2 entries are registered on port 2221. It is a registered port (1024–49151) — IANA records an assignee, but nothing stops other software from listening here, which is why the number carries more than one entry.
services registered on this number
2 transports in use
entries encrypted on the wire
1 of 2 iana-registered
| port | service | proto | category | risk | views |
|---|---|---|---|---|---|
| :2221 | ESET Antivirus Updates | TCP | Security | caution | 6.7k |
| :2221 | EtherNet/IP over TLS | TCPUDPtls | Network Services | safe | 0 |
This port is primarily used by ESET security products to facilitate downloading antivirus updates and virus signature databases from ESET servers, ensuring that the endpoint has the most current protection against malware threats.
port 2221 as ESET Antivirus Updates →Encrypted EtherNet/IP communications for industrial automation devices and controllers.
port 2221 as EtherNet/IP over TLS →The registry says what 2221 is registered to. What is listening on it right now is decided by the host, and only the host can be asked. Each of these prints the process behind the socket.
ss -ltnp | grep ':2221\b'lsof -nP -iTCP:2221 -sTCP:LISTENnetstat -ano | findstr :2221On Linux and Windows the process name comes back with the socket; on macOS lsof needs sudo to name a process that isn't yours. Match what it prints against the 2 entries above.
A port number is not a service. Anything may listen on 2221 — what you actually met is decided by the host, not the registry. If a service is missing here, it belongs in the registry.
contribute an entry