Skip to main content
NyankoTools

Port Number List & Search

Look up commonly used ports by number, range (for example 8000-8100), service name, or a keyword about what they do. You can filter by TCP or UDP and by category such as web, mail, or databases. For web server responses, see the HTTP Status Codes list; to convert IP address notations, try the IP Address Converter.

🔒 Runs in your browser · Your data is never sent to a server

A number on its own matches that exact port. You can also enter a range such as 8000-8100. Separate several words with spaces to show only ports that match all of them.

  • 20

    TCPFTP (data)File sharing & transfer

    FTP data transfer (active mode).

  • 21

    TCPFTP (control)File sharing & transfer

    FTP control connection. Passwords travel in plain text, so SFTP or FTPS is preferred today.

  • 22

    TCPSSH / SFTPRemote access

    Secure remote login over SSH, plus file transfer with SFTP and scp.

  • 23

    TCPTelnetRemote access

    Remote login over Telnet. Traffic is not encrypted, so SSH has largely replaced it.

  • 25

    TCPSMTPMail

    Mail delivery between mail servers (SMTP).

  • 43

    TCPWHOISNetwork infrastructure

    WHOIS queries for domain and IP registration data.

  • 53

    TCPUDPDNSNetwork infrastructure

    Name resolution (DNS). Ordinary queries use UDP; large responses and zone transfers use TCP.

  • 67

    UDPDHCP (server)Network infrastructure

    Port a DHCP server uses to hand out IP addresses.

  • 68

    UDPDHCP (client)Network infrastructure

    Port a DHCP client uses to receive its configuration.

  • 69

    UDPTFTPFile sharing & transfer

    Simple file transfer without authentication (TFTP), used for device configs and PXE boot.

  • 80

    TCPHTTPWeb

    Unencrypted web traffic (HTTP).

  • 88

    TCPUDPKerberosNetwork infrastructure

    Kerberos authentication, used for Active Directory sign-in.

  • 110

    TCPPOP3Mail

    Mail retrieval over POP3, unencrypted.

  • 111

    TCPUDPRPC (rpcbind / portmapper)Network infrastructure

    rpcbind (portmapper), which tracks Unix RPC services. NFS relies on it.

  • 123

    UDPNTPNetwork infrastructure

    Time synchronization (NTP).

  • 135

    TCPMicrosoft RPCNetwork infrastructure

    Windows Remote Procedure Call (RPC) endpoint mapper.

  • 137

    UDPNetBIOS Name ServiceFile sharing & transfer

    NetBIOS name resolution, used by legacy Windows network sharing.

  • 138

    UDPNetBIOS DatagramFile sharing & transfer

    NetBIOS datagram service, used by legacy Windows network sharing.

  • 139

    TCPNetBIOS SessionFile sharing & transfer

    NetBIOS session service, used by legacy Windows file sharing.

  • 143

    TCPIMAPMail

    Mail retrieval over IMAP, keeping messages on the server so devices stay in sync. Unencrypted.

  • 161

    UDPSNMPNetwork infrastructure

    Monitoring and managing network devices (SNMP).

  • 162

    UDPSNMP TrapNetwork infrastructure

    Port that receives SNMP traps (fault notifications).

  • 179

    TCPBGPNetwork infrastructure

    BGP, used for routing between networks on the Internet.

  • 389

    TCPUDPLDAPNetwork infrastructure

    Directory service queries (LDAP), used by Active Directory and OpenLDAP.

  • 443

    TCPUDPHTTPS / HTTP/3 (QUIC)Web

    Encrypted web traffic (HTTPS). UDP 443 carries HTTP/3 (QUIC).

  • 445

    TCPSMB (Microsoft-DS)File sharing & transfer

    Windows file sharing (SMB / CIFS), also used by Samba. It should not normally be exposed to the Internet.

  • 465

    TCPSMTPS (SMTP over TLS)Mail

    SMTP over implicit TLS. RFC 8314 brought it back as an option for mail submission.

  • 500

    UDPIKE / ISAKMP (IPsec)Network infrastructure

    Key exchange (IKE) for IPsec VPNs.

  • 502

    TCPModbus TCPOther

    Modbus/TCP, an industrial protocol used by factory and plant equipment.

  • 514

    UDPSyslogNetwork infrastructure

    Log forwarding (Syslog).

  • 515

    TCPLPD (printing)Other

    Printing to network printers (LPD).

  • 520

    UDPRIPNetwork infrastructure

    Route exchange between routers (RIP).

  • 546

    UDPDHCPv6 (client)Network infrastructure

    Port DHCPv6 clients use.

  • 547

    UDPDHCPv6 (server)Network infrastructure

    Port DHCPv6 servers and relays use.

  • 554

    TCPUDPRTSPOther

    Stream control for IP cameras and media devices (RTSP).

  • 587

    TCPSMTP SubmissionMail

    Mail clients sending outgoing mail to a server (STARTTLS supported). Used to get around ISP blocks on port 25.

