Port 7009AFS remote cache manager
AFS remote cache manager service assigned to TCP and UDP port 7009.
- transport
- tcp · udp
- in transit
- cleartext
- assignment
- official
- risk
- 5/10
- lookups
- 0
2 transports registered
payload readable on path
registered with iana
caution
rank 993 of 4,777 · top 21%
also known as afs3-rmtsys
Technical Details
what runs on :7009AFS remote cache manager traffic uses the AFS Rx protocol and is assigned to both TCP and UDP, although AFS deployments traditionally use Rx over UDP. Rx provides packet framing, sequencing, acknowledgements, and service-specific operations; the service uses AFS authentication and security-class negotiation where configured. Port 7009 is part of the fixed AFS service range, alongside ports such as 7000 for the file server, 7001 for callbacks, and 7003 for the volume location service. Implementations commonly refer to this service as afs3-rmtsys.
Security Information
exposure of :7009risk score
5/ 10caution
worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.
network services averages 2.7 across 1,416 ports — this one sits 2.3 above.
in transit
cleartext
credentials and payloads are readable by anyone on path
assignment
official
registered with iana for this service — scanners fingerprint it by number
reachable over
tcp · udp
udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite
security overview
This service should normally be restricted to trusted AFS administration or client networks and should not be exposed to the Internet. AFS authentication can protect requests, but traffic is not encrypted by default in every deployment, and an exposed remote-system interface increases the attack surface of the AFS client or server. Restrict it with firewall rules and use the strongest available Rx security configuration.
Related Ports
the 8 most looked-up other ports in network services — 1,416 ports carry that label.
| port | service | risk | |||
|---|---|---|---|---|---|
| :9080 | Groove RPC | TCPUDP | Web Services | caution | 70.8k |
| :6543 | Jetnet | UDP | Network Services | caution | 65.3k |
| :5938 | TeamViewer | TCPUDP | Remote Access | caution | 65.0k |
| :8291 | Winbox MikroTik Admin | TCP | Security | caution | 62.9k |
| :3233 | WhiskerControl Protocol | TCPUDP | Network Services | caution | 61.9k |
| :3268 | Microsoft Global Catalog (GC) | TCPUDP | Security | caution | 54.6k |
| :135 | Microsoft EPMAP | TCPUDP | Security | caution | 51.9k |
| :3128 | Tatsoft Default HTTP Proxy | TCP | Web Services | caution | 46.8k |
risk mix of the 8 listed
- caution100%
0 of 8 encrypted