Loading...
[get complete service list]
Port Information
Protocol Service Name
tcp ssh alternative ssh (Cowrie)
tcp AMD [trojan] Rootshell left by AMD exploit
tcp rockwell-csp2 Rockwell CSP2
udp rockwell-csp2 Rockwell CSP2
UDP [ICS] Ethernet/IP [ICS] Ethernet/IP
tcp EtherNet-IP-1 "EtherNet/IP I/O IANA assigned this well-formed service name as a replacement for ""EtherNet/IP-1""."
tcp EtherNet/IP-1 EtherNet/IP I/O
udp EtherNet-IP-1 "EtherNet/IP I/O IANA assigned this well-formed service name as a replacement for ""EtherNet/IP-1""."
udp EtherNet/IP-1 EtherNet/IP I/O
Top IPs Scanning
Today Yesterday
198.50.207.22 (18543)66.220.91.244 (72575)
154.216.19.22 (10261)154.216.19.22 (27723)
142.93.241.93 (5219)142.93.241.93 (26278)
3.99.153.20 (4113)146.70.86.201 (17132)
139.199.80.137 (3818)139.59.182.184 (8961)
142.171.98.146 (3630)44.200.156.199 (7640)
139.59.182.184 (2830)217.138.211.62 (6455)
123.57.55.102 (2699)142.171.98.146 (5562)
7.120.143.89 (2365)47.236.125.30 (5153)
91.90.123.211 (2197)85.192.56.68 (5116)
Port diary mentions
URL
2222tcp Probe Increase
User Comments
Submitted By Date
Comment
Johannes Ullrich 2020-09-16 13:54:15
Port 2222/udp is used by the Ethernet Industrial Protocol (Ethernet IP) which is used by industrial control systems (ICS)
Johannes Ullrich 2020-09-13 14:35:33
Schneider Modicum Quantum uses port 4418/TCP in addition to 502/TCP (MODBUS) and 2222/UDP (Ethernet Industrial Protocol). CVEs: CVE-2019-6815, CVE-2019-6816
2004-09-09 06:58:57
Microsoft Office under Apple Macintosh OS-X broadcasts (255.255.255.255) UDP to port 2222, supposedly to check if anyone else is using the same version? s/n? of Office.
2004-07-01 16:26:45
Looks like Macs use this port for networking.
CVE Links
CVE # Description
CVE-2007-0655 The MicroWorld Agent service (MWAGENT.EXE) in MicroWorld Technologies eScan 8.0.671.1, and possibly other versions, allows remote or local attackers to gain privileges and execute arbitrary commands by connecting directly to TCP port 2222.
CVE-2018-18388