CyberHunter
Local dataset, no network
// Port category

IoT & industrial (ICS) ports

MQTT, CoAP, Modbus, S7, BACnet, DNP3 and other OT protocols. 30 ports, most common first.

PortServiceTransportRiskEncryption
1883 MQTT mqtt TCP UDP 7/10 high no
8883 MQTT over TLS secure-mqtt TCP UDP 4/10 moderate yes
502 Modbus TCP mbap TCP UDP 10/10 critical no
102 Siemens S7 (ISO-TSAP) iso-tsap TCP UDP 10/10 critical no
47808 BACnet bacnet UDP TCP 9/10 critical no
20000 DNP3 dnp TCP UDP SCTP 9/10 critical no
44818 EtherNet/IP EtherNet-IP-2, EtherNet/IP-2 TCP UDP 9/10 critical no
802 Modbus Application Protocol Secure mbap-s TCP UDP - -
2221 EtherNet/IP over TLS ethernet-ip-s TCP UDP - yes
2222 EtherNet/IP I/O IANA assigned this well-formed service name as a replacement for "EtherNet/IP-1". EtherNet-IP-1, EtherNet/IP-1 TCP UDP - -
2404 IEC 60870-5-104 process control over IP iec-104 TCP UDP - -
3947 Connect and Control Protocol for Consumer, Commercial, and Industrial Electronic Devices ccp TCP UDP - -
4840 OPC UA Connection Protocol opcua-tcp, opcua-udp TCP UDP - -
4843 OPC UA TCP Protocol over TLS/SSL opcua-tls TCP UDP - yes
5075 Experimental Physics and Industrial Control System pvaccess TCP - -
5094 HART-IP hart-ip TCP UDP - -
5683 Constrained Application Protocol (CoAP) coap TCP UDP - -
5684 Constrained Application Protocol (CoAP) coaps TCP UDP - yes
17754 Encap. ZigBee Packets zep TCP UDP - -
17755 ZigBee IP Transport Service zigbee-ip TCP UDP - -
17756 ZigBee IP Transport Secure Service zigbee-ips TCP UDP - -
19998 IEC 60870-5-104 process control - secure iec-104-sec TCP - -
19999 Distributed Network Protocol - Secure dnp-sec TCP UDP SCTP - -
29999 data exchange protocol for IEC61850 in wind power plants bingbang TCP - -
34962 PROFInet RT Unicast profinet-rt TCP UDP - -
34963 PROFInet RT Multicast profinet-rtm TCP UDP - -
34964 PROFInet Context Manager profinet-cm TCP UDP - -
34965 PROFINET secure connection management and key provisioning profinet-cm-sec TCP UDP - -
34966 PROFINET secure real-time data transfer over UDP (unicast and multicast) profinet-rt-sec UDP - -
47100 Configuration of motors connected to Industrial Ethernet jvl-mactalk UDP - -
01 Security

Securing iot & industrial (ics) services

  • Industrial and IoT protocols often have no authentication: never expose them to the Internet.
  • Segment OT networks from IT and use protocol-aware firewalls.
  • Monitor with an ICS-aware intrusion detection system.
02 Categories

Other port categories

Web /tools/ports/category/web Remote access /tools/ports/category/remote-access File transfer & sharing /tools/ports/category/file-transfer Email /tools/ports/category/email Databases & caches /tools/ports/category/databases Directory & authentication /tools/ports/category/directory-auth Network services /tools/ports/category/network-services VPN, tunnels & proxies /tools/ports/category/vpn-tunnels Messaging & queues /tools/ports/category/messaging Voice & chat /tools/ports/category/voice-chat Media & streaming /tools/ports/category/media DevOps, cloud & containers /tools/ports/category/devops Monitoring & logging /tools/ports/category/monitoring Gaming /tools/ports/category/gaming Other services /tools/ports/category/other

Latest vulnerability news

All news