Secure Server	TCP	Web Services	caution	67.6k
:443	HTTPS	TCPtls	Web Services	caution	65.9k
:8291	Winbox MikroTik Admin	TCP	Security	caution	62.9k
:3268	Microsoft Global Catalog (GC)	TCPUDP	Security	caution	54.6k
:135	Microsoft EPMAP	TCPUDP	Security	caution	51.9k
:3128	Squid Proxy HTTP	TCP	Web Services	caution	45.8k
:8080	HTTP Alternate	TCPtls	Web Services	caution	44.9k
:7000	Vuze HTTPS Tracker	TCPtls	Security	caution	28.9k

risk mix of the 8 listed

caution100%

3 of 8 encrypted

Port :7004AFS/Kerberos Authentication Service

Technical Details

Security Information

Related Ports

Port 7004AFS/Kerberos Authentication Service