Port 4444NV Video / Metasploit Handler

IANA assigns 4444 to NV Video, but TCP 4444 is also widely recognized as Metasploit’s default handler port.

transport: tcp · udp
in transit: cleartext
assignment: official
risk: 7/10
lookups: 0

also known as Metasploit 4444

1 other service is registered on port 4444. compare all 2 →

Technical Details

what runs on :4444

The IANA assignment is NV Video over TCP and UDP, but there is no generally recognized, interoperable NV Video protocol behavior to infer from the port alone. TCP 4444 is widely used as Metasploit’s default handler port for reverse-TCP payloads; the payload determines the handshake and framing, so it is not a standard service protocol. Metasploit also supports other transports and ports, and the IANA assignment does not imply that a Metasploit listener is present.

Security Information

exposure of :4444

risk score

7/ 10risk

treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.

security averages 3.1 across 371 ports — this one sits 3.9 above.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

IANA reports unauthorized use of this assignment. An unexpected TCP listener on 4444 merits process and traffic identification: if it is a bind shell or payload listener, it could provide remote command execution, but the port number alone is not evidence of compromise. Do not expose a suspected shell or handler to the internet; restrict access and investigate the host.

Record

iana registry entry

port: :4444
service: NV Video / Metasploit Handler
transport: TCPUDP
encryption: cleartext
assignment: iana registered
risk: 7/10risk
category: Security Remote Access
usage: IANA lists NV Video as the default service, registered to Ron Frederick. In practice, engineers often recognize TCP 4444 as Metasploit’s default listener port for payload handlers; an open port may instead be an unrelated application.
lookups: 0rank 993
added: 2026-10-05
updated: 2026-10-05
references: IANA service name registry — port 4444

Something wrong?

This record is maintained by the engineers who use port 4444. Every field on it is editable — change what's wrong, say how you know, and a reviewer publishes it, usually within a minute. Last touched 2026-10-05.

01edit any field on a page of its own
02a model checks it for accuracy and spam
03clean and confident goes live immediately

edit this record →back to the registry

Related Ports

all 371 in security →

the 8 most looked-up other ports in security — 371 ports carry that label.

port	service	proto	category	risk	views
:8881	Atlasz Secure Server	TCP	Web Services	caution	67.6k
:443	HTTPS	TCPtls	Web Services	caution	65.9k
:8291	Winbox MikroTik Admin	TCP	Security	caution	62.9k
:3268	Microsoft Global Catalog (GC)	TCPUDP	Security	caution	54.6k
:135	Microsoft EPMAP	TCPUDP	Security	caution	51.9k
:3128	Squid Proxy HTTP	TCP	Web Services	caution	45.8k
:8080	HTTP Alternate	TCP	Web Services	caution	44.9k
:7000	Vuze HTTPS Tracker	TCPtls	Security	caution	28.9k

risk mix of the 8 listed

caution100%

2 of 8 encrypted

Port :4444NV Video / Metasploit Handler

Technical Details

Security Information

Related Ports

Port 4444NV Video / Metasploit Handler