# WHATPORT(5952)

## NAME

port 5952 — Unassigned / VNC display :52 — No registration; treat it as VNC display :52.

Protocol: TCP  
IANA registry

## DESCRIPTION

IANA lists nothing for 5952 — it sits in the Unassigned 5915-5962 block. The only convention that reaches it is RFB display numbering, where 5900+52 is display :52. There is no well-documented malware or scanner association specific to this number; it shows up in scan data at roughly the same low rate as its neighbours.

## EXPOSURE

**Expose with care.** Nothing standard owns this port, so identify the process before deciding anything — and if it is VNC, do not let it face the internet.

## CHECK

```sh
sudo lsof -nP -iTCP:5952 -sTCP:LISTEN
```

## SEE ALSO

- iana — [IANA Service Name and Transport Protocol Port Number Registry](https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml) (iana.org)
- source — [nmap-services — the port-frequency database](https://github.com/nmap/nmap/blob/master/nmap-services) (github.com)

---

HTML: <https://whatport.net/5952/> · JSON: <https://whatport.net/5952.json> · full dataset: <https://whatport.net/ports.json>