# WHATPORT(10009)

## NAME

port 10009 — swdtp-sv / lnd gRPC — Registered to Fujitsu Systemwalker, but today it is most often lnd's Lightning Network gRPC API.

Protocol: TCP/UDP  
IANA registry

## DESCRIPTION

IANA assigns 10009 to swdtp-sv, the server side of Fujitsu's Systemwalker Desktop Patrol asset-management product. The listener you are more likely to meet is lnd, the Lightning Network daemon, whose shipped sample configuration sets `rpclisten=localhost:10009` for its gRPC interface (its REST API sits on 8080). Nmap sees 10009/tcp open on about 0.02% of hosts. A TLS handshake that presents a self-signed lnd certificate is the giveaway.

## EXPOSURE

**Do not expose.** lnd's gRPC controls a Bitcoin wallet and its channel funds. It is macaroon-authenticated over TLS, but macaroons leak and there is no reason to expose it — keep it on localhost or behind a VPN.

## CHECK

```sh
nc -vz TARGET 10009
```

## SEE ALSO

- source — [lnd — sample-lnd.conf (rpclisten default localhost:10009)](https://github.com/lightningnetwork/lnd/blob/master/sample-lnd.conf) (github.com)
- iana — [IANA port registry — 10009 (swdtp-sv)](https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=10009) (iana.org)

---

HTML: <https://whatport.net/10009/> · JSON: <https://whatport.net/10009.json> · full dataset: <https://whatport.net/ports.json>