Port 2021 has no official service. IANA's registry lists it as unassigned in the registered port range.1
What Range It Belongs To
Port 2021 falls in the registered ports range: 1024 to 49151. This range sits between the well-known ports (0-1023, reserved for HTTP, SSH, FTP, and other foundational protocols) and the ephemeral ports (49152-65535, used for temporary client-side connections).
Registered ports are open for anyone to apply for through IANA. Some carry major services. Most sit empty, either never claimed, claimed and abandoned, or claimed by software so obscure it never spread beyond the team that wrote it.
Port 2021 is in the empty category.
The Ghost Labels
Port databases like SpeedGuide and Nmap's service detection list two informal labels for this port:2
- TCP 2021 — servexec
- UDP 2021 — xinuexpansion1
Both trace to XINU (Xinu Is Not Unix), an educational operating system built at Purdue University in 1979 by Douglas Comer. XINU was designed to teach computer science students how operating systems actually work — a small, clean, comprehensible system you could read end to end.3
The "xinuexpansion" ports (a cluster around this range) were part of XINU's network expansion suite. They were never widely deployed. The labels are academic artifacts, preserved in port databases the way museum tags preserve extinct species. Almost no one runs XINU on a production network. Almost no one scanning port 2021 will find it.
The FTP Neighbor Effect
Port 2021 sits one digit away from port 21, FTP's control channel. This proximity has a practical consequence: scripts and tools that scan for FTP servers sometimes sweep nearby ports. Port 2021 occasionally appears in firewall logs not because anything is running there but because scanners overshoot.
Some administrators also deliberately run services on port 2021 precisely because it's adjacent to FTP but unoccupied — a way to run a non-standard FTP instance or a custom service without colliding with anything official. If you find port 2021 open on a server, it's worth checking whether it's an FTP variant.
How to Check What's Listening
If port 2021 is open on a machine you administer:
On Linux/macOS:
On Windows:
From outside the machine:
The -sV flag tells Nmap to probe the service version, which will usually tell you what's actually running rather than guessing from the port number alone.
Why Unassigned Ports Matter
The registered port range has 48,128 slots. Most are unassigned. This isn't wasted space — it's the port system working correctly.
Unassigned ports are available for:
- Private applications that need a consistent port without official registration
- Development and testing where you need a known port that won't collide with production services
- Future protocols not yet invented
When security tools scan a network, finding an open unassigned port is often more interesting than finding an open well-known port. A web server on port 80 is expected. Something on port 2021 means someone made a deliberate choice worth understanding.
Frequently Asked Questions
이 페이지가 도움이 되었나요?