Port Number Lookup
Look up any TCP or UDP port number — 22 (SSH), 80 (HTTP), 443 (HTTPS), 3389 (RDP), 8080, 25565 and 1,500+ IANA-registered services. Find which application runs on a port before opening it on your router.
Type a port number (e.g. 22) or service name (e.g. SSH) to find the matching entry.
Click any port for full details, security guidance and related ports. High risk Medium risk Low risk
| Port | Protocol | Service | Description | ||
|---|---|---|---|---|---|
| 1 | TCP/UDP | tcpmux | TCP Port Service Multiplexer. | → | |
| 7 | TCP/UDP | echo | Echo protocol used for testing connectivity (RFC 862). | → | |
| 9 | TCP/UDP | discard / Wake-on-LAN | Discard service; UDP/9 is also commonly used for Wake-on-LAN magic packets. | → | |
| 13 | TCP/UDP | daytime | Daytime protocol returning the current date and time (RFC 867). | → | |
| 17 | TCP/UDP | qotd | Quote of the Day (RFC 865). | → | |
| 19 | TCP/UDP | chargen | Character generator protocol; rarely enabled, sometimes abused for amplification. | → | |
| 20 | TCP | FTP-DATA | FTP data transfer channel. | → | |
| 21 | TCP | FTP | File Transfer Protocol control channel. | → | |
| 22 | TCP | SSH | Secure Shell remote login and SFTP. | → | |
| 23 | TCP | Telnet | Plain-text remote login. Insecure — disable on production routers. | → | |
| 25 | TCP | SMTP | Simple Mail Transfer Protocol for sending email. | → | |
| 37 | TCP/UDP | time | Time protocol returning seconds since 1900 (RFC 868). | → | |
| 43 | TCP | WHOIS | Domain registration lookup. | → | |
| 49 | TCP/UDP | TACACS+ | Authentication protocol used by enterprise routers. | → | |
| 53 | TCP/UDP | DNS | Domain Name System lookups. | → | |
| 67 | UDP | DHCP server | DHCP server listens for client requests. | → | |
| 68 | UDP | DHCP client | DHCP client receives offers from the server. | → | |
| 69 | UDP | TFTP | Trivial FTP, often used for router firmware updates and config backup. | → | |
| 79 | TCP | Finger | Legacy user information protocol. | → | |
| 80 | TCP | HTTP | Plain HTTP web traffic. | → | |
| 81 | TCP | HTTP alt | Alternate HTTP port; used by many router admin panels and Synology DSM. | → | |
| 88 | TCP/UDP | Kerberos | Kerberos authentication. | → | |
| 102 | TCP | ISO-TSAP / Siemens S7 | Used by Siemens S7 industrial controllers (PLCs). | → | |
| 110 | TCP | POP3 | Post Office Protocol v3 for retrieving email. | → | |
| 111 | TCP/UDP | RPCbind / portmapper | Sun ONC RPC service mapper. | → | |
| 113 | TCP | Ident | Identification protocol used by IRC and SMTP servers. | → | |
| 119 | TCP | NNTP | Network News Transfer Protocol. | → | |
| 123 | UDP | NTP | Network Time Protocol for clock synchronization. | → | |
| 135 | TCP | MS RPC / EPMAP | Microsoft DCOM / RPC endpoint mapper. Block at the firewall. | → | |
| 137 | UDP | NetBIOS Name | NetBIOS name service. | → | |
| 138 | UDP | NetBIOS Datagram | NetBIOS datagram service. | → | |
| 139 | TCP | NetBIOS Session | NetBIOS session service. | → | |
| 143 | TCP | IMAP | Internet Message Access Protocol. | → | |
| 161 | UDP | SNMP | Simple Network Management Protocol — common on routers and switches. | → | |
| 162 | UDP | SNMP Trap | SNMP traps sent from devices to a manager. | → | |
| 179 | TCP | BGP | Border Gateway Protocol for inter-AS routing. | → | |
| 194 | TCP | IRC | Internet Relay Chat. | → | |
| 389 | TCP/UDP | LDAP | Lightweight Directory Access Protocol. | → | |
| 443 | TCP | HTTPS | HTTP over TLS — the modern default for the web. | → | |
| 445 | TCP | SMB | Windows file sharing. Block on the WAN — exploited by EternalBlue / WannaCry. | → | |
| 465 | TCP | SMTPS (legacy) | SMTP over TLS (legacy implicit TLS port). | → | |
| 500 | UDP | IPsec ISAKMP | IPsec key exchange. | → | |
| 514 | UDP | syslog | System logging. | → | |
| 515 | TCP | LPD | Line Printer Daemon protocol. | → | |
| 520 | UDP | RIP | Routing Information Protocol. | → | |
| 530 | TCP/UDP | Sun RPC | Sun ONC RPC. | → | |
| 543 | TCP | klogin | Kerberos remote login. | → | |
