{# ================================================================ HEADER ================================================================ #}
{# ================================================================ MAIN CONTENT ================================================================ #}

Port Numbers Reference

Browse 508 well-known and commonly used TCP/UDP ports — organized by service category with security risk levels.

Critical Risk High Risk Medium Risk Low Risk

Database (43)

66 Oracle SQL*NET

TCP/UDP — Port 66 was historically associated with Oracle SQL*NET, an early version of Oracle's proprietary network …

Low
118 SQL Services

TCP/UDP — Port 118 was an early IANA assignment for generic SQL database services. Unused today as …

Low
156 SQL Service

TCP/UDP — Port 156 is an IANA-registered SQL Service port, an early generic placeholder. Unused in contemporary …

Low
210 ANSI Z39.50

TCP — Port 210 is assigned to ANSI Z39.50, a client-server protocol for searching and retrieving information …

Medium
635 RLZ DBase

TCP/UDP — RLZ DBase, a legacy database protocol assigned by IANA. Used in early enterprise database replication …

Low
800 mdbs_daemon

TCP/UDP — mdbs_daemon, IANA-registered for the MDBS (Multi-Dimensional Bar System) daemon service. A legacy enterprise database access …

Low
999 Applix

TCP — Applix enterprise business intelligence software, later acquired by IBM and rebranded as IBM Cognos TM1 …

Medium
1433 MS SQL

TCP — Microsoft SQL Server. The default port for Microsoft's relational database management system. Should never be …

High
1434 MS SQL Browser

UDP — Microsoft SQL Server Browser Service. Provides instance discovery and connection information for named SQL Server …

High
1521 Oracle DB

TCP — Oracle Database listener. The default port for Oracle Database TNS (Transparent Network Substrate) connections. Enterprise …

High
1526 Oracle Database

TCP — Port 1526 is an alternative listener port used by Oracle Database, alongside the primary port …

High
2181 Apache ZooKeeper

TCP — Port 2181 is the default client port for Apache ZooKeeper, a distributed coordination service. Applications …

High
2379 etcd Client

TCP — Port 2379 is the client communication port for etcd, the distributed key-value store used by …

Critical
2380 etcd Peer

TCP — Port 2380 is used for etcd peer-to-peer communication between etcd cluster members. etcd nodes use …

Critical
2399 FileMaker Data API

TCP — Port 2399 is used by FileMaker Pro for network data sharing, allowing FileMaker clients to …

Medium
2424 OrientDB

TCP — Port 2424 is the default binary protocol port for OrientDB, a multi-model NoSQL database supporting …

Medium
2483 Oracle DB (TCP)

TCP — Port 2483 is used by Oracle Database for client connections using the native TCP protocol …

High
2484 Oracle DB (SSL)

TCP — Port 2484 is used by Oracle Database for encrypted SSL/TLS client connections. This port provides …

Medium
2638 SAP SQL Anywhere

TCP — Port 2638 is the default port for SAP SQL Anywhere (formerly Sybase SQL Anywhere) database …

Medium
3050 Firebird Database

TCP — Port 3050 is the default port for Firebird (formerly InterBase), an open-source relational database management …

High
3306 MySQL

TCP — MySQL and MariaDB database server. The default port for the world's most popular open-source relational …

High
4022 SQL Server Debug

TCP — Port 4022 is used by Microsoft SQL Server for database mirroring endpoints and Service Broker …

High
5432 PostgreSQL

TCP — PostgreSQL database server. The default port for the advanced open-source relational database known for reliability, …

High
5984 CouchDB

TCP — Port 5984 is the default HTTP API port for Apache CouchDB, a document-oriented NoSQL database …

Critical
6379 Redis

TCP — Redis in-memory data store. A high-performance key-value database used for caching, session storage, message queues, …

High
7000 Cassandra Internode

TCP — Port 7000 is used by Apache Cassandra for internode cluster communication (non-SSL). Cassandra nodes in …

High
7199 Cassandra JMX

TCP — Port 7199 is used by Apache Cassandra for JMX (Java Management Extensions) monitoring and management. …

Critical
7474 Neo4j HTTP

TCP — Port 7474 is the default HTTP port for Neo4j, the world's most popular graph database. …

High
8086 InfluxDB HTTP API

TCP — Port 8086 is the default HTTP API port for InfluxDB, a popular open-source time series …

Critical
8088 Riak HTTP / Spark Master

TCP — Port 8088 is used by Riak, a distributed NoSQL database, for its HTTP API, and …

Medium
8091 Couchbase Web Console

TCP — Port 8091 is the primary administrative web console and REST API port for Couchbase Server, …

Critical
8983 Apache Solr

TCP — Port 8983 is the default HTTP port for Apache Solr, an open-source enterprise search platform …

Critical
9042 Cassandra CQL Native

TCP — Port 9042 is the native CQL (Cassandra Query Language) port for Apache Cassandra, used by …

Critical
9200 Elasticsearch

TCP — Elasticsearch REST API. The HTTP endpoint for the distributed search and analytics engine used for …

High
9300 Elasticsearch Transport

TCP — Elasticsearch inter-node transport protocol. Used for communication between nodes in an Elasticsearch cluster for data …

High
11211 Memcached

TCP/UDP — Memcached distributed memory caching system. High-performance key-value cache used to speed up web applications by …

High
26257 CockroachDB

TCP — Default port for CockroachDB, a distributed SQL database designed for cloud-native deployments. Used for both …

High
27017 MongoDB

TCP — MongoDB NoSQL database server. The default port for the document-oriented database known for flexible schemas …

High
27018 MongoDB Shard Server

TCP — Default port for MongoDB shard server processes (mongod in a sharded cluster). Used for internal …

High
27019 MongoDB Config Server

TCP — Default port for MongoDB config server processes in a sharded cluster, which store cluster metadata …

High
28017 MongoDB HTTP Status

TCP — Previously used by MongoDB for its built-in HTTP status interface and REST API, deprecated in …

Critical
50000 IBM DB2

TCP — Default port for IBM DB2 database server client connections. Also used by SAP HANA and …

High
54321 PostgreSQL (Alternate) / Climate Talk

TCP — Used as an alternate or development port for PostgreSQL databases in some configurations, particularly Docker-based …

Medium

DNS (9)

Email (21)

25 SMTP

TCP — Simple Mail Transfer Protocol. The standard protocol for sending email between mail servers. Often targeted …

Medium
109 POP2

TCP — POP2 (Post Office Protocol version 2) is the predecessor to POP3, defined in RFC 937. …

Medium
110 POP3

TCP — Post Office Protocol v3. Retrieves email from a mail server, typically downloading messages to the …

Medium
143 IMAP

TCP — Internet Message Access Protocol. Retrieves and manages email on a mail server, keeping messages on …

Medium
158 PCMail Server

TCP/UDP — PCMail Server was an early distributed mail architecture protocol defined in RFC 1056. Entirely obsolete.

Low
174 MAILQ

TCP/UDP — MAILQ was an early protocol for querying the state of a mail server's outbound message …

Low
209 QMTP

TCP — QMTP (Quick Mail Transfer Protocol) is a replacement for SMTP designed for high-performance mail transfer …

Low
220 IMAP3

TCP — Port 220 is assigned to IMAP3, an early version of the IMAP email retrieval protocol …

Medium
465 SMTPS

TCP — SMTP over SSL/TLS (implicit TLS). Provides encrypted email submission from clients to mail servers. Reintroduced …

Low
587 SMTP Submission

TCP — Mail Message Submission (MSA). The recommended port for email clients to submit outgoing mail using …

Low
674 ACAP

TCP — Application Configuration Access Protocol (ACAP), defined in RFC 2244, designed for server-side storage of email …

Low
691 MS Exchange Routing

TCP — Microsoft Exchange Server Link State routing protocol, used internally by Exchange 2000/2003 servers for routing …

Medium
783 SpamAssassin

TCP — SpamAssassin spamd daemon, the server process of the widely-used Apache SpamAssassin open-source email spam filter. …

Low
987 Microsoft MAPI/HTTP

TCP — Microsoft Exchange MAPI over HTTP, introduced in Exchange 2013 SP1 as a replacement for Outlook …

Medium
993 IMAPS

TCP — IMAP over SSL/TLS. Encrypted version of IMAP for secure email access from multiple devices. Uses …

Low
995 POP3S

TCP — POP3 over SSL/TLS. Encrypted version of POP3 for secure email retrieval. Uses implicit TLS to …

Low
1352 Lotus Notes

TCP — Port 1352 is used by IBM Lotus Notes and Domino server for client-server communication. It …

Medium
2095 cPanel Webmail

TCP — Port 2095 provides access to cPanel's webmail interface (RoundCube, Horde, SquirrelMail) over HTTP. Hosting users …

Medium
2096 cPanel Webmail SSL

TCP — Port 2096 provides secure HTTPS access to cPanel's webmail interface, encrypting email credentials and message …

