Port Number List & Search
Look up commonly used ports by number, range (for example 8000-8100), service name, or a keyword about what they do. You can filter by TCP or UDP and by category such as web, mail, or databases. For web server responses, see the HTTP Status Codes list; to convert IP address notations, try the IP Address Converter.
🔒 Runs in your browser · Your data is never sent to a server
A number on its own matches that exact port. You can also enter a range such as 8000-8100. Separate several words with spaces to show only ports that match all of them.
20
TCPFTP (data)File sharing & transferFTP data transfer (active mode).
21
TCPFTP (control)File sharing & transferFTP control connection. Passwords travel in plain text, so SFTP or FTPS is preferred today.
22
TCPSSH / SFTPRemote accessSecure remote login over SSH, plus file transfer with SFTP and scp.
23
TCPTelnetRemote accessRemote login over Telnet. Traffic is not encrypted, so SSH has largely replaced it.
25
TCPSMTPMailMail delivery between mail servers (SMTP).
43
TCPWHOISNetwork infrastructureWHOIS queries for domain and IP registration data.
53
TCPUDPDNSNetwork infrastructureName resolution (DNS). Ordinary queries use UDP; large responses and zone transfers use TCP.
67
UDPDHCP (server)Network infrastructurePort a DHCP server uses to hand out IP addresses.
68
UDPDHCP (client)Network infrastructurePort a DHCP client uses to receive its configuration.
69
UDPTFTPFile sharing & transferSimple file transfer without authentication (TFTP), used for device configs and PXE boot.
80
TCPHTTPWebUnencrypted web traffic (HTTP).
88
TCPUDPKerberosNetwork infrastructureKerberos authentication, used for Active Directory sign-in.
110
TCPPOP3MailMail retrieval over POP3, unencrypted.
111
TCPUDPRPC (rpcbind / portmapper)Network infrastructurerpcbind (portmapper), which tracks Unix RPC services. NFS relies on it.
123
UDPNTPNetwork infrastructureTime synchronization (NTP).
135
TCPMicrosoft RPCNetwork infrastructureWindows Remote Procedure Call (RPC) endpoint mapper.
137
UDPNetBIOS Name ServiceFile sharing & transferNetBIOS name resolution, used by legacy Windows network sharing.
138
UDPNetBIOS DatagramFile sharing & transferNetBIOS datagram service, used by legacy Windows network sharing.
139
TCPNetBIOS SessionFile sharing & transferNetBIOS session service, used by legacy Windows file sharing.
143
TCPIMAPMailMail retrieval over IMAP, keeping messages on the server so devices stay in sync. Unencrypted.
161
UDPSNMPNetwork infrastructureMonitoring and managing network devices (SNMP).
162
UDPSNMP TrapNetwork infrastructurePort that receives SNMP traps (fault notifications).
179
TCPBGPNetwork infrastructureBGP, used for routing between networks on the Internet.
389
TCPUDPLDAPNetwork infrastructureDirectory service queries (LDAP), used by Active Directory and OpenLDAP.
443
TCPUDPHTTPS / HTTP/3 (QUIC)WebEncrypted web traffic (HTTPS). UDP 443 carries HTTP/3 (QUIC).
445
TCPSMB (Microsoft-DS)File sharing & transferWindows file sharing (SMB / CIFS), also used by Samba. It should not normally be exposed to the Internet.
465
TCPSMTPS (SMTP over TLS)MailSMTP over implicit TLS. RFC 8314 brought it back as an option for mail submission.
500
UDPIKE / ISAKMP (IPsec)Network infrastructureKey exchange (IKE) for IPsec VPNs.
502
TCPModbus TCPOtherModbus/TCP, an industrial protocol used by factory and plant equipment.
514
UDPSyslogNetwork infrastructureLog forwarding (Syslog).
515
TCPLPD (printing)OtherPrinting to network printers (LPD).
520
UDPRIPNetwork infrastructureRoute exchange between routers (RIP).
546
UDPDHCPv6 (client)Network infrastructurePort DHCPv6 clients use.
547
UDPDHCPv6 (server)Network infrastructurePort DHCPv6 servers and relays use.
554
TCPUDPRTSPOtherStream control for IP cameras and media devices (RTSP).
587
TCPSMTP SubmissionMailMail clients sending outgoing mail to a server (STARTTLS supported). Used to get around ISP blocks on port 25.
631
TCPUDPIPP (CUPS)OtherPrinting to network printers (IPP), used by CUPS.
