Port 1211Groove DPP

Port 1211 is assigned to Groove DPP traffic over TCP and UDP.

transport: tcp · udp
in transit: cleartext
assignment: official
risk: 1/10
lookups: 0

Technical Details

what runs on :1211

Groove DPP is registered on port :1211 over tcp and udp to Ken Moore. We don't have a technical write-up for it beyond the IANA registry entry.

In nmap's internet-wide scan data this port is found open rarely. What's listening is often not the registered service, so check before you assume.

find what's listening on :1211

this machine

# linux
sudo ss -tulpn 'sport = :1211'

# macos / bsd
sudo lsof -nP -i :1211

# windows (then: tasklist /FI "PID eq <pid>")
netstat -ano | findstr :1211

another host

nmap -sV -p T:1211 <host>
sudo nmap -sU -sV -p U:1211 <host>

run it? the handshake, the implementations you meet in the wild and the flags that matter come from the engineers who do.

add technical details

Security Information

exposure of :1211

risk score

1/ 10safe

routine exposure. this port is rarely the way in on its own — keep it patched and logged and move on.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

no security notes recorded for :1211 yet

known exploits, hardening advice, what a compromise looks like — suggest an edit if you know its exposure.

Record

iana registry entry

port: :1211
service: Groove DPP
transport: TCPUDP
encryption: cleartext
assignment: iana registered
risk: 1/10safe
category: uncategorised
usage: This assignment identifies Groove DPP traffic on TCP and UDP port 1211. It is registered to Ken Moore; public deployment details are not documented in the registry.
lookups: 0rank 993
added: 2026-09-10
updated: 2026-09-10
references: IANA service name registry — port 1211

Something wrong?

This record is maintained by the engineers who use port 1211. Every field on it is editable — change what's wrong, say how you know, and a reviewer publishes it, usually within a minute. Last touched 2026-09-10.

01edit any field on a page of its own
02a model checks it for accuracy and spam
03clean and confident goes live immediately

edit this record →back to the registry

Related Ports

browse categories →

ports registered around :1211, by lookups.

port	service	proto	category	risk	views
:1220	QTSS Admin	TCP	Streaming	safe	20.6k
:1270	SCOM Agent	TCPUDP	Network Services	caution	15.6k
:1200	SCOL Name Service	TCP	Network Services	caution	15.5k
:1236	Symantec BindView UNIX Mgmt	TCP	Security	caution	14.7k
:1200	Steam Friends Applet	UDP	Gaming	caution	13.0k
:1182	AcceleNet ITP	TCPUDP	Network Services	caution	12.4k
:1234	VLC RTP Streaming	UDP	Streaming	safe	11.7k
:1194	OpenVPN	TCPUDP	Security	caution	11.2k

risk mix of the 8 listed

safe25%
caution75%

0 of 8 encrypted

Port :1211Groove DPP

Technical Details

Security Information

Related Ports

Port 1211Groove DPP