Skip to content

Ports & Protocols

Search and filter every common TCP/UDP port. Each page covers the service, default state, common attacks, hardening, and an nmap snippet.

Look up any port

Category:
Transport:

167 ports

PortService
7Echo Protocol
19CharGEN (Character Generator Protocol)
20FTP (File Transfer Protocol) data channel
21FTP (File Transfer Protocol) control channel
22SSH (Secure Shell)
23Telnet
25SMTP (Simple Mail Transfer Protocol)
49TACACS+ (Terminal Access Controller Access-Control System Plus)
53DNS (Domain Name System)
67DHCP (Dynamic Host Configuration Protocol) server
69TFTP (Trivial File Transfer Protocol)
79Finger
80HTTP (Hypertext Transfer Protocol)
88Kerberos
102S7comm (Siemens SIMATIC S7 PLC)
110POP3 (Post Office Protocol v3)
111RPCbind (portmapper)
113Ident / Auth
119NNTP (Network News Transfer Protocol)
123NTP (Network Time Protocol)
135MSRPC Endpoint Mapper
137NetBIOS Name Service (NBT-NS)
139NetBIOS Session Service
143IMAP (Internet Message Access Protocol)
161SNMP (Simple Network Management Protocol)
179BGP (Border Gateway Protocol)
194IRC (Internet Relay Chat)
389LDAP (Lightweight Directory Access Protocol)
427SLP (Service Location Protocol)
443HTTPS (HTTP over TLS)
445SMB / CIFS
465SMTPS (SMTP Submission over implicit TLS)
500IKE / ISAKMP (IPsec VPN key exchange)
502Modbus TCP
512rexec (remote execution)
513rlogin (remote login)
514Syslog
515LPD (Line Printer Daemon)
520RIP (Routing Information Protocol)
547DHCPv6 (Dynamic Host Configuration Protocol for IPv6) server
548AFP (Apple Filing Protocol)
554RTSP (Real Time Streaming Protocol)
563NNTPS (NNTP over TLS)
587SMTP Submission (STARTTLS)
593RPC over HTTP (MSRPC/EPMAP)
623IPMI / RMCP (BMC out-of-band management)
631IPP / CUPS (Internet Printing Protocol)
636LDAPS (LDAP over TLS)
853DNS over TLS (DoT)
873rsync daemon
990FTPS (FTP over implicit TLS)
993IMAPS (IMAP over TLS)
995POP3S (POP3 over TLS)
1080SOCKS proxy
1099Java RMI Registry
1194OpenVPN
1433Microsoft SQL Server
1434Microsoft SQL Server Resolution Service (SQL Server Browser)
1521Oracle Database TNS listener
1524ingreslock (classic backdoor shell)
1645RADIUS authentication (legacy)
1701L2TP (VPN)
1720H.323 (Q.931 call signaling)
1723PPTP (Point-to-Point Tunneling Protocol)
1812RADIUS authentication
1883MQTT
1900SSDP / UPnP (Simple Service Discovery Protocol)
1911Tridium Niagara Fox
2049NFS (Network File System)
2082cPanel
2087WHM (WebHost Manager, TLS)
2123GTP-C (GPRS Tunnelling Protocol, control plane)
2181Apache ZooKeeper
2375Docker Engine API (unencrypted)
2376Docker Engine API (TLS)
2379etcd Client API
2404IEC 60870-5-104 (IEC-104)
2525SMTP submission (alternate)
3000Dev Server / Grafana
3128Squid HTTP Proxy
3260iSCSI target
3268LDAP Global Catalog (Active Directory)
3269LDAP Global Catalog over SSL/TLS (Secure Global Catalog)
3306MySQL / MariaDB
3389RDP (Remote Desktop Protocol)
3478STUN / TURN (WebRTC NAT traversal)
3690Subversion (svnserve)
3702WS-Discovery (Web Services Dynamic Discovery / WSD)
4222NATS messaging
4369Erlang Port Mapper Daemon (epmd)
4444Metasploit Meterpreter (default) / MSRPC Blaster
4500IPsec NAT-T (IKE NAT traversal)
4505SaltStack Salt master (ZeroMQ)
4840OPC UA
4899Radmin (Remote Administrator)
5000UPnP / common dev server (Flask, Docker registry)
5004RTP (Real-time Transport Protocol)
5060SIP (Session Initiation Protocol)
5061SIP over TLS
5353mDNS (Multicast DNS)
5355LLMNR (Link-Local Multicast Name Resolution)
5432PostgreSQL
5555Android Debug Bridge (ADB)
5601Kibana
5631pcAnywhere (Symantec)
5671AMQPS (AMQP over TLS)
5672AMQP (RabbitMQ)
5683CoAP (Constrained Application Protocol, IoT)
5684CoAPS (CoAP over DTLS)
5800VNC over HTTP (web client)
5900VNC (Virtual Network Computing)
5938TeamViewer
5984Apache CouchDB
5985WinRM (HTTP)
5986WinRM over HTTPS
6000X11 (X Window System)
6379Redis
6443Kubernetes API server
6667IRC (Internet Relay Chat)
6881BitTorrent (peer wire/DHT)
7000Apache Cassandra Inter-node
7001Oracle WebLogic Server
7474Neo4j HTTP / Browser
7547TR-069 / CWMP (CPE WAN Management)
7687Neo4j Bolt
8000HTTP Alternate / Dev Server
8006Proxmox VE Web UI
8009AJP (Apache JServ Protocol, Tomcat)
8080HTTP Alternate / Proxy
8086InfluxDB HTTP API
8089Splunk Management (splunkd)
8140Puppet Server
8161Apache ActiveMQ web console
8388Shadowsocks proxy
8443HTTPS Alternate (web admin / Tomcat SSL)
8500HashiCorp Consul HTTP API
8554RTSP (alternate streaming port)
8883MQTT over TLS
8888HTTP Alternate / Jupyter Notebook
8983Apache Solr
9000PHP-FPM / SonarQube / dev HTTP
9042Apache Cassandra CQL
9050Tor SOCKS proxy
9090Prometheus / web admin
9092Apache Kafka
9100Printer JetDirect (raw print) / node_exporter
9200Elasticsearch HTTP API
9300Elasticsearch transport (node-to-node)
9389ADWS (Active Directory Web Services)
9418Git protocol (git daemon)
10000Webmin
10250Kubernetes kubelet API
11211Memcached
12345NetBus (trojan/backdoor)
16992Intel AMT / ME (out-of-band management)
20000DNP3
25565Minecraft (Java Edition server)
27015Source / Steam game server
27017MongoDB
28017MongoDB HTTP Status (legacy)
31337Back Orifice (trojan/backdoor)
32400Plex Media Server (HTTP API/web)
32764Router backdoor (SerComm)
44818EtherNet/IP (CIP)
47808BACnet
61613STOMP (ActiveMQ)
61616ActiveMQ OpenWire