Sitemap
All pages on the site.
Home
Ports & Protocols Reference
- Port 7 (TCP/UDP) – Echo Protocol
- Port 19 (UDP/TCP) – CharGEN
- Port 20 (TCP) – FTP Data
- Port 21 (TCP) – FTP Control
- Port 22 (TCP) – SSH
- Port 23 (TCP) – Telnet
- Port 25 (TCP) – SMTP
- Port 49 (TCP) – TACACS+
- Port 53 (TCP/UDP) – DNS
- Port 67 (UDP) – DHCP server
- Port 69 (UDP) – TFTP
- Port 79 (TCP) – Finger
- Port 80 (TCP) – HTTP
- Port 88 (TCP/UDP) – Kerberos
- Port 102 (TCP) – S7comm
- Port 110 (TCP) – POP3
- Port 111 (TCP/UDP) – RPCbind / Portmapper
- Port 113 (TCP) – Ident / Auth
- Port 119 (TCP) – NNTP (Usenet News)
- Port 123 (UDP) – NTP
- Port 135 (TCP) – MSRPC Endpoint Mapper
- Port 137 (UDP) – NetBIOS Name Service
- Port 139 (TCP) – NetBIOS Session Service
- Port 143 (TCP) – IMAP
- Port 161 (UDP) – SNMP
- Port 179 (TCP) – BGP
- Port 194 (TCP) – IRC (Internet Relay Chat)
- Port 389 (TCP/UDP) – LDAP
- Port 427 (UDP/TCP) – SLP
- Port 443 (TCP) – HTTPS
- Port 445 (TCP) – SMB / CIFS
- Port 465 (TCP) – SMTPS
- Port 500 (UDP) – IKE/ISAKMP
- Port 502 (TCP) – Modbus TCP
- Port 512 (TCP) – rexec
- Port 513 (TCP) – rlogin
- Port 514 (UDP) – Syslog
- Port 515 (TCP) – LPD
- Port 520 (UDP) – RIP (Routing Information Protocol)
- Port 547 (UDP) – DHCPv6 Server
- Port 548 (TCP) – AFP (Apple Filing Protocol)
- Port 554 (TCP) – RTSP (Real Time Streaming Protocol)
- Port 563 (TCP) – NNTPS
- Port 587 (TCP) – SMTP Submission
- Port 593 (TCP) – RPC over HTTP (MSRPC/EPMAP)
- Port 623 (UDP) – IPMI / RMCP
- Port 631 (TCP/UDP) – IPP / CUPS
- Port 636 (TCP) – LDAPS (LDAP over TLS)
- Port 853 (TCP) – DNS over TLS (DoT)
- Port 873 (TCP) – rsync daemon
- Port 990 (TCP) – FTPS (implicit TLS)
- Port 993 (TCP) – IMAPS
- Port 995 (TCP) – POP3S
- Port 1080 (TCP) – SOCKS Proxy
- Port 1099 (TCP) – Java RMI Registry
- Port 1194 (UDP/TCP) – OpenVPN
- Port 1433 (TCP) – Microsoft SQL Server
- Port 1434 (UDP) – MS SQL Monitor
- Port 1521 (TCP) – Oracle Database TNS Listener
- Port 1524 (TCP) – ingreslock
- Port 1645 (UDP) – RADIUS Authentication (legacy)
- Port 1701 (UDP) – L2TP (VPN)
- Port 1720 (TCP) – H.323 (VoIP call signaling)
- Port 1723 (TCP) – PPTP VPN
- Port 1812 (UDP) – RADIUS Authentication
- Port 1883 (TCP) – MQTT
- Port 1900 (UDP) – SSDP/UPnP
- Port 1911 (TCP) – Tridium Niagara Fox
- Port 2049 (TCP) – NFS
- Port 2082 (TCP) – cPanel
- Port 2087 (TCP) – WHM (WebHost Manager, TLS)
- Port 2123 (UDP) – GTP-C (GPRS Tunnelling, mobile core)
- Port 2181 (TCP) – Apache ZooKeeper
- Port 2375 (TCP) – Docker Engine API (unencrypted)
- Port 2376 (TCP) – Docker Engine API (TLS)
- Port 2379 (TCP) – etcd Client API
- Port 2404 (TCP) – IEC 60870-5-104
- Port 2525 (TCP) – SMTP Submission (alternate)
- Port 3000 (TCP) – Dev Server / Grafana
- Port 3128 (TCP) – Squid HTTP Proxy
- Port 3260 (TCP) – iSCSI Target
- Port 3268 (TCP) – LDAP Global Catalog
- Port 3269 (TCP) – LDAP Global Catalog over SSL/TLS
- Port 3306 (TCP) – MySQL / MariaDB
- Port 3389 (TCP/UDP) – RDP
- Port 3478 (UDP/TCP) – STUN / TURN
- Port 3690 (TCP) – Subversion (svnserve)
- Port 3702 (UDP) – WS-Discovery
- Port 4222 (TCP) – NATS messaging
- Port 4369 (TCP) – Erlang Port Mapper Daemon (epmd)
- Port 4444 (TCP) – Metasploit / Reverse-Shell C2
- Port 4500 (UDP) – IPsec NAT-T (IKE NAT traversal)
- Port 4505 (TCP) – SaltStack Salt master (ZeroMQ)
- Port 4840 (TCP) – OPC UA
- Port 4899 (TCP) – Radmin
- Port 5000 (TCP) – UPnP / common dev server
- Port 5004 (UDP) – RTP (Real-time Transport Protocol)
