Port 8140Puppet Server

Puppet agents connect to Puppet Server over HTTPS on TCP 8140 to request configuration catalogs and report status.

transport: tcp
in transit: encrypted
assignment: official
risk: 7/10
lookups: 0

also known as Puppet master

Technical Details

what runs on :8140

Puppet Server provides Puppet's agent-facing service over TCP 8140 by default. The connection uses HTTPS with TLS, typically including client-certificate authentication: an agent presents its Puppet certificate while requesting catalog data and related resources, and the server returns the response over the same connection. Puppet Server also handles certificate-related agent requests; it is distinct from PuppetDB, which is a separate component. Deployments can change the port or authentication settings.

Security Information

exposure of :8140

risk score

7/ 10risk

treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.

network services averages 2.6 across 1,808 ports — this one sits 4.4 above.

in transit

encrypted

payloads are protected on the wire

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp

every listening transport is another surface to filter at the edge

security overview

This is a sensitive infrastructure-management endpoint: an authorized or compromised client may obtain configuration data, and compromise of the server can affect the managed fleet. TLS and certificate authentication are normally used, but they do not make unrestricted internet exposure advisable. Limit access to expected agents and administrative networks, protect the server and its signing authority, and keep Puppet Server updated.

Record

iana registry entry

port: :8140
service: Puppet Server
transport: TCP
encryption: tls / encrypted
assignment: iana registered
risk: 7/10risk
category: Network Services System
usage: Puppet Server listens on TCP 8140 by default for Puppet agent traffic. Agents use it to request catalogs and retrieve managed files, and to submit reports; operators commonly encounter it on a Puppet-managed infrastructure's control-plane hosts.
lookups: 0rank 993
added: 2026-10-13
updated: 2026-10-13
references: IANA service name registry — port 8140

Something wrong?

This record is maintained by the engineers who use port 8140. Every field on it is editable — change what's wrong, say how you know, and a reviewer publishes it, usually within a minute. Last touched 2026-10-13.

01edit any field on a page of its own
02a model checks it for accuracy and spam
03clean and confident goes live immediately

edit this record →back to the registry

Related Ports

all 1,808 in network services →

the 8 most looked-up other ports in network services — 1,808 ports carry that label.

port	service	proto	category	risk	views
:9080	Groove RPC	TCPUDP	Web Services	caution	70.8k
:6543	Jetnet	UDP	Network Services	caution	65.3k
:5938	TeamViewer	TCPUDP	Remote Access	caution	65.0k
:8291	Winbox MikroTik Admin	TCP	Security	caution	62.9k
:3233	WhiskerControl Protocol	TCPUDP	Network Services	caution	61.9k
:3268	Microsoft Global Catalog (GC)	TCPUDP	Security	caution	54.6k
:135	Microsoft EPMAP	TCPUDP	Security	caution	51.9k
:3128	Tatsoft Default HTTP Proxy	TCP	Web Services	caution	46.8k

risk mix of the 8 listed

caution100%

0 of 8 encrypted

Port :8140Puppet Server

Technical Details

Security Information

Related Ports

Port 8140Puppet Server