# WHATPORT(2003)

## NAME

port 2003 — Graphite carbon (plaintext) — Graphite's plaintext metrics receiver — one metric per line, no authentication at all.

Protocol: TCP  
IANA registry

## DESCRIPTION

IANA currently registers 2003 as brutus, and older /etc/services files call it cfingerd or GNU finger, but on a modern host this is Graphite: carbon-cache's plaintext line receiver runs on 2003 by default and accepts lines of the form "metric.path value timestamp". Anything that ships metrics — collectd, StatsD backends, Diamond, application code — writes here. If 2003 is open on a monitoring box, it is the metrics firehose inlet.

## EXPOSURE

**Do not expose.** The plaintext protocol has no authentication and no rate limiting, so anyone who can reach it can poison your metrics or fill the disk with new whisper files — bind it to the private network.

## CHECK

```sh
printf 'whatport.test 1 %s\n' "$(date +%s)" | nc -w 2 TARGET 2003
```

## SEE ALSO

- docs — [Graphite documentation — Feeding In Your Data (plaintext, port 2003)](https://graphite.readthedocs.io/en/latest/feeding-carbon.html) (graphite.readthedocs.io)
- source — [graphite-project/carbon](https://github.com/graphite-project/carbon) (github.com)
- iana — [IANA port registry — 2003 (brutus)](https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=2003) (iana.org)

---

HTML: <https://whatport.net/2003/> · JSON: <https://whatport.net/2003.json> · full dataset: <https://whatport.net/ports.json>