Port Number Lookup (TCP and UDP)

Type a port number or a service name to see what runs on it, from SSH on 22 to Minecraft on 25565.

Find a port or service

Port number or service name

Enter a number from 0 to 65535, or a name such as ssh, redis or minecraft. Rows tagged de facto are widely used defaults, not IANA assignments for that service.

Showing all 146 ports and services. Type a port number or a service name to filter the list.

Common TCP and UDP ports with protocol, service and use
Port	Protocol	Service	Group
20	TCP	FTP dataData channel for active-mode FTP. Passive mode uses a high port chosen by the server.	File transfer and sharing
21	TCP	FTP controlFTP commands and logins, sent in plain text unless FTPS is used.	File transfer and sharing
22	TCP	SSHSecure Shell: encrypted remote login. SFTP and SCP file transfers also run over port 22.	Remote access and admin
23	TCP	TelnetUnencrypted remote login. Passwords cross the network in plain text, so use SSH instead.	Remote access and admin
25	TCP	SMTPMail delivery between servers. Many ISPs and cloud hosts block outbound port 25.	Email
43	TCP	WHOISDomain and IP registration lookups.	Network services
49	TCP	TACACS+Device administration logins for routers and switches.	Network services
53	TCP/UDP	DNSDomain Name System. UDP carries most queries, and TCP carries large replies and zone transfers.	Network services
67	UDP	DHCP serverServer side of DHCP, which hands out IPv4 addresses.	Network services
68	UDP	DHCP clientClient side of DHCP for IPv4.	Network services
69	UDP	TFTPTrivial FTP for network booting and device firmware. It has no authentication.	File transfer and sharing
80	TCP	HTTPUnencrypted web traffic. Browsers mark plain HTTP sites as not secure, so most sites redirect it to port 443.	Web and dev servers
88	TCP/UDP	KerberosNetwork authentication, used by Active Directory.	Network services
110	TCP	POP3Downloads mail from a server, unencrypted or upgraded with STARTTLS.	Email
111	TCP/UDP	rpcbind (portmapper)Maps RPC services such as NFS to ports. Keep it off the internet.	File transfer and sharing
119	TCP	NNTPUsenet news transport.	Messaging and voice
123	UDP	NTPNetwork Time Protocol, for clock synchronization.	Network services
135	TCP/UDP	MS RPC endpoint mapperWindows RPC endpoint mapper. Never expose it to the internet.	Network services
137	UDP	NetBIOS name serviceLegacy Windows name resolution.	File transfer and sharing
138	UDP	NetBIOS datagramLegacy Windows datagram service.	File transfer and sharing
139	TCP	NetBIOS sessionLegacy Windows file sharing over NetBIOS.	File transfer and sharing
143	TCP	IMAPReads mail that stays on the server, unencrypted or upgraded with STARTTLS.	Email
161	UDP	SNMPSimple Network Management Protocol queries. Use SNMPv3 and restrict access.	Network services
162	UDP	SNMP trapNotifications sent from devices to a management station.	Network services
179	TCP	BGPBorder Gateway Protocol, for routing between networks.	Network services
389	TCP/UDP	LDAPDirectory access, including Active Directory. UDP carries connectionless LDAP (CLDAP).	Network services
443	TCP/UDP	HTTPSEncrypted web traffic. TCP carries HTTP/1.1 and HTTP/2 over TLS, and UDP carries HTTP/3 (QUIC).	Web and dev servers
445	TCP	SMBWindows file and printer sharing. Block it at the internet edge.	File transfer and sharing
464	TCP/UDP	Kerberos password changeThe kpasswd service, for changing Kerberos passwords.	Network services
465	TCP	SMTPS (submission over TLS)Mail submission with TLS from the first byte (RFC 8314). IANA lists it as submissions.	Email
500	UDP	IKE (IPsec)Key exchange for IPsec VPNs (ISAKMP).	VPN and proxies
514	UDP	SyslogPlain-text log forwarding. Port 6514 is the TLS version.	Network services
520	UDP	RIPRouting Information Protocol for IPv4.	Network services
521	UDP	RIPngRouting Information Protocol for IPv6.	Network services
546	UDP	DHCPv6 clientClient side of DHCP for IPv6.	Network services
547	UDP	DHCPv6 serverServer side of DHCP for IPv6.	Network services
548	TCP	AFPApple Filing Protocol, used by older macOS file sharing.	File transfer and sharing
554	TCP/UDP	RTSPStreaming control, used by IP cameras.	Games and media
563	TCP	NNTPSNNTP over TLS.	Messaging and voice
587	TCP	SMTP submissionWhere mail clients send outgoing mail, usually upgraded with STARTTLS.	Email
631	TCP/UDP	IPPInternet Printing Protocol, used by CUPS and network printers.	Network services
636	TCP	LDAPSLDAP over TLS.	Network services
853	TCP/UDP	DNS over TLS and QUICEncrypted DNS: DNS over TLS on TCP and DNS over QUIC on UDP.	Network services
873	TCP	rsyncThe rsync daemon, for file synchronization.	File transfer and sharing