Low
2525 SMTP Alternate

TCP — Port 2525 is a commonly used alternate SMTP port for outbound email submission, particularly useful …

Medium
7071 Zimbra Administration

TCP — Port 7071 is the default HTTPS port for the Zimbra Collaboration Suite administration console. System …

Critical

File Transfer (40)

20 FTP Data

TCP — FTP data transfer channel. Used in active mode FTP for the server to establish a …

Critical
21 FTP Control

TCP — FTP control channel. Handles authentication, directory listing commands, and file transfer negotiation. Sends usernames and …

Critical
69 TFTP

UDP — Trivial File Transfer Protocol. A simplified file transfer protocol with no authentication or encryption. Commonly …

High
82 XFER Utility

TCP — Port 82 is registered with IANA as the XFER file transfer utility, an obscure early …

Low
115 SFTP (Simple FTP)

TCP — Port 115 is the Simple File Transfer Protocol (SFTP), defined in RFC 913. Not to …

Medium
117 UUCP Path

TCP — UUCP Path Service provided routing information for the UUCP (Unix-to-Unix Copy Protocol) bang-path email and …

Low
139 NetBIOS Session

TCP — NetBIOS Session Service. Establishes sessions for file and printer sharing on legacy Windows networks (SMB …

High
152 BFTP

TCP/UDP — BFTP (Background File Transfer Program) was designed for asynchronous, low-priority file transfers. Defined in RFC …

Low
191 Prospero

TCP/UDP — The Prospero Directory Service was a distributed filesystem and resource location protocol from the early …

Low
369 rpc2portmap

TCP — Port 369 is assigned to rpc2portmap, used by Coda filesystem's RPC2 portmapper service. Limited to …

Medium
371 Clearcase

TCP/UDP — Port 371 is assigned to ClearCase, IBM Rational ClearCase's version control and software configuration management …

High
411 Direct Connect Hub

TCP — Port 411 is commonly associated with Direct Connect (DC++) Hub, a peer-to-peer file sharing network …

Medium
445 SMB

TCP — Server Message Block. Provides shared access to files, printers, and serial ports over a network. …

High
497 Retrospect

TCP — Port 497 is assigned to Retrospect backup software for network backup client-server communication. Exposure risks …

High
524 NCP

TCP/UDP — Port 524 is assigned to NCP (NetWare Core Protocol), Novell NetWare's primary protocol for file …

High
540 UUCP

TCP — Port 540 is assigned to UUCP (Unix-to-Unix Copy Protocol), one of the earliest Unix networking …

Low
548 AFP

TCP — Port 548 is assigned to AFP (Apple Filing Protocol), used by macOS for file sharing. …

High
556 Remotefs

TCP — Port 556 is assigned to Remotefs (rfs), an early Sun Microsystems alternative to NFS. Entirely …

Medium
564 9P

TCP — Port 564 is associated with 9P (Plan 9 File Protocol), from Bell Labs Plan 9 …

Medium
625 Apple Xsan

TCP — Used by Apple Xsan (formerly StorNext SAN) filesystem, a shared storage area network solution for …

Medium
860 iSCSI

TCP — Internet Small Computer System Interface (iSCSI), defined in RFC 7143, encapsulates SCSI storage commands over …

Critical
873 rsync

TCP — rsync file synchronization protocol. Efficiently transfers and synchronizes files between systems using delta encoding to …

Medium
897 Brocade SMI-S

TCP — Brocade Storage Management Initiative Specification (SMI-S) service, used by Brocade SAN switches to expose storage …

High
898 Brocade SMI-S SSL

TCP — Brocade Storage Management Initiative Specification (SMI-S) over SSL/TLS, the encrypted variant of Brocade SAN management …

Medium
988 Lustre

TCP — Lustre high-performance distributed filesystem, used in HPC supercomputing storage clusters. Dominant parallel filesystem in 7 …

High
989 FTPS Data

TCP — FTP data channel over TLS/SSL (implicit). The encrypted version of the FTP data channel (port …

Low
990 FTPS Control

TCP — FTP control channel over TLS/SSL (implicit). The encrypted version of the FTP control channel (port …

Low
1214 Kazaa

TCP — Port 1214 was used by Kazaa and Morpheus, popular peer-to-peer file sharing applications in the …

Medium
2049 NFS

TCP/UDP — Network File System. Allows remote access to files over a network as if they were …

High
2710 BitTorrent Tracker

TCP/UDP — Port 2710 is commonly used by XBT Tracker and other BitTorrent trackers for peer discovery …

Medium
2811 GlobeFTP / GridFTP

TCP — Port 2811 is used by Globus GridFTP for high-performance, secure file transfer in scientific computing …

Medium
3260 iSCSI

TCP — Port 3260 is the standard port for iSCSI (Internet Small Computer System Interface), a protocol …

Critical
4662 eMule / eDonkey

TCP/UDP — Port 4662 is used by the eMule and eDonkey2000 peer-to-peer file sharing applications for client-to-server …

Medium
6346 Gnutella

TCP/UDP — Port 6346 is used by the Gnutella peer-to-peer file sharing protocol, which powers clients like …

Medium
6881 BitTorrent

TCP/UDP — Port 6881 is the first in the default range (6881-6889) used by BitTorrent clients for …

Medium
8112 Deluge Web UI

TCP — Port 8112 is the default port for the Deluge BitTorrent client's web interface. Deluge is …

Medium
9091 Transmission Web UI

TCP — Port 9091 is the default web interface port for Transmission, a popular lightweight BitTorrent client …

Medium
17500 Dropbox LAN Sync

TCP/UDP — Used by Dropbox for LAN sync discovery and file transfer between devices on the same …

Low
22000 Syncthing

TCP/UDP — Default TCP/UDP port used by Syncthing for peer-to-peer file synchronization between devices. Syncthing is an …

Low
51413 BitTorrent

TCP/UDP — Default port for Transmission BitTorrent client. Used for peer-to-peer file sharing using the BitTorrent protocol. …

Medium

Gaming (17)

666 Doom

TCP/UDP — Originally used by the game Doom for multiplayer over IPX networks. Also assigned to MDQS …

Medium
1119 Battle.net Chat

TCP — Port 1119 is used by Blizzard Entertainment's Battle.net gaming platform for chat and friend list …

Low
2302 ArmA / Halo Game Server

UDP — Port 2302 is the default game server port for ArmA (Armed Assault) series games and …

Low
2456 Valheim Game Server

UDP — Port 2456 is the default game server port for Valheim, a popular Viking survival game. …

Low
3074 Xbox Live

TCP/UDP — Port 3074 is the primary port used by Microsoft Xbox Live for online gaming services, …

Low
3724 World of Warcraft

TCP/UDP — Port 3724 is the primary game port used by Blizzard Entertainment's World of Warcraft and …

Low
7777 iChat / Game Servers

TCP/UDP — Port 7777 is a popular choice for game servers and custom applications, used by iChat …

Medium
8767 TeamSpeak 2

UDP — Port 8767 is the default UDP port for TeamSpeak 2 (legacy) voice communication servers used …

Low
14567 Battlefield / Game Servers

UDP — Used by various Battlefield series game servers and several indie game titles for multiplayer communications. …

Low
19132 Minecraft Bedrock

UDP — Default port for Minecraft Bedrock Edition servers used on consoles, mobile, and Windows 10 platforms. …

Low
21025 Starbound Game Server

TCP — Default port for Starbound multiplayer game servers. Starbound is a sandbox exploration game that uses …

Low
25565 Minecraft

TCP — Minecraft Java Edition multiplayer server. The default port for hosting Minecraft game servers that players …

Medium
25575 Minecraft RCON

TCP — Default RCON (Remote Console) port for Minecraft Java Edition servers. Allows administrators to send commands …

High
26000 Quake Game Server

UDP — The original default port for id Software's Quake game servers, later carried over to Quake …

Low
27015 Steam / Source Engine

UDP — Valve Source Engine and Steam game servers. Used by Counter-Strike, Team Fortress 2, Garry's Mod, …

Medium
28015 Rust Game Server

UDP — Default game port for Rust, a popular survival multiplayer game. Players connect to Rust servers …

Low
43594 RuneScape

TCP — RuneScape game client connection port. Used by the popular MMORPG RuneScape for client-server communication during …

Low

Messaging (49)

18 MSP

TCP/UDP — Message Send Protocol. A simple protocol for sending short messages between users on different hosts. …

Medium
87 ttylink / link

TCP — Port 87 (also called 'link') was used for terminal-to-terminal chat on UNIX systems. It predates …

Low
119 NNTP

TCP — NNTP (Network News Transfer Protocol), defined in RFC 977 and updated in RFC 3977, is …

Medium
194 IRC

TCP/UDP — IRC (Internet Relay Chat) is a text-based real-time messaging protocol defined in RFC 1459. While …

High
218 MPP

TCP — Port 218 is assigned to MPP (Message Posting Protocol), designed for posting messages to bulletin …

