Port 1865: ENTP — Epson Network Scanning

Port 1865 sits in the registered ports range (1024–49151) — the middle tier of the port numbering system, where companies and developers stake claims on numbers for their own protocols. This one belongs to Seiko Epson.

What ENTP Does

ENTP stands for Epson Network Transport Protocol. Port 1865 TCP is the channel Epson uses for Document Capture Pro and Document Capture — software that lets you push scans from an Epson multi-function printer or scanner directly to a computer on the network.

When you walk up to an Epson network scanner and press "Scan to Computer," here's what happens: the scanner discovers your machine (typically via UDP on port 3289), you select the destination and job settings, you press scan — and the actual scan data flows over TCP port 1865 to the waiting Document Capture Pro software on your computer.

The port is one-directional in purpose: scanner pushes data, computer receives it. The scanner initiates the connection to your machine's port 1865.

The Registered Ports Range

The full range runs from 1024 to 49151. Below it, ports 0–1023 are "well-known ports" — reserved for foundational Internet services like HTTP (80), HTTPS (443), and SSH (22). Above it, ports 49152–65535 are ephemeral, dynamically assigned for short-lived connections.

Registered ports are the middle ground. IANA accepts registration requests from companies and developers, records the assignment, and publishes it. Registration is not enforcement — nothing stops someone from running a different service on port 1865 on their own network. But the registry is the canonical reference: if you see port 1865 active on a machine with Epson scanner software installed, you know what it is.¹

Why This Port Appears in Firewall Rules

Port 1865 is the kind of port that generates IT help desk tickets. The symptom: network scanning works fine on the local subnet, then someone moves computers to a new VLAN or tightens firewall rules, and suddenly "Scan to Computer" stops working with no obvious error.

If your organization uses Epson scanners with Document Capture Pro, TCP port 1865 needs to be open between the scanner and the destination computers. It is an inbound rule on the scanning target — the computer receiving the file, not the scanner.

Epson's own documentation lists port 1865 among the ports required for network scan functionality.²

How to Check What's Listening on Port 1865

On macOS or Linux:

lsof -i :1865

On Windows (Command Prompt, run as administrator):

netstat -ano | findstr :1865

The process ID returned by netstat -ano can be matched against Task Manager or:

tasklist | findstr <PID>

If you see dcpsvr.exe or a process associated with Document Capture Pro, that's expected. If you see something else and you don't have Epson software installed, it's worth investigating.

Related Ports

Epson network devices use a cluster of ports that work together: