whatportis.com
suggest an edit →

Port 3128Tatsoft Default HTTP Proxy

Port 3128 is commonly associated with HTTP proxy services, such as those configured as default client connections in industrial automation platforms like Tatsoft. It serves as an intermediary port facilitating client communication, content filtering, or network access control, enabling efficient data transfer and protocol management for connected client applications. This port is frequently used by transparent and explicit proxy servers in enterprise or industrial environments..

inWeb ServicesNetwork Services
transport
tcp

single transport

in transit
cleartext

payload readable on path

assignment
unofficial

used by convention

risk
4/10

caution

lookups
46,797

rank 23 of 993 · top 2%

1 other service is registered on port 3128. compare all 2 →

Technical Details

what runs on :3128

Port 3128 is widely recognized as a default port utilized by HTTP proxy servers, notably in configurations involving Squid Proxy and industrial software platforms like Tatsoft. These proxies function by relaying HTTP requests and responses between clients and destination servers, allowing centralized management of web traffic.

In automation contexts, such as with Tatsoft’s industrial HMI/SCADA software, port 3128 is configured to streamline the client’s connection to backend services or data sources, simplifying deployment and network routing. It assists in protocol translation, caching, and content filtering, ensuring reliable and consistent communication within complex network topologies.

From a networking perspective, traffic through port 3128 typically follows cleartext HTTP protocols unless combined with additional security measures. The use of proxy servers on this port can introduce latency management, load balancing, and access restrictions, providing organizations with granular control over internal and external communications.

Security Information

exposure of :3128

risk score

4/ 10caution

worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.

web services averages 3.9 across 112 ports — this one sits 0.1 above.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

unofficial

used by convention, not registered — what answers here varies by deployment

reachable over

tcp

every listening transport is another surface to filter at the edge

security overview

Common Vulnerabilities:

  • Open or misconfigured proxies on port 3128 can be exploited for anonymizing malicious activities, facilitating data exfiltration, or bypassing security controls.
  • Lack of authentication and unsecured HTTP use exposes the network to man-in-the-middle attacks, data interception, and traffic manipulation.
  • Proxy services may be susceptible to attacks like HTTP smuggling, buffer overflows, or denial-of-service if not properly maintained.

Common Mitigations:

  • Enforce strict access controls and authentication for proxy connections to restrict unauthorized use.
  • Regularly patch and update proxy server software to address known vulnerabilities.
  • Employ encryption layers such as SSL/TLS tunneling or VPNs to protect data in transit.
  • Monitor proxy traffic for anomalies, implement web filtering, and disable open proxy functionality unless explicitly required.
  • Limit external exposure through firewall rules, allowing only trusted IP ranges to connect via port 3128.

Related Ports

all 112 in web services →

the 8 most looked-up other ports in web services — 112 ports carry that label.

portservicerisk
:8888Sun Answerbook & Alt HTTPcaution
:8000Intel Remote Desktop / Alternate HTTP Portsafe
:8888NewsEDGEcaution
:8888HTTP Alternative Portcaution
:8888GNUmp3d Streaming HTTPcaution
:9080Groove RPCcaution
:8881Atlasz Secure Servercaution
:80HTTPcaution

risk mix of the 8 listed

  • safe13%
  • caution88%

0 of 8 encrypted