Common Ports List
TCP and UDP ports seen in security assessments and exposure scans. Each entry covers the registered service, why exposure matters, hardening steps, and exploited CVEs tied to the service.
Ports
113
SystemSystem Ports
42
ExploitedWith Exploited CVEs
37
Port Reference
113 ports| Port | Transport | Service | IANA name | CVEs |
|---|---|---|---|---|
| 20 | TCP | File Transfer Protocol data channel (active mode) | ftp-data | 4 (4 KEV) |
| 21 | TCP | File Transfer Protocol (control connection) | ftp | 4 (4 KEV) |
| 22 | TCP | Secure Shell | ssh | 4 (3 KEV) |
| 23 | TCP | Telnet remote terminal protocol | telnet | - |
| 25 | TCP | Simple Mail Transfer Protocol | smtp | 5 (5 KEV) |
| 53 | UDP / TCP | Domain Name System | domain | 2 (2 KEV) |
| 67 | UDP | Dynamic Host Configuration Protocol (server port) | bootps | 1 (1 KEV) |
| 68 | UDP | Dynamic Host Configuration Protocol (client port) | bootpc | 1 (1 KEV) |
| 69 | UDP | Trivial File Transfer Protocol | tftp | - |
| 80 | TCP | Hypertext Transfer Protocol | http, www, www-http | - |
| 88 | TCP / UDP | Kerberos V5 Key Distribution Center | kerberos | 1 (1 KEV) |
| 110 | TCP | Post Office Protocol version 3 | pop3 | - |
| 111 | TCP / UDP | ONC RPC portmapper (rpcbind) | sunrpc | - |
| 123 | UDP | Network Time Protocol | ntp | - |
| 135 | TCP | Microsoft RPC Endpoint Mapper (DCE/RPC) | epmap | - |
| 137 | UDP | NetBIOS Name Service | netbios-ns | - |
| 138 | UDP | NetBIOS Datagram Service | netbios-dgm | - |
| 139 | TCP | NetBIOS Session Service (SMB over NetBIOS) | netbios-ssn | 11 (10 KEV) |
| 143 | TCP | Internet Message Access Protocol | imap | - |
| 161 | UDP | Simple Network Management Protocol | snmp | 10 (10 KEV) |
| 162 | UDP | SNMP notifications (traps and informs) | snmptrap | 10 (10 KEV) |
| 179 | TCP | Border Gateway Protocol | bgp | 3 (3 KEV) |
| 389 | TCP / UDP | Lightweight Directory Access Protocol | ldap | - |
| 443 | TCP / UDP | HTTP over TLS | https | - |
| 445 | TCP | Server Message Block over TCP | microsoft-ds | 11 (10 KEV) |
| 464 | TCP / UDP | Kerberos Change/Set Password protocol | kpasswd | - |
| 465 | TCP | Message Submission over Implicit TLS | submissions, urd (tcp); igmpv3lite (udp) | 5 (5 KEV) |
| 500 | UDP | Internet Key Exchange for IPsec | isakmp | 7 (7 KEV) |
| 502 | TCP | Modbus Application Protocol over TCP | mbap | - |
| 514 | UDP / TCP | Syslog over UDP (and rsh on TCP) | syslog (udp), shell (tcp) | - |
| 515 | TCP | Line Printer Daemon protocol | printer | - |
| 554 | TCP / UDP | Real Time Streaming Protocol | rtsp | - |
| 587 | TCP | Message Submission (SMTP with STARTTLS) | submission | 5 (5 KEV) |
| 623 | UDP | Intelligent Platform Management Interface over RMCP | asf-rmcp (udp), oob-ws-http (tcp) | - |
| 631 | TCP / UDP | Internet Printing Protocol | ipp, ipps (tcp) | - |
| 636 | TCP | LDAP over TLS/SSL | ldaps | - |
| 853 | TCP / UDP | DNS over TLS, DTLS and QUIC | domain-s | - |
| 873 | TCP | rsync daemon protocol | rsync | - |
| 902 | TCP / UDP | VMware vCenter to ESXi management and console traffic | ideafarm-door | 4 (4 KEV) |
| 990 | TCP | FTP control channel over implicit TLS | ftps | 3 (3 KEV) |
