Port 427: SLP
Port 427 is the Service Location Protocol, which lets devices on a local network discover services such as printers without pre-configuration. It shows up in enterprise and VMware environments and is best kept off the internet.
| Port number | 427 |
|---|---|
| Service | Service Location Protocol |
| Protocol | TCP/UDP |
| Category | Routing |
| Default encryption | No |
How do I check whether port 427 is open?
Port 427 carries TCP, so a connection either completes its handshake or it does not, which makes the check definitive.
| Question | Command | What to know |
|---|---|---|
| Is it open on a remote host? | nc -vz example.com 427 | A TCP handshake either completes or it does not, so netcat gives a definitive answer in one line. |
| Same check on Windows | Test-NetConnection example.com -Port 427 | Built into PowerShell. TcpTestSucceeded in the output is the answer; telnet is not installed by default on modern Windows. |
| What is listening locally? | ss -tlnp | grep ':427 ' | Lists the process bound to port 427 on Linux. On macOS use lsof -nP -iTCP:427 -sTCP:LISTEN, on Windows netstat -ano | findstr :427 |
| Is it open on a remote host? | sudo nmap -sU -p 427 example.com | UDP has no handshake, so there is nothing to complete. nmap infers the state from whether an ICMP port-unreachable comes back, needs root, and is slow and easy to misread. A silent port may be open, filtered, or simply not replying to a probe it does not recognise. |
| What is listening locally? | ss -ulnp | grep ':427 ' | Shows the UDP socket bound to port 427. This is the reliable way to answer the question, because you are asking the host itself rather than guessing from outside. |
Replace example.com with the host you are testing. A blocked port and a port with nothing listening on it look identical from the outside, so if a service should be running, check locally before blaming the firewall.
Frequently asked questions
What is port 427 used for?
Port 427 is the Service Location Protocol, which lets devices on a local network discover services such as printers without pre-configuration. It shows up in enterprise and VMware environments and is best kept off the internet.
Is port 427 TCP or UDP?
Port 427 (SLP) uses TCP/UDP.
Is port 427 secure?
Port 427 is not encrypted by default. Where possible, use an encrypted alternative or tunnel it over TLS or a VPN.
Should I open port 427 on my firewall?
Only if you specifically need SLP. Expose it to the smallest set of trusted sources, and never open database or Windows-service ports to the whole internet.