Port 8953Unbound remote control

Unbound’s TLS-protected administrative interface for managing and monitoring a DNS resolver.

transport: tcp
in transit: encrypted
assignment: official
risk: 7/10
lookups: 0

also known as ub-dns-control, unbound-control

Technical Details

what runs on :8953

Unbound listens on TCP port 8953 for its remote-control interface, not for ordinary DNS queries (typically port 53) or DNS-over-TLS (typically port 853). The client and server communicate over TLS using certificates and keys configured for the control channel; unbound-control-setup can generate the required material. Commands and their responses are exchanged over that protected connection. The port is configurable, and the control interface must be enabled in Unbound's configuration before it will listen.

Security Information

exposure of :8953

risk score

7/ 10risk

treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.

security averages 3.0 across 421 ports — this one sits 4.0 above.

in transit

encrypted

payloads are protected on the wire

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp

every listening transport is another surface to filter at the edge

security overview

The interface can perform privileged resolver administration, so access to it should be limited to localhost or trusted management networks. TLS and client-certificate authentication protect the control channel, but exposing it publicly increases the consequences of compromised client credentials or an incorrectly configured interface. Do not treat this as a public DNS listener.

Record

iana registry entry

port: :8953
service: Unbound remote control
transport: TCP
encryption: tls / encrypted
assignment: iana registered
risk: 7/10risk
category: Security Network Services
usage: This is the remote-control interface of the Unbound DNS resolver, used by `unbound-control` to query status and statistics or perform administrative actions such as reloading configuration and flushing cache entries. It is normally disabled unless explicitly enabled, and is generally configured for local or restricted-network access rather than public exposure.
lookups: 0rank 993
added: 2026-10-15
updated: 2026-10-15
references: IANA service name registry — port 8953

Something wrong?

This record is maintained by the engineers who use port 8953. Every field on it is editable — change what's wrong, say how you know, and a reviewer publishes it, usually within a minute. Last touched 2026-10-15.

01edit any field on a page of its own
02a model checks it for accuracy and spam
03clean and confident goes live immediately

edit this record →back to the registry

Related Ports

all 421 in security →

the 8 most looked-up other ports in security — 421 ports carry that label.

port	service	proto	category	risk	views
:8881	Atlasz Secure Server	TCP	Web Services	caution	67.6k
:443	HTTPS	TCPtls	Web Services	caution	65.9k
:8291	Winbox MikroTik Admin	TCP	Security	caution	62.9k
:3268	Microsoft Global Catalog (GC)	TCPUDP	Security	caution	54.6k
:135	Microsoft EPMAP	TCPUDP	Security	caution	51.9k
:3128	Squid Proxy HTTP	TCP	Web Services	caution	45.8k
:8080	HTTP Alternate	TCP	Web Services	caution	44.9k
:7000	Vuze HTTPS Tracker	TCPtls	Security	caution	28.9k

risk mix of the 8 listed

caution100%

2 of 8 encrypted

Port :8953Unbound remote control

Technical Details

Security Information

Related Ports

Port 8953Unbound remote control