Registered as news — unrelated to NNTP, which lives on 119.
IANA registers 2009/tcp as news and 2009/udp as whosockami, with no descriptions. The name is misleading: Usenet news is NNTP on 119, not here, and nothing maintained claims 2009. An open port here is most likely Cisco reverse telnet to line 9 or an arbitrary local service.
Expose with care
Do not trust the registered name — identify the real listener before exposing it.
$ nc -vz TARGET 2009Seen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.
Get Beige Box →also available as JSON · Markdown
Corrections or a missing port? Reply @rimrocksystems.