636
TCPLDAPSNetwork infrastructureLDAP over TLS.
853
TCPUDPDNS over TLS / QUICNetwork infrastructureDNS over TLS (TCP) and DNS over QUIC (UDP).
873
TCPrsyncFile sharing & transferThe rsync daemon for file sync and backup. rsync over SSH uses port 22 instead.
989
TCPFTPS (data)File sharing & transferData transfer for FTP over TLS (FTPS).
990
TCPFTPS (control)File sharing & transferControl connection for FTP over TLS (FTPS).
993
TCPIMAPSMailIMAP over TLS.
995
TCPPOP3SMailPOP3 over TLS.
1080
TCPUDPSOCKSNetwork infrastructureSOCKS proxy, also common with SSH dynamic port forwarding.
1194
TCPUDPOpenVPNNetwork infrastructureDefault OpenVPN port. UDP is the usual choice.
1433
TCPMicrosoft SQL ServerDatabasesDefault port for Microsoft SQL Server.
1434
UDPSQL Server BrowserDatabasesSQL Server Browser service, which locates named instances.
1521
TCPOracle Database (TNS listener)DatabasesDefault port for the Oracle Database listener (TNS).
1701
UDPL2TPNetwork infrastructureL2TP VPN, typically combined with IPsec as L2TP/IPsec.
1723
TCPPPTPNetwork infrastructurePPTP VPN. It has known security weaknesses and is no longer recommended.
1812
UDPRADIUS (authentication)Network infrastructureRADIUS authentication, used for Wi-Fi 802.1X and VPN sign-in.
1813
UDPRADIUS (accounting)Network infrastructureRADIUS accounting (usage records).
1883
TCPMQTTMessaging & voiceMQTT, a lightweight messaging protocol for IoT. Unencrypted.
1900
UDPSSDP (UPnP)Network infrastructureUPnP device discovery (SSDP).
2049
TCPUDPNFSFile sharing & transferNetwork File System (NFS) for Unix-like systems.
2181
TCPApache ZooKeeperDev & infrastructureClient connections to Apache ZooKeeper.
2375
TCPDocker daemon (unencrypted)Dev & infrastructureDocker daemon remote API without encryption. Exposing it lets anyone take over the host.
2376
TCPDocker daemon (TLS)Dev & infrastructureDocker daemon remote API protected with TLS.
2379
TCPetcd (client)Dev & infrastructureetcd client connections. etcd is also the Kubernetes data store.
2380
TCPetcd (peer)Dev & infrastructureTraffic between etcd cluster members.
3000
TCPDev server (Node.js / Rails)Dev & infrastructureConventionCommonly used by Node.js (Express, Next.js) and Ruby on Rails development servers.
3128
TCPSquid proxyNetwork infrastructureConventionThe conventional port for Squid and similar proxy servers.
3306
TCPMySQL / MariaDBDatabasesDefault port for MySQL and MariaDB.
3389
TCPUDPRDPRemote accessWindows Remote Desktop (RDP). It should not normally be exposed directly to the Internet.
3478
TCPUDPSTUN / TURNNetwork infrastructureSTUN / TURN for NAT traversal, used by WebRTC.
3690
TCPSubversion (svnserve)Dev & infrastructureSubversion server (svnserve).
4500
UDPIPsec NAT-TNetwork infrastructureIPsec NAT traversal (NAT-T), used by IPsec VPNs.
5060
TCPUDPSIPMessaging & voiceSession control for VoIP calls (SIP).
5061
TCPSIP over TLSMessaging & voiceSIP over TLS.
5173
TCPVite dev serverDev & infrastructureConventionDefault port of the Vite dev server.
5222
TCPXMPP (client)Messaging & voiceClient connections for XMPP (Jabber).
5353
UDPmDNS (Bonjour / Avahi)Network infrastructuremDNS (Bonjour, Avahi) name resolution and device discovery on the local network.
5432
TCPPostgreSQLDatabasesDefault port for PostgreSQL.
5671
TCPAMQP over TLSMessaging & voiceAMQP over TLS.
5672
TCPAMQP (RabbitMQ)Messaging & voiceAMQP message queuing, used by RabbitMQ and others.
5900
TCPVNC (RFB)Remote accessRemote desktop over VNC (RFB). Further displays use 5901, 5902, and so on.
5984
TCPApache CouchDBDatabasesHTTP API of Apache CouchDB.
5985
TCPWinRM (HTTP)Remote accessWinRM (Windows Remote Management) over HTTP, used for PowerShell remoting.
