Implicit-TLS FTPS: the handshake starts the instant you connect, with no AUTH TLS command first.
A client connecting to 990 negotiates TLS immediately and only then speaks FTP commands, with file data on 989 or on passive high ports. This convention grew up in products rather than in the IETF and was never standardised; RFC 4217 specifies the other approach, explicit FTPS, where a normal session on port 21 issues AUTH TLS to upgrade in place. IANA still carries the ftps registration on 990, and managed-file-transfer servers and appliances keep offering it because older clients only know implicit mode. On a scan it marks a file-transfer server, usually sitting next to 21.
Expose with care
TLS is mandatory here, so it does not leak credentials the way port 21 does, but it is still an authenticated file-transfer service with awkward data-channel and NAT behaviour. Expose it deliberately with a current TLS configuration, or prefer SFTP over SSH.
$ openssl s_client -connect TARGET:990 -quietSeen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.
Get Beige Box →also available as JSON · Markdown
Corrections or a missing port? Reply @rimrocksystems.