Port 3301Tarantool

Tarantool's native client port for its in-memory database and application server protocol.

transport
tcp · udp

2 transports registered

in transit
cleartext

payload readable on path

assignment
official

registered with iana

risk
8/10

risk

lookups
0

rank 994 of 1,922 · top 52%

also known as Tarantool iproto, Tarantool database

Technical Details

what runs on :3301

Tarantool's native binary protocol, commonly called iproto, runs over TCP and uses MessagePack-encoded request and response headers and bodies. A connection begins with a server greeting, after which clients exchange framed requests identified by synchronization IDs; authentication can use a challenge-response exchange. TLS is supported in suitable deployments but is not enabled by default, so ordinary port 3301 traffic is typically cleartext.

Security Information

exposure of :3301

risk score

8/ 10risk

treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.

databases averages 3.8 across 79 ports — this one sits 4.2 above.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

An exposed Tarantool listener may provide database reads and writes, administrative operations, or application-specific functionality depending on configuration and credentials. It should generally be restricted to trusted application and cluster networks, especially because authentication and TLS are deployment-dependent; IANA also reports unauthorized use of this assignment.

the 8 most looked-up other ports in databases — 79 ports carry that label.

risk mix of the 8 listed

  • caution100%

1 of 8 encrypted