Port 2347: Unassigned — A Door Without a Name

What Port 2347 Is

Port 2347 is unassigned. The Internet Assigned Numbers Authority (IANA) has not allocated it to any named service or protocol. It is not empty — it exists and any application can use it — but no one has formally claimed it.¹

It falls in the registered port range, also called user ports: numbers 1024 through 49151. This range sits between the well-known ports (0–1023, reserved for foundational protocols like HTTP, SSH, and DNS) and the ephemeral ports (49152–65535, used temporarily for outgoing connections).

What the Registered Range Means

Well-known ports require IANA registration and are tightly controlled. Registered ports (1024–49151) also go through IANA, but the bar is lower — any developer or organization can apply to claim one for their application. When a port in this range is unassigned, it simply means no one has applied (or their application wasn't accepted).

Unassigned registered ports are not forbidden or broken. They're available. Software vendors frequently use unassigned ports for internal services, development tools, or proprietary protocols — either temporarily or permanently without bothering to register.

Known Unofficial Uses

Port 2347 has appeared on historical trojan and malware port lists.² This sounds more alarming than it is. These lists were compiled by security researchers who cataloged which ports malicious software happened to use — and since malware authors preferred unassigned ports precisely to avoid detection, many entries on those lists are simply "a piece of malware picked this number once." There is no specific, well-documented malware family primarily associated with port 2347.

If you see traffic on port 2347, it warrants investigation — but it does not indicate compromise on its own.

How to Check What's Listening on This Port

If port 2347 is open on your system and you want to know why:

On Linux or macOS:

# Show which process is listening on port 2347
ss -tlnp | grep 2347

# Or with lsof
lsof -i :2347

On Windows:

netstat -ano | findstr :2347

Then take the process ID (PID) from the output and look it up:

# Linux/macOS
ps aux | grep <PID>

# Windows (in Task Manager, or)
tasklist | findstr <PID>

Why Unassigned Ports Matter

The port numbering system works because most of it is unclaimed. If every port had a designated service, there would be no room for new applications, private protocols, or temporary uses. Unassigned ports are the white space that makes the registry functional.

Port 2347 is a door without a name. It's not locked, it's not broken — it's just waiting to see if anyone needs it.