whatportis.com
suggest an edit →

Port 989FTPS Data

Port 989 is primarily used for FTPS data transfer, which is an extension of the traditional FTP protocol secured with TLS or SSL encryption. This port facilitates the encrypted transfer of files between clients and servers, ensuring both confidentiality and integrity during data exchange. FTPS addresses the inherent security weaknesses of standard FTP by adding support for encryption standards widely accepted across industries..

inSecurityFile Transfer
transport
tcp · udp

2 transports registered

in transit
encrypted

payload protected on the wire

assignment
official

registered with iana

risk
3/10

caution

lookups
22,462

rank 93 of 993 · top 9%

Technical Details

what runs on :989

FTPS (File Transfer Protocol over SSL/TLS) enhances the traditional FTP by incorporating SSL or TLS encryption. Specifically, port 989 serves as the default data port for FTPS in implicit mode, where the SSL/TLS connection is automatically initiated without separate negotiation. This mode mandates encryption from the start, distinguishing it from explicit FTPS where encryption is negotiated over the standard FTP ports.

Technically, FTPS operates by wrapping FTP commands and data transfers within an encrypted tunnel. Port 989 handles binary file data streams, while port 990 is typically the control port. Both client and server must support SSL/TLS to establish a connection, and digital certificates are often required to verify identities or facilitate encrypted sessions.

FTPS supports both active and passive data connections. In active mode, the server connects back to the client's ephemeral port from port 989, while in passive mode, the client initiates connections to a server-specified port range. The encryption complicates deep packet inspection and NAT traversal; therefore, proper configuration is necessary to maintain secure yet functional transfers.

Security Information

exposure of :989

risk score

3/ 10caution

worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.

security averages 3.8 across 216 ports — this one sits 0.8 below.

in transit

encrypted

payloads are protected on the wire

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

Common Vulnerabilities:

  • Misconfiguration may cause sensitive data leakage if encryption is not enforced correctly or certificate validation is skipped.
  • Vulnerability to downgrade attacks if SSL/TLS negotiation is improperly managed, leading to weaker encryption.
  • Exposure to brute-force or dictionary attacks targeting FTP credentials.
  • Older SSL protocols are susceptible to vulnerabilities like POODLE or BEAST.

Mitigations:

  • Enforce strong TLS versions (preferably TLS 1.2 or above) and disable deprecated protocols such as SSLv2 and SSLv3.
  • Use strong cipher suites and configure servers to require secure renegotiation.
  • Implement strict certificate validation to prevent MiTM attacks.
  • Utilize multi-factor authentication alongside complex passwords.
  • Restrict port access using firewalls and limit IP addresses allowed to connect.
  • Employ additional monitoring tools to detect anomalous activities or potential intrusions swiftly.

Related Ports

all 216 in security →

the 8 most looked-up other ports in security — 216 ports carry that label.

portservicerisk
:8881Atlasz Secure Servercaution
:443HTTPScaution
:8291Winbox MikroTik Admincaution
:3268Microsoft Global Catalog (GC)caution
:135Microsoft EPMAPcaution
:3128Squid Proxy HTTPcaution
:8080HTTP Alternatecaution
:7000Vuze HTTPS Trackercaution

risk mix of the 8 listed

  • caution100%

3 of 8 encrypted