TCP 119
Synopsis
- TCP port 119 is the standard port for the Network News Transfer Protocol (NNTP), used for Usenet news reading and transit.
- Usenet server software such as INN (InterNetNews), Diablo, Leafnode, and Hamster listens on 119 for reader and peering connections.
- Microsoft Exchange Server 2000/2003 provided an NNTP service that operated on port 119.
- Usenet providers including Giganews, Newshosting, Astraweb, and Eternal September offer NNTP access on port 119 (with SSL typically on 563).
- Newsreader/downloader clients like Mozilla Thunderbird, Pan, slrn, Forte Agent, SABnzbd, and NZBGet connect to these services over port 119 for plaintext NNTP.
- Security note: Misconfigured NNTP servers on 119 have been abused as open relays for Usenet spam, and historical vulnerabilities in INN and Microsoft’s NNTP service have enabled buffer overflows/RCE, so attackers often scan this port.
Observed activity
Last 30 days
Detailed chart