Port 514 (Syslog)
Log forwarding from servers and network devices.
- Transport
- UDP
- Internet exposure
- Never expose
Should not be reachable from the internet.
Security notes
- Classic syslog is unauthenticated and unencrypted: logs can be read or forged.
- Use TLS syslog (6514) across untrusted networks.
When it shows up in your logs
Syslog arriving from unexpected sources may be spoofed.
Related ports
- 6514