# WHATPORT(60443)

## NAME

port 60443 — Unassigned — commonly an alternate HTTPS port — An alternate HTTPS port by shape, not by standard — 443 with a prefix.

Protocol: TCP  
IANA registry

## DESCRIPTION

Nothing is registered at 60443; RFC 6335 puts it in the Dynamic/Private range that IANA leaves alone. Like 8443 and 58080, the digits are the tell: it is chosen by hand for a TLS listener when the obvious ports are occupied, often an appliance or application management interface. Nmap's nmap-services lists it "unknown" at 0.000228, and SANS ISC has no service name for it. A TLS handshake and its certificate will identify the owner faster than any port database.

## EXPOSURE

**Expose with care.** TLS on a nonstandard port is still TLS, but an administrative console is an administrative console. Restrict by source address or put it behind a VPN rather than relying on the unusual port number.

## CHECK

```sh
openssl s_client -connect TARGET:60443 -brief </dev/null
```

## SEE ALSO

- spec — [RFC 6335 — Dynamic Ports (49152-65535)](https://www.rfc-editor.org/rfc/rfc6335.html) (rfc-editor.org)
- iana — [IANA port registry — search 60443 (no assignment)](https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=60443) (iana.org)
- docs — [Nmap Reference Guide — the nmap-services file](https://nmap.org/book/nmap-services.html) (nmap.org)

---

HTML: <https://whatport.net/60443/> · JSON: <https://whatport.net/60443.json> · full dataset: <https://whatport.net/ports.json>