Low
433 NNSP

TCP — Port 433 is assigned to NNSP (Network News Transfer Protocol Security), used for secure NNTP …

Low
444 SNPP

TCP — Port 444 is assigned to SNPP (Simple Network Paging Protocol), defined in RFC 1861, used …

Low
504 Citadel

TCP — Port 504 is assigned to Citadel, an open-source groupware and messaging server providing email, calendaring, …

Medium
510 FCP

TCP — Port 510 is assigned to FCP (FirstClass Protocol), used by FirstClass email and conferencing system. …

Medium
517 Talk

UDP — Port 517 is assigned to Talk, a real-time text chat program for Unix systems. Obsolete …

Low
518 NTalk

UDP — Port 518 is assigned to NTalk (New Talk), an updated version of the Unix Talk …

Low
531 AOL IM / IRC

TCP — Port 531 is associated with both AOL Instant Messenger and as an alternate IRC port. …

Low
532 netnews

TCP — Port 532 is assigned to netnews, used for Usenet news reading and article transfer. Usage …

Low
563 NNTPS

TCP — Port 563 is assigned to NNTPS (Network News Transfer Protocol over TLS), the encrypted version …

Low
706 SILC

TCP — Secure Internet Live Conferencing (SILC), an encrypted messaging and conferencing protocol with end-to-end encryption. Largely …

Low
720 SMQP

TCP — Simple Message Queue Protocol (SMQP), an early lightweight message queuing protocol predating modern alternatives like …

Low
994 IRCS

TCP — Internet Relay Chat over SSL/TLS (IRCS). Most IRC networks use port 6697 in practice rather …

Low
1337 WASTE / Various

TCP — Port 1337 is associated with WASTE, a peer-to-peer encrypted messaging and file sharing application. It …

High
1414 IBM MQ

TCP — Port 1414 is the default listener port for IBM MQ (formerly WebSphere MQ / MQSeries) …

Medium
1503 Windows Live Messenger

TCP — Port 1503 was used by Microsoft NetMeeting and Windows Live Messenger (MSN Messenger) for data …

Low
1533 IBM Sametime

TCP — Port 1533 is used by IBM Sametime, an enterprise instant messaging and web conferencing platform. …

Low
1801 Microsoft MSMQ

TCP/UDP — Port 1801 is used by Microsoft Message Queuing (MSMQ) for sending and receiving messages between …

Medium
1863 MSN Messenger

TCP — Port 1863 was used by MSN Messenger (Windows Live Messenger) for instant messaging, presence, and …

Low
1883 MQTT

TCP — Message Queuing Telemetry Transport. A lightweight publish-subscribe messaging protocol designed for IoT devices, sensor networks, …

Medium
2195 Apple Push Notification (legacy)

TCP — Port 2195 was the original port used by Apple Push Notification service (APNs) for sending …

Low
2196 Apple Push Notification Feedback

TCP — Port 2196 was used by Apple Push Notification service (APNs) feedback service, which provided app …

Low
4000 ICQ / Diablo II

TCP/UDP — Port 4000 is associated with ICQ instant messaging (legacy) and Blizzard's Diablo II game server. …

Medium
4222 NATS Messaging

TCP — Port 4222 is the default client connection port for NATS, a high-performance open-source messaging system …

Medium
4369 EPMD (Erlang Port Mapper)

TCP — Port 4369 is used by EPMD (Erlang Port Mapper Daemon), a port mapper service for …

High
5050 Yahoo Messenger

TCP — Port 5050 was the primary port used by Yahoo Messenger for instant messaging communications. It …

Low
5060 SIP

TCP/UDP — Session Initiation Protocol. Signals and controls VoIP (Voice over IP) phone calls, video conferencing, and …

Medium
5061 SIPS

TCP — SIP over TLS (Secure SIP). Encrypted version of the Session Initiation Protocol for secure VoIP …

Low
5190 AOL Instant Messenger (AIM)

TCP — Port 5190 is the port used by AOL Instant Messenger (AIM) and the OSCAR (Open …

Low
5222 XMPP Client

TCP — Port 5222 is the standard port for XMPP (Extensible Messaging and Presence Protocol) client connections, …

Low
5223 XMPP Client SSL / Apple Push

TCP — Port 5223 is used for SSL-encrypted XMPP client connections and historically by Apple Push Notification …

Low
5228 Google Cloud Messaging / Android

TCP — Port 5228 is used by Google Cloud Messaging (GCM) and Firebase Cloud Messaging (FCM) for …

Low
5269 XMPP Server

TCP — Port 5269 is the standard port for server-to-server XMPP federation, allowing different XMPP server instances …

Low
5280 XMPP HTTP Binding (BOSH)

TCP — Port 5280 is used by ejabberd and other XMPP servers for HTTP-based XMPP connections via …

Medium
5672 AMQP

TCP — Advanced Message Queuing Protocol. Used by RabbitMQ and other message brokers for reliable, asynchronous message …

Medium
6660 IRC

TCP — Internet Relay Chat. A real-time text messaging protocol for group and private communication. Port range …

Medium
6667 IRC (Internet Relay Chat)

TCP — Port 6667 is the standard port for IRC (Internet Relay Chat), one of the oldest …

High
6697 IRC over TLS

TCP — IRC over TLS/SSL. The encrypted version of Internet Relay Chat, providing secure, private real-time messaging …

Low
8883 MQTT over TLS

TCP — MQTT over TLS/SSL. Encrypted version of MQTT (port 1883) for secure IoT device communication and …

Low
9092 Apache Kafka

TCP — Port 9092 is the default port for Apache Kafka brokers, one of the most widely …

Critical
9093 Kafka SSL / Prometheus Alertmanager

TCP — Port 9093 is used by Apache Kafka for SSL/TLS-encrypted broker connections, providing a secure alternative …

Medium
11300 Beanstalkd

TCP — Default port for Beanstalkd, a simple and fast general-purpose work queue server. It is used …

Medium
15672 RabbitMQ Management

TCP — The HTTP management console port for RabbitMQ message broker. It provides a web UI and …

High
36330 Mumble (Unofficial)

TCP/UDP — An alternate port sometimes used by Mumble voice chat servers as a variant of the …

Low
64738 Mumble

TCP/UDP — Default port for Mumble, an open-source low-latency voice over IP (VoIP) application designed for gaming …

Low

Other (61)

43 WHOIS

TCP — WHOIS protocol. Queries domain name registration databases to retrieve information about domain ownership, registration dates, …

Low
63 Whois++

TCP — Whois++ was an extended version of the WHOIS protocol designed to provide richer directory queries …

Low
104 DICOM

TCP — DICOM (Digital Imaging and Communications in Medicine) is the international standard for medical imaging data …

Critical
105 CCSO Nameserver

TCP — The CCSO Nameserver (also called qi or ph) was a directory service developed at the …

Low
170 Network PostScript

TCP — Network PostScript was assigned for printing using the Adobe PostScript page description language over a …

Low
200 IMPLink

TCP — IMPLink (Interface Message Processor Link) was used in the early ARPANET to connect hosts to …

Low
201 AppleTalk

TCP — Port 201 is assigned to AppleTalk Routing Maintenance, part of Apple's legacy AppleTalk networking suite …

Low
213 IPX

TCP/UDP — Port 213 is assigned to IPX (Internetwork Packet Exchange), Novell's legacy networking protocol used in …

Low
264 BGMP

TCP — Port 264 is assigned to BGMP (Border Gateway Multicast Protocol), an experimental protocol for inter-domain …

Low
350 MATIP-A

TCP — Port 350 is assigned to MATIP Type A (Mapping of Airline Traffic over Internet Protocol), …

Low
351 MATIP-B

TCP — Port 351 is assigned to MATIP Type B, a variant of MATIP used for carrying …

Low
387 AURP

TCP — Port 387 is assigned to AURP (AppleTalk Update-Based Routing Protocol), used to tunnel AppleTalk traffic …

Low
434 MobileIP-Agent

TCP/UDP — Port 434 is assigned to MobileIP-Agent, used by Mobile IP home and foreign agents to …

Medium
475 Cybercash

TCP — Port 475 is assigned to Cybercash, an early internet payment processing protocol from the mid-1990s. …

Low
502 Modbus

TCP — Port 502 is assigned to Modbus, widely used in industrial control systems (ICS), SCADA systems, …

Critical
542 commerce

TCP/UDP — Port 542 is assigned to 'commerce' in the IANA registry for commercial transaction processing. Never …

Low
604 TUNNEL

TCP — TUNNEL profile as defined in RFC 3620, a BEEP profile for creating tunneled connections through …

Medium
639 MSDP

TCP — Multicast Source Discovery Protocol (MSDP), defined in RFC 3618, used by PIM-SM to share active …

Medium
646 LDP

TCP/UDP — Label Distribution Protocol (LDP), defined in RFC 5036, used in MPLS networks to distribute label …

