Common TCP & UDP ports

Client

Quick reference for well-known and frequently seen port numbers: service keyword, typical transport, and a one-line description—useful next to CIDR planning and HTTP debugging.

Ports, firewalls, and services

Well-known ports hint at which application protocol usually listens there, but hosts can rebind services and containers publish different mappings. Use this table to decode netstat, load balancer health checks, or security group rules before you change infrastructure.

For IP ranges and subnet masks, use the CIDR calculator alongside this list; for HTTP traffic on non-default ports, still follow status codes and method semantics.

Reference

?

Names follow common IANA-style usage; firewalls and vendors may remap services. Verify open ports with your own scans and documentation.

78 entries

Try examples

PortServiceSummary
20ftp-dataFTP data channel (active mode).Protocol: tcp
21ftpFTP control (command) channel.Protocol: tcp
22sshSecure Shell remote login and file copy (scp/sftp).Protocol: tcp
23telnetLegacy cleartext remote terminal (avoid on untrusted networks).Protocol: tcp
25smtpSimple Mail Transfer Protocol (server-to-server mail).Protocol: tcp
53dnsDomain Name System queries and responses.Protocol: tcp/udp
67dhcp-serverDHCP server (bootstrap / address assignment).Protocol: udp
68dhcp-clientDHCP client.Protocol: udp
69tftpTrivial File Transfer Protocol (often LAN / PXE boot).Protocol: udp
80httpHypertext Transfer Protocol (cleartext web).Protocol: tcp
88kerberosKerberos authentication (common in AD environments).Protocol: tcp/udp
110pop3Post Office Protocol v3 (mail retrieval).Protocol: tcp
111portmapperONC RPC portmapper (maps RPC programs to ports).Protocol: tcp/udp
119nntpNetwork News Transfer Protocol (Usenet).Protocol: tcp
123ntpNetwork Time Protocol (clock sync).Protocol: udp
135msrpcMicrosoft RPC endpoint mapper (Windows).Protocol: tcp/udp
137netbios-nsNetBIOS name service (legacy Windows naming).Protocol: udp
138netbios-dgmNetBIOS datagram service.Protocol: udp
139netbios-ssnNetBIOS session service (SMB predecessor / legacy).Protocol: tcp
143imapInternet Message Access Protocol (mail folders on server).Protocol: tcp
161snmpSimple Network Management Protocol (agents).Protocol: udp
162snmp-trapSNMP traps to manager.Protocol: udp
179bgpBorder Gateway Protocol (inter-provider routing).Protocol: tcp
389ldapLightweight Directory Access Protocol (directory / auth bind).Protocol: tcp/udp
443httpsHTTP over TLS (encrypted web).Protocol: tcp
445microsoft-dsSMB over TCP (Windows file sharing / AD).Protocol: tcp
465smtpsSMTP over TLS (legacy implicit TLS assignment; see also 587).Protocol: tcp
514syslogTraditional syslog (UDP; often replaced by TLS syslog).Protocol: udp
587smtp-submissionMail submission (STARTTLS common for clients to providers).Protocol: tcp
631ippInternet Printing Protocol (CUPS / network printers).Protocol: tcp
636ldapsLDAP over TLS.Protocol: tcp
993imapsIMAP over TLS.Protocol: tcp
995pop3sPOP3 over TLS.Protocol: tcp
1433mssqlMicrosoft SQL Server default listener.Protocol: tcp
1521oracleOracle Database listener (default).Protocol: tcp
2049nfsNetwork File System (Linux/Unix file shares).Protocol: tcp/udp
2082cpanel-httpcPanel default HTTP (hosting panels).Protocol: tcp
2083cpanel-httpscPanel default HTTPS.Protocol: tcp
2181zookeeperApache ZooKeeper coordination service.Protocol: tcp
2222ssh-altCommon alternate SSH port (non-standard; operator choice).Protocol: tcp
2375dockerDocker Engine API (unencrypted—avoid exposure).Protocol: tcp
2376docker-tlsDocker Engine API with TLS.Protocol: tcp