989	TCP	FTPS dataFTP data over implicit TLS. Rarely used now.	File transfer and sharing
990	TCP	FTPS controlFTP control over implicit TLS. Explicit FTPS uses port 21 instead.	File transfer and sharing
993	TCP	IMAPSIMAP over TLS, the usual choice for mail apps.	Email
995	TCP	POP3SPOP3 over TLS.	Email
1080	TCP	SOCKS proxyThe standard port for SOCKS proxies.	VPN and proxies
1194	TCP/UDP	OpenVPNOpenVPN default. UDP is the usual transport.	VPN and proxies
1433	TCP	Microsoft SQL ServerDefault SQL Server instance.	Databases
1434	UDP	SQL Server BrowserFinds named SQL Server instances.	Databases
1521	TCP	Oracle Database de factoDefault Oracle listener port.	Databases
1688	TCP	KMS activation de factoWindows and Office volume license activation server.	Network services
1701	UDP	L2TPLayer 2 Tunneling Protocol, usually paired with IPsec.	VPN and proxies
1723	TCP	PPTPLegacy VPN protocol that also needs GRE (protocol 47). Considered insecure.	VPN and proxies
1812	UDP	RADIUSAuthentication for Wi-Fi (802.1X) and VPN logins.	Network services
1813	UDP	RADIUS accountingRADIUS accounting messages.	Network services
1883	TCP	MQTTLightweight IoT messaging, unencrypted.	Messaging and voice
1900	UDP	SSDP (UPnP)Discovery of UPnP devices such as routers, TVs and media servers.	Network services
1935	TCP	RTMPReal-Time Messaging Protocol, used to send live video to streaming services.	Games and media
2049	TCP/UDP	NFSNetwork File System. NFSv4 normally uses TCP only.	File transfer and sharing
2082	TCP	cPanel de factocPanel hosting control panel over HTTP.	Remote access and admin
2083	TCP	cPanel (HTTPS) de factocPanel hosting control panel over HTTPS.	Remote access and admin
2086	TCP	WHM de factoWebHost Manager, the cPanel server administration panel, over HTTP.	Remote access and admin
2087	TCP	WHM (HTTPS) de factoWebHost Manager over HTTPS.	Remote access and admin
2375	TCP	Docker API (unencrypted)Docker Engine remote API without TLS. Anyone who can reach it controls the host.	Containers and DevOps
2376	TCP	Docker API (TLS)Docker Engine remote API with TLS.	Containers and DevOps
2377	TCP	Docker SwarmDocker Swarm cluster management.	Containers and DevOps
2379	TCP	etcd clientetcd client requests. Kubernetes keeps its cluster state here.	Databases
2380	TCP	etcd peeretcd server-to-server communication.	Databases
2525	TCP	SMTP alternate de factoAlternate submission port that some mail providers offer when ports 25 and 587 are blocked.	Email
3000	TCP	Dev server (Node, React, Rails, Grafana) de factoDefault for many local development servers, including Express, Create React App, Next.js, Rails and Grafana.	Web and dev servers
3074	TCP/UDP	Xbox networkXbox network and many console online games.	Games and media
3128	TCP	Squid proxy de factoDefault port of the Squid HTTP proxy.	VPN and proxies
3260	TCP	iSCSIBlock storage over IP (iSCSI target).	File transfer and sharing
3268	TCP	Global CatalogActive Directory Global Catalog queries (LDAP).	Network services
3269	TCP	Global Catalog (TLS)Active Directory Global Catalog over TLS.	Network services
3306	TCP	MySQL, MariaDBDefault MySQL and MariaDB port. Keep it off the internet.	Databases
3389	TCP/UDP	RDPWindows Remote Desktop. Do not expose it directly to the internet; use a VPN or gateway.	Remote access and admin
3478	TCP/UDP	STUN and TURNNAT traversal for WebRTC and VoIP calls.	Messaging and voice
4200	TCP	Angular dev server de factoDefault port of ng serve in the Angular CLI.	Web and dev servers
4222	TCP	NATS de factoNATS client connections.	Messaging and voice
4500	UDP	IPsec NAT-TIPsec traffic that passes through NAT devices.	VPN and proxies
4789	UDP	VXLANVirtual extensible LAN overlay networks.	Network services
5000	TCP	Flask dev server de factoDefault for Flask. On macOS 12 and later, AirPlay Receiver also uses port 5000, so it may already be taken.	Web and dev servers
5060	TCP/UDP	SIPSession Initiation Protocol, for VoIP calls.	Messaging and voice
5061	TCP	SIP over TLSEncrypted SIP.	Messaging and voice
5173	TCP	Vite dev server de factoDefault port of the Vite development server.	Web and dev servers
5201	TCP/UDP	iperf3 de factoDefault port of iperf3 network speed tests.	Network services
5222	TCP	XMPP clientJabber and XMPP client connections.	Messaging and voice
5269	TCP	XMPP serverXMPP server-to-server connections.	Messaging and voice
5349	TCP/UDP	STUN and TURN over TLSEncrypted STUN and TURN.	Messaging and voice
5353	UDP	mDNSMulticast DNS, used for .local names, Bonjour and Chromecast discovery.	Network services
5355	TCP/UDP	LLMNRLink-Local Multicast Name Resolution on Windows networks.	Network services
