- Answer only the networks that need the service (no open resolvers, relays or reflectors).
- UDP services can be abused for DDoS amplification: rate-limit or block them at the edge.
- Disable legacy test services that have no use in production.
Port 3129: NetPort Discovery Port
Port 3129 is assigned by IANA to netport-id (NetPort Discovery Port).
How netport-id works
Network servicesThe client sends a request to port 3129 and the netport-id service answers.
- Transport
- TCP · UDP
- Exposure risk
- not rated depends on the program listening
- Encryption
- Unknownnot stated by the registry
- IANA status
- Assigned1 registered service
- Range
- Registered (1024-49151)
- Category
- Network services
Is port 3129 dangerous?
We have no specific security note for port 3129. Its risk depends on the program actually listening on it. General advice for network services services:
IANA registry entries for port 3129
| Service | Port | Transport | Description | Reference | Updated |
|---|---|---|---|---|---|
| netport-id | 3129 | TCP, UDP | NetPort Discovery Port | - | - |
// source: IANA service name and port number registry
Which program uses port 3129, and is it reachable?
Linux
sudo ss -ltnup 'sport = :3129' # process listening on 3129
sudo lsof -nP -i :3129macOS
sudo lsof -nP -i :3129
Windows (PowerShell)
Get-NetTCPConnection -LocalPort 3129 -State Listen | Select LocalAddress, OwningProcess Get-NetUDPEndpoint -LocalPort 3129 netstat -ano | findstr :3129
From another machine
nmap -p 3129 -sV <host> sudo nmap -sU -p 3129 <host> nc -zv <host> 3129
Block it in the firewall
sudo ufw deny 3129/tcp # Linux (ufw) New-NetFirewallRule -DisplayName "Block 3129" -Direction Inbound -LocalPort 3129 -Protocol TCP -Action Block # Windows
What is port 3129 used for?
Port 3129 is assigned by IANA to netport-id (NetPort Discovery Port).
Is port 3129 TCP or UDP?
Port 3129 is registered for TCP and UDP.
Is it safe to open port 3129?
It depends on the program that listens on it. Open it only for a service you know and only to the networks that need it. Answer only the networks that need the service (no open resolvers, relays or reflectors).
How do I check if port 3129 is open?
On Linux run "ss -ltnup 'sport = :3129'", on macOS "lsof -nP -i :3129", and on Windows "netstat -ano | findstr :3129" to see the local process. From another machine, "nmap -p 3129 <host>" shows whether it is reachable.