# WHATPORT(9988)

## NAME

port 9988 — nsesrvr — Registered to a long-discontinued IDS product; in practice a free high port applications squat on.

Protocol: TCP  
IANA registry

## DESCRIPTION

IANA assigns 9988/tcp the service name nsesrvr, described as the "Software Essentials Secure HTTP server" — a component of the SecureNet Pro intrusion-detection product, which has not been a going concern for many years. The matching UDP entry is simply Reserved. Nmap sees 9988/tcp open on roughly 0.015% of hosts, and vanishingly few of those are SecureNet. Read an open 9988 as an unidentified application, not as the registered service.

## EXPOSURE

**Expose with care.** The registration tells you nothing about what is actually listening, so it tells you nothing about whether it authenticates. Fingerprint before exposing.

## CHECK

```sh
nmap -sV -p 9988 TARGET
```

## SEE ALSO

- iana — [IANA port registry — 9988 (nsesrvr)](https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=9988) (iana.org)
- source — [nmap-services — Nmap's port frequency database](https://github.com/nmap/nmap/blob/master/nmap-services) (github.com)

---

HTML: <https://whatport.net/9988/> · JSON: <https://whatport.net/9988.json> · full dataset: <https://whatport.net/ports.json>