Medium
648 RRP

TCP — Registry Registrar Protocol (RRP), defined in RFC 2832, was the original protocol for domain registrar-to-registry …

Low
651 IEEE-MMS

TCP/UDP — IEEE Manufacturing Message Specification (MMS), defined in ISO 9506, used in industrial automation and SCADA …

High
654 AODV

UDP — Ad hoc On-Demand Distance Vector (AODV) routing protocol, defined in RFC 3561, used in mobile …

Medium
688 REALM-RUSD

TCP/UDP — REALM-RUSD (Realm Roaming User Session Database) protocol, used in early mobile network roaming session management …

Low
695 IEEE-MMS-SSL

TCP — IEEE Manufacturing Message Specification (MMS) over SSL/TLS, the encrypted variant of the MMS industrial control …

Medium
698 OLSR

UDP — Optimized Link State Routing (OLSR) protocol, defined in RFC 3626, is a proactive routing protocol …

Low
700 EPP

TCP — Extensible Provisioning Protocol (EPP), defined in RFC 5734, the standard protocol for domain registrar-to-registry communication. …

Low
701 LMP

TCP — Link Management Protocol (LMP), defined in RFC 4204, used in optical and MPLS networks to …

Low
702 IRIS-BEEP

TCP — Internet Registry Information Service (IRIS) over BEEP transport, defined in RFC 3983. Provides standardized protocol …

Low
711 TDP

TCP — Tag Distribution Protocol (TDP), a Cisco proprietary precursor to the IETF-standardized LDP on port 646, …

Medium
712 TBRPF

UDP — Topology Broadcast Based on Reverse-Path Forwarding (TBRPF), defined in RFC 3684, a link-state routing protocol …

Low
830 NETCONF SSH

TCP — NETCONF over SSH, defined in RFC 6242, provides XML-based network device configuration management. Primary method …

Medium
831 NETCONF BEEP

TCP — NETCONF over BEEP transport, defined in RFC 4744. An alternative NETCONF transport with less deployment …

Medium
832 NETCONF SOAP/HTTPS

TCP — NETCONF over SOAP with HTTPS transport, defined in RFC 4743. Used where firewall policies favor …

Low
861 OWAMP Control

TCP — One-Way Active Measurement Protocol (OWAMP) control channel, defined in RFC 4656, for measuring one-way network …

Low
862 TWAMP Control

TCP — Two-Way Active Measurement Protocol (TWAMP) control channel, defined in RFC 5357, for measuring round-trip network …

Low
900 OMG Initial Refs

TCP — OMG Initial References, used by CORBA for obtaining initial object references. CORBA was dominant enterprise …

Medium
991 NAS

TCP/UDP — Netnews Administration System (NAS), defined in RFC 4707, for centralized management of NNTP news server …

Low
1000 Cadlock2

TCP — Cadlock2 network locking protocol, used in CAD/CAM license management systems to enforce concurrent use licenses …

Low
3690 SVN (Subversion)

TCP — Port 3690 is the default port for Apache Subversion (SVN), a widely used version control …

Medium
4840 OPC UA

TCP — Port 4840 is the default port for OPC UA (OPC Unified Architecture), an industrial communication …

High
5683 CoAP (Constrained Application Protocol)

UDP — Port 5683 is the standard port for CoAP (Constrained Application Protocol), a lightweight RESTful protocol …

Medium
8042 YARN NodeManager

TCP — Port 8042 is the default port for the Apache Hadoop YARN NodeManager web interface. NodeManagers …

High
8123 Home Assistant

TCP — Port 8123 is the default HTTP port for Home Assistant, the most popular open-source home …

High
8332 Bitcoin RPC (Testnet)

TCP — Port 8332 is the default RPC (Remote Procedure Call) port for Bitcoin Core on the …

Critical
8333 Bitcoin P2P

TCP — Port 8333 is the standard peer-to-peer communication port for the Bitcoin network, used by Bitcoin …

Low
8545 Ethereum JSON-RPC

TCP — Port 8545 is the default JSON-RPC port for Ethereum nodes (go-ethereum/geth and others) for interacting …

Critical
9418 Git

TCP — Git protocol (git://). Provides fast, read-only access to Git repositories without authentication or encryption. Used …

Medium
9735 Lightning Network (Bitcoin)

TCP — Port 9735 is the default peer-to-peer port for Lightning Network nodes, a Layer 2 payment …

Low
9870 HDFS NameNode Web UI

TCP — Port 9870 is the default web UI port for the Apache Hadoop HDFS NameNode in …

High
9999 Urchin / Distinct32

TCP — Port 9999 is used by various applications including Urchin web analytics (predecessor to Google Analytics), …

Medium
13720 NetBackup Client

TCP — Used by Veritas NetBackup for client-to-server backup communications. The NetBackup client daemon listens on this …

Medium
18080 Monero P2P

TCP — Default P2P communication port for the Monero cryptocurrency node. Used for block and transaction propagation …

Medium
18081 Monero RPC

TCP — Default RPC (Remote Procedure Call) port for the Monero cryptocurrency daemon. Allows wallets and external …

High
18333 Bitcoin Testnet P2P

TCP — Used for Bitcoin testnet peer-to-peer network communication between nodes. Testnet is used by developers to …

Low
30303 Ethereum P2P

TCP/UDP — Default peer-to-peer networking port for Ethereum nodes running Geth and other Ethereum clients. Used for …

Low
34567 CCTV / DVR HTTP

TCP — Widely used as a default HTTP web interface port on Chinese-manufactured IP cameras, DVR, and …

Critical
37777 Dahua DVR TCP

TCP — Default TCP client access port for Dahua brand DVR, NVR, and IP camera systems. Used …

Critical
44158 Helium Blockchain

TCP — Used by Helium network hotspot miners for peer-to-peer blockchain communication. Required to be forwarded for …

Low
47808 BACnet

UDP — The standard port for BACnet (Building Automation and Control Network) over IP protocol. Used in …

High
50070 Hadoop NameNode HTTP

TCP — Default HTTP web UI port for Apache Hadoop's HDFS NameNode. Provides access to the file …

High
55555 Custom / Development

TCP/UDP — A repeating-digit port commonly chosen for development, testing, and custom application use due to its …

Medium

Remote Access (41)

22 SSH

TCP — Secure Shell. Provides encrypted remote login, command execution, and file transfer (SCP/SFTP). The standard for …

Low
23 Telnet

TCP — Telnet protocol. Provides unencrypted text-based remote login to network devices and servers. All data including …

Critical
89 SU/MIT Telnet Gateway

TCP — Port 89 was assigned to the SU/MIT Telnet Gateway, an early ARPANET service that provided …

Low
95 SUPDUP

TCP — SUPDUP was a terminal protocol developed at MIT in the 1970s as an enhancement to …

Low
107 Remote Telnet

TCP — Port 107 was assigned as an alternate or gateway-mediated Telnet service. This service is completely …

Medium
177 XDMCP

UDP — XDMCP (X Display Manager Control Protocol) allows X Window System display terminals to request a …

High
259 ESRO

TCP/UDP — Port 259 is assigned to ESRO (Efficient Short Remote Operations), a lightweight protocol designed for …

Low
311 macOS Server Admin

TCP — Port 311 is used by Apple macOS Server for its web-based management interface. Exposing this …

High
384 ARNS

TCP — Port 384 is assigned to ARNS (A Remote Network Server System), an early protocol for …

Low
512 rexec

TCP — Port 512 is assigned to rexec (Remote Process Execution). Transmits credentials in plaintext and has …

Critical
513 rlogin

TCP — Port 513 is assigned to rlogin, which relies on a deeply flawed IP-based trust model …

Critical
530 RPC

TCP/UDP — Port 530 is assigned to RPC (Remote Procedure Call) as a registered port. RPC exposure …

High
543 Kerberos Login

TCP — Port 543 is assigned to klogin, the Kerberos-authenticated rlogin service. Superseded by Kerberos-authenticated SSH.

