Port 928 — Unassigned well-known port

Status: Unassigned
Range: Well-known ports (0-1023)
Transport: TCP/UDP

What This Port Is

Port 928 has no official service assigned by IANA¹. It sits in the well-known port range—the prestigious neighborhood of ports 0-1023 where you'd normally find essential services like SSH (22), HTTP (80), and DNS (53)—but this particular address is empty.

The well-known range isn't actually full. There are gaps. Port 928 is one of them.

The Well-Known Range

Ports 0-1023 are called "well-known" because they're reserved for system-level services assigned by IANA². Getting a well-known port requires standards approval—these are the numbers that services grab first when they need to be universally recognizable.

But not every number below 1024 has a tenant. Port 928 is unassigned, meaning:

• No official service is registered to use it
• It's available for IANA to assign if someone requests it through the proper channels
• Nothing should be listening on it by default on most systems

Historical Usage

Some older documentation mentions port 928 in connection with Mac OS X RPC-based services, particularly NetInfo³—Apple's administrative database system used in legacy Mac OS X Server environments. Ports in the 600-1023 range were used by various RPC services on classic Mac systems.

NetInfo is long dead. Mac OS X Server was discontinued. If port 928 ever had a moment, it's passed.

Why Unassigned Ports Matter

Empty port numbers aren't wasted space—they're options. When a new protocol needs a well-known port, unassigned numbers like 928 are available. The IANA assignment process means services don't fight over the same numbers, and administrators know what to expect.

Unassigned ports also matter for security: if you see traffic on port 928, it's probably not legitimate system traffic. It could be:

• Custom application configured to use this port
• Malware using an obscure port to avoid detection
• Misconfigured service
• Port scanner probing your system

According to SANS Internet Storm Center, port 928 sees minimal attack activity⁴—it's not a common target because there's nothing standard to exploit.

Checking What's Listening

To see if anything is using port 928 on your system:

Linux/Mac:

sudo lsof -i :928
sudo netstat -tulpn | grep :928

Windows:

netstat -ano | findstr :928

If something appears, it's not a standard service—investigate what's running and why.

The Bigger Picture

The port number system has 65,535 addresses (0-65535). Only 1,024 are in the well-known range. Not all of them are assigned. Port 928 is a reminder that the Internet's address space isn't completely full—there are still gaps, still room, still numbers waiting for a purpose that might never come.

And that's fine. Not every door needs to be open.