| 544 | TCP | kshell | Kerberos remote shell. | → | |
| 546 | UDP | DHCPv6 client | DHCPv6 client. | → | |
| 547 | UDP | DHCPv6 server | DHCPv6 server. | → | |
| 554 | TCP/UDP | RTSP | Real Time Streaming Protocol — used by IP cameras. | → | |
| 587 | TCP | SMTP submission | Mail submission with STARTTLS — preferred over port 25 for clients. | → | |
| 593 | TCP | HTTP RPC EPMAP | Microsoft DCOM over HTTP. | → | |
| 631 | TCP/UDP | IPP / CUPS | Internet Printing Protocol; used by macOS/Linux print servers. | → | |
| 636 | TCP | LDAPS | LDAP over TLS. | → | |
| 873 | TCP | rsync | Remote file sync. | → | |
| 902 | TCP | VMware ESXi | VMware ESXi management. | → | |
| 989 | TCP | FTPS data | FTP over TLS data channel. | → | |
| 990 | TCP | FTPS control | FTP over TLS control channel. | → | |
| 993 | TCP | IMAPS | IMAP over TLS. | → | |
| 995 | TCP | POP3S | POP3 over TLS. | → | |
| 1080 | TCP | SOCKS proxy | SOCKS proxy. | → | |
| 1194 | UDP | OpenVPN | OpenVPN default port. | → | |
| 1433 | TCP | MS SQL Server | Microsoft SQL Server. | → | |
| 1434 | UDP | MS SQL Browser | SQL Server browser service. | → | |
| 1521 | TCP | Oracle DB | Oracle database listener. | → | |
| 1701 | UDP | L2TP | Layer 2 Tunneling Protocol. | → | |
| 1723 | TCP | PPTP | Point-to-Point Tunneling Protocol. Considered insecure. | → | |
| 1812 | UDP | RADIUS auth | RADIUS authentication. | → | |
| 1813 | UDP | RADIUS accounting | RADIUS accounting. | → | |
| 1900 | UDP | SSDP / UPnP | Simple Service Discovery — UPnP. Disable on the WAN. | → | |
| 2049 | TCP/UDP | NFS | Network File System. | → | |
| 2082 | TCP | cPanel | cPanel web hosting control panel (HTTP). | → | |
| 2083 | TCP | cPanel SSL | cPanel control panel (HTTPS). | → | |
| 2086 | TCP | WHM | WebHost Manager (HTTP). | → | |
| 2087 | TCP | WHM SSL | WebHost Manager (HTTPS). | → | |
| 2222 | TCP | DirectAdmin / SSH alt | DirectAdmin panel; also a common alternate SSH port. | → | |
| 2375 | TCP | Docker (insecure) | Docker daemon API without TLS. Never expose to the internet. | → | |
| 2376 | TCP | Docker (TLS) | Docker daemon API with TLS. | → | |
| 2377 | TCP | Docker Swarm | Docker Swarm cluster management. | → | |
| 3000 | TCP | Dev server | Common dev port for Node.js / Next.js / Grafana. | → | |
| 3128 | TCP | Squid proxy | Squid HTTP proxy. | → | |
| 3260 | TCP | iSCSI | Internet Small Computer Systems Interface. | → | |
| 3306 | TCP | MySQL / MariaDB | MySQL and MariaDB database. | → | |
| 3389 | TCP | RDP | Remote Desktop Protocol. High-value attacker target — restrict access. | → | |
| 3478 | TCP/UDP | STUN / TURN | NAT traversal for VoIP and WebRTC. | → | |
| 3690 | TCP | Subversion | Apache Subversion. | → | |
| 3702 | UDP | WS-Discovery | Used by ONVIF cameras and Windows Network discovery. | → | |
| 4000 | TCP | Dev server | Common dev port (Phoenix, ICQ). | → | |
| 4444 | TCP | Metasploit / I2P | Default Metasploit handler / I2P router console. | → | |
| 4500 | UDP | IPsec NAT-T | IPsec NAT traversal. | → | |
| 5000 | TCP | UPnP / Synology | UPnP control; Synology DSM HTTP. | → | |
| 5001 | TCP | Synology DSM HTTPS | Synology NAS web interface (HTTPS). | → | |
| 5060 | TCP/UDP | SIP | Session Initiation Protocol — VoIP signalling. | → | |
| 5061 | TCP | SIP-TLS | SIP over TLS. | → | |
| 5222 | TCP | XMPP client | XMPP/Jabber client connections. | → | |
| 5269 | TCP | XMPP server | XMPP server-to-server. | → | |
| 5353 | UDP | mDNS | Multicast DNS — Apple Bonjour, Avahi. | → | |
| 5432 | TCP | PostgreSQL | PostgreSQL database. | → | |
| 5500 | TCP | VNC reverse | VNC reverse / listening. | → | |
| 5555 | TCP | ADB / Freeciv | Android Debug Bridge over TCP. Should never face the internet. | → | |
| 5601 | TCP | Kibana | Kibana web UI. | → | |
| 5672 | TCP | AMQP | RabbitMQ default. | → | |
| 5683 | UDP | CoAP | Constrained Application Protocol — IoT. | → | |
| 5800 | TCP | VNC over HTTP | VNC web client. | → | |
| 5900 | TCP | VNC | Virtual Network Computing remote desktop. | → | |
| 5985 | TCP | WinRM HTTP | Windows Remote Management (HTTP). | → | |
