Port 6446MySQL Proxy

A registered service name for proxying MySQL client connections.

transport
tcp · udp

2 transports registered

in transit
cleartext

payload readable on path

assignment
official

registered with iana

risk
8/10

risk

lookups
0

rank 993 of 4,402 · top 23%

Technical Details

what runs on :6446

MySQL Router listens on TCP 6446 and speaks the MySQL client/server protocol to clients while routing connections to configured backend MySQL servers. It commonly serves the read-write route; TCP 6447 is the conventional read-only Router endpoint. The connection begins with a MySQL protocol handshake and authentication, and traffic is unencrypted unless TLS is configured. UDP is not normally used by MySQL Router or MySQL Proxy. Although IANA assigned 6446 to MySQL Proxy, the port is more commonly encountered today as the MySQL Router read-write listener.

Security Information

exposure of :6446

risk score

8/ 10risk

treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.

databases averages 3.9 across 130 ports — this one sits 4.1 above.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

An exposed MySQL Router endpoint can provide a path to the backend database, with attackers able to perform MySQL authentication attempts, fingerprint the service, and access data if valid credentials or exploitable backend accounts are available. It should generally be restricted to trusted application or database networks; enable TLS and enforce strong, least-privilege MySQL authentication rather than exposing it directly to the Internet.

the 8 most looked-up other ports in databases — 130 ports carry that label.

risk mix of the 8 listed

  • caution100%

1 of 8 encrypted