- Port 5060 (TCP/UDP) – SIP (VoIP)
- Port 5061 (TCP) – SIP over TLS
- Port 5353 (UDP) – mDNS
- Port 5355 (UDP) – LLMNR
- Port 5432 (TCP) – PostgreSQL
- Port 5555 (TCP) – Android Debug Bridge (ADB)
- Port 5601 (TCP) – Kibana
- Port 5631 (TCP) – pcAnywhere
- Port 5671 (TCP) – AMQPS (AMQP over TLS)
- Port 5672 (TCP) – AMQP (RabbitMQ)
- Port 5683 (UDP) – CoAP (Constrained Application Protocol)
- Port 5684 (UDP) – CoAPS (CoAP over DTLS)
- Port 5800 (TCP) – VNC over HTTP
- Port 5900 (TCP) – VNC
- Port 5938 (TCP) – TeamViewer
- Port 5984 (TCP) – Apache CouchDB
- Port 5985 (TCP) – WinRM (HTTP)
- Port 5986 (TCP) – WinRM over HTTPS
- Port 6000 (TCP) – X11 (X Window System)
- Port 6379 (TCP) – Redis
- Port 6443 (TCP) – Kubernetes API server
- Port 6667 (TCP) – IRC (Internet Relay Chat)
- Port 6881 (TCP/UDP) – BitTorrent
- Port 7000 (TCP) – Apache Cassandra Inter-node
- Port 7001 (TCP) – Oracle WebLogic Server
- Port 7474 (TCP) – Neo4j HTTP / Browser
- Port 7547 (TCP) – TR-069 / CWMP
- Port 7687 (TCP) – Neo4j Bolt
- Port 8000 (TCP) – HTTP Alternate / Dev Server
- Port 8006 (TCP) – Proxmox VE Web UI
- Port 8009 (TCP) – AJP (Apache JServ Protocol)
- Port 8080 (TCP) – HTTP Alternate / Proxy
- Port 8086 (TCP) – InfluxDB HTTP API
- Port 8089 (TCP) – Splunk Management (splunkd)
- Port 8140 (TCP) – Puppet Server
- Port 8161 (TCP) – Apache ActiveMQ web console
- Port 8388 (TCP) – Shadowsocks proxy
- Port 8443 (TCP) – HTTPS Alternate
- Port 8500 (TCP) – HashiCorp Consul HTTP API
- Port 8554 (TCP) – RTSP alternate (streaming)
- Port 8883 (TCP) – MQTT over TLS
- Port 8888 (TCP) – HTTP Alternate / Jupyter Notebook
- Port 8983 (TCP) – Apache Solr
- Port 9000 (TCP) – PHP-FPM / SonarQube
- Port 9042 (TCP) – Apache Cassandra CQL
- Port 9050 (TCP) – Tor SOCKS proxy
- Port 9090 (TCP) – Prometheus
- Port 9092 (TCP) – Apache Kafka
- Port 9100 (TCP) – Printer JetDirect / node_exporter
- Port 9200 (TCP) – Elasticsearch HTTP API
- Port 9300 (TCP) – Elasticsearch transport
- Port 9389 (TCP) – Active Directory Web Services (ADWS)
- Port 9418 (TCP) – Git protocol
- Port 10000 (TCP) – Webmin
- Port 10250 (TCP) – Kubernetes kubelet API
- Port 11211 (TCP/UDP) – Memcached
- Port 12345 (TCP) – NetBus
- Port 16992 (TCP) – Intel AMT / ME
- Port 20000 (TCP) – DNP3
- Port 25565 (TCP) – Minecraft (Java Edition server)
- Port 27015 (UDP/TCP) – Source / Steam game server
- Port 27017 (TCP) – MongoDB
- Port 28017 (TCP) – MongoDB HTTP Status (legacy)
- Port 31337 (UDP) – Back Orifice
- Port 32400 (TCP) – Plex Media Server
- Port 32764 (TCP) – SerComm Router Backdoor
- Port 44818 (TCP/UDP) – EtherNet/IP (CIP)
- Port 47808 (UDP) – BACnet
- Port 61613 (TCP) – STOMP (ActiveMQ)
- Port 61616 (TCP) – ActiveMQ OpenWire
Blog
- Common backdoor and trojan ports to investigate
- Common TCP and UDP ports: a cheat sheet
- How to check which ports are open (Windows, Linux, macOS)
- How to close or block a port (Windows & Linux)
- How to scan ports with Nmap: a practical guide
- The most commonly attacked ports (and how to secure them)
- Which ports should you block at the firewall?
- TCP vs UDP: what's the difference?
- UDP amplification DDoS: the ports attackers reflect off
- Well-known, registered, and dynamic ports explained
- What ports does Active Directory use?
- What ports does DNS use? 53, DoT, mDNS & LLMNR
- What ports does email use? SMTP, IMAP & POP3
- What ports does FTP use? FTP, FTPS and SFTP ports explained
- What ports does SMB use?