HTTPfy

Port 8140 (Puppet server)

Puppet agents fetch catalogs from the Puppet server on 8140.

Registered (user) port, 1024-49151 TCP Network infrastructure Do not expose to the internet

What port 8140 is used for

Puppet agents fetch catalogs from the Puppet server on 8140.

Security: should port 8140 be open?

Do not expose to the internet. Agents only; disable autosign so unknown hosts cannot get certificates and catalogs.

IANA assignment

Service nameProtoDescriptionAssigneeReference
puppet TCP The Puppet master service Puppet -

Registry dates for this port: registered 2014-09-18.

Check what is listening on port 8140

Linux: is anything listening on TCP 8140?
sudo ss -tlnp 'sport = :8140'
Linux / macOS: which process owns the port
sudo lsof -nP -i :8140
Older Linux / BSD (net-tools)
sudo netstat -tlnp | grep ':8140 '
Windows (Command Prompt)
netstat -ano | findstr :8140
Windows (PowerShell)
Get-NetTCPConnection -LocalPort 8140 -State Listen | Select LocalAddress,OwningProcess

Test it from outside

From another machine
nc -vz -w 5 HOST 8140
From Windows
Test-NetConnection HOST -Port 8140

Block port 8140 in the firewall

ufw
sudo ufw deny 8140/tcp
iptables
sudo iptables -A INPUT -p tcp --dport 8140 -j DROP
nftables
sudo nft add rule inet filter input tcp dport 8140 drop
Windows Firewall
New-NetFirewallRule -DisplayName 'Block TCP 8140' -Direction Inbound -Protocol TCP -LocalPort 8140 -Action Block

Related ports

All port numbers · Open port checker
Assignment data: IANA port number registry (public domain), retrieved 2026-11-10.