What Range This Port Belongs To
Port 1811 is a registered port, sitting in the range from 1024 to 49151. This range has a specific meaning: these ports are not grabbed arbitrarily by operating systems. They are assigned by IANA (the Internet Assigned Numbers Authority) upon application by a vendor or organization that wants a reserved number for their service.1
Registered does not mean popular. It means someone filled out the paperwork.
The Official Assignment: Scientia-SDB
IANA records port 1811 (both TCP and UDP) as belonging to Scientia-SDB, registered to Scientia Systems Manager.2 Beyond the registration, public documentation on what Scientia-SDB actually does is nearly nonexistent. The company appears to have registered the port and moved on, leaving a placeholder in a database that thousands of port scanners will dutifully report for decades.
This is common. The IANA registered ports list contains hundreds of entries like this: a company claimed a number, the product either failed, changed, or never shipped widely, and the assignment persists as a fossil record.
What You Might Actually See on Port 1811
The more common real-world association for port 1811 is McAfee ePolicy Orchestrator (ePO), an enterprise security management platform. McAfee ePO uses port 1811 for agent-to-server communication, the channel through which managed endpoints report their status and receive policy updates.3
If you see port 1811 traffic on a corporate network, ePO is a plausible explanation. If you see it on a home machine or a server with no enterprise security tooling, investigate further.
The Neighborhood
Port 1811 lives one door down from port 1812, which carries RADIUS authentication traffic. RADIUS is how most enterprise Wi-Fi networks and VPN systems verify who you are.4 Port 1813 handles RADIUS accounting.
Port 1811 is not RADIUS. But if you're scanning a network and see activity across 1811, 1812, and 1813, you may be looking at an enterprise authentication infrastructure where ePO and RADIUS coexist.
How to Check What's Listening
On Linux or macOS:
On Windows:
The process ID in the output can be matched against Task Manager or tasklist to identify the application.
Why Unassigned and Obscure Ports Matter
The registered ports range exists to reduce collisions. When two applications accidentally try to use the same port, communication breaks in confusing ways. IANA registration is the system's answer to that problem: claim your number publicly so others can avoid it.
But the system works on trust and adoption. A port is only "safe" if everyone agrees to honor the registry. In practice, software often picks registered ports for convenience without checking conflicts, vendors register ports for products that never ship, and malware deliberately chooses quiet port numbers to blend in.
Port 1811 is not dangerous by definition. But traffic on any registered-but-obscure port is worth a second look, precisely because it's easy for both legitimate software and unauthorized processes to hide there unnoticed.
האם דף זה היה מועיל?