Almost always Oracle WebLogic's default listen port; the registration belongs to AFS callbacks.
IANA assigns 7001 to afs3-callback, the port an AFS cache manager listens on so file servers can call back and invalidate cached data — AFS carries that over UDP via the Rx protocol. On TCP, what you find in practice is Oracle WebLogic Server: Oracle's Fusion Middleware port table lists 7001 as the default listen port for the Administration Server. That console and the T3 protocol behind it have been the subject of a long run of deserialization remote-code-execution advisories, which is why 7001 draws constant internet-wide scanning. Apache Cassandra also defaults its encrypted internode port (ssl_storage_port) to 7001.
Do not expose
A WebLogic admin listener on a public IP is an administrative plane with a long RCE history; keep it on a management network behind a proxy that terminates authentication.
$ curl -sI http://TARGET:7001/consoleSeen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.
Get Beige Box →also available as JSON · Markdown
Corrections or a missing port? Reply @rimrocksystems.