Skip to content

Blog

Understand the IANA port ranges: well-known (0-1023), registered (1024-49151), and dynamic (49152-65535), plus how the 16-bit port space and ephemeral ports work.
The full list of ports a domain controller needs — Kerberos, LDAP, SMB, RPC, Global Catalog — plus why none of them should ever face the internet.
DNS uses port 53 over both UDP and TCP, with DNS-over-TLS on 853, mDNS on 5353 and LLMNR on 5355. Learn why, plus DNS attacks and how to encrypt lookups.
A complete guide to email ports: SMTP 25, submission 587, SMTPS 465, POP3 110/995, IMAP 143/993 — when to use each and how to secure them with TLS.
FTP uses port 21 for control and port 20 for data, with FTPS on 990. Learn active vs passive mode, why SFTP is really SSH on port 22, and what to use.
SMB and CIFS use port 445 today, with legacy NetBIOS on 137 and 139. Here is what each does, why 445 is the top ransomware vector, and what to block.