TCP & UDP port list: common ports and services
A searchable reference of well-known and registered network ports. Filter by port number, service or protocol.
128 ports
| Port | Protocol | Service | Description |
|---|---|---|---|
| 7 | TCP/UDP | Echo | Echo protocol – returns what it receives (diagnostics) |
| 9 | TCP/UDP | Discard | Discard protocol; UDP 9 is also used for Wake-on-LAN |
| 13 | TCP/UDP | Daytime | Daytime protocol (legacy) |
| 19 | TCP/UDP | CHARGEN | Character generator (legacy, abused for DDoS amplification) |
| 20 | TCP | FTP-DATA | File Transfer Protocol – data channel |
| 21 | TCP | FTP | File Transfer Protocol – control channel |
| 22 | TCP | SSH | Secure Shell – encrypted remote login, SFTP and SCP |
| 23 | TCP | Telnet | Unencrypted remote login (legacy, insecure) |
| 25 | TCP | SMTP | Email relay between mail servers |
| 37 | TCP/UDP | Time | Time protocol (legacy) |
| 43 | TCP | WHOIS | WHOIS registry lookups |
| 49 | TCP/UDP | TACACS+ | Terminal Access Controller authentication (network devices) |
| 53 | TCP/UDP | DNS | Domain Name System – UDP for queries, TCP for large responses and zone transfers |
| 67 | UDP | DHCP | Dynamic Host Configuration Protocol – server |
| 68 | UDP | DHCP | Dynamic Host Configuration Protocol – client |
| 69 | UDP | TFTP | Trivial File Transfer Protocol (firmware, PXE boot) |
| 79 | TCP | Finger | Finger user information (legacy) |
| 80 | TCP | HTTP | Unencrypted web traffic |
| 88 | TCP/UDP | Kerberos | Kerberos authentication (Active Directory) |
| 102 | TCP | S7 / ISO-TSAP | Siemens S7 PLC communication (industrial) |
| 110 | TCP | POP3 | Post Office Protocol – retrieve email |
| 111 | TCP/UDP | RPCbind | ONC RPC portmapper (NFS) |
| 113 | TCP | Ident | Identification protocol |
| 119 | TCP | NNTP | Network News Transfer Protocol (Usenet) |
| 123 | UDP | NTP | Network Time Protocol – clock synchronisation |
| 135 | TCP/UDP | MS RPC | Microsoft RPC endpoint mapper |
| 137 | UDP | NetBIOS-NS | NetBIOS name service |
| 138 | UDP | NetBIOS-DGM | NetBIOS datagram service |
| 139 | TCP | NetBIOS-SSN | NetBIOS session service (legacy SMB) |
| 143 | TCP | IMAP | Internet Message Access Protocol – email |
| 161 | UDP | SNMP | Simple Network Management Protocol – queries |
| 162 | UDP | SNMP Trap | SNMP traps / notifications |
| 177 | UDP | XDMCP | X Display Manager Control Protocol |
| 179 | TCP | BGP | Border Gateway Protocol – internet routing |
| 194 | TCP | IRC | Internet Relay Chat (officially assigned; 6667 is used in practice) |
| 389 | TCP/UDP | LDAP | Lightweight Directory Access Protocol |
| 427 | TCP/UDP | SLP | Service Location Protocol |
| 443 | TCP/UDP | HTTPS | Encrypted web traffic (TLS); HTTP/3 (QUIC) over UDP |
| 445 | TCP | SMB | Microsoft file & printer sharing (SMB over TCP) |
| 465 | TCP | SMTPS | SMTP submission over implicit TLS |
| 500 | UDP | IKE / ISAKMP | IPsec VPN key exchange |
| 502 | TCP | Modbus | Modbus/TCP industrial control |
| 514 | UDP | Syslog | System logging messages |
| 515 | TCP | LPD | Line Printer Daemon printing |
| 520 | UDP | RIP | Routing Information Protocol |
| 546 | UDP | DHCPv6 | DHCPv6 client |
| 547 | UDP | DHCPv6 | DHCPv6 server |
| 548 | TCP | AFP | Apple Filing Protocol (legacy macOS file sharing) |
| 554 | TCP/UDP | RTSP | Real Time Streaming Protocol (IP cameras) |
| 587 | TCP | SMTP Submission | Email submission from clients (STARTTLS) |
