4444
Port 4444 is the default listener port for Metasploit payloads.
- Even
- Composite
Where 4444 fits
Why 4444 is special
Because it is a default in the most widely used exploitation framework, unexplained outbound traffic to 4444 is one of the clearest single indicators of compromise a defender can look for. Competent attackers change it, which is exactly why finding it suggests an unsophisticated one.
4444 is part of
Factors & digit properties
- Divisors (12)
- 1, 2, 4, 11, 22, 44, 101, 202, 404, 1111, 2222, 4444
- Prime factorisation
- 2^2 × 11 × 101
- Digit sum
- 16
- Digital root
- 7
Representations
- Decimal
- 4444
- Binary
- 1000101011100
- Octal
- 10534
- Hexadecimal
- 115c
- Scientific notation
- 4.444 × 10^3
Other mathematical patterns
- Palindromic number
- Deficient number
- Repdigit
Related numbers & connections
Metasploit's default listener and the NetBus trojan's default port are both indicators of compromise precisely because they are defaults. Competent attackers change them.
View 12345 →Technology & computing
Outbound connections to port 4444 are a well-known indicator of compromise because it is the Metasploit default. Anyone competent changes it, so its presence usually means an automated or inexperienced intrusion rather than a targeted one.
DocumentedTechnology & computing
Common questions
Is 4444 a prime number?
No, 4444 is not prime.
What are the factors of 4444?
The factors of 4444 are 1, 2, 4, 11, 22, 44, 101, 202, 404, 1111, 2222, 4444.
About this page's data
Mathematical facts:computed directly from the number's value — nothing to source or verify externally.
Contextual records: 1 reviewer-confirmed record, sourced and reviewed before publication.
Last reviewed: 3 August 2026