Port 9418 (Git protocol)

Native git:// protocol served by git daemon. Read-only, unauthenticated and unencrypted; most hosting now uses HTTPS or SSH instead.

Registered (user) port, 1024-49151 TCP Development tools Expose only to trusted sources

What port 9418 is used for

Native git:// protocol served by git daemon. Read-only, unauthenticated and unencrypted; most hosting now uses HTTPS or SSH instead.

Expose only to trusted sources. Only serve public repositories over git://. Clients cannot verify the server, so prefer HTTPS or SSH.

Service nameProtoDescriptionAssigneeReference

git TCP git pack transfer service Linus Torvalds -

git UDP git pack transfer service Linus Torvalds -

Registry dates for this port: registered 2005-09.

Linux: is anything listening on TCP 9418?

sudo ss -tlnp 'sport = :9418'

Linux / macOS: which process owns the port

sudo lsof -nP -i :9418

Older Linux / BSD (net-tools)

sudo netstat -tlnp | grep ':9418 '

Windows (Command Prompt)

netstat -ano | findstr :9418

Windows (PowerShell)

Get-NetTCPConnection -LocalPort 9418 -State Listen | Select LocalAddress,OwningProcess

From another machine

nc -vz -w 5 HOST 9418

From Windows

Test-NetConnection HOST -Port 9418

Replace 203.0.113.10 with the address or network you trust. With ufw, make sure the default incoming policy is deny.

ufw (one trusted source)

sudo ufw allow from 203.0.113.10 to any port 9418 proto tcp

iptables

sudo iptables -A INPUT -p tcp --dport 9418 -s 203.0.113.10 -j ACCEPT
sudo iptables -A INPUT -p tcp --dport 9418 -j DROP

nftables

sudo nft add rule inet filter input ip saddr 203.0.113.10 tcp dport 9418 accept
sudo nft add rule inet filter input tcp dport 9418 drop

Windows Firewall

New-NetFirewallRule -DisplayName 'TCP 9418 trusted' -Direction Inbound -Protocol TCP -LocalPort 9418 -RemoteAddress 203.0.113.10 -Action Allow

All port numbers · Open port checker
Assignment data: IANA port number registry (public domain), retrieved 2026-11-10.