- Restrict management and monitoring protocols to the monitoring network.
- Replace community strings and default credentials.
- Send logs over TLS.
Monitoring & logging ports
SNMP, syslog, metrics, dashboards and management agents. 83 ports, most common first.
| Port | Service | Transport | Risk | Encryption |
|---|---|---|---|---|
| 161 | SNMP snmp | UDP TCP | 7/10 high | no |
| 162 | SNMP trap snmptrap | UDP TCP | 4/10 moderate | no |
| 9090 | Prometheus / admin consoles websm | TCP UDP | 6/10 high | no |
| 514 | Syslog shell, syslog | UDP TCP | 5/10 moderate | no |
| 6514 | Syslog over TLS syslog-tls | TCP UDP DCCP | 2/10 low | yes |
| 5601 | Kibana esmagent | TCP UDP | 7/10 high | no |
| 391 | SynOptics SNMP Relay Port synotics-relay | TCP UDP | - | - |
| 412 | Trap Convention Port synoptics-trap | TCP UDP | - | - |
| 561 | monitor | TCP UDP | - | - |
| 601 | Reliable Syslog Service syslog-conn | TCP UDP | - | - |
| 609 | npmp-trap npmp-trap | TCP UDP | - | - |
| 705 | AgentX agentx | TCP UDP | - | - |
| 1046 | WebFilter Remote Monitor wfremotertm | TCP UDP | - | - |
| 1050 | CORBA Management Agent cma | TCP UDP | - | - |
| 1086 | CPL Scrambler Logging cplscrambler-lg | TCP UDP | - | - |
| 1088 | CPL Scrambler Alarm Log cplscrambler-al | TCP UDP | - | - |
| 1162 | Health Trap health-trap | TCP UDP | - | - |
| 1204 | Log Request Listener ssslog-mgr | TCP UDP | - | - |
| 1338 | WMC-log-svr wmc-log-svc | TCP UDP | - | - |
| 1393 | Network Log Server iclpv-nls | TCP UDP | - | - |
| 1394 | Network Log Client iclpv-nlc | TCP UDP | - | - |
| 1634 | Log On America Probe loaprobe | TCP UDP | - | - |
| 1885 | Veritas Trap Server vrtstrapserver | TCP UDP | - | - |
| 1993 | cisco SNMP TCP port snmp-tcp-port | TCP UDP | - | - |
| 2048 | dls-monitor | TCP UDP | - | - |
| 2081 | KME PRINTER TRAP PORT kme-trap-port | TCP UDP | - | - |
| 2087 | ELI - Event Logging Integration eli | TCP UDP | - | - |
| 2290 | Sonus Logging Services sonus-logging | TCP UDP | - | - |
| 2301 | Compaq HTTP cpq-wbem | TCP UDP | - | - |
| 2479 | SecurSight Event Logging Server (SSL) ssm-els | TCP UDP | - | - |
| 2552 | Call Logging call-logging | TCP UDP | - | - |
| 2568 | SPAM TRAP spamtrap | TCP UDP | - | - |
| 2609 | System Monitor system-monitor | TCP UDP | - | - |
| 2660 | GC Monitor gcmonitor | TCP UDP | - | - |
| 2697 | Oce SNMP Trap Port oce-snmp-trap | TCP UDP | - | - |
| 2735 | NetIQ Monitor Console netiq-mc | TCP UDP | - | - |
| 2845 | BPCP TRAP bpcp-trap | TCP UDP | - | - |
| 3072 | ContinuStor Monitor Port csd-monitor | TCP UDP | - | - |
| 3186 | IIW Monitor User Port iiw-port | TCP UDP | - | - |
| 3203 | Network Watcher Monitor netwatcher-mon | TCP UDP | - | - |
| 3300 | Ceph monitor ceph | TCP | - | - |
| 3427 | WebSphere SNMP websphere-snmp | TCP UDP | - | - |
| 3520 | Netvion Galileo Log Port galileolog | TCP UDP | - | - |
| 3600 | text relay-answer trap-daemon | TCP UDP | - | - |
| 3830 | Cerner System Management Agent cernsysmgmtagt | TCP UDP | - | - |
| 3848 | IT Environmental Monitor item | TCP UDP | - | - |
| 3857 | Trap Port trap-port | TCP UDP | - | - |