5986
TCPWinRM (HTTPS)Remote accessWinRM (Windows Remote Management) over HTTPS.
6000
TCPX11Remote accessRemote display for the X Window System (X11). Further displays use 6001 and up.
6379
TCPRedisDatabasesDefault port for Redis. Do not expose it without authentication.
6443
TCPKubernetes API serverDev & infrastructureConventionCommonly used by the Kubernetes API server.
8000
TCPDev server (Django / python -m http.server)Dev & infrastructureConventionCommonly used by development servers such as Django’s runserver and python -m http.server.
8080
TCPHTTP (alternate)WebAlternate HTTP port, widely used by development web servers, proxies, and Tomcat.
8443
TCPHTTPS (alternate)WebConventionAlternate HTTPS port by convention, seen with Tomcat and admin consoles.
8883
TCPMQTT over TLSMessaging & voiceMQTT over TLS.
8888
TCPJupyter NotebookDev & infrastructureConventionDefault port of Jupyter Notebook and JupyterLab.
9092
TCPApache KafkaMessaging & voiceConventionDefault port of an Apache Kafka broker.
9200
TCPElasticsearch (HTTP)DatabasesConventionDefault port of the Elasticsearch HTTP API.
9418
TCPGit (git://)Dev & infrastructureThe Git protocol (git://). No authentication or encryption; used for read-only public access.
11211
TCPUDPMemcachedDatabasesDefault port for Memcached.
27017
TCPMongoDBDatabasesDefault port for MongoDB.
51820
UDPWireGuardNetwork infrastructureConventionCommonly used listening port for WireGuard VPN (UDP).
How to use
- Type a port (443), a range (8000-8100), a service name (ssh), or a keyword (database) in the search box.
- Use the category and protocol buttons to narrow the list to web, mail, TCP only, and so on.
- Read the service name, its purpose, and the TCP / UDP details in the list.
Notes
- Entries are based on IANA registrations and widely known uses. This is a curated list of the main ports, not an exhaustive one.
- Ports marked "Convention" are not official IANA assignments but defaults widely used in development. You can change them in each app’s settings.
- The same number can be used for something else depending on the setup. Check what is really listening with netstat or ss.
- Well-known ports are 0-1023, registered ports are 1024-49151, and dynamic/private ports are 49152-65535.
Glossary
Well-known ports
Ports 0-1023, assigned to core services such as HTTP (80) and SSH (22). On Unix-like systems, listening on them requires administrator privileges.
TCP vs. UDP
TCP sets up a connection and guarantees ordered delivery; UDP sends lightweight datagrams with no connection. The same number is treated separately for each protocol.
IANA
The organization that manages protocol and port assignments. It publishes the registry that maps service names to port numbers.
STARTTLS vs. implicit TLS
STARTTLS connects in plain text and then upgrades to encryption (587, 143). Implicit TLS encrypts from the first byte (465, 993, 995).
FAQ
What are well-known ports, and how do they differ from other ports?
Well-known ports are 0-1023, assigned to core services such as HTTP (80) and SSH (22). On Unix-like systems, listening on them normally requires administrator privileges. Ports 1024-49151 are registered ports (for example MySQL on 3306), and 49152-65535 are dynamic or private ports, which is where clients usually get their temporary source port.
Is a TCP port the same as a UDP port with the same number?
No, they are separate. Port 53 is assigned to DNS for both TCP and UDP, but software opens each one independently, and a firewall needs separate rules for TCP and UDP. The badges in the list show which transport a service uses.
What does "Convention" mean on ports like 3000 or 5173?
It marks numbers that IANA did not assign to that use, but which frameworks and tools widely use as defaults. For example, 3000 is common for Node.js and Rails, and 5173 for the Vite dev server. You can change them in settings, and another program may already hold the same number, so pick a different one if there is a conflict.
Which should I use for sending email: 25, 465, or 587?
Port 25 is for server-to-server delivery, and residential connections often block outbound traffic on it to fight spam. Mail clients should send through 587 (Submission, upgraded with STARTTLS) or 465 (TLS from the start). Follow whichever your mail provider documents.
Is it safe to expose a database port to the Internet?
Generally no. MySQL (3306), PostgreSQL (5432), Redis (6379), and MongoDB (27017) should not face the Internet directly, because an open database invites attacks and data leaks. Keep them on a private network or reach them through a VPN, an SSH tunnel, or IP allow-lists, and always enable authentication.
Share this page
