TCP 7547
Synopsis
- TCP port 7547 is the default port for the Broadband Forum TR-069/CWMP protocol used by ISPs to remotely manage routers and modems (CPE).
- Real ACS platforms that listen on 7547 include GenieACS, FreeACS, Axiros AXESS, AVSystem UMP, and Friendly Technologies’ TR-069/USP systems.
- Many consumer CPE from D-Link, Zyxel, Huawei, ZTE, TP-Link, and Arcadyan (e.g., Deutsche Telekom Speedport models) use 7547 for TR-069, and some also expose TR-064 management on the same port.
- ISPs with large TR-069 deployments on 7547 include Deutsche Telekom, TalkTalk, Eir, and the UK Post Office.
- Security: port 7547 has been heavily exploited, notably by Mirai variants in 2016 abusing TR-064/069 flaws on exposed routers, causing mass outages and botnet infections across those ISPs’ customer devices.
Observed activity
Last 30 days
Detailed chart