Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →A September 2026 ZoomEye query set reported 44,897 results for port 9100, 314 for port 631, and 299 for port 161. Those are indexed query results—not a verified count of unique printers, vulnerable devices, or compromises. They do, however, spotlight a real security question: whether print services should be reachable from the public internet at all.
What the reported counts do—and do not—show
World Programming Systems attributed the figures to a ZoomEye query set collected on 22 September 2026: 44,897 results for port:9100, 314 for port:631, and 299 for port:161. The underlying article’s query construction, scan window, deduplication method, geographic scope, and definition of a “result” could not be independently inspected. Treat the numbers as reported search-index results, not a census of printers or proof of misconfiguration or compromise. World Programming Systems
As an Amazon Associate I earn from qualifying purchases.
The contrast between the port 9100 and port 631 results is striking, but it cannot establish that a particular proportion of printers uses one protocol, that port 9100 is more vulnerable, or that any listed device is exposed in a way an attacker can exploit. A scanner result means only that a service matched the scanner’s observation and query methodology.
Free tools Windows power users keep installed
One-click scans. No signup required.
What ports 9100, 631, and 161 are associated with
| Port | Context | What an observed result establishes |
|---|---|---|
| 9100 | Commonly used for RAW printing, also called JetDirect printing. | A query result associated with this port; not proof of a unique printer or a security flaw. |
| 631 | Default port for an ipp URL under RFC 2910, which specifies the Internet Printing Protocol (IPP). |
A query result associated with this port; not proof that IPP is anonymous or unencrypted. |
| 161 | Associated with SNMP, a network-management protocol. | A query result associated with this port; not proof of a unique printer or a particular configuration. |
IPP is an application-level printing protocol, not the same service path as RAW printing. RFC 8011 defines an IPP Printer as a network entity that accepts IPP operations; that entity can be part of a printer or a print server. IPP also treats authentication and transport security as distinct properties. Seeing an IPP listener alone does not tell you whether users must authenticate or whether traffic is protected. RFC 2910 RFC 8011
#1 Best Overall
- Compact and Efficient Design: The FortiGate 40F is designed for small to mid-sized businesses and enterprise branch offices, featuring a compact, fanless desktop form factor that ensures quiet operation and minimizes space usage.
- Robust Connectivity Options: Equipped with 5 GE RJ45 ports, including 1 WAN port and 4 internal ports, this model provides essential connectivity and flexibility for various network configurations in a small-scale environment.
- High-Performance Security: Offers up to 1 Gbps IPS throughput and 600 Mbps threat protection throughput, using Fortinet’s purpose-built security processor technology to deliver industry-leading performance and protection for SSL encrypted traffic.
- Advanced Threat Protection: Integrated with Fortinet’s AI-powered FortiGuard Labs, the FortiGate 40F offers comprehensive cybersecurity, identifying and mitigating both known and unknown threats to maintain robust security across your network.
- Simplified Management and Deployment: Features a user-friendly management console that provides comprehensive network automation and visibility, coupled with Zero Touch Integration with Fortinet’s Security Fabric for easy deployment.
Why public print services can create risk
The key concern is not simply that a port is open. It is whether the service is intended to be reachable from the public internet, what operations it permits, what authentication and encryption are configured, which device and firmware are behind it, and what other network access that device has.
RAW printing on port 9100
Epson’s security guidebook describes RAW printing on port 9100 or a custom port as unencrypted and warns that third parties could read printed data. That makes unintended exposure especially concerning when print jobs contain sensitive information. The guidebook describes device behavior; actual exposure still depends on the product and its configuration. Epson security guidebook, version NPD7628-00
Rank #2
- HARDWARE PLUS SECURITY SERVICES: FortiGate-60F Firewall Appliance bundled with 1 year of FortiCare Premium and FortiGuard Unified Threat Protection.
- UNIFIED THREAT PROTECTION (UTP): Secures against advanced online threats with comprehensive web filtering and anti-botnet technologies.
- OPTIMIZED FOR MEDIUM-SIZED BUSINESSES: Tailored for businesses needing robust security without the infrastructure of larger enterprises.
- RELIABLE CUSTOMER SUPPORT: FortiCare Premium ensures high-quality support and service continuity.
- EFFECTIVE PROTECTION: Employs advanced filtering technologies to safeguard against sophisticated threats.
