HTTPfy

Port 601 (Syslog (reliable, TCP))

Reliable syslog over TCP (RFC 3195); in practice most collectors use TCP 514 or 6514.

Well-known (system) port, 0-1023 TCP Monitoring and logging Do not expose to the internet

What port 601 is used for

Reliable syslog over TCP (RFC 3195); in practice most collectors use TCP 514 or 6514.

Security: should port 601 be open?

Do not expose to the internet. Internal only; use 6514 with TLS across networks.

IANA assignment

Service nameProtoDescriptionAssigneeReference
syslog-conn TCP Reliable Syslog Service - RFC 3195
syslog-conn UDP Reliable Syslog Service - RFC 3195

Check what is listening on port 601

Linux: is anything listening on TCP 601?
sudo ss -tlnp 'sport = :601'
Linux / macOS: which process owns the port
sudo lsof -nP -i :601
Older Linux / BSD (net-tools)
sudo netstat -tlnp | grep ':601 '
Windows (Command Prompt)
netstat -ano | findstr :601
Windows (PowerShell)
Get-NetTCPConnection -LocalPort 601 -State Listen | Select LocalAddress,OwningProcess

Test it from outside

From another machine
nc -vz -w 5 HOST 601
From Windows
Test-NetConnection HOST -Port 601

Block port 601 in the firewall

ufw
sudo ufw deny 601/tcp
iptables
sudo iptables -A INPUT -p tcp --dport 601 -j DROP
nftables
sudo nft add rule inet filter input tcp dport 601 drop
Windows Firewall
New-NetFirewallRule -DisplayName 'Block TCP 601' -Direction Inbound -Protocol TCP -LocalPort 601 -Action Block

Related ports

514Syslog (UDP) / rsh (TCP)6514Syslog over TLS599acp600ipcserver602xmlrpc-beep603idxp

All port numbers · Open port checker
Assignment data: IANA port number registry (public domain), retrieved 2026-11-10.