Port 2195: The Ghost of Apple Push Notifications

Port 2195 is unassigned. IANA has no registered service here. But for over a decade, this port carried something that reached a billion devices: Apple Push Notification Service.

What Ran Here

From 2009 until March 31, 2021, port 2195 was the production endpoint for Apple's legacy APNs binary protocol. When your app server wanted to send a push notification to an iPhone, it opened a TLS connection to gateway.push.apple.com on port 2195 and sent a binary payload. Apple's servers received it, routed it to the right device, and the notification appeared.

The companion port was 2196, used for the APNs feedback service — a mechanism for servers to learn which device tokens had gone invalid.

Apple never registered either port with IANA. They just used them.

How It Worked

The legacy binary protocol was simple to the point of being austere:

1. Server opens a persistent TLS connection to Apple's gateway on port 2195
2. Server sends a binary frame containing the device token, payload, and notification identifier
3. Apple delivers the notification
4. If anything went wrong, Apple sent an error response — but only for the first failure, then closed the connection

It was a fire-and-forget system with a small error window. Developers quickly learned to keep the connection alive, monitor for errors, and handle reconnections carefully. The feedback service on port 2196 cleaned up the mess: invalid tokens, uninstalled apps, devices that had stopped listening.

For most of its life, this was the only way to send push notifications to iOS devices.

Why It's Gone

In 2019, Apple introduced a modern HTTP/2-based APNs provider API using port 443 (standard HTTPS) or port 2197 as an alternative. The new protocol was stateless, token-authenticated, and returned per-notification responses.

Apple announced the binary protocol on port 2195 would be deprecated. After extensions, the deadline held: March 31, 2021. Apple closed the legacy endpoints. Port 2195 went silent.

Any system still pointing at gateway.push.apple.com:2195 after that date got a connection refused. Push notifications stopped. The notifications to upgrade had been coming for two years.

The Port Range

Port 2195 sits in the registered ports range (1024–49151). IANA maintains this range for services that apply for assignment. Apple never applied. Port 2195 was used without registration for its entire active life — a perfectly normal thing that happens constantly on the Internet.

The "official" list and the actual Internet are two different maps of the same territory.

What Might Be Here Now

If you're seeing traffic on port 2195 today:

• Legacy systems still attempting to reach Apple's defunct binary endpoint (they'll fail)
• Internal services that chose this port by coincidence or convention
• Something you or a vendor configured explicitly

Nothing legitimate should be using port 2195 in new deployments.

How to Check What's Listening

# On Linux/macOS — see what process is bound to port 2195
sudo lsof -i :2195

# Or with ss (Linux)
ss -tlnp | grep 2195

# On Windows
netstat -ano | findstr :2195

If nothing is listening, the port is closed. If something is, lsof will tell you exactly what process and binary owns it.