TCP/UDP port numbers list
This is a list of TCP and UDP port numbers used by protocols for the operation of network applications. Search by port number, protocol or service, or filter by category.
The Transmission Control Protocol (TCP) and the User Datagram Protocol (UDP) only need one port for duplex, bidirectional traffic. They usually use port numbers that match the services of the corresponding TCP or UDP implementation, if they exist.
The Internet Assigned Numbers Authority (IANA) is responsible for maintaining the official assignments of port numbers for specific uses. However, many unofficial uses of both well-known and registered port numbers occur in practice. Similarly, many of the official assignments refer to protocols that were never or are no longer in common use. This article lists port numbers and their associated protocols that have experienced significant uptake.
| Port | TCP | UDP | Service | Description | Category | Monitor |
|---|---|---|---|---|---|---|
| 0 | Reserved | Reserved | Reserved | In programming APIs (not in communication between hosts), requests a system-allocated (dynamic) port. | Other | |
| 1 | Yes | Assigned | TCPMUX | TCP Port Service Multiplexer. Historic. Both TCP and UDP have been assigned to TCPMUX by IANA, but by design only TCP is specified. | Legacy | TCP monitor → |
| 5 | Assigned | Assigned | RJE | Remote Job Entry was historically using socket 5 in its old socket form, while MIB PIM has identified it as TCP/5 and IANA has assigned both TCP and UDP 5 to it. | Legacy | |
| 7 | Yes | Yes | Echo | Echo Protocol. Returns whatever it receives; used for connectivity testing. | DNS & network | TCP monitor → |
| 9 | No | Unofficial | Discard / Wake-on-LAN | Discard Protocol; also commonly used for Wake-on-LAN magic packets. | DNS & network | |
| 11 | Yes | Yes | systat | Active Users (systat service). | Legacy | TCP monitor → |
| 13 | Yes | Yes | Daytime | Daytime Protocol. | Legacy | TCP monitor → |
| 15 | Unofficial | No | netstat | Previously netstat service. | Legacy | |
| 17 | Yes | Yes | QOTD | Quote of the Day. | Legacy | TCP monitor → |
| 18 | Yes | Yes | MSP | Message Send Protocol. | Legacy | TCP monitor → |
| 19 | Yes | Yes | CHARGEN | Character Generator Protocol. Historically abused for amplification attacks. | Legacy | TCP monitor → |
| 20 | Yes | Assigned | FTP (data) | File Transfer Protocol data transfer (active mode). | File transfer | TCP monitor → |
| 21 | Yes | Assigned | FTP | File Transfer Protocol control (command) port. | File transfer | FTP monitor → |
| 22 | Yes | Assigned | SSH / SFTP | Secure Shell: remote login, secure file transfer (SFTP, SCP) and port forwarding. | Remote access | SSH monitor → |
| 23 | Yes | Assigned | Telnet | Telnet protocol: unencrypted text communications. Avoid on untrusted networks. | Remote access | TCP monitor → |
| 25 | Yes | Assigned | SMTP | Simple Mail Transfer Protocol, used for email routing between mail servers. | SMTP monitor → | |
| 27 | Assigned | Assigned | nsw-fe | NSW User System FE. | Legacy | |
| 28 | Unofficial | No | Panorama HA | Palo Alto Networks Panorama High Availability sync encrypted port. | Security & VPN | |
| 29 | Assigned | Assigned | msg-icp | MSG ICP. | Legacy | |
