Port 468Photuris Session-Key Management Protocol

Photuris key-management traffic for negotiating authenticated session keys, historically associated with IPsec.

transport: tcp · udp
in transit: cleartext
assignment: official
risk: 2/10
lookups: 0

also known as proturis, RFC 2522

Technical Details

what runs on :468

Photuris uses a message-oriented handshake involving cookie exchange, Diffie–Hellman key agreement, identity authentication, and security-association negotiation. The IANA assignment covers TCP and UDP port 468; RFC 2522 describes normal operation over UDP, while the TCP assignment may support deployments requiring a reliable transport. Photuris negotiates keys for protecting subsequent traffic rather than carrying ordinary application data; modern IPsec deployments more commonly use IKE on UDP 500 and NAT-T on UDP 4500.

Security Information

exposure of :468

risk score

2/ 10safe

routine exposure. this port is rarely the way in on its own — keep it patched and logged and move on.

security averages 3.7 across 233 ports — this one sits 1.7 below.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

Internet exposure provides an attack surface for probing, resource-exhaustion attempts, malformed-handshake attacks, and cryptographic-negotiation abuse. Photuris is uncommon and should not be exposed unless a legacy deployment requires it; its key-management traffic is not equivalent to an encrypted application service, and subsequent IPsec traffic is protected separately.

Record

iana registry entry

port: :468
service: Photuris Session-Key Management Protocol
transport: TCPUDP
encryption: cleartext
assignment: iana registered
risk: 2/10safe
category: Security Network Services
usage: Photuris is a session-key management protocol used to negotiate authenticated keys and security associations for IP security. It is a largely historical and rarely encountered alternative to more prevalent IPsec key-management protocols.
lookups: 0rank 994
added: 2026-08-27
updated: 2026-08-27
references: IANA service name registry — port 468

Something wrong?

This record is maintained by the engineers who use port 468. Every field on it is editable — change what's wrong, say how you know, and a reviewer publishes it, usually within a minute. Last touched 2026-08-27.

01edit any field on a page of its own
02a model checks it for accuracy and spam
03clean and confident goes live immediately

edit this record →back to the registry

Related Ports

all 233 in security →

the 8 most looked-up other ports in security — 233 ports carry that label.

port	service	proto	category	risk	views
:8881	Atlasz Secure Server	TCP	Web Services	caution	67.6k
:443	HTTPS	TCPtls	Web Services	caution	65.9k
:8291	Winbox MikroTik Admin	TCP	Security	caution	62.9k
:3268	Microsoft Global Catalog (GC)	TCPUDP	Security	caution	54.6k
:135	Microsoft EPMAP	TCPUDP	Security	caution	51.9k
:3128	Squid Proxy HTTP	TCP	Web Services	caution	45.8k
:8080	HTTP Alternate	TCPtls	Web Services	caution	44.9k
:7000	Vuze HTTPS Tracker	TCPtls	Security	caution	28.9k

risk mix of the 8 listed

caution100%

3 of 8 encrypted

Port :468Photuris Session-Key Management Protocol

Technical Details

Security Information

Related Ports

Port 468Photuris Session-Key Management Protocol