Skip to main content
All Engineering Labs
ReviewGraduate

Port & Protocol Lookup

Search a curated, deterministic reference of common TCP and UDP ports, service aliases, infrastructure uses, traffic direction, and practical security considerations.

Around 2 mins No account required Graduate level
Interactive utility

Run Port Lookup

Inputs stay in this browser and results are not saved.

Search the port and protocol reference

Matches port numbers, ranges, service names, protocols, aliases and technology terms.

Start a search or browse

Common references

22TCP

SSH

Encrypted remote shell, command execution and file transfer.

Typical use

Linux administration, automation, tunnels, SFTP/SCP and Git access.

Traffic direction

Client to server

Security considerations

Disable password authentication where practical, protect private keys and restrict administrative access by source network.

53TCP + UDP

DNS

Domain-name queries, responses and zone-transfer traffic.

Typical use

UDP handles most queries; TCP is required for zone transfers and responses that do not fit the negotiated UDP size.

Traffic direction

Client to server

Security considerations

Restrict recursion and zone transfers, patch resolvers, and account for both transports in firewall and monitoring policy.

443TCP

HTTPS

Secure HTTP traffic protected by TLS.

Typical use

Web applications, APIs, reverse proxies, load balancers and encrypted browser traffic.

Traffic direction

Client to server

Security considerations

TLS version, cipher policy, certificate validity and application authorization remain separate security controls.

HTTPTransport Layer SecurityWeb Servers
3389TCP + UDP

RDP

Microsoft Remote Desktop interactive sessions; modern clients can use both TCP and UDP.

Typical use

Remote Windows administration, virtual desktops and published applications.

Traffic direction

Client to server

Security considerations

Do not expose directly to the internet. Use a gateway or VPN, Network Level Authentication, MFA and source restrictions.

Purpose and audience

Who this Lab is for

Designed for

  • Systems Engineers
  • SREs and DevOps Engineers
  • Network and IT Administrators

Use it when

  • Reviewing firewall rules or load-balancer exposure
  • Triaging an unfamiliar listening port
  • Planning infrastructure dependencies and network policy
How to use it

A complete run, step by step

1

Search by number or name

Enter a port, service, protocol, alias, or common technology name such as 443, HTTPS, Kerberos, WinRM, LDAP, or Kubernetes.

2

Review every matching entry

Multi-port technologies return all curated records so firewall and dependency decisions are not reduced to one port.

3

Check transport and direction

Confirm whether each entry uses TCP, UDP, or both and review its usual traffic direction before changing policy.

4

Validate the operational context

Use the security notes and official reference links as inputs to a change review, then verify against the deployed product configuration.

Input guide

What you will need

Prepare the following information before starting. Use measured evidence where possible; defaults are examples and should not be treated as recommendations.

Results and methodology

What the result tells you

Your report includes

  • Exact TCP, UDP, or combined transport identification
  • All relevant entries for multi-port services
  • Operational and security notes with authoritative references
  • Related KBY technology pages where available

How it is determined

The lookup performs client-side matching against a version-controlled curated dataset. Results are deterministic and distinguish transport protocols and ranges explicitly; no AI model or external lookup API is involved.

Deterministic calculation · high confidence · v2026.08.1

Search results are exact matches against a reviewed, version-controlled port dataset with explicit transport fields.

Model assumptions

  • Port assignments describe common defaults rather than proof of a live service.
  • The curated dataset is intentionally narrower than the complete IANA registry.
  • Product-specific overrides and network topology must be checked before changing firewall policy.
Worked example

Reviewing HTTPS exposure

Situation

An engineer searches for port 443 while validating a web-facing load balancer rule.

Result

The lookup identifies HTTPS over TCP, explains its typical use and traffic direction, and highlights that certificate, TLS version, and cipher configuration require separate review.

Important limitations

Use the result with engineering judgement

  • The dataset is intentionally curated rather than a complete IANA registry.
  • Applications can be configured to listen on non-standard ports.
  • A known port does not prove which process or protocol is actually using a live socket.
  • Firewall requirements must be validated against the exact product version and topology.
Frequently asked questions

Questions before you begin

Is this the complete IANA port registry?

No. It is a curated engineering reference covering common infrastructure services relevant to KBY readers.

Why can one service return several ports?

Technologies such as Kerberos, Active Directory, DNS, DHCP, SMB, and Kubernetes use multiple transports or endpoints. The lookup keeps those records distinct.

Does finding a port confirm the service running on a host?

No. Port numbers are conventions. Confirm the owning process, configuration, traffic, and application protocol on the system itself.

Ready to run Port Lookup?

Open the interactive utility without an account. Inputs and results are not saved.

Open tool
Engineering signal

Get practical engineering references

A useful digest about twice a week with new error references, tools, integration notes and production lessons. No daily noise.