Is this normal port 514 without remote log server activated?

Security
1

As the title says…is it normal that this exists ?

ss -tulpn | grep :514
udp UNCONN 0 0 0.0.0.0:514 0.0.0.0:* users:((“syslogd”,pid=4476,fd=11))
udp UNCONN 0 0 [::]:514 [::]:* users:((“syslogd”,pid=4476,fd=12))

scanned in LAN with kali linux → 514/tcp filtered shell.

Thanks!

2

Yes, it is normal that syslogd is bound to port 514. But it won’t be reachable over the network.