  • 631

    TCPUDPIPP (CUPS)Other

    Printing to network printers (IPP), used by CUPS.

  • 636

    TCPLDAPSNetwork infrastructure

    LDAP over TLS.

  • 853

    TCPUDPDNS over TLS / QUICNetwork infrastructure

    DNS over TLS (TCP) and DNS over QUIC (UDP).

  • 873

    TCPrsyncFile sharing & transfer

    The rsync daemon for file sync and backup. rsync over SSH uses port 22 instead.

  • 989

    TCPFTPS (data)File sharing & transfer

    Data transfer for FTP over TLS (FTPS).

  • 990

    TCPFTPS (control)File sharing & transfer

    Control connection for FTP over TLS (FTPS).

  • 993

    TCPIMAPSMail

    IMAP over TLS.

  • 995

    TCPPOP3SMail

    POP3 over TLS.

  • 1080

    TCPUDPSOCKSNetwork infrastructure

    SOCKS proxy, also common with SSH dynamic port forwarding.

  • 1194

    TCPUDPOpenVPNNetwork infrastructure

    Default OpenVPN port. UDP is the usual choice.

  • 1433

    TCPMicrosoft SQL ServerDatabases

    Default port for Microsoft SQL Server.

  • 1434

    UDPSQL Server BrowserDatabases

    SQL Server Browser service, which locates named instances.

  • 1521

    TCPOracle Database (TNS listener)Databases

    Default port for the Oracle Database listener (TNS).

  • 1701

    UDPL2TPNetwork infrastructure

    L2TP VPN, typically combined with IPsec as L2TP/IPsec.

  • 1723

    TCPPPTPNetwork infrastructure

    PPTP VPN. It has known security weaknesses and is no longer recommended.

  • 1812

    UDPRADIUS (authentication)Network infrastructure

    RADIUS authentication, used for Wi-Fi 802.1X and VPN sign-in.

  • 1813

    UDPRADIUS (accounting)Network infrastructure

    RADIUS accounting (usage records).

  • 1883

    TCPMQTTMessaging & voice

    MQTT, a lightweight messaging protocol for IoT. Unencrypted.

  • 1900

    UDPSSDP (UPnP)Network infrastructure

    UPnP device discovery (SSDP).

  • 2049

    TCPUDPNFSFile sharing & transfer

    Network File System (NFS) for Unix-like systems.

  • 2181

    TCPApache ZooKeeperDev & infrastructure

    Client connections to Apache ZooKeeper.

  • 2375

    TCPDocker daemon (unencrypted)Dev & infrastructure

    Docker daemon remote API without encryption. Exposing it lets anyone take over the host.

  • 2376

    TCPDocker daemon (TLS)Dev & infrastructure

    Docker daemon remote API protected with TLS.

  • 2379

    TCPetcd (client)Dev & infrastructure

    etcd client connections. etcd is also the Kubernetes data store.

  • 2380

    TCPetcd (peer)Dev & infrastructure

    Traffic between etcd cluster members.

  • 3000

    TCPDev server (Node.js / Rails)Dev & infrastructureConvention

    Commonly used by Node.js (Express, Next.js) and Ruby on Rails development servers.

  • 3128

    TCPSquid proxyNetwork infrastructureConvention

    The conventional port for Squid and similar proxy servers.

  • 3306

    TCPMySQL / MariaDBDatabases

    Default port for MySQL and MariaDB.

  • 3389

    TCPUDPRDPRemote access

    Windows Remote Desktop (RDP). It should not normally be exposed directly to the Internet.

  • 3478

    TCPUDPSTUN / TURNNetwork infrastructure

    STUN / TURN for NAT traversal, used by WebRTC.

  • 3690

    TCPSubversion (svnserve)Dev & infrastructure

    Subversion server (svnserve).

  • 4500

    UDPIPsec NAT-TNetwork infrastructure

    IPsec NAT traversal (NAT-T), used by IPsec VPNs.

  • 5060

    TCPUDPSIPMessaging & voice

    Session control for VoIP calls (SIP).

  • 5061

    TCPSIP over TLSMessaging & voice

    SIP over TLS.

  • 5173

    TCPVite dev serverDev & infrastructureConvention

    Default port of the Vite dev server.

  • 5222

    TCPXMPP (client)Messaging & voice

    Client connections for XMPP (Jabber).

  • 5353

    UDPmDNS (Bonjour / Avahi)Network infrastructure

    mDNS (Bonjour, Avahi) name resolution and device discovery on the local network.

  • 5432

    TCPPostgreSQLDatabases

    Default port for PostgreSQL.

  • 5671

    TCPAMQP over TLSMessaging & voice

    AMQP over TLS.

  • 5672

    TCPAMQP (RabbitMQ)Messaging & voice

    AMQP message queuing, used by RabbitMQ and others.

  • 5900

    TCPVNC (RFB)Remote access

    Remote desktop over VNC (RFB). Further displays use 5901, 5902, and so on.

