Common Network Ports: TCP & UDP Port List

The List

TCP and UDP Port List

Search by port number, service or use. “Check” opens the Port Checker with that port filled in.

Port	Protocol	Service & typical use	Exposure	Check
20	TCP	FTP data — File transfer data channel (active mode).	Only if needed	Check
21	TCP	FTP — File transfer control connection. Sends logins unencrypted; prefer SFTP (port 22).	Only if needed	Check
22	TCP	SSH / SFTP — Secure remote login, file transfer and tunnels.	Only if needed	Check
23	TCP	Telnet — Unencrypted remote login. Replaced by SSH; there is rarely a reason to expose it.	Keep private	Check
25	TCP	SMTP — Mail delivery between mail servers. Many ISPs block it on home connections.	Public service	Check
53	UDP / TCP	DNS — Domain name resolution. Open to the Internet only on a DNS server you run for others.	Only if needed	Check
67	UDP	DHCP — Automatic IP address assignment on a local network (clients use port 68).	Keep private	Check
69	UDP	TFTP — Simple file transfer with no authentication, mostly for network boot.	Keep private	Check
80	TCP	HTTP — Unencrypted web traffic.	Public service	Check
88	UDP / TCP	Kerberos — Authentication in Windows domains and other single sign-on setups.	Keep private	Check
110	TCP	POP3 — Downloading email, unencrypted. Port 995 is the encrypted version.	Only if needed	Check
123	UDP	NTP — Clock synchronization.	Only if needed	Check
135	UDP / TCP	Microsoft RPC — Windows remote procedure calls; a common target for attacks.	Keep private	Check
139	TCP	NetBIOS (137–139) — Legacy Windows name service and file sharing.	Keep private	Check
143	TCP	IMAP — Reading and syncing email, unencrypted. Port 993 is the encrypted version.	Only if needed	Check
161	UDP	SNMP — Monitoring and managing network devices.	Keep private	Check
389	UDP / TCP	LDAP — Directory services such as Active Directory.	Keep private	Check
443	TCP	HTTPS — Encrypted web traffic. HTTP/3 uses UDP on the same port number.	Public service	Check
445	TCP	SMB — Windows file and printer sharing.	Keep private	Check
465	TCP	SMTPS — Email submission over implicit TLS.	Public service	Check
500	UDP	IKE — Negotiating IPsec VPN tunnels (NAT traversal uses 4500).	Only if needed	Check
514	UDP	Syslog — Forwarding system logs to a log server.	Keep private	Check
587	TCP	SMTP submission — Email clients sending mail through a mail server.	Public service	Check
636	TCP	LDAPS — LDAP over TLS.	Keep private	Check
853	TCP	DNS over TLS — Encrypted DNS queries.	Only if needed	Check
873	TCP	rsync — File synchronization and backups.	Only if needed	Check
993	TCP	IMAPS — Reading and syncing email over TLS.	Public service	Check
995	TCP	POP3S — Downloading email over TLS.	Public service	Check
1194	UDP	OpenVPN — The default OpenVPN port; it can also be configured for TCP.	Only if needed	Check
1433	TCP	Microsoft SQL Server — Database connections.	Keep private	Check
1521	TCP	Oracle Database — Database listener.	Keep private	Check
1723	TCP	PPTP — A legacy VPN protocol with known weaknesses.	Only if needed	Check
1883	TCP	MQTT — Messaging for IoT devices and home automation (port 8883 is the TLS version).	Keep private	Check
1900	UDP	SSDP / UPnP — Device discovery on a local network.	Keep private	Check
2049	UDP / TCP	NFS — Network file sharing between Unix and Linux systems.	Keep private	Check
3074	UDP / TCP	Xbox Live — Online play on Xbox consoles.	Only if needed	Check
3306	TCP	MySQL / MariaDB — Database connections.	Keep private	Check
3389	TCP	RDP — Windows Remote Desktop. Use a VPN rather than exposing it directly.	Keep private	Check
3478	UDP / TCP	STUN / TURN — Helping calls and WebRTC apps connect through NAT.	Only if needed	Check
4500	UDP	IPsec NAT-T — IPsec VPN traffic through NAT.	Only if needed	Check
5060	UDP / TCP	SIP — VoIP call signalling (port 5061 is the TLS version).	Only if needed	Check
5353	UDP	mDNS — Service discovery on a local network (printers, speakers, etc.).	Keep private	Check
5432	TCP	PostgreSQL — Database connections.	Keep private	Check
5900	TCP	VNC — Remote desktop control.	Keep private	Check
6379	TCP	Redis — In-memory database and cache.	Keep private	Check
8080	TCP	HTTP alternate — Alternative web server, proxy or admin interface.	Only if needed	Check
8443	TCP	HTTPS alternate — Alternative encrypted web server or admin interface.	Only if needed	Check
9200	TCP	Elasticsearch — Search and analytics service API.	Keep private	Check
11211	UDP / TCP	Memcached — Memory cache. Exposed instances have been abused for traffic amplification attacks.	Keep private	Check
19132	UDP	Minecraft (Bedrock) — Default port for Minecraft Bedrock Edition servers.	Only if needed	Check
25565	TCP	Minecraft (Java) — Default port for Minecraft Java Edition servers.	Only if needed	Check
27015	UDP / TCP	Steam / Source servers — Default for many Valve and Source-engine game servers.	Only if needed	Check
27017	TCP	MongoDB — Database connections.	Keep private	Check
51820	UDP	WireGuard — The conventional listening port for WireGuard VPN.	Only if needed	Check

