Ports ICS / SCADA#
Service ports for common ICS and SCADA hardware. The operator uses this list to identify industrial control endpoints during recon and to scope segmentation reviews against operational networks.
Ports#
Port |
Protocol |
Vendor |
|---|---|---|
502 |
TCP |
Modbus TCP |
1089 |
Foundation Fieldbus HSE |
|
1090 |
Foundation Fieldbus HSE |
|
1091 |
Foundation Fieldbus HSE |
|
1541 |
Foxboro/Invensys Foxboro DCS Informix |
|
2222 |
UDP |
EtherNet/IP |
3480 |
TCP |
OPC UA Discovery Server |
4000 |
Emerson/Fisher ROC Plus |
|
5050-5051 |
UDP |
Telvent OASyS DNA |
5052 |
TCP |
Telvent OASyS DNA |
5065 |
TCP |
Telvent OASyS DNA |
5450 |
TCP |
OSIsoft PI Server |
10307 |
TCP |
ABB Ranger 2003 |
10311 |
TCP |
ABB Ranger 2003 |
10364-10365 |
TCP |
ABB Ranger 2003 |
10407 |
TCP |
ABB Ranger 2003 |
10409-10410 |
TCP |
ABB Ranger 2003 |
10412 |
TCP |
ABB Ranger 2003 |
10414-10415 |
TCP |
ABB Ranger 2003 |
10428 |
TCP |
ABB Ranger 2003 |
10431-10432 |
TCP |
ABB Ranger 2003 |
10447 |
TCP |
ABB Ranger 2003 |
10449-10450 |
TCP |
ABB Ranger 2003 |
12316 |
TCP |
ABB Ranger 2003 |
12645 |
TCP |
ABB Ranger 2003 |
12647-12648 |
TCP |
ABB Ranger 2003 |
13722 |
TCP |
ABB Ranger 2003 |
11001 |
Johnson Controls Metasys N1 |
|
12135-12137 |
TCP |
Telvent OASyS DNA |
13724 |
TCP |
ABB Ranger 2003 |
13782-13783 |
TCP |
ABB Ranger 2003 |
18000 |
TCP |
Iconic Genesis32 GenBroker (TCP) |
20000 |
DNP3 |
|
34962 |
PROFINET |
|
34963 |
PROFINET |
|
34964 |
PROFINET |
|
34980 |
UDP |
EtherCAT |
38589 |
TCP |
ABB Ranger 2003 |
38593 |
TCP |
ABB Ranger 2003 |
38000-38001 |
TCP |
SNC GENe |
38011-38012 |
TCP |
SNC GENe |
38014-38015 |
TCP |
SNC GENe |
38200 |
TCP |
SNC GENe |
38210 |
TCP |
SNC GENe |
38301 |
TCP |
SNC GENe |
38400 |
TCP |
SNC GENe |
38600 |
TCP |
ABB Ranger 2003 |
38700 |
TCP |
SNC GENe |
38971 |
TCP |
ABB Ranger 2003 |
39129 |
TCP |
ABB Ranger 2003 |
39278 |
TCP |
ABB Ranger 2003 |
44818 |
EtherNet/IP |
|
45678 |
Foxboro/Invensys Foxboro DCS AIMAPI |
|
47808 |
UDP |
BACnet/IP |
50001-50016 |
TCP |
Siemens Spectrum Power TG |
50018-50020 |
TCP |
Siemens Spectrum Power TG |
50020-50021 |
UDP |
Siemens Spectrum Power TG |
50025-50028 |
TCP |
Siemens Spectrum Power TG |
50110-50111 |
TCP |
Siemens Spectrum Power TG |
55000-55002 |
UDP |
FL-net Reception |
55003 |
UDP |
FL-net Transmission |
55555 |
Foxboor/Invensys Foxboro DCS FoxAPI |
|
56001-56099 |
TCP |
Telvent OASyS DNA |
62900 |
TCP |
SNC GENe |
62911 |
TCP |
SNC GENe |
62924 |
TCP |
SNC GENe |
62930 |
TCP |
SNC GENe |
62938 |
TCP |
SNC GENe |
62956-62957 |
TCP |
SNC GENe |
62963 |
TCP |
SNC GENe |
62981-62982 |
TCP |
SNC GENe |
62985 |
TCP |
SNC GENe |
62992 |
TCP |
SNC GENe |
63012 |
TCP |
SNC GENe |
63027-63036 |
TCP |
SNC GENe |
63041 |
TCP |
SNC GENe |
63075 |
TCP |
SNC GENe |
63079 |
TCP |
SNC GENe |
63082 |
TCP |
SNC GENe |
63088 |
TCP |
SNC GENe |
63094 |
TCP |
SNC GENe |
65443 |
TCP |
SNC GENe |