└── README.md /README.md: -------------------------------------------------------------------------------- 1 | # Control Systems Ports 2 | ##Standard Protocol Ports 3 | 4 | ##The standard protocol ports table lists the ports for protocols that are considered industry standards and are used be multiple vendors. 5 | 6 | |Protocol| Ports | 7 | |--------|:------: | 8 | |BACnet/IP| UDP/47808| 9 | |DNP3| TCP/20000, UDP/20000| 10 | |EtherCAT |UDP/34980| 11 | |Ethernet/IP |TCP/44818, UDP/2222, UDP/44818| 12 | |FL-net |UDP/55000 to 55003| 13 | |Foundation Fieldbus HSE |TCP/1089 to 1091, UDP/1089 to 1091 14 | |ICCP |TCP/102| 15 | |Modbus TCP| TCP/502| 16 | |OPC UA Binary| Vendor Application Specific| 17 | |OPC UA Discovery Server | TCP/4840| 18 | |OPC UA XML | TCP/80, TCP/443 19 | |PROFINET | TCP/34962 to 34964, UDP/34962 to 34964| 20 | |ROC PLus | TCP/UDP 4000| 21 | 22 | 23 | ##Vendor Specific Ports 24 | ###The vendor specific ports tables lists ports that are used by only one or a small number of vendors. These protocols are usually unpublished and proprietary. 25 | 26 | |Vendor |Product or Protocol |Ports| 27 | |-------|:---------------------:|:----:| 28 | ABB |Ranger 2003| TCP/10307, TCP/10311, TCP/10364 to 10365, TCP/10407, TCP/10409 to 10410, TCP/10412, TCP/10414 to 10415, TCP/10428, TCP/10431 to 10432, TCP/10447, TCP/10449 to 10450, TCP/12316, TCP/12645, TCP/12647 to 12648, TCP/13722, TCP/13724, TCP/13782 to 13783, TCP/38589, TCP/38593, TCP/38600, TCP/38971, TCP/39129, TCP/39278| 29 | |Emerson / Fisher |ROC Plus |TCP/UDP/4000| 30 | |Foxboro/Invensys |Foxboro DCS FoxApi |TCP/UDP/55555| 31 | |Foxboro/Invensys |Foxboro DCS AIMAPI |TCP/UDP/45678| 32 | |Foxboro/Invensys |Foxboro DCS Informix |TCP/UDP/1541| 33 | |Iconics |Genesis32 GenBroker (TCP) |TCP/18000| 34 | |Johnson Controls |Metasys N1 |TCP/UDP/11001| 35 | |Johnson Controls |Metasys BACNet |UDP/47808| 36 | |OSIsoft| PI Server| TCP/5450| 37 | |Siemens| Spectrum Power TG |TCP/50001 to 50016, TCP/50018 to 50020, UDP/50020 to 50021, TCP/50025 to 50028, TCP/50110 to 50111| 38 | |SNC |GENe |TCP/38000 to 38001, TCP/38011 to 38012, TCP/38014 to 38015, TCP/38200, TCP/38210, TCP/38301, TCP/38400, TCP/38700, TCP/62900, TCP/62911, TCP/62924, TCP/62930, TCP/62938, TCP/62956 to 62957, TCP/62963, TCP/62981 to 62982, TCP/62985, TCP/62992, TCP/63012, TCP/63027 to 63036, TCP/63041, TCP/63075, TCP/63079, TCP/63082, TCP/63088, TCP/63094, TCP/65443| 39 | |Telvent |OASyS DNA| UDP/5050 to 5051, TCP/5052, TCP/5065, TCP/12135 to 12137, TCP/56001 to 56099| 40 | 41 | 42 | 43 | ##All Control System Ports Sorted By Port Number 44 | ###The control system ports table combines the previous two tables and sorts the entries by port number. 