IPP and encrypted IPPS
Epson also warns that unencrypted IPP may expose print or scanned data, while IPPS encrypts communication. RFC 2910 discusses TLS and client-authentication support, and says IPP printers should support TLS for server authentication and operation privacy. These standards and vendor guidance do not mean every IPP implementation is configured securely by default: verify the actual transport, authentication, and device settings.
Exposure is not the same as compromise
An internet-reachable print service is an attack surface, not evidence that anyone accessed it or that a device is vulnerable. RFC 8011 notes that printing across different security domains calls for strong security measures, including printer authentication and protection against unauthorized use. Risk depends on the service’s controls and the device’s role and connectivity, not just the port number.
Rank #3
- 【Up to 1100 Mbps VPN Speed 】 Hardware-accelerated WireGuard and OpenVPN-DCO deliver up to 1100 Mbps VPN throughput, over 3× faster than Brume 2 for smooth remote access and file transfers.
- 【Three 2.5G Ports & Multi-WAN】Tri-port 2.5GbE design with flexible WAN LAN configuration supports multi-gigabit wired setups, dual-ISP Multi-WAN and failover to keep home and SOHO networks online.
- 【Stealth VPN Obfuscation】VPN obfuscation disguises VPN traffic as regular HTTPS, helping you evade blocking, bypass restrictive networks and maintain stable, private connections.
- 【DPI protection】Deep Packet Inspection with visual dashboards blocks adult/gambling/malicious sites, while SQM and QoS prioritize gaming, calls, and video when bandwidth is tight
- 【OpenWrt & USB 3.0 Expansion】OpenWrt with 1GB DDR4 and 8GB eMMC lets you install plugins and build VPN, ad-blocking or NAS, while USB 3.0 Type‑C connects high-speed storage or 4G/5G dongles
How organizations should check and reduce exposure
CISA’s exposure-reduction guidance, published 4 June 2025, recommends identifying internet-accessible assets, deciding which need that access, removing or restricting unnecessary exposure, and mitigating exposure that must remain. Apply that sequence to printers through an authorized review of the organization’s external footprint and device configurations. CISA: Reducing the Risk of Internet-Connected Assets
- Inventory external reachability. Confirm the public IP addresses, firewall and NAT rules, and any cloud or remote-access paths that could make printer services reachable. CISA identifies exposure-discovery platforms including Shodan, Censys, Thingful, and Shadowserver; it states that listing these platforms is not government endorsement.
- Confirm whether each exposure is needed. Ask the service owner to document the business need for public reachability. A printer generally does not need to accept print traffic directly from arbitrary internet hosts simply because staff work remotely.
- Remove or restrict unnecessary access. Close public access to print services without a documented need. Disable unused protocols where appropriate, and limit necessary access to authorized networks or users through a controlled remote-access path.
- Harden the required path. Keep supported firmware current; verify vendor-specific authentication and TLS/IPPS options; use monitored access such as a jump host where suitable; and enable traffic monitoring and MFA where possible. Check that job-release controls fit the sensitivity of the documents being printed.
- Review device-specific dependencies. Before disabling a protocol or service, check which workflows depend on it. Settings and side effects differ by model and configuration. HP’s guidance for covered LaserJet Enterprise and PageWide Enterprise devices includes disabling 9100 printing; do not assume the same menu path or capability applies to every printer. HP enterprise printer security guidance
- Verify the change externally and internally. Recheck firewall rules and the device’s enabled services after changes, then confirm that authorized users can still print through the intended route. Closing one print port does not address management interfaces, SNMP, web services, or other device vulnerabilities.
Choosing a legitimate remote-printing path
If remote printing is genuinely required, compare options against the organization’s security and operational needs rather than assuming one protocol solves everything. A VPN or jump-host design can keep the printer itself off the public internet, consistent with CISA’s general exposure-reduction advice. IPPS can encrypt the printing connection when the printer and client support it and it is configured correctly.
- Public reachability: Is the printer itself exposed, or do users reach it through a controlled intermediary?
- Encryption and identity: Is traffic encrypted, are endpoints authenticated, and can access be limited to named users?
- Network scope: Can access be restricted to approved networks and devices?
- Compatibility: Does the approach work with the printer models, operating systems, and user workflows in use?
- Visibility and upkeep: Can administrators monitor access and maintain the chosen controls?
The cited guidance establishes security considerations, not a comparative performance or cost ranking among remote-printing designs.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minuteQuick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