| 31 | Assigned | Assigned | msg-auth | MSG Authentication. | Legacy | |
| 33 | Assigned | Assigned | dsp | Display Support Protocol. | Legacy | |
| 37 | Yes | Yes | Time | Time Protocol. | Legacy | TCP monitor → |
| 38 | Assigned | Assigned | rap | Route Access Protocol. | Legacy | |
| 39 | Assigned | Assigned | rlp | Resource Location Protocol. | Legacy | |
| 41 | Assigned | Assigned | graphics | Graphics. | Legacy | |
| 42 | Assigned | Yes | nameserver | Host Name Server Protocol. | Legacy | |
| 43 | Yes | Assigned | WHOIS | WHOIS protocol: domain and IP registration lookups. | DNS & network | TCP monitor → |
| 44 | Assigned | Assigned | mpm-flags | MPM FLAGS Protocol. | Legacy | |
| 45 | Assigned | Assigned | mpm | Message Processing Module [recv]. | Legacy | |
| 46 | Assigned | Assigned | mpm-snd | MPM [default send]. | Legacy | |
| 47 | Reserved | Reserved | Reserved | Reserved by IANA. | Other | |
| 48 | Assigned | Assigned | auditd | Digital Audit Daemon. | Legacy | |
| 49 | Yes | Yes | TACACS | TACACS Login Host protocol. TACACS+, still in draft and an improved but distinct version of TACACS, only uses TCP 49. | Security & VPN | TCP monitor → |
| 50 | Assigned | Assigned | re-mail-ck | Remote Mail Checking Protocol. | Legacy | |
| 53 | Yes | Yes | DNS | Domain Name System. UDP for most queries; TCP for large responses and zone transfers. | DNS & network | DNS monitor → |
| 67 | Assigned | Yes | DHCP (server) | Dynamic Host Configuration Protocol / BOOTP server port. | DNS & network | |
| 68 | Assigned | Yes | DHCP (client) | Dynamic Host Configuration Protocol / BOOTP client port. | DNS & network | |
| 69 | Assigned | Yes | TFTP | Trivial File Transfer Protocol. Used for network booting and device firmware. | File transfer | |
| 70 | Yes | Assigned | Gopher | Gopher protocol. Historic. | Legacy | TCP monitor → |
| 79 | Yes | Assigned | Finger | Finger user information protocol. Historic. | Legacy | TCP monitor → |
| 80 | Yes | Assigned | HTTP | Hypertext Transfer Protocol: the web, unencrypted. | Web | HTTP monitor → |
| 88 | Yes | Yes | Kerberos | Kerberos authentication system. | Security & VPN | TCP monitor → |
| 102 | Yes | Assigned | ISO-TSAP | ISO Transport Service Access Point; also used by Siemens S7 PLC communication. | Other | TCP monitor → |
| 110 | Yes | Assigned | POP3 | Post Office Protocol v3: retrieving email (unencrypted). | POP3 monitor → | |
| 111 | Yes | Yes | ONC RPC / rpcbind | Open Network Computing Remote Procedure Call portmapper. Used by NFS. | File transfer | TCP monitor → |
| 113 | Yes | Assigned | Ident | Ident authentication service. | Legacy | TCP monitor → |
| 119 | Yes | Assigned | NNTP | Network News Transfer Protocol (Usenet). | Messaging | TCP monitor → |
| 123 | Assigned | Yes | NTP | Network Time Protocol: clock synchronisation. | DNS & network | |
| 135 | Yes | Yes | MS RPC | Microsoft EPMAP (DCE/RPC Endpoint Mapper). | Remote access | TCP monitor → |
| 137 | Yes | Yes | NetBIOS-NS | NetBIOS Name Service. | File transfer | TCP monitor → |
| 138 | Yes | Yes | NetBIOS-DGM | NetBIOS Datagram Service. | File transfer | TCP monitor → |
| 139 | Yes | Yes | NetBIOS-SSN | NetBIOS Session Service. SMB over NetBIOS. | File transfer | TCP monitor → |