High
544 krcmd

TCP — Port 544 is assigned to krcmd (Kerberos Remote Command), the Kerberos-authenticated version of rsh. Superseded …

High
653 SupportSoft

TCP/UDP — SupportSoft remote support and diagnostics protocol, used by the SupportSoft enterprise remote assistance platform. Common …

Medium
660 macOS Server Admin

TCP — Apple macOS Server administration protocol, used by the macOS Server Admin application for remote server …

High
888 accessbuilder

TCP — 3Com AccessBuilder remote access server management protocol. Entirely obsolete following the decline of dedicated hardware-based …

Low
902 VMware Server

TCP/UDP — VMware Server and ESXi management port, used for host-agent communication including the VMware Authentication Daemon. …

High
903 VMware Remote Console

TCP — VMware Remote Console (VMRC) port, used for remote access to virtual machine consoles through VMware …

High
992 Telnets

TCP — Telnet over SSL/TLS. While it addresses Telnet's plaintext problem, SSH on port 22 is universally …

Medium
1494 Citrix ICA

TCP — Port 1494 is used by Citrix Independent Computing Architecture (ICA) protocol for virtual desktop and …

Medium
1604 Citrix / DPP

TCP/UDP — Port 1604 is associated with Citrix systems and the Datagram Protocol for remote application delivery. …

Low
2222 Alternate SSH / DirectAdmin

TCP — Port 2222 is commonly used as an alternate SSH port to reduce automated brute-force attacks …

Medium
2598 Citrix Reliable ICA

TCP — Port 2598 is used by Citrix for Reliable ICA (RICAL), an enhanced version of the …

Medium
3283 Apple Remote Desktop

TCP/UDP — Port 3283 is used by Apple Remote Desktop (ARD) for remote management and screen sharing …

High
3389 RDP

TCP/UDP — Remote Desktop Protocol. Provides graphical remote access to Windows desktops and servers. A primary target …

High
5037 Android Debug Bridge (ADB)

TCP — Port 5037 is the local host port used by the Android Debug Bridge (ADB) server …

Critical
5500 VNC Remote Desktop (Reverse)

TCP — Port 5500 is used for reverse VNC (Virtual Network Computing) connections, where the remote desktop …

High
5555 Android ADB (Remote) / FreeBSD

TCP — Port 5555 is used by Android Debug Bridge (ADB) for remote TCP connections to Android …

Critical
5631 PCAnywhere Data

TCP — Port 5631 is used by Symantec (now Broadcom) pcAnywhere for remote desktop data transfer. PCAnywhere …

Critical
5800 VNC HTTP (Java Viewer)

TCP — Port 5800 is used by VNC servers to serve an embedded Java applet-based web viewer, …

High
5900 VNC

TCP — Virtual Network Computing. Provides graphical remote desktop access using the RFB (Remote Framebuffer) protocol. Cross-platform …

High
5901 VNC Display 1

TCP — Port 5901 is used by VNC (Virtual Network Computing) for the second virtual display (display …

High
5938 TeamViewer

TCP/UDP — Port 5938 is the primary port used by TeamViewer for remote desktop and remote support …

Medium
5985 WinRM HTTP

TCP — Port 5985 is used by Windows Remote Management (WinRM) for HTTP-based remote PowerShell and management …

Critical
5986 WinRM HTTPS

TCP — Port 5986 is used by Windows Remote Management (WinRM) for HTTPS-encrypted remote PowerShell and management …

High
6000 X11 (X Window System)

TCP — Port 6000 is the base port for X11 (X Window System), the display server protocol …

Critical
8291 Winbox (MikroTik)

TCP — Port 8291 is used by MikroTik's proprietary Winbox management protocol for configuring RouterOS-based routers and …

Critical
20000 Webmin / DNP3

TCP — Used by Webmin, a web-based Linux/Unix system administration interface. Also assigned to DNP3 (Distributed Network …

High
24800 Synergy / Barrier

TCP — Default port for Synergy and its open-source fork Barrier, software that shares a keyboard and …

Medium
60000 Mosh (Mobile Shell)

UDP — The starting port in the default range (60000-61000) used by Mosh (Mobile Shell), a UDP-based …

Low

Security & VPN (47)

49 TACACS

TCP/UDP — Terminal Access Controller Access-Control System. Provides centralized authentication, authorization, and accounting for network devices such …

Medium
65 TACACS-DS

TCP/UDP — TACACS-DS (Terminal Access Controller Access Control System - Database Service) is a predecessor variant of …

Medium
88 Kerberos

TCP/UDP — Kerberos authentication protocol. Provides secure mutual authentication using tickets, widely used in Active Directory and …

Low
90 DNSIX Security

TCP/UDP — Port 90 was originally assigned to DNSIX (Defense Intelligence Agency Network Security for Information Exchange), …

Low
370 codaauth2

TCP — Port 370 is assigned to codaauth2, the authentication service for the Coda distributed filesystem developed …

Medium
389 LDAP

TCP/UDP — Lightweight Directory Access Protocol. Accesses and manages distributed directory services like Active Directory. Used for …

Medium
464 Kerberos Change Password

TCP/UDP — Port 464 is assigned to kpasswd, used for changing Kerberos passwords in Active Directory and …

Critical
500 IKE/ISAKMP

UDP — Port 500 is assigned to IKE (Internet Key Exchange) and ISAKMP, the key negotiation protocols …

Medium
636 LDAPS

TCP — LDAP over SSL/TLS. Encrypted version of LDAP for secure directory access and authentication. Used by …

Low
749 Kerberos Admin

TCP/UDP — Kerberos 5 administration server (kadmin), used to remotely administer the KDC including adding, modifying, and …

High
750 Kerberos v4

UDP — Kerberos version 4 authentication service. Has known cryptographic weaknesses including DES-only encryption. Superseded by Kerberos …

Critical
751 Kerberos Master

TCP/UDP — Kerberos v4 master database administration service. Relies on cryptographically broken DES encryption. Should be disabled …

Critical
753 Kerberos userreg

TCP/UDP — Kerberos v4 user registration service. Deprecated and replaced by kadmin on port 749 in Kerberos …

High
754 krb5_prop

TCP — Kerberos v5 KDC database propagation service, used to replicate the principal database from master to …

High
760 Kerberos krbupdate

TCP/UDP — Kerberos v4 krbupdate service for updating entries in the legacy v4 authentication system. Part of …

High
829 CMP

TCP — Certificate Management Protocol (CMP), defined in RFC 4210, used for PKI certificate lifecycle management including …

Low
848 GDOI

UDP — Group Domain of Interpretation (GDOI), defined in RFC 6407, an IKE-based key management protocol for …

Medium
910 KINK

UDP — Kerberized Internet Negotiation of Keys (KINK), defined in RFC 4430, uses Kerberos tickets for IPsec …

Low
981 SofaWare Firewall

TCP — SofaWare Secure Remote Management port, used by Check Point SofaWare embedded security gateway appliances.

Medium
1080 SOCKS

TCP — SOCKS proxy protocol. A general-purpose proxy protocol that routes any TCP/UDP traffic through a proxy …

Medium
1194 OpenVPN

TCP/UDP — OpenVPN. An open-source VPN solution that creates encrypted point-to-point tunnels using SSL/TLS. Widely used for …

Low
1241 Nessus

TCP — Port 1241 is the default port for the Nessus vulnerability scanner server daemon. Security professionals …

Medium
1293 IPSec

TCP/UDP — Port 1293 is assigned to IPSec (Internet Protocol Security) for secure VPN tunnel establishment and …

Low
1344 ICAP

TCP — Port 1344 is the default port for the Internet Content Adaptation Protocol (ICAP). ICAP allows …

Low
1524 Ingreslock

TCP — Port 1524 is associated with the Ingreslock backdoor, historically left open by some attackers after …

Critical
1645 RADIUS Authentication (old)

UDP — Port 1645 is an older, unofficial RADIUS authentication port used before the IANA officially assigned …

Medium
1646 RADIUS Accounting (old)

UDP — Port 1646 is the legacy RADIUS accounting port, used before IANA standardized port 1813 for …

Low
1701 L2TP

UDP — Port 1701 is the standard port for Layer 2 Tunneling Protocol (L2TP), used to create …

Low
1723 PPTP

TCP — Point-to-Point Tunneling Protocol. A VPN protocol developed by Microsoft. Considered cryptographically broken and insecure — …

High
1812 RADIUS Authentication

UDP — Port 1812 is the official IANA-assigned port for RADIUS (Remote Authentication Dial-In User Service) authentication. …

Medium
1813 RADIUS Accounting

UDP — Port 1813 is the official IANA-assigned port for RADIUS accounting. It collects session data including …

Low
2967 Symantec Endpoint Protection

TCP — Port 2967 is used by Symantec (now Broadcom) Endpoint Protection Manager for communication between the …

Medium
3269 Microsoft Global Catalog SSL

TCP — Port 3269 is the SSL/TLS-encrypted version of the Microsoft Active Directory Global Catalog service on …

Medium
3868 Diameter Protocol

TCP/UDP — Port 3868 is the standard port for the Diameter protocol, the successor to RADIUS used …

Medium
4444 Metasploit / I2P

TCP — Port 4444 is commonly associated with Metasploit Framework's default meterpreter reverse shell listener, making it …

Critical
4500 IPsec NAT Traversal

UDP — Port 4500 is used for IPsec NAT traversal (NAT-T), which encapsulates IKE and ESP packets …

Low
8200 HashiCorp Vault

TCP — Port 8200 is the default port for HashiCorp Vault, an enterprise secrets management and encryption-as-a-service …

Critical
8388 Shadowsocks

TCP/UDP — Port 8388 is a commonly used port for Shadowsocks, an encrypted proxy protocol originally created …

Medium
8834 Nessus

TCP — Port 8834 is the default HTTPS port for the Nessus vulnerability scanner web interface and …