| 623 | UDP | IPMI | Intelligent Platform Management Interface (server BMC) |
| 631 | TCP/UDP | IPP / CUPS | Internet Printing Protocol |
| 636 | TCP | LDAPS | LDAP over TLS |
| 853 | TCP/UDP | DoT / DoQ | DNS over TLS; DNS over QUIC |
| 873 | TCP | rsync | rsync file synchronisation |
| 902 | TCP | VMware | VMware ESXi / vCenter console |
| 989 | TCP | FTPS-DATA | FTP over TLS – data |
| 990 | TCP | FTPS | FTP over TLS – control |
| 993 | TCP | IMAPS | IMAP over TLS |
| 995 | TCP | POP3S | POP3 over TLS |
| 1080 | TCP | SOCKS | SOCKS proxy |
| 1194 | UDP | OpenVPN | OpenVPN tunnel (default; TCP also possible) |
| 1433 | TCP | MS SQL | Microsoft SQL Server database |
| 1434 | UDP | MS SQL Browser | SQL Server browser service |
| 1521 | TCP | Oracle | Oracle database listener |
| 1645 | UDP | RADIUS (old) | RADIUS authentication (legacy port) |
| 1701 | UDP | L2TP | Layer 2 Tunneling Protocol VPN |
| 1723 | TCP | PPTP | Point-to-Point Tunneling Protocol VPN (legacy, insecure) |
| 1812 | UDP | RADIUS | RADIUS authentication |
| 1813 | UDP | RADIUS Accounting | RADIUS accounting |
| 1883 | TCP | MQTT | MQTT IoT messaging |
| 1900 | UDP | SSDP / UPnP | Simple Service Discovery – UPnP device discovery |
| 2049 | TCP/UDP | NFS | Network File System |
| 2082 | TCP | cPanel | cPanel (HTTP) |
| 2083 | TCP | cPanel SSL | cPanel over HTTPS |
| 2181 | TCP | ZooKeeper | Apache ZooKeeper client port |
| 2375 | TCP | Docker | Docker daemon API, unencrypted (never expose) |
| 2376 | TCP | Docker TLS | Docker daemon API over TLS |
| 3000 | TCP | Dev servers / Grafana | Node.js/React dev servers, Grafana |
| 3128 | TCP | Squid | Squid HTTP proxy |
| 3268 | TCP | Global Catalog | Active Directory Global Catalog (LDAP) |
| 3306 | TCP | MySQL | MySQL / MariaDB database |
| 3389 | TCP/UDP | RDP | Microsoft Remote Desktop Protocol |
| 3478 | TCP/UDP | STUN / TURN | NAT traversal for WebRTC, VoIP and gaming |
| 3479 | UDP | PlayStation / STUN | PlayStation Network, STUN |
| 4500 | UDP | IPsec NAT-T | IPsec NAT traversal |
| 4789 | UDP | VXLAN | Virtual Extensible LAN overlay |
| 5000 | TCP | UPnP / Flask / Synology | Common app port: Flask dev, Synology DSM, AirPlay receiver |
| 5001 | TCP | Synology HTTPS | Synology DSM over HTTPS, iperf |
| 5004 | UDP | RTP | Real-time Transport Protocol media |
| 5060 | TCP/UDP | SIP | Session Initiation Protocol – VoIP signalling |
| 5061 | TCP | SIP-TLS | SIP over TLS |
| 5222 | TCP | XMPP | XMPP / Jabber client connections |
| 5353 | UDP | mDNS | Multicast DNS / Bonjour (local device discovery) |
| 5355 | UDP | LLMNR | Link-Local Multicast Name Resolution (Windows) |
| 5432 | TCP | PostgreSQL | PostgreSQL database |
| 5671 | TCP | AMQPS | AMQP over TLS |
| 5672 | TCP | AMQP | RabbitMQ / AMQP messaging |
| 5900 | TCP | VNC | Virtual Network Computing remote desktop |
| 5938 | TCP/UDP | TeamViewer | TeamViewer remote access |
| 5985 | TCP | WinRM | Windows Remote Management (HTTP) |
| 5986 | TCP | WinRM HTTPS | Windows Remote Management (HTTPS) |
| 6379 | TCP | Redis | Redis in-memory data store |
| 6443 | TCP | Kubernetes API | Kubernetes API server |
| 6667 | TCP | IRC | Internet Relay Chat (common in practice) |
| 6881 | TCP/UDP | BitTorrent | BitTorrent (6881–6889) |
| 7000 | TCP | AirPlay / Cassandra | AirPlay on macOS; Cassandra inter-node |
| 8000 | TCP | HTTP-alt | Alternate HTTP / dev servers |