| 143 | Yes | Assigned | IMAP | Internet Message Access Protocol: managing email on the server (unencrypted / STARTTLS). | IMAP monitor → | |
| 161 | Assigned | Yes | SNMP | Simple Network Management Protocol: polling network devices. | Monitoring | |
| 162 | Yes | Yes | SNMP trap | SNMP Trap: unsolicited alerts from devices. | Monitoring | TCP monitor → |
| 179 | Yes | Assigned | BGP | Border Gateway Protocol: routing between autonomous systems. | DNS & network | TCP monitor → |
| 194 | Yes | Yes | IRC | Internet Relay Chat (official assignment; in practice 6667 is used). | Messaging | TCP monitor → |
| 389 | Yes | Yes | LDAP | Lightweight Directory Access Protocol. | Security & VPN | TCP monitor → |
| 427 | Yes | Yes | SLP | Service Location Protocol. | DNS & network | TCP monitor → |
| 443 | Yes | Yes | HTTPS / QUIC | HTTP over TLS/SSL. UDP 443 is used by QUIC and HTTP/3. | Web | HTTPS monitor → |
| 445 | Yes | Yes | SMB | Microsoft-DS: Server Message Block file sharing directly over TCP. A frequent attack target; never expose to the internet. | File transfer | TCP monitor → |
| 464 | Yes | Yes | kpasswd | Kerberos change/set password. | Security & VPN | TCP monitor → |
| 465 | Yes | No | SMTPS | SMTP over implicit TLS (deprecated for years, then re-registered for message submission). | SMTP monitor → | |
| 500 | Yes | Yes | IKE / ISAKMP | Internet Key Exchange, used to set up IPsec VPN tunnels. | Security & VPN | TCP monitor → |
| 513 | Yes | Assigned | rlogin | Remote login. Legacy and insecure. UDP 513 is used by the who daemon. | Remote access | TCP monitor → |
| 514 | Yes | Yes | Syslog / rsh | UDP 514: syslog message logging. TCP 514: rsh (remote shell), unencrypted and legacy. | Monitoring | TCP monitor → |
| 515 | Yes | Assigned | LPD | Line Printer Daemon. | Other | TCP monitor → |
| 520 | Assigned | Yes | RIP | Routing Information Protocol. | DNS & network | |
| 546 | Assigned | Yes | DHCPv6 (client) | DHCPv6 client. | DNS & network | |
| 547 | Assigned | Yes | DHCPv6 (server) | DHCPv6 server. | DNS & network | |
| 548 | Yes | Assigned | AFP | Apple Filing Protocol. | File transfer | TCP monitor → |
| 554 | Yes | Yes | RTSP | Real Time Streaming Protocol. IP cameras and media servers. | Other | TCP monitor → |
| 563 | Yes | Assigned | NNTPS | NNTP over TLS. | Messaging | TCP monitor → |
| 587 | Yes | Assigned | SMTP submission | Email message submission (STARTTLS). The recommended port for sending mail from clients. | SMTP monitor → | |
| 631 | Yes | Yes | IPP / CUPS | Internet Printing Protocol; CUPS print server. | Other | TCP monitor → |
| 636 | Yes | Yes | LDAPS | LDAP over TLS. | Security & VPN | TCP monitor → |
| 853 | Yes | Yes | DNS over TLS | DNS over TLS (DoT) and DNS over QUIC. | DNS & network | TCP monitor → |
| 873 | Yes | Yes | rsync | File synchronisation protocol. | File transfer | TCP monitor → |
| 989 | Yes | Assigned | FTPS (data) | FTP over TLS/SSL, data channel. | File transfer | TCP monitor → |
| 990 | Yes | Assigned | FTPS | FTP over TLS/SSL, control channel. | File transfer | TCP monitor → |
| 993 | Yes | Assigned | IMAPS | IMAP over TLS: the secure way to read email. | IMAP monitor → | |
| 995 | Yes | Assigned | POP3S | POP3 over TLS. | POP3 monitor → | |
| 1080 | Yes | Assigned | SOCKS | SOCKS proxy. | Security & VPN | TCP monitor → |
