Search common network port numbers and their associated services, protocols, and security implications.
Type a TCP or UDP port number, or a service name such as 'ssh', and this tool returns the registered service, the transport protocol, the port range class, and a plain-language security note covering whether the associated service is a common attack surface. The data follows the IANA port registry, which records conventions, not facts. The most common surprise is the direction of the answer: the tool tells you what a number usually means, never what is actually listening on that number on your network or any other.
A concrete input and expected output from the current implementation.
Input
22
Expected output
22 / ssh - SSH (Secure Shell) / TCP, UDP / well-known port (0-1023) / encrypted remote login and command execution / security note: routinely targeted by automated brute-force and credential-stuffing scans across the public internet; administrators often move it off the default or restrict it with key-based authentication and firewall rules.
Port 22 is the IANA-registered home of SSH, so the lookup resolves the number to the ssh entry and classifies it in the well-known range. The security note reflects SSH's standing as one of the most-scanned services on the internet.
The lookup matches the entered number (or name) against port registry entries and reports the registered service, the transport or transports it appears on, and which of the three ranges it falls in: well-known (0-1023), registered (1024-49151), or dynamic (49152-65535). A name search works the same way in reverse. Entries carry the descriptive notes the registry holds, such as protocol details.
Alongside the registry facts, each result carries a security note written for this tool: whether the service is encrypted or clear-text (Telnet, FTP, and unencrypted SMTP transmit credentials and data in the open), whether it is a known attack target (SSH brute force, RDP exploitation, SMB-based ransomware such as WannaCry), and when the standard advice is to avoid the service or restrict it by firewall.
No. The lookup resolves what a port number conventionally means; it cannot see your machine, and nothing is scanned when you search. To find what is actually listening, run netstat, lsof, or a port scanner against the host itself. An open port is not by itself a vulnerability - the service behind it and its exposure decide that.
Ports 49152-65535 are dynamic, private ports. The operating system assigns them temporarily for the client side of outgoing connections - the kernel picks one when a program connects - so no permanent service is registered there. An empty result for such a number is the correct outcome, not a gap in the data.
The example and behavioral notes were checked against the browser implementation. Standards and primary references below define the relevant format, formula, or platform behavior.
Format, validate, and beautify JSON with syntax highlighting and error detection.
Encode text or files to Base64 and decode Base64 strings back to their original form.
Format and indent SQL queries for better readability across all major dialects.
Convert HTML markup into clean Markdown syntax with support for tables and lists.
Write Markdown and see the rendered HTML output in real time with live preview.
Visualize unified diffs and patch files with color-coded additions and deletions.