Port 1766: Transfer CFT (cft-5) — Enterprise File Transfer Management

What This Port Is

Port 1766 is registered in the IANA registry under the name cft-5 — the fifth in a consecutive block of seven ports (1762–1768) reserved for Transfer CFT, an enterprise managed file transfer (MFT) product made by Axway.

It's not a protocol you'll encounter on the open Internet. It lives inside large organizations — banks, insurers, logistics companies, government agencies — that need to move files reliably between systems, sometimes across mainframes, sometimes across continents.

Port 1766 specifically serves Copilot, Transfer CFT's monitoring and management server. Copilot is how administrators watch transfers in progress, manage configurations, and connect the CFT instance to Axway's Central Governance platform.

The Transfer CFT Port Block

Axway reserved a tidy run of seven ports from IANA for Transfer CFT's internal communication needs:

This kind of port block reservation is practical — it lets a complex product own a predictable range rather than scatter its components across random high ports. Firewall rules become simpler: open 1762–1768 for CFT.

What Is Transfer CFT?

Transfer CFT is a managed file transfer platform designed for high-volume, high-reliability file exchange in regulated industries. It speaks older enterprise protocols like PeSIT (a European standard for banking file transfers from the 1980s) alongside modern SFTP and REST APIs.

The kind of organization running Transfer CFT is moving things like: end-of-day settlement files between banks, healthcare records between hospital systems, customs declarations between logistics firms and government agencies. Files that must arrive, must be acknowledged, and must leave an audit trail.

Is This Port a Security Concern?

On a general-purpose server or home network, nothing should be listening on port 1766. If you see unexpected activity here, investigate.

In enterprise environments running Transfer CFT, port 1766 should be firewalled to accept connections only from authorized management hosts — not exposed broadly on the network.

How to Check What's Listening

On Linux/macOS:

ss -tlnp | grep 1766
# or
lsof -i :1766

On Windows:

netstat -ano | findstr :1766

If something is listening and you don't know what it is, the process ID in the output will let you identify it.

The Registered Range

Port 1766 sits in the registered port range (1024–49151). These ports are managed by IANA — organizations can apply to have a service name formally associated with a port number. IANA registration doesn't mean the protocol is open or standardized; it just means someone filed the paperwork. In this case, Axway did, and IANA dutifully recorded cft-5 against port 1766.

The registered range exists between the well-known ports (0–1023, reserved for foundational protocols like HTTP, SSH, and DNS) and the ephemeral ports (49152–65535, used temporarily by client connections). Registered ports are the middle ground: assigned to specific products and services, but not protected with the same force as the well-known range.