UDP 44818
Synopsis
- UDP 44818 is used by EtherNet/IP (ODVA’s Common Industrial Protocol) for device discovery/management, notably the ListIdentity query.
- Rockwell Automation tools like RSLinx Classic and FactoryTalk Linx use UDP 44818 to browse/discover Allen‑Bradley controllers (ControlLogix, CompactLogix, Micro800 series) and PowerFlex drives on local networks.
- Inductive Automation Ignition’s EtherNet/IP driver and Kepware KEPServerEX use UDP 44818 to discover and identify EtherNet/IP devices before establishing TCP sessions.
- EtherNet/IP-capable devices from multiple vendors—e.g., Omron NJ/NX controllers, Schneider Electric Modicon PACs, HMS Anybus/Ewon gateways, and WAGO 750-series I/O—respond to discovery on UDP 44818.
- Wireshark decodes this traffic as ENIP/CIP on UDP 44818, commonly showing ListIdentity/ListServices packets during network browsing.
- Security: UDP 44818 is routinely probed to enumerate exposed industrial controllers, and poorly secured EtherNet/IP endpoints may leak device details or allow unauthenticated interactions that facilitate exploitation.
Observed activity
Last 30 days
Detailed chart