| 1099 | Yes | Yes | Java RMI | Java Remote Method Invocation registry. | Other | TCP monitor → |
| 1194 | Yes | Yes | OpenVPN | OpenVPN default port. | Security & VPN | TCP monitor → |
| 1433 | Yes | Yes | MS SQL Server | Microsoft SQL Server database engine. | Database | TCP monitor → |
| 1434 | Yes | Yes | MS SQL Monitor | Microsoft SQL Server Browser / monitor (UDP). | Database | TCP monitor → |
| 1521 | Yes | Assigned | Oracle DB | Oracle database default listener. | Database | TCP monitor → |
| 1701 | Assigned | Yes | L2TP | Layer 2 Tunneling Protocol. | Security & VPN | |
| 1723 | Yes | Assigned | PPTP | Point-to-Point Tunneling Protocol VPN. Considered insecure. | Security & VPN | TCP monitor → |
| 1812 | Yes | Yes | RADIUS auth | RADIUS authentication. | Security & VPN | TCP monitor → |
| 1813 | Yes | Yes | RADIUS accounting | RADIUS accounting. | Security & VPN | TCP monitor → |
| 1883 | Yes | Yes | MQTT | Message Queuing Telemetry Transport (IoT messaging). | Messaging | TCP monitor → |
| 1900 | Yes | Yes | SSDP | Simple Service Discovery Protocol (UPnP). | DNS & network | TCP monitor → |
| 2000 | Yes | Yes | Cisco SCCP | Cisco Skinny Client Control Protocol (VoIP phones). | Messaging | TCP monitor → |
| 2049 | Yes | Yes | NFS | Network File System. | File transfer | TCP monitor → |
| 2181 | Unofficial | No | ZooKeeper | Apache ZooKeeper client port. | DevOps & cloud | |
| 2222 | Unofficial | No | SSH (alternate) | Commonly used as an alternative SSH port. | Remote access | |
| 2375 | Unofficial | No | Docker (plain) | Docker Engine REST API, unencrypted. Never expose publicly. | DevOps & cloud | |
| 2376 | Unofficial | No | Docker (TLS) | Docker Engine REST API over TLS. | DevOps & cloud | |
| 2379 | Yes | Assigned | etcd client | etcd client communication. | DevOps & cloud | TCP monitor → |
| 2380 | Yes | Assigned | etcd peer | etcd server-to-server communication. | DevOps & cloud | TCP monitor → |
| 2483 | Yes | Yes | Oracle DB (unsecure) | Oracle database listening for unsecure client connections. | Database | TCP monitor → |
| 2484 | Yes | Yes | Oracle DB (TLS) | Oracle database listening for SSL client connections. | Database | TCP monitor → |
| 3000 | Unofficial | No | Dev servers / Grafana | Default for many development servers (Node.js, Rails) and Grafana. | Web | |
| 3050 | Yes | Yes | Firebird | Firebird database. | Database | TCP monitor → |
| 3128 | Unofficial | No | Squid proxy | Squid HTTP proxy default. | Web | |
| 3260 | Yes | Yes | iSCSI | iSCSI target. | File transfer | TCP monitor → |
| 3268 | Yes | Yes | LDAP GC | Microsoft Active Directory Global Catalog. | Security & VPN | TCP monitor → |
| 3269 | Yes | Yes | LDAPS GC | Microsoft Active Directory Global Catalog over TLS. | Security & VPN | TCP monitor → |
| 3306 | Yes | Yes | MySQL / MariaDB | MySQL and MariaDB database system. | Database | MySQL monitor → |
| 3389 | Yes | Yes | RDP | Microsoft Remote Desktop Protocol. A top target for brute force; restrict access. | Remote access | TCP monitor → |
| 3478 | Yes | Yes | STUN / TURN | Session Traversal Utilities for NAT (WebRTC). | Messaging | TCP monitor → |
| 3690 | Yes | Yes | Subversion | Subversion (SVN) version control. | DevOps & cloud | TCP monitor → |
