Port 2222: EtherNet/IP
Port 2222 is officially registered for EtherNet/IP implicit messaging, an industrial automation protocol built on standard Ethernet. The same number is also a popular unofficial convention for an alternate SSH port on servers that want to avoid the noise on port 22.
| Port number | 2222 |
|---|---|
| Service | EtherNet/IP implicit messaging |
| Protocol | TCP/UDP |
| Category | IoT & automation |
| Default encryption | No |
How do I check whether port 2222 is open?
Port 2222 carries TCP, so a connection either completes its handshake or it does not, which makes the check definitive.
| Question | Command | What to know |
|---|---|---|
| Is it open on a remote host? | nc -vz example.com 2222 | A TCP handshake either completes or it does not, so netcat gives a definitive answer in one line. |
| Same check on Windows | Test-NetConnection example.com -Port 2222 | Built into PowerShell. TcpTestSucceeded in the output is the answer; telnet is not installed by default on modern Windows. |
| What is listening locally? | ss -tlnp | grep ':2222 ' | Lists the process bound to port 2222 on Linux. On macOS use lsof -nP -iTCP:2222 -sTCP:LISTEN, on Windows netstat -ano | findstr :2222 |
| Is it open on a remote host? | sudo nmap -sU -p 2222 example.com | UDP has no handshake, so there is nothing to complete. nmap infers the state from whether an ICMP port-unreachable comes back, needs root, and is slow and easy to misread. A silent port may be open, filtered, or simply not replying to a probe it does not recognise. |
| What is listening locally? | ss -ulnp | grep ':2222 ' | Shows the UDP socket bound to port 2222. This is the reliable way to answer the question, because you are asking the host itself rather than guessing from outside. |
Replace example.com with the host you are testing. A blocked port and a port with nothing listening on it look identical from the outside, so if a service should be running, check locally before blaming the firewall.
Frequently asked questions
What is port 2222 used for?
Port 2222 is officially registered for EtherNet/IP implicit messaging, an industrial automation protocol built on standard Ethernet. The same number is also a popular unofficial convention for an alternate SSH port on servers that want to avoid the noise on port 22.
Is port 2222 TCP or UDP?
Port 2222 (EtherNet/IP) uses TCP/UDP.
Is port 2222 secure?
Port 2222 is not encrypted by default. Where possible, use an encrypted alternative or tunnel it over TLS or a VPN.
Should I open port 2222 on my firewall?
Only if you specifically need EtherNet/IP. Expose it to the smallest set of trusted sources, and never open database or Windows-service ports to the whole internet.