Port 9060CardWeb realtime device data

UDP port 9060 is assigned to CardWeb realtime device data, a CardWare service with no established public deployment.

transport
udp

single transport

in transit
cleartext

payload readable on path

assignment
official

registered with iana

risk
1/10

safe

lookups
0

rank 993 of 6,112 · top 16%

also known as CardWeb-RT

1 other service is registered on port 9060. compare all 2 →

Technical Details

what runs on :9060

CardWeb realtime device data is registered on port :9060 over udp to CardWare Inc, assigned October 2016. We don't have a technical write-up for it beyond the IANA registry entry.

In nmap's internet-wide scan data this port is never observed open, so if it's open on your network it's more likely a custom or misconfigured service than the registered one.

find what's listening on :9060

this machine
# linux
sudo ss -ulpn 'sport = :9060'

# macos / bsd
sudo lsof -nP -i :9060

# windows (then: tasklist /FI "PID eq <pid>")
netstat -ano | findstr :9060
another host
sudo nmap -sU -sV -p U:9060 <host>

run it? the handshake, the implementations you meet in the wild and the flags that matter come from the engineers who do.

add technical details

Security Information

exposure of :9060

risk score

1/ 10safe

routine exposure. this port is rarely the way in on its own — keep it patched and logged and move on.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

no security notes recorded for :9060 yet

known exploits, hardening advice, what a compromise looks like — suggest an edit if you know its exposure.

ports registered around :9060, by lookups.

risk mix of the 8 listed

  • caution100%

2 of 8 encrypted