Port 1344ICAP (Internet Content Adaptation Protocol)

ICAP lets proxies send HTTP requests and responses to antivirus, filtering, and other content-adaptation services.

transport: tcp · udp
in transit: cleartext
assignment: official
risk: 5/10
lookups: 0

also known as Internet Content Adaptation Protocol, RFC 3507

Technical Details

what runs on :1344

ICAP is normally deployed over TCP port 1344; although the registry lists both TCP and UDP, mainstream ICAP implementations use TCP. A client begins with an OPTIONS request to discover server capabilities, then sends REQMOD to adapt an HTTP request or RESPMOD to adapt an HTTP response. ICAP headers frame an encapsulated HTTP message, with support for previews and chunked transfer; the base protocol is generally cleartext and is not HTTP itself.

Security Information

exposure of :1344

risk score

5/ 10caution

worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.

security averages 3.6 across 257 ports — this one sits 1.4 above.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

ICAP commonly carries complete HTTP requests, responses, and potentially sensitive content, without encryption or authentication in the base protocol. It should normally be restricted to trusted proxy and adaptation hosts rather than exposed to the internet; an exposed service may permit unauthorized content-submission, information disclosure, resource exhaustion, or exploitation of implementation-specific parser and scanning vulnerabilities.

Record

iana registry entry

port: :1344
service: ICAP (Internet Content Adaptation Protocol)
transport: TCPUDP
encryption: cleartext
assignment: iana registered
risk: 5/10caution
category: Security Network Services
usage: ICAP servers receive content from HTTP proxies for antivirus scanning, data-loss prevention, URL filtering, and other adaptations. Engineers commonly encounter it between Squid or enterprise proxy infrastructure and products such as c-icap or commercial content-scanning systems, usually on TCP port 1344.
lookups: 0rank 994
added: 2026-09-01
updated: 2026-09-01
references: IANA service name registry — port 1344

Something wrong?

This record is maintained by the engineers who use port 1344. Every field on it is editable — change what's wrong, say how you know, and a reviewer publishes it, usually within a minute. Last touched 2026-09-01.

01edit any field on a page of its own
02a model checks it for accuracy and spam
03clean and confident goes live immediately

edit this record →back to the registry

Related Ports

all 257 in security →

the 8 most looked-up other ports in security — 257 ports carry that label.

port	service	proto	category	risk	views
:8881	Atlasz Secure Server	TCP	Web Services	caution	67.6k
:443	HTTPS	TCPtls	Web Services	caution	65.9k
:8291	Winbox MikroTik Admin	TCP	Security	caution	62.9k
:3268	Microsoft Global Catalog (GC)	TCPUDP	Security	caution	54.6k
:135	Microsoft EPMAP	TCPUDP	Security	caution	51.9k
:3128	Squid Proxy HTTP	TCP	Web Services	caution	45.8k
:8080	HTTP Alternate	TCPtls	Web Services	caution	44.9k
:7000	Vuze HTTPS Tracker	TCPtls	Security	caution	28.9k

risk mix of the 8 listed

caution100%

3 of 8 encrypted

Port :1344ICAP (Internet Content Adaptation Protocol)

Technical Details

Security Information

Related Ports

Port 1344ICAP (Internet Content Adaptation Protocol)