Port 1900: SSDP / UPnP

Device discovery on local networks. One of the most abused amplification protocols. It should never answer from the internet.

  • Free
  • No Sign-Up
  • Runs in Your Browser

Examples:

Ports

1 of 41

Port Lookup

Port 1900 at a glance

Port1900
ProtocolUDP
ServiceSSDP / UPnP
Open to the Internet?No, keep it on a private network
See What Is Listeningss -lntup | grep ':1900 '
Test From Outsidenmap -sU -p 1900 your-server
Block with UFWufw deny 1900/udp
Block with nftablesnft add rule inet filter input udp dport 1900 drop

SSDP / UPnP uses UDP port 1900. Device discovery on local networks.

One of the most abused amplification protocols. It should never answer from the internet.

If ss shows something listening on port 1900 on a public address, bind it to 127.0.0.1 or a private interface in the service's own configuration, and drop the port in the firewall as well.

Questions

What is port 1900 used for?
SSDP / UPnP. Device discovery on local networks.
Is it safe to open port 1900?
No, keep it on a private network. One of the most abused amplification protocols. It should never answer from the internet.
How do I check if port 1900 is open?
On the server, ss -lntup | grep ':1900 ' shows what is listening. From another machine, nmap -sU -p 1900 your-server shows whether the firewall lets it through.
How do I block port 1900?
With UFW: ufw deny 1900/udp. With nftables, add a drop rule for dport 1900 in your input chain.

Abuse from open ports on your VMs?

Frabs spots amplification, scans and floods leaving any VM and stops them, without touching your firewall.