High
9001 Tor ORPort / Supervisor

TCP — Port 9001 is the default OR (onion router) port used by Tor network relay nodes …

Medium
9050 Tor SOCKS Proxy

TCP — Port 9050 is the default SOCKS5 proxy port for the Tor client, allowing local applications …

Medium
9051 Tor Control Port

TCP — Port 9051 is the Tor control port, which allows local applications to control and monitor …

Medium
9150 Tor Browser SOCKS

TCP — Port 9150 is the SOCKS5 proxy port used by the Tor Browser Bundle, as distinct …

Medium
12345 NetBus / Custom Apps

TCP/UDP — Historically associated with NetBus, an early remote administration and trojan tool from the late 1990s. …

Critical
31337 Back Orifice / Elite

TCP/UDP — Historically associated with Back Orifice, a controversial remote administration tool / trojan from 1998 by …

Critical
41720 WireGuard

UDP — WireGuard VPN (common alternative port). While WireGuard has no official IANA port, 51820 is the …

Low
51820 WireGuard

UDP — WireGuard VPN. A modern, high-performance VPN protocol built into the Linux kernel. Uses state-of-the-art cryptography …

Low

Streaming & Media (17)

545 appleqtcsrvr

TCP — Port 545 is assigned to appleqtcsrvr (Apple QuickTime Content Server). Obsolete as Apple discontinued QuickTime …

Low
554 RTSP

TCP/UDP — Real Time Streaming Protocol. Controls the delivery of real-time streaming media such as IP camera …

Medium
1720 H.323

TCP — Port 1720 is used by the H.323 VoIP and video conferencing protocol for call signaling …

Medium
1755 Windows Media Server

TCP/UDP — Port 1755 is used by Microsoft Windows Media Services (MMS protocol) for streaming audio and …

Low
1935 RTMP

TCP — Port 1935 is the default port for Real-Time Messaging Protocol (RTMP), developed by Adobe for …

Low
2000 Cisco SCCP

TCP — Port 2000 is used by Cisco's Skinny Client Control Protocol (SCCP), also known as Skinny, …

Medium
2427 MGCP Gateway

UDP — Port 2427 is used by Media Gateway Control Protocol (MGCP) for communication between call agents …

Medium
3478 STUN / TURN

TCP/UDP — Port 3478 is the standard port for STUN (Session Traversal Utilities for NAT) and TURN …

Low
3689 DAAP (iTunes Music Sharing)

TCP — Port 3689 is used by Apple's Digital Audio Access Protocol (DAAP), which powers iTunes and …

Low
4569 IAX2 (Inter-Asterisk eXchange)

UDP — Port 4569 is used by IAX2 (Inter-Asterisk eXchange version 2), a VoIP protocol native to …

Medium
5004 RTP (Real-time Transport Protocol)

TCP/UDP — Port 5004 is the standard IANA-assigned port for RTP (Real-time Transport Protocol), which carries audio …

Low
6600 MPD (Music Player Daemon)

TCP — Port 6600 is the default port for MPD (Music Player Daemon), an open-source server-side music …

Low
7070 RTSP / RealNetworks

TCP — Port 7070 is used by RTSP (Real Time Streaming Protocol) as an alternative port and …

Low
8096 Jellyfin / Emby

TCP — Port 8096 is the default HTTP port for Jellyfin and Emby Media Server, popular open-source …

Medium
8554 RTSP Alternate

TCP — Port 8554 is a commonly used alternate port for RTSP (Real Time Streaming Protocol) streaming …

Medium
32400 Plex Media Server

TCP — Primary HTTP port for Plex Media Server web interface and remote access. Used for streaming …

Medium
47984 Sunshine/Moonlight

TCP — Sunshine game streaming server (HTTPS). Used with the Moonlight client for low-latency remote game streaming …

Low

System & Infrastructure (119)

0 Reserved

TCP/UDP — Port 0 is reserved by IANA and is not used for any service. In programming, …

Low
1 TCPMUX

TCP — TCP Port Service Multiplexer. Allows multiple services to share a single well-known port by routing …

Medium
5 RJE

TCP/UDP — Remote Job Entry. A legacy protocol used for submitting batch jobs to mainframe computers over …

Medium
7 Echo

TCP/UDP — Echo protocol. Returns any data it receives back to the sender. Used primarily for network …

Medium
9 Discard

TCP/UDP — Discard protocol. Silently discards all received data without sending any response. Also used for Wake-on-LAN …

Low
11 Systat

TCP/UDP — Active Users (Systat) service. Lists the currently active users on a system. Considered a security …

High
13 Daytime

TCP/UDP — Daytime protocol. Returns the current date and time as a human-readable string. Largely replaced by …

Low
15 NetStat

TCP — An early ARPANET protocol used to query network status information from a remote host. It …

Low
17 QOTD

TCP/UDP — Quote of the Day protocol. Sends a short text message (typically a quote or saying) …

Low
19 CHARGEN

TCP/UDP — Character Generator protocol. Continuously sends a stream of characters to the client. Used for network …

High
37 Time

TCP/UDP — Time Protocol. Returns the current time as a 32-bit binary value representing seconds since January …

Low
67 DHCP Server

UDP — Dynamic Host Configuration Protocol server port. Automatically assigns IP addresses, subnet masks, gateways, and DNS …

Medium
68 DHCP Client

UDP — DHCP client port. Used by devices to receive IP address assignments and network configuration parameters …

Low
71 NETRJS-1

TCP/UDP — NETRJS-1 through NETRJS-4 (ports 71-74) were assigned for the Remote Job Entry service used on …

Low
72 NETRJS-2

TCP/UDP — NETRJS-2 is the second of four ports (71-74) assigned to the ARPANET Remote Job Entry …

Low
73 NETRJS-3

TCP/UDP — NETRJS-3 is the third variant port for the ARPANET Network Remote Job Service. Defined alongside …

Low
74 NETRJS-4

TCP/UDP — NETRJS-4 is the fourth and final port in the ARPANET Network Remote Job Entry suite. …

Low
79 Finger

TCP — Finger protocol. Retrieves information about users on a remote system, including login name, real name, …

High
102 ISO-TSAP

TCP — ISO-TSAP (Transport Service Access Point) is part of the OSI protocol stack, providing transport layer …

Medium
111 RPCBind / Portmapper

TCP/UDP — RPCBind (also called portmapper) maps ONC RPC program numbers to the dynamic ports on which …

Critical
113 Ident

TCP — Identification Protocol (Auth). Identifies the user of a TCP connection. Historically used by IRC servers …

Medium
123 NTP

UDP — Network Time Protocol. Synchronizes clocks across networked computers with millisecond accuracy. Essential for logging, security …

Low
135 MS RPC

TCP — Microsoft RPC Endpoint Mapper. Used by Windows systems for DCOM and RPC services. Frequently targeted …

High
137 NetBIOS Name

UDP — NetBIOS Name Service. Resolves NetBIOS names to IP addresses on local networks. Part of the …

High
138 NetBIOS Datagram

UDP — NetBIOS Datagram Service. Provides connectionless messaging between NetBIOS hosts for browsing, announcements, and other lightweight …

High
153 SGMP

UDP — SGMP (Simple Gateway Monitoring Protocol) was the predecessor to SNMP. Defined in RFC 1028. Replaced …

Low
160 SGMP-TRAPS

UDP — SGMP-TRAPS was the trap notification port for SGMP. Replaced by SNMP Trap on port 162.

Low
161 SNMP

UDP — Simple Network Management Protocol. Monitors and manages network devices such as routers, switches, and servers. …

High
162 SNMP Trap

UDP — SNMP Trap receiver. Receives asynchronous alert notifications from network devices, such as interface failures, temperature …

High
163 CMIP/TCP Manager

TCP/UDP — CMIP (Common Management Information Protocol) over TCP was part of the OSI network management framework. …

Low
164 CMIP/TCP Agent

TCP/UDP — Port 164 is designated for CMIP/TCP agents, the managed devices that respond to management queries. …

Low
178 NextStep Window Server

TCP — Port 178 was assigned to the NeXTStep Window Server, the display server used by NeXT …

Low
179 BGP

TCP — Border Gateway Protocol. The routing protocol that makes the internet work by exchanging routing information …

Low
199 SMUX

TCP — SMUX (SNMP Multiplexing Protocol), defined in RFC 1227. Deprecated in favor of AgentX (RFC 2741).

