Port 514: Syslog

What is port 514 used for?

Central logging.

Is it safe to expose port 514 to the internet?

Unauthenticated; keep it on the management network.

If port 514 seems closed or unreachable

1. Check that the Syslog service is running and listening on port 514, not only on 127.0.0.1.
2. Check the firewall on the host itself (Windows Defender Firewall, iptables, nftables, ufw) for a rule that allows UDP 514.
3. If the host is behind a router, confirm the forwarding rule points to the correct internal address and that your internet provider does not use carrier-grade NAT.
4. Test from outside your own network. A port can be open locally and blocked at the edge, or the other way round.

Using port 514 safely

Treat port 514 as an internal-only service. Reach it through a VPN or an SSH tunnel, restrict it by source address, and keep the software that listens on it patched.