| 993 | TCP | IMAP over implicit TLS | imaps | - |
| 995 | TCP | POP3 over implicit TLS | pop3s | - |
| 1080 | TCP | SOCKS proxy protocol | socks | - |
| 1194 | UDP / TCP | OpenVPN tunnel | openvpn | - |
| 1433 | TCP | Microsoft SQL Server Database Engine (TDS) | ms-sql-s | 1 (1 KEV) |
| 1434 | UDP | Microsoft SQL Server Browser (Resolution Service) | ms-sql-m | - |
| 1521 | TCP | Oracle Net Listener (Transparent Network Substrate) | ncube-lm | - |
| 1701 | UDP | Layer 2 Tunneling Protocol | l2f, l2tp | - |
| 1723 | TCP | Point-to-Point Tunneling Protocol | pptp | - |
| 1812 | UDP | Remote Authentication Dial In User Service (authentication) | radius | - |
| 1883 | TCP | Message Queuing Telemetry Transport (unencrypted) | mqtt | - |
| 1900 | UDP | Simple Service Discovery Protocol (UPnP discovery) | ssdp | 2 (1 KEV) |
| 2049 | TCP / UDP | Network File System | nfs, shilp | - |
| 2222 | TCP / UDP | EtherNet/IP I/O | EtherNet-IP-1, EtherNet/IP-1 | - |
| 2375 | TCP | Docker Engine REST API (unencrypted) | docker | - |
| 2379 | TCP | etcd client API | etcd-client | - |
| 3000 | TCP | Grafana web UI and common development HTTP servers | hbci, remoteware-cl | 2 (2 KEV) |
| 3128 | TCP | Squid HTTP proxy | ndl-aas | 1 |
| 3268 | TCP | Active Directory Global Catalog (LDAP) | msft-gc | - |
| 3269 | TCP | Active Directory Global Catalog with LDAP over SSL/TLS | msft-gc-ssl | - |
| 3306 | TCP | MySQL database server | mysql | - |
| 3389 | TCP / UDP | Remote Desktop Protocol | ms-wbt-server | 2 (2 KEV) |
| 3478 | UDP / TCP | Session Traversal Utilities for NAT and Traversal Using Relays around NAT | stun, turn, stun-behavior | - |
| 3702 | UDP | Web Services Dynamic Discovery | ws-discovery | - |
| 4369 | TCP | Erlang Port Mapper Daemon | epmd | 1 (1 KEV) |
| 4444 | TCP | Metasploit example listener port and historical backdoor port | krb524, nv-video | - |
| 4500 | UDP | IPsec NAT Traversal (UDP-encapsulated ESP and IKE) | ipsec-nat-t | 7 (7 KEV) |
| 5000 | TCP | Common application port (Flask dev server, AirPlay, Docker Registry) | commplex-main | - |
| 5060 | UDP / TCP | Session Initiation Protocol | sip | 1 (1 KEV) |
| 5061 | TCP | Session Initiation Protocol over TLS | sips | 1 (1 KEV) |
| 5222 | TCP | Extensible Messaging and Presence Protocol (client-to-server) | xmpp-client | - |
| 5353 | UDP | Multicast DNS | mdns | - |
| 5355 | UDP / TCP | Link-Local Multicast Name Resolution | llmnr | - |
| 5357 | TCP | Web Services on Devices API | wsdapi | - |
| 5432 | TCP | PostgreSQL database server | postgresql | - |
| 5555 | TCP | Android Debug Bridge over TCP/IP | personal-agent | - |
| 5601 | TCP | Kibana web interface | esmagent | 1 (1 KEV) |
| 5900 | TCP | Virtual Network Computing (Remote Framebuffer protocol) | rfb | - |
| 5985 | TCP | Windows Remote Management over HTTP | wsman | - |
| 5986 | TCP | Windows Remote Management over HTTPS | wsmans | - |
| 6000 | TCP | X Window System | x11 | - |
| 6379 | TCP | Redis key-value store | redis | 1 (1 KEV) |
| 6443 | TCP | Kubernetes API server (HTTPS) | sun-sr-https | - |
| 6667 | TCP | Internet Relay Chat (plaintext) | ircu | - |
| 7001 | TCP | Oracle WebLogic Server listen port | afs3-callback | 14 (14 KEV) |