Exposure is a rule of thumb for a typical home or small-server setup: Public service ports belong to services meant to be reachable on a public server, Only if needed ports should be open only when you run that service, and Keep private ports should stay on a local network or behind a VPN. Port assignments follow the IANA service name and port number registry.

How Ports Are Numbered

Well-Known, Registered and Dynamic Ports

Port numbers run from 0 to 65535 and fall into three ranges.

0 – 1023

Well-known ports. Reserved for core services such as web (80, 443), email, DNS and SSH. Servers usually need elevated privileges to listen here.

1024 – 49151

Registered ports. Assigned to specific applications on request — databases, game servers, VPNs and many other services use this range.

49152 – 65535

Dynamic ports. Picked temporarily by your device for outgoing connections. Nothing is meant to listen here permanently.

To see whether a port on your own connection or server is reachable from the Internet, use the Port Checker. If a port you expect to be open shows closed, the port forwarding guide walks through the router, firewall and ISP causes. Need the address to test? What Is My IP shows your public IP.

Ports

Port Checker

Check whether a port is open and reachable from the Internet.

ResultOpen or closed status

IP

What Is My IP

Find your public IP address instantly.

ResultPublic IPv4 / IPv6 address

DNS

DNS Lookup

Check DNS records for any domain.

ResultA, AAAA, MX, TXT, NS & CNAME records

FAQ

Network Ports FAQ

Short answers to common questions about port numbers.

How many ports are there?

Every IP address has 65,535 usable TCP ports and 65,535 UDP ports, numbered 1 to 65535. TCP and UDP ports are separate: TCP port 53 and UDP port 53 are two different ports, even though DNS happens to use both.

What are well-known, registered and dynamic ports?

Ports 0–1023 are the well-known ports, assigned to core services such as HTTP (80) and SSH (22). Ports 1024–49151 are registered ports, assigned to specific applications on request. Ports 49152–65535 are dynamic (or private) ports, used temporarily by your device for outgoing connections.

Which ports are safe to open to the Internet?

Only the ports of services you deliberately run and keep updated — a web server on 80 and 443, for example. Databases, remote desktop, file sharing and management ports should stay on a private network or behind a VPN. The “Exposure” column above is a rule of thumb, not a guarantee: any open port is only as safe as the software listening on it.

Can a service use a different port than its default?

Yes. Default ports are conventions, not rules: SSH can listen on any port, and a web server can run on 8080 or 8443. Clients simply need to be told which port to use. That is why a service can be running yet appear closed on its default port.

What is the difference between TCP and UDP ports?

TCP sets up a connection and confirms delivery, so it suits web pages, email and file transfer. UDP sends data without a handshake, so it suits real-time traffic such as DNS, voice calls and online games. A port can be open on one protocol and closed on the other.