CyberHunter
// Email

Port 2197: MNP data exchange

Port 2197 is assigned by IANA to mnp-exchange (MNP data exchange).

2197

How mnp-exchange works

Email
your servertheir servermnp-exchange youthemmnp-exchange

Mail servers hand messages to each other over port 2197, one hop at a time, until the recipient's server.

Transport
TCP · UDP
Exposure risk
not rated depends on the program listening
Encryption
Unknownnot stated by the registry
IANA status
Assigned1 registered service
Range
Registered (1024-49151)
Category
Email
01 Security

Is port 2197 dangerous?

We have no specific security note for port 2197. Its risk depends on the program actually listening on it. General advice for email services:

  • Require TLS and authenticated submission.
  • Make sure the server is not an open relay.
  • Publish SPF, DKIM and DMARC for the domain.
02 Registry

IANA registry entries for port 2197

ServicePortTransportDescriptionReferenceUpdated
mnp-exchange 2197 TCP, UDP MNP data exchange - 2004-11

// source: IANA service name and port number registry

03 Check it

Which program uses port 2197, and is it reachable?

Linux

sudo ss -ltnup 'sport = :2197'      # process listening on 2197
sudo lsof -nP -i :2197

macOS

sudo lsof -nP -i :2197

Windows (PowerShell)

Get-NetTCPConnection -LocalPort 2197 -State Listen | Select LocalAddress, OwningProcess
Get-NetUDPEndpoint -LocalPort 2197
netstat -ano | findstr :2197

From another machine

nmap -p 2197 -sV <host>
sudo nmap -sU -p 2197 <host>
nc -zv <host> 2197

Block it in the firewall

sudo ufw deny 2197/tcp                                         # Linux (ufw)
New-NetFirewallRule -DisplayName "Block 2197" -Direction Inbound -LocalPort 2197 -Protocol TCP -Action Block  # Windows
04 FAQ
What is port 2197 used for?

Port 2197 is assigned by IANA to mnp-exchange (MNP data exchange).

Is port 2197 TCP or UDP?

Port 2197 is registered for TCP and UDP.

Is it safe to open port 2197?

It depends on the program that listens on it. Open it only for a service you know and only to the networks that need it. Require TLS and authenticated submission.

How do I check if port 2197 is open?

On Linux run "ss -ltnup 'sport = :2197'", on macOS "lsof -nP -i :2197", and on Windows "netstat -ano | findstr :2197" to see the local process. From another machine, "nmap -p 2197 <host>" shows whether it is reachable.

05 Related