| 3858 | Trap Port MOM trap-port-mom | TCP UDP | - | - |
| 3998 | Distributed Nagios Executor Service dnx | TCP UDP | - | - |
| 4020 | TRAP Port trap | TCP UDP | - | - |
| 4110 | G2 RFID Tag Telemetry Data g2tag | TCP UDP | - | - |
| 4119 | Assuria Log Manager assuria-slm | TCP UDP | - | - |
| 4120 | MiniRem Remote Telemetry and Control minirem | TCP | - | - |
| 4739 | IP Flow Info Export ipfix | TCP UDP SCTP | - | - |
| 4740 | ipfix protocol over TLS ipfixs | TCP UDP SCTP | - | yes |
| 4844 | nCode ICE-flow Library LogServer gw-log | TCP UDP | - | - |
| 4949 | Munin Graphing Framework munin | TCP UDP | - | - |
| 5227 | HP System Performance Metric Service perfd | TCP UDP | - | - |
| 5229 | Netflow/IPFIX/sFlow Collector and Forwarder Management jaxflow | TCP | - | - |
| 5316 | HPBladeSystem Monitor Service hpbladems | TCP | - | - |
| 5317 | HP Device Monitor Service hpdevms | TCP | - | - |
| 5666 | Nagios Remote Plugin Executor nrpe | TCP | - | - |
| 5987 | WBEM RMI wbem-rmi | TCP UDP | - | - |
| 5988 | WBEM CIM-XML (HTTP) wbem-http | TCP UDP | - | - |
| 5989 | WBEM CIM-XML (HTTPS) wbem-https | TCP UDP | - | - |
| 5990 | WBEM Export HTTPS wbem-exp-https | TCP UDP | - | - |
| 5993 | DMTF WBEM CIM REST cim-rs | TCP | - | - |
| 6343 | sFlow traffic monitoring sflow | TCP UDP | - | - |
| 7410 | Ionix Network Monitor ionixnetmon | TCP UDP | - | - |
| 7421 | Matisse Port Monitor mtportmon | TCP UDP | - | - |
| 7428 | OpenView DM Log Agent Manager ovladmgr | TCP UDP | - | - |
| 8161 | Patrol SNMP patrol-snmp | TCP UDP | - | - |
| 9593 | LANDesk Management Agent (cba8) cba8 | TCP UDP | - | - |
| 10050 | Zabbix Agent zabbix-agent | TCP UDP | - | - |
| 10051 | Zabbix Trapper zabbix-trapper | TCP UDP | - | - |
| 10161 | SNMP-DTLS snmpdtls, snmptls | UDP TCP | - | - |
| 10162 | SNMP-Trap-DTLS snmpdtls-trap, snmptls-trap | UDP TCP | - | - |
| 11161 | sun cacao snmp access point suncacao-snmp | TCP UDP | - | - |
| 13216 | Black Crow Software application logging bcslogc | TCP UDP | - | - |
| 16162 | Solaris Audit - secure remote audit log solaris-audit | TCP | - | - |
| 31416 | XQoS network monitor xqosd | TCP UDP | - | - |
| 31685 | DS Expert Monitor dsx_monitor, dsx-monitor | TCP | - | - |
| 45002 | Redspeed Status Monitor rs-status | TCP | - | - |
Securing monitoring & logging services
Other port categories
Web /tools/ports/category/web Remote access /tools/ports/category/remote-access File transfer & sharing /tools/ports/category/file-transfer Email /tools/ports/category/email Databases & caches /tools/ports/category/databases Directory & authentication /tools/ports/category/directory-auth Network services /tools/ports/category/network-services VPN, tunnels & proxies /tools/ports/category/vpn-tunnels Messaging & queues /tools/ports/category/messaging Voice & chat /tools/ports/category/voice-chat Media & streaming /tools/ports/category/media IoT & industrial (ICS) /tools/ports/category/iot-ics DevOps, cloud & containers /tools/ports/category/devops Gaming /tools/ports/category/gaming Other services /tools/ports/category/other