Port numbers reference
Common TCP and UDP ports with what each service does. Click any port for a full page, or read the port ranges explainer to understand well-known, registered, and ephemeral ports.
| Port | Service | Protocol | What it does |
|---|---|---|---|
| 7 | Echo | TCP/UDP | Echo Protocol |
| 9 | Discard | TCP/UDP | Discard Protocol |
| 13 | Daytime | TCP/UDP | Daytime Protocol |
| 17 | QOTD | TCP/UDP | Quote of the Day |
| 19 | Chargen | TCP/UDP | Character Generator Protocol |
| 20 | FTP-DATA | TCP | File Transfer Protocol (data) |
| 21 | FTP | TCP | File Transfer Protocol (control) |
| 22 | SSH | TCP | Secure Shell / SFTP / SCP |
| 23 | Telnet | TCP | Telnet remote login |
| 25 | SMTP | TCP | Simple Mail Transfer Protocol |
| 37 | Time Protocol | TCP/UDP | Time Protocol |
| 43 | WHOIS | TCP | WHOIS protocol |
| 53 | DNS | TCP/UDP | Domain Name System |
| 67 | DHCP | UDP | DHCP server (BOOTP) |
| 68 | DHCP client | UDP | DHCP client (BOOTP) |
| 69 | TFTP | UDP | Trivial File Transfer Protocol |
| 70 | Gopher | TCP | Gopher protocol |
| 79 | Finger | TCP | Finger protocol |
| 80 | HTTP | TCP | Hypertext Transfer Protocol |
| 88 | Kerberos | TCP/UDP | Kerberos authentication |
| 109 | POP2 | TCP | Post Office Protocol v2 |
| 110 | POP3 | TCP | Post Office Protocol v3 |
| 111 | RPCbind | TCP/UDP | ONC RPC / rpcbind (portmapper) |
| 113 | Ident | TCP | Identification Protocol |
| 115 | SFTP (legacy) | TCP | Simple File Transfer Protocol |
| 119 | NNTP | TCP | Network News Transfer Protocol |
| 123 | NTP | UDP | Network Time Protocol |
| 135 | MS-RPC | TCP | Microsoft RPC endpoint mapper |
| 137 | NetBIOS-NS | UDP | NetBIOS Name Service |
| 138 | NetBIOS-DGM | UDP | NetBIOS Datagram Service |
| 139 | NetBIOS-SSN | TCP | NetBIOS Session Service |
| 143 | IMAP | TCP | Internet Message Access Protocol |
| 161 | SNMP | UDP | Simple Network Management Protocol |
| 162 | SNMP-TRAP | UDP | SNMP trap receiver |
| 179 | BGP | TCP | Border Gateway Protocol |
| 194 | IRC | TCP | Internet Relay Chat |
| 389 | LDAP | TCP/UDP | Lightweight Directory Access Protocol |
| 427 | SLP | TCP/UDP | Service Location Protocol |
| 443 | HTTPS | TCP | HTTP over TLS |
| 445 | SMB | TCP | SMB / CIFS file sharing |
| 464 | kpasswd | TCP/UDP | Kerberos password change |
| 465 | SMTPS | TCP | SMTP submission over TLS |
| 500 | ISAKMP/IKE | UDP | Internet Key Exchange (IPsec) |
| 502 | Modbus | TCP | Modbus Protocol |
| 512 | Rexec | TCP | Remote Process Execution |
| 513 | rlogin | TCP | Remote login |
| 514 | Syslog | UDP | Syslog logging |
| 515 | LPD | TCP | Line Printer Daemon |
| 517 | Talk | UDP | Talk protocol |
| 518 | ntalk | UDP | ntalk (Talk protocol, new version) |
| 520 | RIP | UDP | Routing Information Protocol |
| 554 | RTSP | TCP/UDP | Real Time Streaming Protocol |
| 587 | Submission | TCP | SMTP mail submission (STARTTLS) |
| 631 | IPP | TCP/UDP | Internet Printing Protocol |
| 636 | LDAPS | TCP | LDAP over TLS |
| 646 | LDP | TCP | Label Distribution Protocol |
| 749 | kerberos-adm | TCP | Kerberos administration |
