Port 24224 (Fluentd forward)

Fluentd and Fluent Bit forward protocol (also Docker's fluentd log driver).

Registered (user) port, 1024-49151 TCPUDP Monitoring and logging Do not expose to the internet

What port 24224 is used for

Fluentd and Fluent Bit forward protocol (also Docker's fluentd log driver).

Do not expose to the internet. Unauthenticated by default; use shared_key and TLS across networks.

Port 24224 is in the registered range and has no IANA assignment. The usage above is unofficial but widespread.

Linux: is anything listening on TCP 24224?

sudo ss -tlnp 'sport = :24224'

Linux: UDP 24224

sudo ss -ulnp 'sport = :24224'

Linux / macOS: which process owns the port

sudo lsof -nP -i :24224

Older Linux / BSD (net-tools)

sudo netstat -tlnp | grep ':24224 '

Windows (Command Prompt)

netstat -ano | findstr :24224

Windows (PowerShell)

Get-NetTCPConnection -LocalPort 24224 -State Listen | Select LocalAddress,OwningProcess

From another machine

nc -vz -w 5 HOST 24224

From Windows

Test-NetConnection HOST -Port 24224

UDP probe (no reply does not prove it is closed)

nc -vzu -w 5 HOST 24224

ufw

sudo ufw deny 24224/tcp

iptables

sudo iptables -A INPUT -p tcp --dport 24224 -j DROP

nftables

sudo nft add rule inet filter input tcp dport 24224 drop

Windows Firewall

New-NetFirewallRule -DisplayName 'Block TCP 24224' -Direction Inbound -Protocol TCP -LocalPort 24224 -Action Block

ufw

sudo ufw deny 24224/udp

iptables

sudo iptables -A INPUT -p udp --dport 24224 -j DROP

nftables

sudo nft add rule inet filter input udp dport 24224 drop

Windows Firewall

New-NetFirewallRule -DisplayName 'Block UDP 24224' -Direction Inbound -Protocol UDP -LocalPort 24224 -Action Block

All port numbers · Open port checker
Assignment data: IANA port number registry (public domain), retrieved 2026-11-10.