3000dev-httpCommon local dev web port (Node, Rails, etc.—not reserved by IANA).Protocol: tcp
3128squidHTTP proxy (Squid and similar).Protocol: tcp
3306mysqlMySQL / MariaDB default server port.Protocol: tcp
3389rdpRemote Desktop Protocol (Windows).Protocol: tcp
3478stunSTUN (NAT traversal for WebRTC / VoIP).Protocol: udp
4222natsNATS messaging default client port.Protocol: tcp
4333moshMosh mobile shell (UDP datagrams).Protocol: udp
5000flask-devOften Flask default; also UPnP / macOS AirPlay in some setups—context matters.Protocol: tcp
5001synologyCommon NAS HTTPS (vendor-specific).Protocol: tcp
5060sipSession Initiation Protocol (VoIP signaling).Protocol: tcp/udp
5222xmpp-clientXMPP client-to-server (Jabber / messaging).Protocol: tcp
5223xmpp-legacy-sslXMPP over legacy SSL (older clients).Protocol: tcp
5432postgresqlPostgreSQL default server port.Protocol: tcp
5672amqpAMQP (RabbitMQ default).Protocol: tcp
5900vncVNC remote framebuffer (display :0).Protocol: tcp
5984couchdbApache CouchDB HTTP API.Protocol: tcp
6379redisRedis in-memory data store / cache.Protocol: tcp
6443kubernetes-api-tlsCommon TLS port for Kubernetes API (installations vary).Protocol: tcp
8000alt-httpAlternate HTTP (many dev servers and small apps).Protocol: tcp
8008http-altAlternate HTTP (HTTP alternate).Protocol: tcp
8080http-proxyCommon HTTP alternate / reverse proxy / Tomcat default.Protocol: tcp
8443https-altCommon HTTPS alternate (Tomcat, proxies, panels).Protocol: tcp
8500consulHashiCorp Consul HTTP API (default).Protocol: tcp
8834nessusNessus vulnerability scanner web UI (common).Protocol: tcp
8888jupyterJupyter Notebook default (often local; change in production).Protocol: tcp
9000sonarqubeSonarQube web (common default; verify install).Protocol: tcp
9042cassandra-cqlApache Cassandra CQL native transport.Protocol: tcp
9092kafkaApache Kafka broker client port (common default).Protocol: tcp
9200elasticsearch-httpElasticsearch HTTP API.Protocol: tcp
9300elasticsearch-transportElasticsearch cluster transport (node-to-node).Protocol: tcp
10000webminWebmin admin UI (common default).Protocol: tcp
11211memcachedMemcached in-memory cache.Protocol: tcp/udp
15672rabbitmq-mgmtRabbitMQ management plugin HTTP.Protocol: tcp
27017mongodbMongoDB default server port.Protocol: tcp
28015rethinkdbRethinkDB client driver port.Protocol: tcp
50051grpcCommon gRPC default (HTTP/2); many services pick custom ports.Protocol: tcp

Common use cases

  • Interpret a firewall rule or `netstat` line when you see a numeric port.
  • Pair with HTTP status codes and methods when tracing a request through proxies and load balancers.
  • Double-check which process might listen on a port before changing dev server defaults.

Common mistakes to avoid

  • Treating the list as authoritative for every deployment

    Operators move SSH, databases, and panels to non-default ports; always confirm on the host.

  • Opening a port because it appears here

    This page is a reference only—security posture depends on your network design and policies.

  • Conflicting vendor defaults

    Some entries (for example alternate HTTP ports) share numbers with unrelated products—use context from logs.

FAQ

Is this data sent to Toolcore servers?

No. Filtering runs entirely in your browser.

Why is a port listed as both tcp and udp?

Some protocols (DNS is a common example) use UDP for normal queries and TCP for large or fallback traffic.

Where is the full IANA registry?

Official assignments live in IANA’s service name and port number registry; this table is a compact, high-signal subset for everyday work.

Related utilities you can open in another tab—mostly client-side.