5432	TCP	PostgreSQLDefault PostgreSQL port.	Databases
5555	TCP	ADB over network de factoAndroid Debug Bridge over Wi-Fi, after running adb tcpip 5555.	Remote access and admin
5601	TCP	Kibana de factoKibana web interface.	Databases
5671	TCP	AMQPSAMQP over TLS.	Messaging and voice
5672	TCP	AMQPAMQP 0-9-1, used by RabbitMQ.	Messaging and voice
5900	TCP	VNCRemote screen sharing. Display :1 uses 5901, display :2 uses 5902, and so on.	Remote access and admin
5938	TCP/UDP	TeamViewer de factoPreferred port for TeamViewer remote sessions.	Remote access and admin
5984	TCP	CouchDBCouchDB HTTP API.	Databases
5985	TCP	WinRM (HTTP)Windows Remote Management and PowerShell remoting over HTTP.	Remote access and admin
5986	TCP	WinRM (HTTPS)Windows Remote Management and PowerShell remoting over HTTPS.	Remote access and admin
6000-6063	TCP	X11X Window System display servers. Display :0 uses port 6000, :1 uses 6001, and so on.	Remote access and admin
6379	TCP	RedisDefault Redis port. Never expose Redis without authentication and a firewall.	Databases
6443	TCP	Kubernetes API server de factoThe Kubernetes control plane API.	Containers and DevOps
6514	TCP	Syslog over TLSEncrypted log forwarding.	Network services
6667	TCP	IRCInternet Relay Chat, unencrypted.	Messaging and voice
6697	TCP	IRC over TLSEncrypted IRC.	Messaging and voice
6881-6889	TCP/UDP	BitTorrent de factoThe classic BitTorrent port range.	Games and media
7687	TCP	Neo4j BoltBolt protocol for the Neo4j graph database.	Databases
8000	TCP	Dev server (Django, http.server) de factoDefault for Django runserver and Python http.server, and a common alternate HTTP port.	Web and dev servers
8080	TCP	HTTP alternateAlternate HTTP port for proxies, Tomcat, Jenkins and test servers. IANA lists it as http-alt.	Web and dev servers
8086	TCP	InfluxDB de factoInfluxDB HTTP API.	Databases
8096	TCP	Jellyfin, Emby de factoHTTP port of the Jellyfin and Emby media servers.	Games and media
8200	TCP	HashiCorp Vault de factoVault API and web interface.	Containers and DevOps
8443	TCP	HTTPS alternate de factoAlternate HTTPS port used by Tomcat and many admin panels.	Web and dev servers
8500	TCP	HashiCorp Consul de factoConsul HTTP API and web interface.	Containers and DevOps
8883	TCP	MQTT over TLSEncrypted MQTT.	Messaging and voice
8888	TCP	Jupyter Notebook de factoDefault port of Jupyter Notebook and JupyterLab.	Web and dev servers
9000	TCP	PHP-FPM, SonarQube de factoDefault FastCGI port for PHP-FPM when it listens on TCP, and the SonarQube web port.	Web and dev servers
9042	TCP	Cassandra (CQL) de factoClient port for Apache Cassandra.	Databases
9090	TCP	Prometheus de factoPrometheus web interface and API. Cockpit also defaults to 9090.	Containers and DevOps
9092	TCP	Apache Kafka de factoDefault Kafka broker port.	Messaging and voice
9100	TCP	Printer raw (JetDirect)Raw printing to network printers. Prometheus node_exporter also defaults to 9100.	Network services
9200	TCP	Elasticsearch (REST) de factoElasticsearch and OpenSearch REST API.	Databases
9300	TCP	Elasticsearch (nodes) de factoNode-to-node transport inside Elasticsearch clusters.	Databases
9418	TCP	Git protocolRead-only access with git:// URLs.	Containers and DevOps
10000	TCP	Webmin de factoWebmin web-based server administration.	Remote access and admin
10050	TCP	Zabbix agentZabbix monitoring agent.	Network services
10051	TCP	Zabbix serverZabbix server and trapper port.	Network services
10250	TCP	Kubelet API de factoThe Kubernetes node agent API.	Containers and DevOps
11211	TCP/UDP	MemcachedDefault Memcached port. Exposed UDP has been abused for DDoS amplification.	Databases
15672	TCP	RabbitMQ management de factoRabbitMQ management web interface.	Messaging and voice
19132	UDP	Minecraft (Bedrock) de factoDefault Minecraft Bedrock Edition server port (IPv4).	Games and media
25565	TCP	Minecraft (Java) de factoDefault Minecraft Java Edition server port.	Games and media
26257	TCP	CockroachDBCockroachDB SQL and node communication.	Databases
27015	TCP/UDP	Steam and Source servers de factoDefault port of Valve Source dedicated servers. UDP carries game traffic and TCP carries RCON.	Games and media
27017	TCP	MongoDBDefault MongoDB port.	Databases
30000-32767	TCP	Kubernetes NodePort range de factoDefault range for Kubernetes NodePort services.	Containers and DevOps
32400	TCP	Plex Media ServerPlex web interface and streaming.	Games and media
33060	TCP	MySQL X ProtocolThe MySQL X Protocol, used by MySQL Shell and the X DevAPI.	Databases
51820	UDP	WireGuard de factoDefault port of WireGuard VPN.	VPN and proxies
61616	TCP	ActiveMQ de factoActiveMQ OpenWire broker port.	Messaging and voice

