Port 4460 (NTS-KE (Network Time Security))

Network Time Security key establishment (RFC 8915) for authenticated NTP, served by Cloudflare, Netnod and chrony/NTPsec servers.

Registered (user) port, 1024-49151 TCP Network infrastructure Meant to face the internet

What port 4460 is used for

Network Time Security key establishment (RFC 8915) for authenticated NTP, served by Cloudflare, Netnod and chrony/NTPsec servers.

Meant to face the internet. Public time servers expose it alongside UDP 123.

Service nameProtoDescriptionAssigneeReference

ntske TCP Network Time Security Key Establishment IESG RFC 8915

Registry dates for this port: registered 2020-04-07.

Linux: is anything listening on TCP 4460?

sudo ss -tlnp 'sport = :4460'

Linux / macOS: which process owns the port

sudo lsof -nP -i :4460

Older Linux / BSD (net-tools)

sudo netstat -tlnp | grep ':4460 '

Windows (Command Prompt)

netstat -ano | findstr :4460

Windows (PowerShell)

Get-NetTCPConnection -LocalPort 4460 -State Listen | Select LocalAddress,OwningProcess

From another machine

nc -vz -w 5 HOST 4460

From Windows

Test-NetConnection HOST -Port 4460

ufw

sudo ufw allow 4460/tcp

iptables

sudo iptables -A INPUT -p tcp --dport 4460 -j ACCEPT

nftables

sudo nft add rule inet filter input tcp dport 4460 accept

Windows Firewall

New-NetFirewallRule -DisplayName 'Allow TCP 4460' -Direction Inbound -Protocol TCP -LocalPort 4460 -Action Allow

All port numbers · Open port checker
Assignment data: IANA port number registry (public domain), retrieved 2026-11-10.