Port 7946Cluster Gossip (Serf / Docker Swarm)
Used for cluster-node discovery and gossip by Docker Swarm and HashiCorp Serf.
- transport
- tcp · udp
- in transit
- cleartext
- assignment
- unofficial
- risk
- 6/10
- lookups
- 0
2 transports registered
payload readable on path
used by convention
risk
rank 993 of 6,680 · top 15%
Technical Details
what runs on :7946This port is used by more than one implementation, so there is no single wire protocol or handshake for it. Docker Swarm uses both TCP and UDP on 7946 for node communication and discovery; its other commonly required ports are TCP 2377 for cluster management and UDP 4789 for overlay network traffic. Serf also uses TCP and UDP 7946 by default for gossip. Serf encryption is configurable rather than enabled by default.
Security Information
exposure of :7946risk score
6/ 10risk
treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.
network services averages 2.6 across 2,029 ports — this one sits 3.4 above.
in transit
cleartext
credentials and payloads are readable by anyone on path
assignment
unofficial
used by convention, not registered — what answers here varies by deployment
reachable over
tcp · udp
udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite
security overview
Do not expose this port broadly to the internet: restrict it to the cluster nodes that need to communicate. The exact risk depends on the software using it; Serf gossip is not encrypted by default, while Docker Swarm documents encrypted management communication between nodes. Untrusted access to cluster communication ports can expose membership information or disrupt cluster operations.
Related Ports
the 8 most looked-up other ports in network services — 2,029 ports carry that label.
| port | service | risk | |||
|---|---|---|---|---|---|
| :9080 | Groove RPC | TCPUDP | Web Services | caution | 70.8k |
| :6543 | Jetnet | UDP | Network Services | caution | 65.3k |
| :5938 | TeamViewer | TCPUDP | Remote Access | caution | 65.0k |
| :8291 | Winbox MikroTik Admin | TCP | Security | caution | 62.9k |
| :3233 | WhiskerControl Protocol | TCPUDP | Network Services | caution | 61.9k |
| :3268 | Microsoft Global Catalog (GC) | TCPUDP | Security | caution | 54.6k |
| :135 | Microsoft EPMAP | TCPUDP | Security | caution | 51.9k |
| :3128 | Tatsoft Default HTTP Proxy | TCP | Web Services | caution | 46.8k |
risk mix of the 8 listed
- caution100%
0 of 8 encrypted