Internet-Security raven logo internet-security.com

UDP 4444

ProtocolUDP
Port4444
LabelsOracle WebCenter Content: Content Server

Synopsis

  • UDP port 4444 is assigned to krb524, the Kerberos 5-to-4 ticket translation service.
  • Real deployments included the krb524d daemon in MIT Kerberos and Heimdal, commonly used with OpenAFS/Transarc AFS environments so clients (via aklog) could obtain Kerberos 4 tickets for legacy AFS access.
  • Many universities and enterprises ran this service in the 1990s–2000s; it is now largely deprecated and often disabled because Kerberos 4 is obsolete.
  • Some older Linux distributions packaged krb524d (e.g., MIT Kerberos on Red Hat and Debian), and sites exposed it on UDP 4444 for internal authentication workflows.
  • Note: port 4444 is frequently mentioned in exploitation contexts (e.g., Metasploit reverse shells), but those are typically on TCP 4444, not UDP.

Observed activity

Last 30 days Detailed chart

More information