Port 35357OpenStack Identity (Keystone) API

Legacy OpenStack Keystone admin API endpoint for identity and access management.

transport: tcp
in transit: cleartext
assignment: official
risk: 7/10
lookups: 0

also known as OpenStack Identity API

Technical Details

what runs on :35357

Keystone exposes a REST API over TCP using HTTP, with JSON request and response bodies; there is no port-specific binary framing or handshake. Port 35357 was the traditional default for Keystone's admin endpoint, separate from the public API commonly served on port 5000, but that separate endpoint is legacy and may be absent in newer deployments. TLS is typically provided by HTTPS configuration or a front-end proxy rather than being inherent to this port.

Security Information

exposure of :35357

risk score

7/ 10risk

treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.

web services averages 3.1 across 245 ports — this one sits 3.9 above.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp

every listening transport is another surface to filter at the edge

security overview

Keystone handles authentication and issues tokens used to access OpenStack services, so an exposed administrative endpoint is sensitive even though administrative actions require authorization. Keep it on trusted networks, enforce TLS, and avoid exposing admin interfaces publicly; unencrypted HTTP can expose credentials or tokens in transit.

Record

iana registry entry

port: :35357
service: OpenStack Identity (Keystone) API
transport: TCP
encryption: cleartext
assignment: iana registered
risk: 7/10risk
category: Web Services Cloud
usage: This port is associated with the OpenStack Identity service, Keystone, historically as its separate administrative API endpoint. Engineers are most likely to encounter it in legacy OpenStack deployments; newer deployments commonly use port 5000 for the API instead.
lookups: 0rank 993
added: 2026-10-20
updated: 2026-10-20
references: IANA service name registry — port 35357

Something wrong?

This record is maintained by the engineers who use port 35357. Every field on it is editable — change what's wrong, say how you know, and a reviewer publishes it, usually within a minute. Last touched 2026-10-20.

01edit any field on a page of its own
02a model checks it for accuracy and spam
03clean and confident goes live immediately

edit this record →back to the registry

Related Ports

all 245 in web services →

the 8 most looked-up other ports in web services — 245 ports carry that label.

port	service	proto	category	risk	views
:8888	Sun Answerbook & Alt HTTP	TCP	Web Services	caution	123.9k
:8000	Intel Remote Desktop / Alternate HTTP Port	TCP	Web Services	safe	84.3k
:8888	NewsEDGE	TCPUDP	Web Services	caution	83.3k
:8888	HTTP Alternative Port	TCP	Web Services	caution	76.5k
:8888	GNUmp3d Streaming HTTP	TCP	Web Services	caution	76.3k
:9080	Groove RPC	TCPUDP	Web Services	caution	70.8k
:8881	Atlasz Secure Server	TCP	Web Services	caution	67.6k
:80	HTTP	TCPUDP	Web Services	caution	67.3k

risk mix of the 8 listed

safe13%
caution88%

0 of 8 encrypted

Port :35357OpenStack Identity (Keystone) API

Technical Details

Security Information

Related Ports

Port 35357OpenStack Identity (Keystone) API