Port 2575HL7 over MLLP

HL7 v2 healthcare messages commonly use this port over TCP with MLLP framing.

transport
tcp · udp

2 transports registered

in transit
cleartext

payload readable on path

assignment
official

registered with iana

risk
6/10

risk

lookups
0

rank 993 of 4,138 · top 24%

also known as hl7

Technical Details

what runs on :2575

HL7 v2 is a message format used to exchange clinical and administrative data between healthcare systems. Deployments commonly carry it over TCP using Minimal Lower Layer Protocol (MLLP): a message is framed with a start byte (VT, 0x0B) and an end sequence (FS, 0x1C followed by CR, 0x0D), with acknowledgments often sent in response. Port 2575 is a common convention, not a requirement of HL7; the IANA entry lists both TCP and UDP, though reliable TCP-based MLLP is the typical use. MLLP itself does not provide encryption.

Security Information

exposure of :2575

risk score

6/ 10risk

treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.

network services averages 2.7 across 1,316 ports — this one sits 3.3 above.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

HL7 messages can contain sensitive patient information, and ordinary MLLP traffic is not encrypted or authenticated by the framing protocol. Keep listeners on trusted healthcare networks or protect them with controls such as network segmentation, VPNs, or a properly configured TLS-protected transport; avoid exposing them directly to the internet.

the 8 most looked-up other ports in network services — 1,316 ports carry that label.

risk mix of the 8 listed

  • caution100%

0 of 8 encrypted