| 3702 | Yes | Yes | WS-Discovery | Web Services Discovery. Frequently abused for amplification. | DNS & network | TCP monitor → |
| 4369 | Yes | Yes | EPMD | Erlang Port Mapper Daemon (RabbitMQ, CouchDB). | Messaging | TCP monitor → |
| 4433 | Unofficial | No | TLS alt | Frequently used for alternate HTTPS or TLS testing. | Web | |
| 4444 | Unofficial | Unofficial | Metasploit / misc | Metasploit default listener; also used by other tools. Traffic here deserves scrutiny. | Security & VPN | |
| 4500 | Yes | Yes | IPsec NAT-T | IPsec NAT traversal. | Security & VPN | TCP monitor → |
| 4789 | Assigned | Yes | VXLAN | Virtual Extensible LAN overlay networking. | DNS & network | |
| 5000 | Unofficial | Yes | Flask / UPnP | Default for Flask development servers and Docker Registry; UPnP on UDP. | Web | |
| 5001 | Unofficial | No | iperf3 | Default port for iperf3 network throughput tests. | Monitoring | |
| 5044 | Unofficial | No | Logstash Beats | Logstash Beats input. | Monitoring | |
| 5060 | Yes | Yes | SIP | Session Initiation Protocol (VoIP), unencrypted. | Messaging | TCP monitor → |
| 5061 | Yes | Assigned | SIP over TLS | Session Initiation Protocol over TLS. | Messaging | TCP monitor → |
| 5222 | Yes | Assigned | XMPP client | Extensible Messaging and Presence Protocol client connection. | Messaging | TCP monitor → |
| 5269 | Yes | Assigned | XMPP server | XMPP server-to-server connection. | Messaging | TCP monitor → |
| 5353 | Yes | Yes | mDNS | Multicast DNS (Bonjour / Avahi). | DNS & network | TCP monitor → |
| 5432 | Yes | Assigned | PostgreSQL | PostgreSQL database system. | Database | TCP monitor → |
| 5601 | Unofficial | No | Kibana | Kibana web interface. | Monitoring | |
| 5671 | Yes | Yes | AMQPS | AMQP over TLS. | Messaging | TCP monitor → |
| 5672 | Yes | Yes | AMQP | Advanced Message Queuing Protocol (RabbitMQ). | Messaging | TCP monitor → |
| 5900 | Yes | Yes | VNC | Virtual Network Computing remote desktop. | Remote access | TCP monitor → |
| 5938 | Unofficial | Unofficial | TeamViewer | TeamViewer remote access. | Remote access | |
| 5984 | Yes | Yes | CouchDB | Apache CouchDB database. | Database | TCP monitor → |
| 5985 | Yes | Assigned | WinRM (HTTP) | Windows Remote Management over HTTP. | Remote access | TCP monitor → |
| 5986 | Yes | Assigned | WinRM (HTTPS) | Windows Remote Management over HTTPS. | Remote access | TCP monitor → |
| 6379 | Yes | Assigned | Redis | Redis key-value store. Never expose without authentication. | Database | TCP monitor → |
| 6443 | Yes | No | Kubernetes API | Kubernetes API server. | DevOps & cloud | TCP monitor → |
| 6667 | Unofficial | No | IRC | Internet Relay Chat, the de facto standard port. | Messaging | |
| 6881 | Unofficial | Unofficial | BitTorrent | BitTorrent default range starts here (6881–6889). | File transfer | |
| 7000 | Unofficial | No | Cassandra (inter-node) | Apache Cassandra inter-node cluster communication. | Database | |
| 7474 | Unofficial | No | Neo4j HTTP | Neo4j web interface. | Database | |
| 8000 | Unofficial | No | HTTP alt | Common alternative HTTP / development port (Django, Python http.server). | Web | |
| 8008 | Yes | Yes | HTTP alt | HTTP alternate. | Web | TCP monitor → |
