What Range This Port Belongs To
Port 2672 is a registered port, falling in the 1024–49151 range. Registered ports are managed by IANA (the Internet Assigned Numbers Authority) and can be claimed by software vendors, developers, or individuals who submit a request. Unlike the well-known ports below 1024 — which require root privileges to bind on most systems — registered ports can be opened by any process running as a normal user.
There are roughly 48,000 registered ports. Hundreds of them are like this one: assigned, named, and then forgotten.
The IANA Assignment
The IANA registry lists port 2672 as assigned to a service called nhserver, registered to a contact named Adrian Hornby at aran.co.uk.1 The domain appears to belong to a small British consultancy — but searches for "nhserver" return almost nothing. No RFC, no open-source code, no documentation, no forum posts troubleshooting it.
This is not unusual. The IANA registered port range was populated over decades, and many entries reflect internal tools, proprietary software, or commercial products that were assigned a port number and then never became widely used — or simply ceased to exist.
Known Unofficial Uses
None documented. Port 2672 does not appear in any known malware port lists, doesn't show up in threat intelligence feeds as a common attack vector, and has no visible community of users. If it appears open on a system you're examining, it's almost certainly an application-specific use rather than anything standard.
How to Check What's Listening on This Port
On Linux or macOS:
On Windows:
Then match the process ID (PID) to a running process:
If something is bound to port 2672 on your system, those commands will tell you exactly what it is.
Why Unassigned (or Nominally Assigned) Ports Matter
The port system works because of shared conventions. When a port has a well-known assignment — SSH on 22, HTTPS on 443 — every firewall, monitoring tool, and network engineer understands what traffic to expect there. When a port is unassigned or obscurely assigned, that signal disappears.
Port 2672 sits in a quiet corner of the registered range. Its nominal registration means it won't show up as "unassigned" in basic port scanners, but it carries none of the operational meaning of a truly well-known port. If you see it open, find out why — not because it's inherently suspicious, but because anything unexplained on a network is worth understanding.
Была ли эта страница полезной?