Low
318 TSP

TCP/UDP — Port 318 is assigned to TSP (Time Stamp Protocol), used for timestamping services in trusted …

Low
360 scoi2odialog

TCP — Port 360 is assigned to scoi2odialog, a protocol associated with SCO Unix system dialog management. …

Low
383 HP OpenView

TCP/UDP — Port 383 is assigned to HP OpenView (now Micro Focus Operations Manager), an enterprise network …

High
401 UPS

TCP/UDP — Port 401 is assigned to UPS monitoring protocol, used by UPS management software such as …

High
427 SLP

TCP/UDP — Port 427 is assigned to SLP (Service Location Protocol), used for dynamic service discovery on …

Medium
514 Syslog

UDP — Syslog protocol. Centralized logging standard that collects log messages from routers, switches, servers, and other …

Medium
515 LPD

TCP — Port 515 is assigned to LPD/LPR (Line Printer Daemon), the traditional Unix printing protocol defined …

High
520 RIP

UDP — Port 520 is assigned to RIP (Routing Information Protocol), one of the oldest distance-vector routing …

High
521 RIPng

UDP — Port 521 is assigned to RIPng, the IPv6 adaptation of RIP defined in RFC 2080. …

High
525 Timed

UDP — Port 525 is assigned to Timed, the BSD time server daemon. Obsolete; replaced by NTP …

Low
533 netwall

UDP — Port 533 is assigned to netwall, used for emergency broadcast messaging across Unix network segments. …

Low
546 DHCPv6 Client

UDP — Port 546 is assigned to DHCPv6 client, used by IPv6 hosts to receive dynamic address …

Medium
547 DHCPv6 Server

UDP — Port 547 is assigned to DHCPv6 server. A rogue DHCPv6 server can redirect traffic through …

High
550 new-rwho

UDP — Port 550 is assigned to new-rwho, broadcasting info about logged-in users across Unix networks. Privacy …

Medium
560 rmonitor

UDP — Port 560 is assigned to rmonitor, used for remote monitoring of Unix system statistics. Replaced …

Low
561 monitor

UDP — Port 561 is assigned to monitor, for Unix system monitoring data distribution. Completely obsolete.

Low
565 whoami

TCP — Port 565 is assigned to whoami, a simple network identity verification service. Virtually unused in …

Low
600 Sun IPC

TCP/UDP — Sun Microsystems Inter-Process Communication port, used in early Sun RPC and distributed computing environments. It …

Medium
601 Syslog-TLS

TCP — Reliable Syslog over TLS, standardized in RFC 5425. Provides encrypted and authenticated transport for syslog …

Low
623 IPMI

UDP — Intelligent Platform Management Interface (IPMI) over LAN, used by Baseboard Management Controllers (BMCs) in servers …

Critical
631 IPP

TCP/UDP — Internet Printing Protocol (IPP), used by CUPS and modern printers for network print job submission …

Medium
647 DHCP Failover

TCP — DHCP Failover Protocol, used between redundant DHCP servers to synchronize lease databases and coordinate address …

Medium
694 Linux-HA

UDP — Linux-HA Heartbeat protocol, used by the Heartbeat component for sending keepalive packets between cluster nodes …

Medium
782 HP Performance Data

TCP — HP Performance Data Collector, used by HP OpenView and HP Operations Manager for collecting and …

Medium
847 DHCP Failover 2

TCP — DHCP Failover Protocol secondary port, used alongside port 647 in some DHCP failover implementations for …

Medium
911 NCA

TCP — Network Computing Architecture (NCA) local IPC, used in DCE/RPC environments. NCA influenced the design of …

Medium
1024 Reserved/Dynamic

TCP/UDP — Port 1024 marks the start of the registered port range, above the well-known ports (0-1023). …

Low
1025 NFS / Windows RPC

TCP/UDP — Port 1025 is used by Microsoft Windows RPC services and sometimes by NFS (Network File …

Medium
1099 RMI Registry

TCP — Port 1099 is the default port for Java Remote Method Invocation (RMI) Registry. Java applications …

High
1270 Microsoft MOM / SCOM

TCP/UDP — Port 1270 is used by Microsoft System Center Operations Manager (SCOM), formerly known as Microsoft …

Low
1311 Dell OpenManage

TCP — Port 1311 is the default HTTPS port for Dell OpenManage Server Administrator (OMSA) web interface. …

Medium
1500 VLSI License Manager

TCP — Port 1500 is associated with FlexLM and VLSI Technology license managers used for EDA (Electronic …

Low
1556 Veritas NetBackup

TCP — Port 1556 is used by Veritas NetBackup for client-server communication between backup agents and the …

Medium
1688 Microsoft KMS

TCP — Port 1688 is used by Microsoft Key Management Service (KMS) for volume license activation of …

Low
1741 CiscoWorks

TCP — Port 1741 is used by CiscoWorks, Cisco's network management platform, for web-based administration. CiscoWorks provides …

Medium
1761 cft-0 / Novell

TCP/UDP — Port 1761 is used by Novell network services for various communication tasks in legacy Novell …

Low
1900 SSDP / UPnP

UDP — Port 1900 is used by Simple Service Discovery Protocol (SSDP), the foundation for Universal Plug …

High
1947 HASP License Manager

TCP/UDP — Port 1947 is used by HASP (Hardware Against Software Piracy) License Manager by Gemalto (now …

Medium
1985 Cisco HSRP

UDP — Port 1985 is used by Cisco Hot Standby Router Protocol (HSRP) for first-hop redundancy. HSRP …

Medium
1998 Cisco X.25

TCP — Port 1998 is used by Cisco for X.25 service access in IOS-based routers. X.25 is …

Low
2055 NetFlow

UDP — Port 2055 is commonly used for Cisco NetFlow data export, a network protocol for collecting …

Low
2123 GTP Control

UDP — Port 2123 is used by GPRS Tunneling Protocol Control (GTP-C) for mobile network signaling. Mobile …

Medium
2152 GTP User Data

UDP — Port 2152 is used by GPRS Tunneling Protocol User Plane (GTP-U) for carrying mobile data …

Medium
2375 Docker (unencrypted)

TCP — Port 2375 is the Docker daemon's unencrypted REST API port, used for remote management of …

Critical
2376 Docker (TLS)

TCP — Port 2376 is Docker's TLS-encrypted remote API port, providing secure remote management of Docker daemons. …

Medium
2377 Docker Swarm

TCP — Port 2377 is used by Docker Swarm for cluster management communications between manager nodes. Docker …

Medium
2401 CVS Pserver

TCP — Port 2401 is used by CVS (Concurrent Versions System) pserver protocol for remote access to …

Medium
2404 IEC 60870-5-104

TCP — Port 2404 is used by IEC 60870-5-104, a standard protocol for telecontrol equipment in electrical …

Critical
2809 IBM WebSphere / CORBA

TCP — Port 2809 is used by IBM WebSphere Application Server for IIOP (Internet Inter-ORB Protocol) communications, …

Medium
2947 gpsd

TCP — Port 2947 is the default port for gpsd, a GPS daemon that provides a shared …

Low
3268 Microsoft Global Catalog

TCP — Port 3268 is used by Microsoft Active Directory for the Global Catalog service, which provides …

High
3544 Teredo Tunneling

UDP — Port 3544 is used by Teredo, a Microsoft tunneling protocol that provides IPv6 connectivity to …

Medium
3632 distcc

TCP — Port 3632 is the default port for distcc, a distributed C/C++ compiler that spreads compilation …

Critical
4505 SaltStack Publisher

TCP — Port 4505 is used by SaltStack (Salt) configuration management system for the publisher channel, through …

Critical
4506 SaltStack Return

TCP — Port 4506 is used by SaltStack for the return channel, through which Salt minions send …

Critical
4789 VXLAN

UDP — Port 4789 is the standard IANA-assigned port for VXLAN (Virtual Extensible LAN), a network virtualization …

Medium
4949 Munin

TCP — Port 4949 is used by Munin, an open-source networked resource monitoring tool that collects metrics …

Medium
5001 Synology DSM / iperf

TCP — Port 5001 is used by Synology DiskStation Manager (DSM) for HTTPS management access, and by …

Medium
5044 Logstash Beats

TCP — Port 5044 is the default port for the Elastic Beats input plugin in Logstash, the …

Medium
5357 WSDAPI (Web Services for Devices)

TCP/UDP — Port 5357 is used by Microsoft Web Services for Devices API (WSDAPI) for device discovery …

Low
5666 NRPE (Nagios Remote Plugin Executor)

TCP — Port 5666 is used by NRPE (Nagios Remote Plugin Executor), an agent that allows Nagios …

Medium
6443 Kubernetes API

TCP — Kubernetes API server. The central management endpoint for Kubernetes clusters, handling all API requests for …

Medium
6514 Syslog over TLS

TCP — Syslog over TLS. Encrypted version of the Syslog protocol (port 514) for secure centralized log …

Low
6556 Check MK Agent

TCP — Port 6556 is used by the Check MK (Checkmk) monitoring agent installed on servers being …

Medium
7547 TR-069 (CWMP)

TCP — Port 7547 is used by TR-069 (CPE WAN Management Protocol), a standard for ISPs to …

Critical
7946 Docker Swarm

TCP/UDP — Port 7946 is used by Docker Swarm for control plane communication between swarm nodes, including …

Medium
8089 Splunk Management

TCP — Port 8089 is the management/REST API port for Splunk Enterprise and Splunk Universal Forwarder. Splunk's …