| 5986 | TCP | WinRM HTTPS | Windows Remote Management (HTTPS). | → | |
| 6379 | TCP | Redis | Redis in-memory store. Bind to localhost or require authentication. | → | |
| 6443 | TCP | Kubernetes API | Kubernetes API server. | → | |
| 6667 | TCP | IRC | IRC server. | → | |
| 6881 | TCP/UDP | BitTorrent | BitTorrent peer port. | → | |
| 7547 | TCP | TR-069 / CWMP | ISP remote management of customer routers. | → | |
| 8000 | TCP | HTTP alt | Common dev/HTTP alt port. | → | |
| 8008 | TCP | HTTP alt | HTTP alt; used by Google Cast. | → | |
| 8080 | TCP | HTTP-proxy / alt | Common HTTP proxy and alternate web port. | → | |
| 8081 | TCP | HTTP alt | Alternate HTTP, often paired with 8080. | → | |
| 8086 | TCP | InfluxDB | InfluxDB HTTP API. | → | |
| 8088 | TCP | Hadoop / web alt | Hadoop ResourceManager UI. | → | |
| 8123 | TCP | Home Assistant | Home Assistant web UI. | → | |
| 8443 | TCP | HTTPS alt | HTTPS alt — common for self-hosted dashboards. | → | |
| 8888 | TCP | HTTP alt | HTTP alt; Jupyter notebooks default. | → | |
| 9000 | TCP | PHP-FPM / Portainer | PHP-FPM, Portainer. | → | |
| 9090 | TCP | Prometheus / Cockpit | Prometheus scrape; Cockpit web UI. | → | |
| 9100 | TCP | JetDirect / node_exporter | HP printer port; Prometheus node_exporter. | → | |
| 9200 | TCP | Elasticsearch | Elasticsearch HTTP API. | → | |
| 9418 | TCP | Git | git:// protocol. | → | |
| 10000 | TCP | Webmin | Webmin web admin. | → | |
| 11211 | TCP/UDP | Memcached | Memcached. UDP often abused for amplification — disable. | → | |
| 17500 | TCP/UDP | Dropbox LAN sync | Dropbox LAN sync. | → | |
| 19132 | UDP | Minecraft Bedrock | Minecraft Bedrock Edition default. | → | |
| 25565 | TCP | Minecraft Java | Minecraft Java Edition default. | → | |
| 27017 | TCP | MongoDB | MongoDB default. | → | |
| 32400 | TCP | Plex | Plex Media Server web UI. | → | |
| 49152 | TCP | UPnP dynamic / Xbox | Start of dynamic/private port range. | → | |
| 51820 | UDP | WireGuard | WireGuard VPN default. | → |
Web16 ports
Email7 ports
Remote access13 ports
Databases11 ports
VPN & Tunneling8 ports
File transfer & sharing12 ports
Directory & auth6 ports
Network & DNS16 ports
VoIP & Streaming6 ports
Containers & orchestration4 ports
IoT & discovery5 ports
Dev & monitoring14 ports
Gaming & P2P3 ports
Other15 ports
About TCP and UDP ports
A port is a 16-bit number (0–65535) that lets multiple services share a single IP address. Ports 0–1023 are well-known and require root privileges; 1024–49151 are registered to specific services; 49152–65535 are dynamic/private and used by clients. Closing unused ports on your router and changing default credentials prevents the most common automated attacks.
Common use cases
- 1Decide whether to open a port on your router — searching "25565" tells you it is the Minecraft server port, while "8080" is a common HTTP alternate (Tomcat, proxies). Know what you are exposing before forwarding it.
- 2Identify a mystery port from netstat or your firewall log — paste the number and immediately see whether it is SSH (22), RDP (3389), MySQL (3306), VNC (5900) or something benign.
- 3Plan firewall rules — confirm IANA-registered services for inbound rules so you don't accidentally allow Telnet (23) when you meant SSH (22) or block Outlook (587/993) when tightening SMTP.
Frequently asked questions
TCP versus UDP — what is the difference?+
TCP is connection-oriented and reliable (web, email, SSH). UDP is fire-and-forget and faster (DNS, VoIP, gaming). Some ports run on both — for example DNS uses TCP/53 and UDP/53.
What are well-known, registered and ephemeral ports?+
Well-known: 0–1023 (assigned by IANA, reserved). Registered: 1024–49151 (apps register with IANA). Ephemeral: 49152–65535 (operating system picks a random one for outbound connections).
Should I open port X on my router?+
Only if you understand the service behind it and trust the device receiving traffic. Internal-only protocols (Telnet, SMB, RDP) should rarely be exposed to the internet.