45 | 46 | |Protocol |Ports| 47 | |---------|:---:| 48 | |TCP/502 Modbus TCP 49 | |TCP/UDP/1089 |Foundation Fieldbus HSE| 50 | |TCP/UDP/1090 |Foundation Fieldbus HSE| 51 | |TCP/UDP/1091 |Foundation Fieldbus HSE| 52 | |TCP/UDP/1541 |Foxboro/Invensys Foxboro DCS Informix| 53 | |UDP/2222 |EtherNet/IP| 54 | |TCP/3480 |OPC UA Discovery Server| 55 | |TCP/UDP/4000 |Emerson/Fisher ROC Plus| 56 | |UDP/5050 to 5051 |Telvent OASyS DNA| 57 | |TCP/5052 |Telvent OASyS DNA| 58 | |TCP/5065 |Telvent OASyS DNA| 59 | |TCP/5450 |OSIsoft PI Server| 60 | |TCP/10307 |ABB Ranger 2003| 61 | |TCP/10311 |ABB Ranger 2003| 62 | |TCP/10364 to 10365 |ABB Ranger 2003| 63 | |TCP/10407 |ABB Ranger 2003| 64 | |TCP/10409 to 10410 |ABB Ranger 2003| 65 | |TCP/10412 |ABB Ranger 2003| 66 | |TCP/10414 to 10415 |ABB Ranger 2003| 67 | |TCP/10428 |ABB Ranger 2003| 68 | |TCP/10431 to 10432 |ABB Ranger 2003| 69 | |TCP/10447| ABB Ranger 2003| 70 | |TCP/10449 to 10450 |ABB Ranger 2003| 71 | |TCP/12316 |ABB Ranger 2003| 72 | |TCP/12645 |ABB Ranger 2003| 73 | |TCP/12647 to 12648 |ABB Ranger 2003| 74 | |TCP/13722 |ABB Ranger 2003| 75 | |TCP/UDP/11001 |Johnson Controls Metasys N1| 76 | |TCP/12135 to 12137 |Telvent OASyS DNA| 77 | |TCP/13724 |ABB Ranger 2003| 78 | |TCP/13782 to 13783 |ABB Ranger 2003| 79 | |TCP/18000 |Iconic Genesis32 GenBroker (TCP)| 80 | |TCP/UDP/20000 |DNP3| 81 | |TCP/UDP/34962 |PROFINET| 82 | |TCP/UDP/34963 |PROFINET| 83 | |TCP/UDP/34964 |PROFINET| 84 | |UDP/34980 |EtherCAT| 85 | |TCP/38589 |ABB Ranger 2003| 86 | |TCP/38593 |ABB Ranger 2003| 87 | |TCP/38000 to 38001 |SNC GENe| 88 | |TCP/38011 to 38012 |SNC GENe| 89 | |TCP/38014 to 38015 |SNC GENe| 90 | |TCP/38200| SNC GENe| 91 | |TCP/38210| SNC GENe| 92 | |TCP/38301| SNC GENe| 93 | |TCP/38400| SNC GENe| 94 | |TCP/38600 |ABB Ranger 2003| 95 | |TCP/38700| SNC GENe| 96 | |TCP/38971| ABB Ranger 2003| 97 | |TCP/39129| ABB Ranger 2003| 98 | |TCP/39278| ABB Ranger 2003| 99 | |TCP/UDP/44818 |EtherNet/IP| 100 | |TCP/UDP/45678 |Foxboro/Invensys Foxboro DCS AIMAPI| 101 | |UDP/47808 |BACnet/IP| 102 | |TCP/50001 to 50016 |Siemens Spectrum Power TG| 103 | |TCP/50018 to 50020| Siemens Spectrum Power TG| 104 | |UDP/50020 to 50021 |Siemens Spectrum Power TG| 105 | |TCP/50025 to 50028 |Siemens Spectrum Power TG| 106 | |TCP/50110 to 50111 |Siemens Spectrum Power TG| 107 | |UDP/55000 to 55002| FL-net Reception| 108 | |UDP/55003 |FL-net Transmission| 109 | |TCP/UDP/55555 |Foxboor/Invensys Foxboro DCS FoxAPI| 110 | |TCP/56001 to 56099 |Telvent OASyS DNA| 111 | |TCP/62900| SNC GENe| 112 | |TCP/62911| SNC GENe| 113 | |TCP/62924| SNC GENe| 114 | |TCP/62930| SNC GENe| 115 | TCP/62938 |SNC GENe| 116 | |TCP/62956 to 62957 |SNC GENe| 117 | |TCP/62963 |SNC GENe| 118 | |TCP/62981 to 62982| SNC GENe| 119 | |TCP/62985 |SNC GENe| 120 | |TCP/62992| SNC GENe| 121 | |TCP/63012 |SNC GENe| 122 | |TCP/63027 to 63036 |SNC GENe| 123 | |TCP/63041| SNC GENe| 124 | |TCP/63075| SNC GENe| 125 | |TCP/63079 |SNC GENe| 126 | |TCP/63082| SNC GENe| 127 | |TCP/63088| SNC GENe| 128 | |TCP/63094 |SNC GENe| 129 | |TCP/65443| SNC GENe| 130 | 131 | 132 | 133 | 134 | #Clone from 135 | https://web.archive.org/web/20111203052654/http://www.digitalbond.com/tools/the-rack/control-system-port-list 136 | --------------------------------------------------------------------------------