Port 5223 (Apple Push Notification service)

Apple devices keep a persistent connection to APNs on 5223 (falling back to 443). Also the legacy XMPP-over-SSL port.

Registered (user) port, 1024-49151 TCP Mobile push Meant to face the internet

What port 5223 is used for

Apple devices keep a persistent connection to APNs on 5223 (falling back to 443). Also the legacy XMPP-over-SSL port.

Meant to face the internet. Outbound only; allow it to 17.0.0.0/8 for reliable iPhone and Mac notifications on corporate Wi-Fi.

Service nameProtoDescriptionAssigneeReference

hpvirtgrp TCP HP Virtual Machine Group Management John Williams -

hpvirtgrp UDP HP Virtual Machine Group Management John Williams -

Registry dates for this port: registered 2007-06.

Linux: is anything listening on TCP 5223?

sudo ss -tlnp 'sport = :5223'

Linux / macOS: which process owns the port

sudo lsof -nP -i :5223

Older Linux / BSD (net-tools)

sudo netstat -tlnp | grep ':5223 '

Windows (Command Prompt)

netstat -ano | findstr :5223

Windows (PowerShell)

Get-NetTCPConnection -LocalPort 5223 -State Listen | Select LocalAddress,OwningProcess

From another machine

nc -vz -w 5 HOST 5223

From Windows

Test-NetConnection HOST -Port 5223

ufw

sudo ufw allow 5223/tcp

iptables

sudo iptables -A INPUT -p tcp --dport 5223 -j ACCEPT

nftables

sudo nft add rule inet filter input tcp dport 5223 accept

Windows Firewall

New-NetFirewallRule -DisplayName 'Allow TCP 5223' -Direction Inbound -Protocol TCP -LocalPort 5223 -Action Allow

All port numbers · Open port checker
Assignment data: IANA port number registry (public domain), retrieved 2026-11-10.