| 8080 | Yes | Yes | HTTP alt | Alternative HTTP port, common for proxies and app servers (Tomcat, Jenkins). | Web | HTTP monitor → |
| 8081 | Unofficial | No | HTTP alt | Common alternative HTTP port. | Web | |
| 8086 | Unofficial | No | InfluxDB | InfluxDB HTTP API. | Database | |
| 8123 | Unofficial | No | ClickHouse HTTP | ClickHouse HTTP interface. Also Home Assistant. | Database | |
| 8125 | No | Unofficial | StatsD | StatsD metrics collection (UDP). | Monitoring | |
| 8200 | Unofficial | No | Vault | HashiCorp Vault API. | DevOps & cloud | |
| 8443 | Yes | Unofficial | HTTPS alt | Alternative HTTPS port. | Web | HTTPS monitor → |
| 8500 | Unofficial | No | Consul | HashiCorp Consul HTTP API. | DevOps & cloud | |
| 8883 | Yes | Yes | MQTT over TLS | Secure MQTT. | Messaging | TCP monitor → |
| 8888 | Unofficial | No | HTTP alt / Jupyter | Common alternative HTTP port; Jupyter Notebook default. | Web | |
| 9000 | Unofficial | No | PHP-FPM / misc | PHP-FPM, SonarQube, Portainer and ClickHouse native protocol. | Web | |
| 9042 | Unofficial | No | Cassandra CQL | Apache Cassandra native protocol. | Database | |
| 9090 | Unofficial | No | Prometheus | Prometheus server. Also Cockpit web console. | Monitoring | |
| 9092 | Unofficial | No | Kafka | Apache Kafka broker. | Messaging | |
| 9100 | Unofficial | Yes | node_exporter / JetDirect | Prometheus node_exporter; HP JetDirect raw printing. | Monitoring | |
| 9200 | Unofficial | No | Elasticsearch | Elasticsearch REST API. | Database | |
| 9300 | Unofficial | No | Elasticsearch transport | Elasticsearch node-to-node communication. | Database | |
| 9418 | Yes | Yes | Git | Git native protocol. | DevOps & cloud | TCP monitor → |
| 10000 | Unofficial | No | Webmin | Webmin server administration. | Remote access | |
| 10250 | Unofficial | No | Kubelet | Kubernetes kubelet API. | DevOps & cloud | |
| 11211 | Yes | Yes | Memcached | Memcached caching system. UDP exposure has been abused for amplification. | Database | TCP monitor → |
| 12201 | Unofficial | Unofficial | Graylog GELF | Graylog Extended Log Format. | Monitoring | |
| 15672 | Unofficial | No | RabbitMQ management | RabbitMQ management UI. | Messaging | |
| 19999 | Unofficial | No | Netdata | Netdata dashboard. | Monitoring | |
| 25565 | Unofficial | Unofficial | Minecraft | Minecraft Java Edition server. | Gaming | |
| 26257 | Unofficial | No | CockroachDB | CockroachDB SQL and console. | Database | |
| 27015 | Unofficial | Unofficial | Steam / Source | Steam and Source engine game servers. | Gaming | |
| 27017 | Unofficial | No | MongoDB | MongoDB default. Never expose without authentication. | Database | |
| 49151 | Reserved | Reserved | Reserved | Reserved by IANA (top of the registered range). | Other | |
| 50000 | Unofficial | No | DB2 | IBM Db2 default. | Database | |
| 51820 | No | Unofficial | WireGuard | WireGuard VPN default. | Security & VPN | |
| 61616 | Unofficial | No | ActiveMQ | Apache ActiveMQ OpenWire. | Messaging |
No ports match. Try a different search or reset the filters.
This is a dynamic list and may never be able to satisfy particular standards for completeness. The authoritative source is the IANA Service Name and Transport Protocol Port Number Registry. Ports 1024–49151 not shown here are mostly assigned to specific vendor software.