HTTPfy

Port 8007 (Proxmox Backup Server)

Proxmox Backup Server web UI and API.

Registered (user) port, 1024-49151 TCP Remote access Expose only to trusted sources

What port 8007 is used for

Proxmox Backup Server web UI and API.

Security: should port 8007 be open?

Expose only to trusted sources. Backups contain everything; restrict to admins and the PVE hosts.

IANA assignment

Service nameProtoDescriptionAssigneeReference
warppipe TCP I/O oriented cluster computing software MirrorWeb LTD -
warppipe UDP I/O oriented cluster computing software MirrorWeb LTD -

Registry dates for this port: registered 2017-07-19.

Check what is listening on port 8007

Linux: is anything listening on TCP 8007?
sudo ss -tlnp 'sport = :8007'
Linux / macOS: which process owns the port
sudo lsof -nP -i :8007
Older Linux / BSD (net-tools)
sudo netstat -tlnp | grep ':8007 '
Windows (Command Prompt)
netstat -ano | findstr :8007
Windows (PowerShell)
Get-NetTCPConnection -LocalPort 8007 -State Listen | Select LocalAddress,OwningProcess

Test it from outside

From another machine
nc -vz -w 5 HOST 8007
From Windows
Test-NetConnection HOST -Port 8007

Allow only trusted sources on port 8007 in the firewall

Replace 203.0.113.10 with the address or network you trust. With ufw, make sure the default incoming policy is deny.

ufw (one trusted source)
sudo ufw allow from 203.0.113.10 to any port 8007 proto tcp
iptables
sudo iptables -A INPUT -p tcp --dport 8007 -s 203.0.113.10 -j ACCEPT
sudo iptables -A INPUT -p tcp --dport 8007 -j DROP
nftables
sudo nft add rule inet filter input ip saddr 203.0.113.10 tcp dport 8007 accept
sudo nft add rule inet filter input tcp dport 8007 drop
Windows Firewall
New-NetFirewallRule -DisplayName 'TCP 8007 trusted' -Direction Inbound -Protocol TCP -LocalPort 8007 -RemoteAddress 203.0.113.10 -Action Allow

Related ports

All port numbers · Open port checker
Assignment data: IANA port number registry (public domain), retrieved 2026-11-10.