# WHATPORT(6001)

## NAME

port 6001 — X11 (display :1) — The second X display — very often an Xvnc or Xvfb server rather than a physical screen.

Protocol: TCP  
IANA registry

## DESCRIPTION

6001 is display :1 inside IANA's 6000-6063 x11 range. On a workstation it is the second X server; far more often it belongs to a headless one — Xvfb for CI screenshot jobs, or the X server side of a VNC session started as `vncserver :1`, which pairs it with RFB on 5901. Scan data shows it open slightly more often than 6000, which fits the headless-server pattern.

## EXPOSURE

**Do not expose.** Same protocol, same problem: a connected client can screenshot and inject input. Bind the X server to localhost and reach it over SSH forwarding or through the VNC layer, not directly.

## CHECK

```sh
xdpyinfo -display TARGET:1
```

## SEE ALSO

- docs — [X.Org — Xserver(1) manual page](https://xorg.freedesktop.org/archive/current/doc/man/man1/Xserver.1.xhtml) (xorg.freedesktop.org)
- iana — [IANA port registry — 6000-6063 (x11)](https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=x11) (iana.org)
- source — [TigerVNC/tigervnc](https://github.com/TigerVNC/tigervnc) (github.com)

---

HTML: <https://whatport.net/6001/> · JSON: <https://whatport.net/6001.json> · full dataset: <https://whatport.net/ports.json>