| 8008 | TCP | HTTP-alt / Chromecast | Alternate HTTP; Google Cast |
| 8080 | TCP | HTTP-alt | Alternate HTTP / proxies / Tomcat / dev servers |
| 8086 | TCP | InfluxDB | InfluxDB HTTP API |
| 8443 | TCP | HTTPS-alt | Alternate HTTPS (UniFi, Tomcat, admin panels) |
| 8883 | TCP | MQTT TLS | MQTT over TLS |
| 8888 | TCP | HTTP-alt | Jupyter Notebook, alternate HTTP |
| 9000 | TCP | Various | PHP-FPM, SonarQube, Portainer and other apps |
| 9090 | TCP | Prometheus | Prometheus server / web UIs (Cockpit) |
| 9092 | TCP | Kafka | Apache Kafka broker |
| 9100 | TCP | JetDirect / Node Exporter | Raw printing (HP JetDirect); Prometheus node exporter |
| 9200 | TCP | Elasticsearch | Elasticsearch REST API |
| 9418 | TCP | Git | Git protocol |
| 10000 | TCP | Webmin | Webmin admin panel |
| 11211 | TCP/UDP | Memcached | Memcached (UDP abused for DDoS amplification) |
| 25565 | TCP | Minecraft | Minecraft Java Edition server |
| 27015 | TCP/UDP | Steam / Source | Steam and Source-engine game servers |
| 27017 | TCP | MongoDB | MongoDB database |
| 32400 | TCP | Plex | Plex Media Server |
| 41641 | UDP | Tailscale | Tailscale WireGuard peer-to-peer |
| 51820 | UDP | WireGuard | WireGuard VPN tunnel |
How ports work
An IP address gets data to the right device; a port number gets it to the right program on that device. Combined, an IP and port form a socket — for example 93.184.216.34:443 is a web server listening for HTTPS. Ports run from 0 to 65535 and split into three ranges:
- Well-known (0–1023) — core services like HTTP, HTTPS, SSH and DNS, assigned by IANA.
- Registered (1024–49151) — reserved by specific applications and vendors.
- Dynamic/ephemeral (49152–65535) — temporary ports your device picks for outgoing connections.
TCP vs UDP
TCP is connection-oriented and reliable — it guarantees ordered, complete delivery, ideal for web pages, email and file transfer. UDP is connectionless and fast, trading guarantees for low latency, ideal for DNS, video calls and gaming. Some services (like DNS) use both.
Frequently Asked Questions
How do I check which ports are open on my computer?
Run netstat -an (Windows/macOS/Linux) to list listening ports, or use nmap to scan a host. Only open ports you actually need, and firewall the rest.
Is it safe to leave port 3389 (RDP) open to the internet?
No — exposed RDP is a top ransomware entry point. Put it behind a VPN, restrict it by IP, enforce strong passwords and multi-factor authentication, and never expose it directly.
Why does HTTPS appear under both TCP and UDP?
Traditional HTTPS runs over TCP on port 443. HTTP/3 uses QUIC, which runs over UDP on the same port 443, so modern web traffic can use either.
Which UDP ports do VPNs and VoIP use?
IPsec VPNs use UDP 500 (IKE) and UDP 4500 (NAT traversal); OpenVPN defaults to UDP 1194; WireGuard to UDP 51820; L2TP to UDP 1701. VoIP uses SIP on 5060 (5061 for TLS) for call setup and a range of RTP ports (commonly 10000–20000) for the audio itself, with STUN/TURN on 3478 to get through NAT.
What are the port numbers for Telnet and IRC?
Telnet uses TCP port 23. IRC is officially assigned TCP 194, but almost all IRC servers actually listen on 6667 (and 6697 for TLS). Together the official assignments add up to 217.
How many ports are there?
65,536 per protocol (0–65535) for both TCP and UDP. Ports 0–1023 are well-known, 1024–49151 registered, and 49152–65535 dynamic/ephemeral.