| 7547 | TCP | CPE WAN Management Protocol (CWMP) | cwmp | - |
| 7680 | TCP | Windows Delivery Optimization peer-to-peer | ms-do | - |
| 8000 | TCP | Alternate HTTP port for development servers | irdmi | - |
| 8008 | TCP | HTTP alternate port | http-alt | - |
| 8009 | TCP | Apache JServ Protocol (AJP13) | nvme-disc | 1 (1 KEV) |
| 8080 | TCP | HTTP alternate port | http-alt | - |
| 8081 | TCP | Alternate HTTP port | sunproxyadmin | - |
| 8088 | TCP | Hadoop YARN ResourceManager web UI and Splunk HTTP Event Collector | radan-http | - |
| 8443 | TCP | Alternate HTTPS port (HTTP over TLS) | pcsync-https | - |
| 8530 | TCP | Windows Server Update Services (HTTP) | unassigned | 1 (1 KEV) |
| 8834 | TCP | Tenable Nessus web interface and API | unassigned | - |
| 8883 | TCP | Message Queuing Telemetry Transport over TLS | secure-mqtt | - |
| 8888 | TCP | Jupyter Server / Jupyter Notebook web interface | ddi-tcp-1, ddi-udp-1 | - |
| 9000 | TCP | Shared default port for PHP-FPM FastCGI, SonarQube, MinIO, and Portainer | cslistener | 3 (3 KEV) |
| 9090 | TCP | Prometheus server web UI and API, Cockpit web console | websm | - |
| 9100 | TCP | AppSocket (JetDirect) raw printing and Prometheus node_exporter | hp-pdl-datastr, pdl-datastream | - |
| 9200 | TCP | Elasticsearch HTTP REST API | wap-wsp | 2 (2 KEV) |
| 9389 | TCP | Active Directory Web Services | adws | - |
| 9418 | TCP | Git native protocol (git daemon) | git | - |
| 9443 | TCP | Alternate HTTPS port, default for the Portainer web UI | tungsten-https | - |
| 10000 | TCP | Webmin web administration and Network Data Management Protocol | ndmp | 1 (1 KEV) |
| 10250 | TCP | Kubernetes kubelet HTTPS API | unassigned | - |
| 11211 | TCP / UDP | Memcached distributed memory cache | memcache | - |
| 27017 | TCP | MongoDB database server (mongod / mongos) | mongodb | 1 (1 KEV) |
| 44818 | TCP / UDP | EtherNet/IP (Common Industrial Protocol) explicit messaging | EtherNet-IP-2, EtherNet/IP-2 | 3 (3 KEV) |
| 47001 | TCP | Windows Remote Management default local listener | winrm | - |
| 49152 | TCP / UDP | Start of the IANA Dynamic and/or Private port range (49152-65535) | unassigned | - |
| 51820 | UDP | WireGuard VPN | unassigned | - |
Frequently Asked Questions
What are the port number ranges?→
- +System Ports: 0 to 1023, assigned by IANA.
- +User Ports: 1024 to 49151, assigned by IANA through Expert Review.
- +Dynamic and/or Private Ports: 49152 to 65535, never assigned and used for temporary or private connections.
Who assigns port numbers?→
IANA (the Internet Assigned Numbers Authority) maintains the Service Name and Transport Protocol Port Number Registry. RFC 6335 defines the procedures for assigning service names and port numbers for TCP, UDP, SCTP, and DCCP.
Does a port number tell you which service is running?→
No. An IANA assignment records which service a port is registered for, but any service can be configured to listen on any port. Confirm the service with a banner or protocol check before acting on a port number alone.
Port assignments from the IANA Service Name and Transport Protocol Port Number Registry and RFC 6335. Exploited-in-the-wild data from the CISA KEV catalog (CC0).