| 853 | DNS over TLS | TCP | DNS over TLS (DoT) |
| 873 | rsync | TCP | rsync file synchronization |
| 989 | FTPS-DATA | TCP | FTPS Protocol (data) |
| 990 | FTPS | TCP | FTPS Protocol (control) |
| 993 | IMAPS | TCP | IMAP over TLS |
| 995 | POP3S | TCP | POP3 over TLS |
| 1080 | SOCKS | TCP | SOCKS proxy |
| 1194 | OpenVPN | TCP/UDP | OpenVPN |
| 1433 | MSSQL | TCP | Microsoft SQL Server |
| 1434 | MSSQL Browser | UDP | Microsoft SQL Server Browser service |
| 1512 | WINS | TCP/UDP | Windows Internet Name Service |
| 1521 | Oracle | TCP | Oracle database listener |
| 1701 | L2TP | UDP | Layer 2 Tunneling Protocol |
| 1723 | PPTP | TCP | Point-to-Point Tunneling Protocol |
| 1812 | RADIUS | UDP | RADIUS authentication |
| 1813 | RADIUS accounting | UDP | RADIUS accounting |
| 1883 | MQTT | TCP | MQTT publish-subscribe messaging |
| 1900 | SSDP | UDP | Simple Service Discovery Protocol |
| 1935 | RTMP | TCP | Real-Time Messaging Protocol |
| 2000 | SCCP | TCP | Cisco Skinny Client Control Protocol |
| 2049 | NFS | TCP/UDP | Network File System |
| 2181 | ZooKeeper | TCP | Apache ZooKeeper client port |
| 2222 | EtherNet/IP | TCP/UDP | EtherNet/IP implicit messaging |
| 2375 | Docker | TCP | Docker daemon API (unencrypted) |
| 2376 | Docker TLS | TCP | Docker daemon API (TLS) |
| 2379 | etcd | TCP | etcd client API |
| 2380 | etcd peer | TCP | etcd peer communication |
| 2401 | CVS pserver | TCP | CVS pserver |
| 3000 | Dev server | TCP | Common development server port (Node.js, Rails, React) |
| 3050 | Firebird | TCP | Firebird database (gds_db) |
| 3074 | Xbox Live | TCP/UDP | Xbox Live / multiplayer |
| 3128 | Squid | TCP | Squid caching proxy |
| 3268 | Global Catalog | TCP | Microsoft Active Directory Global Catalog |
| 3269 | Global Catalog SSL | TCP | Global Catalog over SSL/TLS |
| 3283 | Apple Remote Desktop | UDP | Apple Remote Desktop (Net Assistant) |
| 3306 | MySQL | TCP | MySQL / MariaDB |
| 3389 | RDP | TCP | Remote Desktop Protocol |
| 3478 | STUN/TURN | TCP/UDP | STUN/TURN (NAT traversal for WebRTC) |
| 3689 | DAAP | TCP | Digital Audio Access Protocol |
| 3690 | Subversion | TCP | Subversion (svn) protocol |
| 4444 | krb524 | TCP | Kerberos 5 to 4 ticket translator |
| 4500 | IPsec NAT-T | UDP | IPsec NAT Traversal |
| 5060 | SIP | TCP/UDP | Session Initiation Protocol |
| 5061 | SIP-TLS | TCP | SIP over TLS |
| 5222 | XMPP | TCP | XMPP client connection |
| 5269 | XMPP server | TCP | XMPP server-to-server |
| 5349 | TURN-TLS | TCP | STUN/TURN over TLS |
| 5353 | mDNS | UDP | Multicast DNS |
| 5432 | PostgreSQL | TCP | PostgreSQL database |
| 5672 | AMQP | TCP | Advanced Message Queuing Protocol |
| 5683 | CoAP | UDP | Constrained Application Protocol |
| 5900 | VNC | TCP | Virtual Network Computing |
| 5984 | CouchDB | TCP | Apache CouchDB HTTP API |
| 5985 | WinRM | TCP | Windows Remote Management (HTTP) |
| 5986 | WinRM HTTPS | TCP | Windows Remote Management (HTTPS) |
| 6379 | Redis | TCP | Redis key-value store |
| 6443 | Kubernetes API | TCP | Kubernetes API server |
| 6514 | Syslog-TLS | TCP | Syslog over TLS |
