Port 2198 has no officially assigned service. IANA's registry leaves it blank.
What Range It Belongs To
Port 2198 sits in the registered port range (1024–49151). This range exists for services that aren't universal enough to warrant a well-known port (0–1023), but are common enough that their developers registered them with IANA to avoid collisions.
Registration in this range is voluntary. It prevents two competing services from accidentally squatting on the same number — but it doesn't prevent a port from sitting empty, waiting for someone to claim it.
Port 2198 has been waiting for a while.
The APNs Confusion
Search for port 2198 and you'll find databases confidently declaring it an Apple Push Notification Services (APNs) port. This is wrong.
Apple's own documentation specifies port 2197 for push notification providers sending to APNs servers.1 The confusion likely started with a single transcription error — 2197 became 2198 in one database, and that error copied itself across the web. Port 2198 is a case study in how port misinformation propagates: one wrong entry, referenced by another, referenced by another, until "everyone knows" something that isn't true.
If you're configuring a firewall for APNs, use 2197, not 2198.
Unofficial Uses
No widely documented unofficial uses exist for port 2198. If something is listening on this port on your system, it's application-specific — check what put it there.
How to Check What's Listening
macOS / Linux:
Windows:
If you get output, note the process ID (PID) and look it up:
- macOS/Linux:
ps aux | grep <PID> - Windows: Task Manager → Details tab, match the PID
Why Unassigned Ports Matter
The registered port range contains tens of thousands of entries. Most are legitimately assigned. Some are squatted by applications that never bothered to register. And some — like 2198 — are simply empty.
Empty ports aren't inert. Malware uses unassigned ports precisely because they raise fewer flags than trying to hijack port 80 or 443. If something unexpected is listening on 2198 on your system, that's worth understanding.
The gap between "officially assigned" and "actually in use" is where a lot of network security work happens.
Nakatulong ba ang pahinang ito?