Network Port Reference
| Port | Proto | Service |
|---|---|---|
| 20 | TCP | FTP data |
| 21 | TCP | FTP control |
| 22 | TCP | SSH / SFTP / SCP |
| 23 | TCP | Telnet |
| 25 | TCP | SMTP |
| 53 | TCP/UDP | DNS |
| 67 | UDP | DHCP server |
| 68 | UDP | DHCP client |
| 69 | UDP | TFTP |
| 80 | TCP | HTTP |
| 88 | TCP/UDP | Kerberos |
| 110 | TCP | POP3 |
| 123 | UDP | NTP |
| 135 | TCP | MS RPC |
| 137 | UDP | NetBIOS name |
| 139 | TCP | NetBIOS session |
| 143 | TCP | IMAP |
| 161 | UDP | SNMP |
| 162 | UDP | SNMP trap |
| 179 | TCP | BGP |
| 389 | TCP/UDP | LDAP |
| 443 | TCP | HTTPS |
| 445 | TCP | SMB |
| 465 | TCP | SMTPS |
| 500 | UDP | IKE |
| 514 | UDP | Syslog |
| 587 | TCP | SMTP submission |
| 636 | TCP | LDAPS |
| 853 | TCP/UDP | DNS over TLS |
| 873 | TCP | rsync |
| 993 | TCP | IMAPS |
| 995 | TCP | POP3S |
| 1080 | TCP | SOCKS |
| 1194 | UDP | OpenVPN |
| 1433 | TCP | SQL Server |
| 1521 | TCP | Oracle DB |
| 1883 | TCP | MQTT |
| 2049 | TCP/UDP | NFS |
| 2181 | TCP | ZooKeeper |
| 2375 | TCP | Docker API |
| 2379 | TCP | etcd client |
| 3000 | TCP | Dev servers / Grafana |
| 3128 | TCP | Squid proxy |
| 3306 | TCP | MySQL / MariaDB |
| 3389 | TCP | RDP |
| 3478 | UDP | STUN / TURN |
| 4369 | TCP | EPMD |
| 4500 | UDP | IPsec NAT-T |
| 5044 | TCP | Beats / Logstash |
| 5060 | TCP/UDP | SIP |
| 5222 | TCP | XMPP |
| 5432 | TCP | PostgreSQL |
| 5671 | TCP | AMQP over TLS |
| 5672 | TCP | AMQP |
| 5900 | TCP | VNC |
| 5984 | TCP | CouchDB |
| 6379 | TCP | Redis |
| 6443 | TCP | Kubernetes API |
| 6514 | TCP | Syslog over TLS |
| 7000 | TCP | Cassandra inter-node |
| 8000 | TCP | Dev HTTP |
| 8080 | TCP | HTTP alternate |
| 8443 | TCP | HTTPS alternate |
| 8500 | TCP | Consul |
| 8600 | TCP/UDP | Consul DNS |
| 8883 | TCP | MQTT over TLS |
| 9000 | TCP | MinIO / SonarQube / PHP-FPM |
| 9042 | TCP | Cassandra CQL |
| 9090 | TCP | Prometheus |
| 9092 | TCP | Kafka |
| 9093 | TCP | Alertmanager |
| 9100 | TCP | node_exporter |
| 9200 | TCP | Elasticsearch / OpenSearch |
| 9418 | TCP | Git |
| 10250 | TCP | kubelet API |
| 11211 | TCP/UDP | Memcached |
| 15672 | TCP | RabbitMQ management |
| 27017 | TCP | MongoDB |
The ports engineers actually meet, searchable by number, service or protocol.
Port FAQs
What are well-known, registered and ephemeral ports?
Ports 0 to 1023 are well-known and historically require privileges to bind; 1024 to 49151 are registered for applications; 49152 to 65535 are ephemeral, used by clients as the source port of outgoing connections. Linux commonly uses 32768 to 60999 for ephemeral ports.
Why do some services use TCP and others UDP?
TCP gives ordered, reliable delivery at the cost of connection setup, suiting databases, web and mail. UDP is fire-and-forget, suiting DNS queries, clock sync, VoIP media and games, where a late answer is worthless anyway. Some protocols use both, and HTTP/3 moved the web onto UDP via QUIC.
Which ports should never be exposed to the internet?
Unauthenticated data and management planes: databases such as 3306, 5432, 6379, 27017 and 9200, SMB on 445, RDP on 3389 without a gateway, the Docker API on 2375, and the kubelet on 10250. These are scanned constantly; reach them over VPNs or private networks instead.
Can a service run on a different port than listed?
Yes, these are defaults and conventions, not rules. Anything can listen anywhere, which is why firewalls that identify traffic by port alone are only a first approximation.
Does this page look anything up remotely?
No. The table ships with the page, search runs in your browser, and it works offline.