| 6600 | MPD | TCP | Music Player Daemon |
| 6667 | IRC (de facto) | TCP | Internet Relay Chat |
| 6881 | BitTorrent | TCP/UDP | BitTorrent peer-to-peer file sharing |
| 8000 | HTTP-alt | TCP | Alternate HTTP / common dev server |
| 8008 | HTTP-alt | TCP | Alternate HTTP / Google Cast discovery |
| 8080 | HTTP-alt | TCP | Alternate HTTP / proxy |
| 8081 | HTTP-alt | TCP | Alternate HTTP / proxy |
| 8086 | InfluxDB | TCP | InfluxDB HTTP API |
| 8096 | Jellyfin | TCP | Jellyfin / Emby media server |
| 8200 | Vault | TCP | HashiCorp Vault API |
| 8384 | Syncthing | TCP | Syncthing web GUI |
| 8443 | HTTPS-alt | TCP | Alternate HTTPS |
| 8500 | Consul | TCP | HashiCorp Consul HTTP API / UI |
| 8883 | MQTTS | TCP | MQTT over TLS |
| 9000 | Alt-9000 | TCP | Common alternate app port (PHP-FPM, SonarQube, Portainer) |
| 9042 | Cassandra | TCP | Apache Cassandra native transport (CQL) |
| 9090 | Prometheus | TCP | Prometheus monitoring web UI |
| 9091 | Transmission | TCP | Transmission BitTorrent client web UI |
| 9092 | Kafka | TCP | Apache Kafka broker |
| 9100 | JetDirect | TCP | Raw / HP JetDirect printing |
| 9200 | Elasticsearch | TCP | Elasticsearch HTTP / REST API |
| 9418 | Git | TCP | Git protocol |
| 10050 | Zabbix agent | TCP | Zabbix agent |
| 10051 | Zabbix server | TCP | Zabbix server / trapper |
| 10250 | Kubelet | TCP | Kubernetes kubelet API |
| 11211 | Memcached | TCP/UDP | Memcached |
| 19132 | Minecraft Bedrock | UDP | Minecraft Bedrock Edition server |
| 20000 | DNP3 | TCP/UDP | Distributed Network Protocol 3 |
| 25565 | Minecraft | TCP | Minecraft Java Edition server |
| 27015 | Source engine | TCP/UDP | Valve Source engine game/query port |
| 27017 | MongoDB | TCP | MongoDB database |
| 32400 | Plex | TCP | Plex Media Server |
| 47808 | BACnet | UDP | BACnet building automation |
| 50000 | IBM Db2 | TCP | IBM Db2 database |
| 61616 | ActiveMQ | TCP | Apache ActiveMQ OpenWire |
Ports by category
Ports group naturally by what they do. Web and remote-access ports are the ones you open on purpose; database and Windows ports are the ones you should keep off the public internet. Each category below has its own page with stats on how many are encrypted by default.
Frequently asked questions
What is a port number?
A port number is a 16-bit label (0 to 65535) that identifies a specific service on a host. Combined with an IP address, it tells traffic exactly which application to reach, such as port 443 for HTTPS.
What are the most common port numbers?
The everyday ones are 22 (SSH), 80 (HTTP), 443 (HTTPS), 53 (DNS), 25 and 587 (SMTP), 3389 (RDP), and 3306 (MySQL). The table below links to a page for each.
What is the difference between TCP and UDP ports?
TCP ports carry connection-based, reliable traffic like web and SSH. UDP ports carry connectionless traffic like DNS and NTP. Some services, such as DNS on port 53, use both.
What are well-known ports?
Ports 0 to 1023 are well-known ports, reserved by IANA for core services and usually needing admin privileges to bind. See the port ranges page for the full breakdown.