Port 2221EtherNet/IP over TLS

Encrypted EtherNet/IP communications for industrial automation devices and controllers.

transport: tcp · udp
in transit: encrypted
assignment: official
risk: 2/10
lookups: 0

also known as ethernet-ip-s, Secure EtherNet/IP

1 other service is registered on port 2221. compare all 2 →

Technical Details

what runs on :2221

EtherNet/IP over TLS uses TLS to protect EtherNet/IP application traffic, providing encryption and endpoint authentication rather than changing the underlying industrial object model. The registry assigns the service to TCP and UDP; TCP deployments use a TLS session before exchanging EtherNet/IP data, while the exact UDP secure-transport behavior is implementation-dependent. Conventional EtherNet/IP ports are TCP 44818 for explicit messaging and UDP 2222 for implicit I/O, so traffic on 2221 indicates the secure variant rather than the usual cleartext service.

Security Information

exposure of :2221

risk score

2/ 10safe

routine exposure. this port is rarely the way in on its own — keep it patched and logged and move on.

network services averages 2.6 across 1,284 ports — this one sits 0.6 below.

in transit

encrypted

payloads are protected on the wire

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

This service should generally remain on trusted industrial networks or behind tightly controlled gateways, not be exposed directly to the Internet. TLS reduces interception and credential-disclosure risk, but an authenticated client may still be able to query or control sensitive automation functions; restrict sources, validate certificates, and monitor connection attempts.

Record

iana registry entry

port: :2221
service: EtherNet/IP over TLS
transport: TCPUDP
encryption: tls / encrypted
assignment: iana registered
risk: 2/10safe
category: Network Services IoT
usage: This port is assigned to secure EtherNet/IP traffic, the industrial automation protocol maintained by ODVA. Engineers may encounter it between EtherNet/IP controllers, scanners, adapters, and management systems that require TLS protection; ordinary EtherNet/IP commonly uses TCP 44818 and UDP 2222 instead.
lookups: 0rank 994
added: 2026-09-21
updated: 2026-09-21
references: IANA service name registry — port 2221

Something wrong?

This record is maintained by the engineers who use port 2221. Every field on it is editable — change what's wrong, say how you know, and a reviewer publishes it, usually within a minute. Last touched 2026-09-21.

01edit any field on a page of its own
02a model checks it for accuracy and spam
03clean and confident goes live immediately

edit this record →back to the registry

Related Ports

all 1,284 in network services →

the 8 most looked-up other ports in network services — 1,284 ports carry that label.

port	service	proto	category	risk	views
:9080	Groove RPC	TCPUDP	Web Services	caution	70.8k
:6543	Jetnet	UDP	Network Services	caution	65.3k
:5938	TeamViewer	TCPUDP	Remote Access	caution	65.0k
:8291	Winbox MikroTik Admin	TCP	Security	caution	62.9k
:3233	WhiskerControl Protocol	TCPUDP	Network Services	caution	61.9k
:3268	Microsoft Global Catalog (GC)	TCPUDP	Security	caution	54.6k
:135	Microsoft EPMAP	TCPUDP	Security	caution	51.9k
:3128	Tatsoft Default HTTP Proxy	TCP	Web Services	caution	46.8k

risk mix of the 8 listed

caution100%

0 of 8 encrypted

Port :2221EtherNet/IP over TLS

Technical Details

Security Information

Related Ports

Port 2221EtherNet/IP over TLS