  • 5984

    TCPApache CouchDBDatabases

    HTTP API of Apache CouchDB.

  • 5985

    TCPWinRM (HTTP)Remote access

    WinRM (Windows Remote Management) over HTTP, used for PowerShell remoting.

  • 5986

    TCPWinRM (HTTPS)Remote access

    WinRM (Windows Remote Management) over HTTPS.

  • 6000

    TCPX11Remote access

    Remote display for the X Window System (X11). Further displays use 6001 and up.

  • 6379

    TCPRedisDatabases

    Default port for Redis. Do not expose it without authentication.

  • 6443

    TCPKubernetes API serverDev & infrastructureConvention

    Commonly used by the Kubernetes API server.

  • 8000

    TCPDev server (Django / python -m http.server)Dev & infrastructureConvention

    Commonly used by development servers such as Django’s runserver and python -m http.server.

  • 8080

    TCPHTTP (alternate)Web

    Alternate HTTP port, widely used by development web servers, proxies, and Tomcat.

  • 8443

    TCPHTTPS (alternate)WebConvention

    Alternate HTTPS port by convention, seen with Tomcat and admin consoles.

  • 8883

    TCPMQTT over TLSMessaging & voice

    MQTT over TLS.

  • 8888

    TCPJupyter NotebookDev & infrastructureConvention

    Default port of Jupyter Notebook and JupyterLab.

  • 9092

    TCPApache KafkaMessaging & voiceConvention

    Default port of an Apache Kafka broker.

  • 9200

    TCPElasticsearch (HTTP)DatabasesConvention

    Default port of the Elasticsearch HTTP API.

  • 9418

    TCPGit (git://)Dev & infrastructure

    The Git protocol (git://). No authentication or encryption; used for read-only public access.

  • 11211

    TCPUDPMemcachedDatabases

    Default port for Memcached.

  • 27017

    TCPMongoDBDatabases

    Default port for MongoDB.

  • 51820

    UDPWireGuardNetwork infrastructureConvention

    Commonly used listening port for WireGuard VPN (UDP).

How to use

  1. Type a port (443), a range (8000-8100), a service name (ssh), or a keyword (database) in the search box.
  2. Use the category and protocol buttons to narrow the list to web, mail, TCP only, and so on.
  3. Read the service name, its purpose, and the TCP / UDP details in the list.

Notes

  • Entries are based on IANA registrations and widely known uses. This is a curated list of the main ports, not an exhaustive one.
  • Ports marked "Convention" are not official IANA assignments but defaults widely used in development. You can change them in each app’s settings.
  • The same number can be used for something else depending on the setup. Check what is really listening with netstat or ss.
  • Well-known ports are 0-1023, registered ports are 1024-49151, and dynamic/private ports are 49152-65535.

Glossary

Well-known ports

Ports 0-1023, assigned to core services such as HTTP (80) and SSH (22). On Unix-like systems, listening on them requires administrator privileges.

TCP vs. UDP

TCP sets up a connection and guarantees ordered delivery; UDP sends lightweight datagrams with no connection. The same number is treated separately for each protocol.

IANA

The organization that manages protocol and port assignments. It publishes the registry that maps service names to port numbers.

STARTTLS vs. implicit TLS

STARTTLS connects in plain text and then upgrades to encryption (587, 143). Implicit TLS encrypts from the first byte (465, 993, 995).

FAQ

What are well-known ports, and how do they differ from other ports?

Well-known ports are 0-1023, assigned to core services such as HTTP (80) and SSH (22). On Unix-like systems, listening on them normally requires administrator privileges. Ports 1024-49151 are registered ports (for example MySQL on 3306), and 49152-65535 are dynamic or private ports, which is where clients usually get their temporary source port.

Is a TCP port the same as a UDP port with the same number?

No, they are separate. Port 53 is assigned to DNS for both TCP and UDP, but software opens each one independently, and a firewall needs separate rules for TCP and UDP. The badges in the list show which transport a service uses.

What does "Convention" mean on ports like 3000 or 5173?

It marks numbers that IANA did not assign to that use, but which frameworks and tools widely use as defaults. For example, 3000 is common for Node.js and Rails, and 5173 for the Vite dev server. You can change them in settings, and another program may already hold the same number, so pick a different one if there is a conflict.

Which should I use for sending email: 25, 465, or 587?

Port 25 is for server-to-server delivery, and residential connections often block outbound traffic on it to fight spam. Mail clients should send through 587 (Submission, upgraded with STARTTLS) or 465 (TLS from the start). Follow whichever your mail provider documents.

Is it safe to expose a database port to the Internet?

Generally no. MySQL (3306), PostgreSQL (5432), Redis (6379), and MongoDB (27017) should not face the Internet directly, because an open database invites attacks and data leaks. Keep them on a private network or reach them through a VPN, an SSH tunnel, or IP allow-lists, and always enable authentication.

Share this page

↑↓ Select Enter Open Esc Close