Using it
Type a port number to see what normally uses it, or a name such as ssh, postgres or mqtt to find its port. The rows show the protocol, the name IANA has registered, and what it's used for in practice, since the two don't always match.
Port ranges
Ports run from 0 to 65535. 0 to 1023 are the well-known ports, for core services, and most systems need admin rights to listen on them. 1024 to 49151 are registered ports, which IANA assigns to applications on request. 49152 to 65535 are dynamic ports, which operating systems hand out for the client side of connections.
A registration doesn't stop anyone else using a port. Some popular software uses ports registered to something else, such as Elasticsearch on 9200 and the Kubernetes API on 6443, and some uses ports nobody registered, such as Minecraft on 25565. The table marks those.
Common ports
| Port | Protocol | Used for | IANA registration |
|---|---|---|---|
| 20 | TCP | FTP data transfer | ftp-data: File Transfer [Default Data] |
| 21 | TCP | FTP control | ftp: File Transfer Protocol [Control] |
| 22 | TCP | SSH, and SFTP and SCP over it | ssh: The Secure Shell (SSH) Protocol |
| 23 | TCP | Telnet, unencrypted remote login | telnet: Telnet |
| 25 | TCP | SMTP, mail between servers | smtp: Simple Mail Transfer |
| 53 | UDP and TCP | DNS | domain: Domain Name Server |
| 67 | UDP | DHCP server | bootps: Bootstrap Protocol Server |
| 68 | UDP | DHCP client | bootpc: Bootstrap Protocol Client |
| 69 | UDP | TFTP, used to boot network devices | tftp: Trivial File Transfer |
| 80 | TCP | HTTP, the unencrypted web | http: World Wide Web HTTP |
| 88 | TCP and UDP | Kerberos sign-in, as in Active Directory | kerberos: Kerberos |
| 110 | TCP | POP3 email | pop3: Post Office Protocol - Version 3 |
| 119 | TCP | Usenet news | nntp: Network News Transfer Protocol |
| 123 | UDP | NTP, clock synchronisation | ntp: Network Time Protocol |
| 137 | UDP | NetBIOS name service (Windows networking) | netbios-ns: NETBIOS Name Service |
| 138 | UDP | NetBIOS datagrams (Windows networking) | netbios-dgm: NETBIOS Datagram Service |
| 139 | TCP | NetBIOS sessions, older Windows file sharing | netbios-ssn: NETBIOS Session Service |
| 143 | TCP | IMAP email | imap: Internet Message Access Protocol |
| 161 | UDP | SNMP, network device monitoring | snmp: SNMP |
| 162 | UDP | SNMP traps (alerts from devices) | snmptrap: SNMPTRAP |
| 179 | TCP | BGP, routing between networks | bgp: Border Gateway Protocol |
| 389 | TCP | LDAP directory | ldap: Lightweight Directory Access Protocol |
| 443 | TCP and UDP | HTTPS, the encrypted web (UDP for HTTP/3) | https: http protocol over TLS/SSL |
| 445 | TCP | SMB, Windows file sharing | microsoft-ds: Microsoft-DS |
| 465 | TCP | Email submission over TLS | submissions: Message Submission over TLS protocol |
| 514 | UDP | Syslog, sending log messages | syslog |
| 515 | TCP | LPD printing | printer: spooler |
| 587 | TCP | Email submission from mail apps | submission: Message Submission |
| 636 | TCP | LDAP over TLS | ldaps: ldap protocol over TLS/SSL (was sldap) |
| 853 | TCP | DNS over TLS | domain-s: DNS query-response protocol run over TLS |
| 873 | TCP | rsync file sync | rsync: rsync |
| 989 | TCP | FTPS data | ftps-data: ftp protocol, data, over TLS/SSL |
| 990 | TCP | FTPS control | ftps: ftp protocol, control, over TLS/SSL |
| 993 | TCP | IMAP over TLS | imaps: IMAP over TLS protocol |
| 995 | TCP | POP3 over TLS | pop3s: POP3 over TLS protocol |
| 1194 | UDP | OpenVPN | openvpn: OpenVPN |
| 1433 | TCP | Microsoft SQL Server | ms-sql-s: Microsoft-SQL-Server |
| 1521 | TCP | Oracle Database listener (Oracle's default) | ncube-lm: nCube License Manager |
| 1723 | TCP | PPTP VPN (outdated and insecure) | pptp: pptp |
| 1883 | TCP | MQTT messaging for IoT devices | mqtt: Message Queuing Telemetry Transport Protocol |
| 2049 | TCP | NFS file sharing | nfs: Network File System - Sun Microsystems |
| 3306 | TCP | MySQL and MariaDB | mysql: MySQL |
| 3389 | TCP | Remote Desktop (RDP) | ms-wbt-server: MS WBT Server |
| 5060 | UDP and TCP | SIP, for VoIP calls | sip: SIP |
| 5061 | TCP | SIP over TLS | sips: SIP-TLS |
| 5222 | TCP | XMPP chat clients | xmpp-client: XMPP Client Connection |
| 5353 | UDP | Multicast DNS (Bonjour, .local names) | mdns: Multicast DNS |
| 5432 | TCP | PostgreSQL | postgresql: PostgreSQL Database |
| 5900 | TCP | VNC remote desktop | rfb: Remote Framebuffer |
| 6379 | TCP | Redis | redis: An advanced key-value cache and store |
| 6443 | TCP | Kubernetes API server | sun-sr-https: Service Registry Default HTTPS Domain |
| 8080 | TCP | Alternative HTTP, often proxies and development servers | http-alt: HTTP Alternate (see port 80) |
| 8443 | TCP | Alternative HTTPS | pcsync-https: PCsync HTTPS |
| 8883 | TCP | MQTT over TLS | secure-mqtt: Secure MQTT |
| 9200 | TCP | Elasticsearch HTTP API | wap-wsp: WAP connectionless session service |
| 9418 | TCP | Git protocol (git://) | git: git pack transfer service |
| 11211 | TCP | Memcached | memcache: Memory cache service |
| 25565 | TCP | Minecraft: Java Edition server | Not assigned by IANA |
| 27017 | TCP | MongoDB | mongodb: Mongo database system |
| 51820 | UDP | WireGuard VPN (the port its own examples use) | Not assigned by IANA |
Questions
What port does SSH use?
22, over TCP.
What is port 443?
HTTPS, the encrypted web. It also carries HTTP/3 over UDP.
Is a port number a security setting?
No. Moving a service to an unusual port cuts down on automated noise, but anyone scanning can still find it.
Sources
- IANA Service Name and Transport Protocol Port Number Registry
- RFC 6335: IANA procedures for port numbers
- Kubernetes: Ports and protocols
- Oracle Net Services: the default listener on port 1521
Added . What's new