Common attacks and weaknesses
- Weak credentials or leaked client profiles.
- Outdated servers.
Port 1194: OpenVPN
OpenVPN tunnels.
1194
How OpenVPN works
VPN, tunnels & proxiesTraffic is wrapped in a tunnel between the two ends, so the network in between only sees the tunnel. Everything is encrypted: someone on the path only sees unreadable bytes.
- Transport
- UDP · TCP
- Exposure risk
- 3/10 moderate if reachable from the Internet
- Encryption
- EncryptedTLS or built-in crypto
- IANA status
- Assigned1 registered service
- Range
- Registered (1024-49151)
- Category
- VPN, tunnels & proxies
Is port 1194 dangerous?
How to secure it
- Use certificates plus MFA and tls-crypt.
- Keep OpenVPN updated.
IANA registry entries for port 1194
| Service | Port | Transport | Description | Reference | Updated |
|---|---|---|---|---|---|
| openvpn | 1194 | TCP, UDP | OpenVPN | - | 2004-11 |
// source: IANA service name and port number registry
Which program uses port 1194, and is it reachable?
Linux
sudo ss -ltnup 'sport = :1194' # process listening on 1194
sudo lsof -nP -i :1194macOS
sudo lsof -nP -i :1194
Windows (PowerShell)
Get-NetTCPConnection -LocalPort 1194 -State Listen | Select LocalAddress, OwningProcess Get-NetUDPEndpoint -LocalPort 1194 netstat -ano | findstr :1194
From another machine
nmap -p 1194 -sV <host> sudo nmap -sU -p 1194 <host> nc -zv <host> 1194
Block it in the firewall
sudo ufw deny 1194/tcp # Linux (ufw) New-NetFirewallRule -DisplayName "Block 1194" -Direction Inbound -LocalPort 1194 -Protocol TCP -Action Block # Windows
What is port 1194 used for?
OpenVPN tunnels.
Is port 1194 TCP or UDP?
Port 1194 is registered for UDP and TCP.
Is it safe to open port 1194?
It is rated 3/10 (moderate) when exposed to the Internet. Weak credentials or leaked client profiles. Use certificates plus MFA and tls-crypt.
How do I check if port 1194 is open?
On Linux run "ss -ltnup 'sport = :1194'", on macOS "lsof -nP -i :1194", and on Windows "netstat -ano | findstr :1194" to see the local process. From another machine, "nmap -p 1194 <host>" shows whether it is reachable.