Port 51820 (WireGuard)
Default port for the WireGuard VPN.
- Transport
- UDP
- Internet exposure
- Public by design
Normally public, but keep the software patched and hardened.
Security notes
- Silent to unauthenticated packets, so it does not show up in simple scans.
- Unexpected WireGuard from corporate hosts can be an unapproved VPN.
When it shows up in your logs
Outbound WireGuard from managed devices may bypass monitoring.