Port 4444: krb524

Port 4444 is officially registered for krb524, a legacy service that translated Kerberos 5 tickets into the older Kerberos 4 format. In practice the number is far better known today as a common default listener port in penetration-testing tools, which is worth knowing if you spot unexpected traffic on it.

TCPProxy & tunnelingUnencrypted by defaultIANA assigned
Port number4444
ServiceKerberos 5 to 4 ticket translator
ProtocolTCP
CategoryProxy & tunneling
Default encryptionNo
Security note. Port 4444 is not encrypted by default. Restrict it to trusted networks, or use an encrypted alternative where one exists, to avoid exposing credentials and data in transit.

Frequently asked questions

What is port 4444 used for?

Port 4444 is officially registered for krb524, a legacy service that translated Kerberos 5 tickets into the older Kerberos 4 format. In practice the number is far better known today as a common default listener port in penetration-testing tools, which is worth knowing if you spot unexpected traffic on it.

Is port 4444 TCP or UDP?

Port 4444 (krb524) uses TCP.

Is port 4444 secure?

Port 4444 is not encrypted by default. Where possible, use an encrypted alternative or tunnel it over TLS or a VPN.

Should I open port 4444 on my firewall?

Only if you specifically need krb524. Expose it to the smallest set of trusted sources, and never open database or Windows-service ports to the whole internet.