CyberHunter
Local dataset, no network
// Email

Port 5196: The protocol is used by two programs that exchange "table" data used in the AMPL modeling language

Port 5196 is assigned by IANA to ampl-tableproxy (The protocol is used by two programs that exchange "table" data used in the AMPL modeling language).

5196

How ampl-tableproxy works

Email
your servertheir serverampl-tableproxy youthemampl-tableproxy

Mail servers hand messages to each other over port 5196, one hop at a time, until the recipient's server.

Transport
TCP
Exposure risk
not rated depends on the program listening
Encryption
Unknownnot stated by the registry
IANA status
Assigned1 registered service
Range
Registered (1024-49151)
Category
Email
01 Security

Is port 5196 dangerous?

We have no specific security note for port 5196. Its risk depends on the program actually listening on it. General advice for email services:

  • Require TLS and authenticated submission.
  • Make sure the server is not an open relay.
  • Publish SPF, DKIM and DMARC for the domain.
02 Registry

IANA registry entries for port 5196

ServicePortTransportDescriptionReferenceUpdated
ampl-tableproxy 5196 TCP The protocol is used by two programs that exchange "table" data used in the AMPL modeling language - 2012-05-25
-5196-Reserved--

// source: IANA service name and port number registry

03 Check it

Which program uses port 5196, and is it reachable?

Linux

sudo ss -ltnup 'sport = :5196'      # process listening on 5196
sudo lsof -nP -i :5196

macOS

sudo lsof -nP -i :5196

Windows (PowerShell)

Get-NetTCPConnection -LocalPort 5196 -State Listen | Select LocalAddress, OwningProcess
Get-NetUDPEndpoint -LocalPort 5196
netstat -ano | findstr :5196

From another machine

nmap -p 5196 -sV <host>
nc -zv <host> 5196

Block it in the firewall

sudo ufw deny 5196/tcp                                         # Linux (ufw)
New-NetFirewallRule -DisplayName "Block 5196" -Direction Inbound -LocalPort 5196 -Protocol TCP -Action Block  # Windows
04 FAQ
What is port 5196 used for?

Port 5196 is assigned by IANA to ampl-tableproxy (The protocol is used by two programs that exchange "table" data used in the AMPL modeling language).

Is port 5196 TCP or UDP?

Port 5196 is registered for TCP.

Is it safe to open port 5196?

It depends on the program that listens on it. Open it only for a service you know and only to the networks that need it. Require TLS and authenticated submission.

How do I check if port 5196 is open?

On Linux run "ss -ltnup 'sport = :5196'", on macOS "lsof -nP -i :5196", and on Windows "netstat -ano | findstr :5196" to see the local process. From another machine, "nmap -p 5196 <host>" shows whether it is reachable.

05 Related

Latest vulnerability news

All news