High
8125 StatsD

UDP — Port 8125 is the default UDP port for StatsD, a network daemon that collects and …

Low
8139 Puppet Agent

TCP — Port 8139 is used by the legacy Puppet configuration management agent to receive catalog information …

High
8140 Puppet Master

TCP — Port 8140 is the default HTTPS port for Puppet Server (Puppet Master), the central configuration …

Critical
8300 HashiCorp Consul RPC

TCP — Port 8300 is used by HashiCorp Consul for server RPC (Remote Procedure Call) communication. Consul …

Medium
8500 HashiCorp Consul HTTP

TCP — Port 8500 is the default HTTP/HTTPS port for HashiCorp Consul's web UI and REST API. …

Medium
8530 WSUS (Windows Server Update Services)

TCP — Port 8530 is the default HTTP port for Windows Server Update Services (WSUS), Microsoft's enterprise …

Medium
8649 Ganglia Monitoring

TCP/UDP — Port 8649 is used by Ganglia, a scalable distributed monitoring system designed for high-performance computing …

Medium
9090 Prometheus

TCP — Prometheus monitoring system web UI and API. Also used by Cockpit web console for Linux …

Medium
9100 JetDirect / Node Exporter

TCP — HP JetDirect for network printing and Prometheus Node Exporter for system metrics collection. Two common …

Medium
9389 Active Directory Web Services

TCP — Port 9389 is used by Active Directory Web Services (ADWS), a Windows service introduced in …

High
9600 Logstash Monitoring

TCP — Port 9600 is the default port for Logstash's monitoring API, which provides metrics and pipeline …

Medium
9696 OpenStack Neutron

TCP — Port 9696 is used by OpenStack Neutron, the networking component of the OpenStack cloud platform. …

High
10050 Zabbix Agent

TCP — Used by Zabbix monitoring agent to receive requests from Zabbix server or proxy. The agent …

Medium
10051 Zabbix Server

TCP — Used by Zabbix server or proxy to receive data from Zabbix agents and trappers. This …

Medium
10250 Kubelet API

TCP — Used by the Kubernetes Kubelet for the HTTPS API that the API server and other …

High
19999 Netdata

TCP — Default HTTP port for the Netdata real-time performance monitoring web dashboard. Provides live system metrics …

Medium
33434 Traceroute

UDP — The starting destination port used by the traceroute utility to map network paths. UDP packets …

Low
49152 IANA Ephemeral Start

TCP/UDP — The first port in the IANA-registered dynamic and private port range (49152-65535). Operating systems use …

Low

Web (44)

70 Gopher

TCP — Gopher protocol. A pre-web internet protocol for distributing, searching, and retrieving documents. Largely replaced by …

Medium
80 HTTP

TCP — Hypertext Transfer Protocol. The foundation of the World Wide Web, used for transmitting web pages, …

Medium
81 HTTP Alternate

TCP — Port 81 is an unofficial alternate HTTP port used when port 80 is unavailable or …

Medium
280 http-mgmt

TCP — Port 280 is assigned to http-mgmt, used for HTTP-based network device management interfaces. Exposing this …

High
443 HTTPS

TCP — HTTP over TLS/SSL. The encrypted version of HTTP that secures web traffic using TLS certificates. …

Low
808 CCProxy HTTP

TCP — CCProxy HTTP proxy service, popular in small offices for sharing internet connections. Open instances are …

High
843 Flash Policy

TCP — Adobe Flash Player cross-domain policy server. Entirely obsolete following Adobe's end-of-life of Flash Player in …

Low
901 SWAT

TCP — Samba Web Administration Tool (SWAT), deprecated in Samba 4.0 and removed in 4.1 due to …

High
1001 webpush

TCP — Webpush, an early proprietary web push service predating modern browser push notification infrastructure (Web Push …

Low
1010 surf

TCP — Surf, a lightweight web content delivery protocol proposed as an alternative to HTTP for embedded …

Low
2077 cPanel File Manager

TCP — Port 2077 is used by cPanel & WHM web hosting control panel for WebDAV file …

Medium
2082 cPanel

TCP — cPanel web hosting control panel (HTTP). Provides a web-based interface for managing websites, domains, email …

Medium
2083 cPanel SSL

TCP — cPanel web hosting control panel (HTTPS). Encrypted version of the cPanel management interface for securely …

Low
2086 cPanel WHM

TCP — Port 2086 is used by cPanel's Web Host Manager (WHM) for HTTP administrative access. Hosting …

High
2087 cPanel WHM SSL

TCP — Port 2087 is the secure HTTPS version of cPanel's Web Host Manager (WHM) administrative interface. …

Medium
3000 Dev Server

TCP — Common development server port. Used by default by Node.js (Express), Ruby on Rails, Grafana, and …

Medium
3001 Grafana / Node.js Dev

TCP — Port 3001 is commonly used by Grafana (an open-source monitoring and analytics platform) as an …

Medium
3128 Squid HTTP Proxy

TCP — Port 3128 is the default port for Squid, a widely used caching and forwarding HTTP …

High
4443 Pharos

TCP — Common alternative HTTPS port. Used by various applications as an alternative TLS port, including Pharos …

Low
4848 GlassFish Admin

TCP — Port 4848 is the default administrative console port for Oracle GlassFish Server, a Java EE …

High
5000 UPnP / Dev Server

TCP — Used by UPnP (Universal Plug and Play) for device discovery and by many development frameworks …

Medium
5601 Kibana

TCP — Port 5601 is the default port for Kibana, the visualization and analytics frontend of the …

High
6081 Varnish Cache

TCP — Port 6081 is used by Varnish Cache, a high-performance HTTP reverse proxy and caching accelerator, …

Low
7001 Cassandra TLS / WebLogic

TCP — Port 7001 is used by both Apache Cassandra for TLS-encrypted internode communication and Oracle WebLogic …

Critical
8000 HTTP Alt

TCP — Common alternative HTTP port. Used by Django development server, Python http.server, and many web application …

Medium
8006 Proxmox VE

TCP — Port 8006 is the default HTTPS port for the Proxmox Virtual Environment (PVE) web management …

High
8008 HTTP Alternate / Chromecast

TCP — Port 8008 is an alternate HTTP port used by various applications and is the local …

Low
8009 Apache JServ Protocol (AJP)

TCP — Port 8009 is the default port for Apache JServ Protocol (AJP), used to proxy requests …

Critical
8069 Odoo (OpenERP)

TCP — Port 8069 is the default HTTP port for Odoo (formerly OpenERP), a comprehensive open-source ERP …

High
8080 HTTP Proxy

TCP — HTTP proxy and alternative HTTP port. Widely used for web proxies, development servers, application servers …

Medium
8081 HTTP Alternate / Nexus Repository

TCP — Port 8081 is a widely used alternate HTTP port for web servers, development tools, and …

Medium
8090 Confluence / Cockpit

TCP — Port 8090 is the default HTTP port for Atlassian Confluence Server, a widely used team …

High
8443 HTTPS Alt

TCP — Alternative HTTPS port. Used by Apache Tomcat for HTTPS, Plesk control panel, and many web …

Low
8880 IBM WebSphere HTTP

TCP — Port 8880 is used by IBM WebSphere Application Server as an alternate HTTP transport port. …

Medium
8888 HTTP Alt / Jupyter

TCP — Alternative HTTP port commonly used by Jupyter Notebook, XAMPP, and various web-based development and administration …

Medium
9000 PHP-FPM / Portainer

TCP — Used by PHP-FPM (FastCGI Process Manager) for PHP processing, Portainer for Docker management, and SonarQube …

Medium
9003 Puma / Custom App

TCP — Port 9003 is commonly used by Puma, the Ruby web server, and various custom applications …

Medium
9043 WebLogic HTTPS / WebSphere SSL

TCP — Port 9043 is the default HTTPS administrative console port for IBM WebSphere Application Server. It …

High
9080 WebSphere HTTP Alt / Glassfish

TCP — Port 9080 is the default non-HTTPS HTTP transport port for IBM WebSphere Application Server, used …

Medium
9443 HTTPS Alternate / Portainer

TCP — Port 9443 is a popular alternate HTTPS port used by various administrative consoles and web …

Medium
10000 Webmin

TCP — Webmin web-based system administration tool. Provides a browser interface for managing Unix/Linux servers, configuring services, …

Medium
10443 HTTPS Alternate

TCP — An alternate HTTPS port used by various applications and management interfaces when the standard port …

Medium
12443 HTTPS Management Alternate

TCP — An alternate HTTPS port used by various network and security appliance management interfaces. Found in …

Medium
16080 Apache Web Server Alternate

TCP — An alternate HTTP port historically used by Apache HTTP Server and Apple Mac OS X …

Low
{# ================================================================ FOOTER ================================================================ #} {# ================================================================ TOAST NOTIFICATIONS ================================================================ #}
{# ================================================================ SCRIPTS ================================================================ #}