How to look up a port number

Type a port number such as 443, or a service such as ssh or mysql, into Port number or service name. Forms like 443/tcp and port 443 work too.
Use the group buttons (Web and dev servers, Remote access and admin, Email and so on) to narrow the list.
Read the Protocol column (TCP, UDP or both) and the notes. Rows tagged de facto are widely used defaults, not IANA assignments for that service.
If a number is not listed, the line above the table says which range it falls in.

How port numbers are organized

A port is a 16-bit number from 0 to 65535 that, with an IP address and a protocol, identifies one end of a connection. IANA keeps the official registry and splits the range in three (RFC 6335): well-known ports 0 to 1023, registered ports 1024 to 49151 and dynamic ports 49152 to 65535. Operating systems give dynamic ports to outgoing connections. Windows and macOS use 49152 to 65535, and Linux defaults to 32768 to 60999. Many popular ports, such as 3000 for dev servers or 25565 for Minecraft, are vendor conventions rather than IANA assignments.

Worked example

With the box empty, the status line reads Showing all 146 ports and services. Type a port number or a service name to filter the list. Type 443 and it reads Port 443 is a well-known port (0 to 1023). 1 entry found. The table shows one row: 443, TCP/UDP, HTTPS. Try 50000 and the tool says it is a dynamic port that no common service uses.

Limits and edge cases

A port number does not prove what is running. Any program can listen on any port. Run netstat -ano on Windows or ss -tulpn on Linux to see what is really listening.
This is a reference list, not a scanner. It cannot tell you whether a port is open on any server.
Some services use several ports. FTP uses 21 plus a data connection, and Active Directory uses 88, 135, 389, 445 and more.
Databases, Docker (2375), RDP and SMB should never be reachable from the open internet.

SRV records can publish a service's host and port in DNS, as the DNS record types reference explains. For web errors rather than ports, see the HTTP status codes list.

Frequently asked questions

What port does SSH use?

SSH uses TCP port 22, and SFTP and SCP file transfers run over the same port. Moving SSH to another port only cuts automated scanning noise. Keys and a firewall are what protect it.

What is the difference between TCP and UDP ports?

Each port number exists separately for TCP and UDP. TCP sets up a connection and delivers data in order, so web, email and SSH use it. UDP just sends packets, so DNS queries, NTP, VoIP and games use it. A few services, such as DNS, use both.

Which ports should be open on a web server?

Only 80 and 443 for the public. Restrict SSH on port 22 to your own IP address or a VPN, and keep database ports such as 3306, 5432, 6379 and 27017 closed to the internet.

Why can my program not use a port below 1024?

On Linux, binding to a port below 1024 needs root or the CAP_NET_BIND_SERVICE capability, which is why development servers use ports like 3000 or 8080. Windows has no such rule, and macOS relaxed it in version 10.14.

Which ports do email apps use?

To receive mail, use IMAP over TLS on 993 or POP3 over TLS on 995. To send, use SMTP submission on 587 (STARTTLS) or 465 (TLS). Port 25 is for server-to-server delivery and is often blocked on home connections.

Sources: the IANA Service Name and Transport Protocol Port Number Registry and RFC 6335. Ports tagged de facto follow each product's own documentation.