// REFERENCE
🔌 Network ports
What service runs on each TCP/UDP port, what it is for and the risk of leaving it exposed to the Internet.
// Web & proxies
80
Port 80 (HTTP) 443
Port 443 (HTTPS) 1080
Port 1080 (SOCKS proxy) 2082
Port 2082 (cPanel) 2083
Port 2083 (cPanel TLS) 3000
Port 3000 (dev apps) 3128
Port 3128 (Squid proxy) 7001
Port 7001 (WebLogic) 8000
Port 8000 (alternate HTTP) 8080
Port 8080 (HTTP-proxy / alternate) 8081
Port 8081 (alternate HTTP) 8443
Port 8443 (alternate HTTPS) 8888
Port 8888 (alternate HTTP / Jupyter) 9000
Port 9000 (PHP-FPM / panels) 10000
Port 10000 (Webmin) 8009
Port 8009 (AJP / Ghostcat)
Port 80 (HTTP) 443
Port 443 (HTTPS) 1080
Port 1080 (SOCKS proxy) 2082
Port 2082 (cPanel) 2083
Port 2083 (cPanel TLS) 3000
Port 3000 (dev apps) 3128
Port 3128 (Squid proxy) 7001
Port 7001 (WebLogic) 8000
Port 8000 (alternate HTTP) 8080
Port 8080 (HTTP-proxy / alternate) 8081
Port 8081 (alternate HTTP) 8443
Port 8443 (alternate HTTPS) 8888
Port 8888 (alternate HTTP / Jupyter) 9000
Port 9000 (PHP-FPM / panels) 10000
Port 10000 (Webmin) 8009
Port 8009 (AJP / Ghostcat)
// Remote access
22
Port 22 (SSH) 23
Port 23 (Telnet) 1194
Port 1194 (OpenVPN) 1723
Port 1723 (PPTP VPN) 2222
Port 2222 (alternate SSH) 3389
Port 3389 (RDP) 5900
Port 5900 (VNC) 5985
Port 5985 (WinRM HTTP) 5986
Port 5986 (WinRM HTTPS) 500
Port 500 (IKE / IPsec) 513
Port 513 (rlogin) 623
Port 623 (IPMI / BMC) 902
Port 902 (VMware ESXi) 2323
Port 2323 (alternate Telnet) 5555
Port 5555 (Android ADB) 8291
Port 8291 (MikroTik Winbox)
Port 22 (SSH) 23
Port 23 (Telnet) 1194
Port 1194 (OpenVPN) 1723
Port 1723 (PPTP VPN) 2222
Port 2222 (alternate SSH) 3389
Port 3389 (RDP) 5900
Port 5900 (VNC) 5985
Port 5985 (WinRM HTTP) 5986
Port 5986 (WinRM HTTPS) 500
Port 500 (IKE / IPsec) 513
Port 513 (rlogin) 623
Port 623 (IPMI / BMC) 902
Port 902 (VMware ESXi) 2323
Port 2323 (alternate Telnet) 5555
Port 5555 (Android ADB) 8291
Port 8291 (MikroTik Winbox)
25
Port 25 (SMTP) 110
Port 110 (POP3) 143
Port 143 (IMAP) 465
Port 465 (SMTPS) 587
Port 587 (SMTP submission) 993
Port 993 (IMAPS) 995
Port 995 (POP3S)
Port 25 (SMTP) 110
Port 110 (POP3) 143
Port 143 (IMAP) 465
Port 465 (SMTPS) 587
Port 587 (SMTP submission) 993
Port 993 (IMAPS) 995
Port 995 (POP3S)
// Files & sharing
20
Port 20 (FTP-DATA) 21
Port 21 (FTP) 69
Port 69 (TFTP) 139
Port 139 (NetBIOS Session / SMB) 445
Port 445 (SMB) 873
Port 873 (rsync) 989
Port 989 (FTPS data) 990
Port 990 (FTPS) 2049
Port 2049 (NFS) 3260
Port 3260 (iSCSI)
Port 20 (FTP-DATA) 21
Port 21 (FTP) 69
Port 69 (TFTP) 139
Port 139 (NetBIOS Session / SMB) 445
Port 445 (SMB) 873
Port 873 (rsync) 989
Port 989 (FTPS data) 990
Port 990 (FTPS) 2049
Port 2049 (NFS) 3260
Port 3260 (iSCSI)
// Databases & queues
1433
Port 1433 (MS SQL Server) 1434
Port 1434 (MS SQL Monitor) 1521
Port 1521 (Oracle DB) 2181
Port 2181 (ZooKeeper) 3306
Port 3306 (MySQL / MariaDB) 5432
Port 5432 (PostgreSQL) 5601
Port 5601 (Kibana) 5672
Port 5672 (AMQP / RabbitMQ) 6379
Port 6379 (Redis) 9092
Port 9092 (Apache Kafka) 9200
Port 9200 (Elasticsearch) 9300
Port 9300 (Elasticsearch nodes) 11211
Port 11211 (Memcached) 27017
Port 27017 (MongoDB) 27018
Port 27018 (MongoDB shard) 4369
Port 4369 (Erlang EPMD) 5984
Port 5984 (CouchDB) 8086
Port 8086 (InfluxDB) 9042
Port 9042 (Cassandra)
Port 1433 (MS SQL Server) 1434
Port 1434 (MS SQL Monitor) 1521
Port 1521 (Oracle DB) 2181
Port 2181 (ZooKeeper) 3306
Port 3306 (MySQL / MariaDB) 5432
Port 5432 (PostgreSQL) 5601
Port 5601 (Kibana) 5672
Port 5672 (AMQP / RabbitMQ) 6379
Port 6379 (Redis) 9092
Port 9092 (Apache Kafka) 9200
Port 9200 (Elasticsearch) 9300
Port 9300 (Elasticsearch nodes) 11211
Port 11211 (Memcached) 27017
Port 27017 (MongoDB) 27018
Port 27018 (MongoDB shard) 4369
Port 4369 (Erlang EPMD) 5984
Port 5984 (CouchDB) 8086
Port 8086 (InfluxDB) 9042
Port 9042 (Cassandra)
// DNS & directory
53
Port 53 (DNS) 88
Port 88 (Kerberos) 389
Port 389 (LDAP) 636
Port 636 (LDAPS) 43
Port 43 (WHOIS) 853
Port 853 (DNS over TLS) 3268
Port 3268 (AD Global Catalog)
Port 53 (DNS) 88
Port 88 (Kerberos) 389
Port 389 (LDAP) 636
Port 636 (LDAPS) 43
Port 43 (WHOIS) 853
Port 853 (DNS over TLS) 3268
Port 3268 (AD Global Catalog)
// Infrastructure
67
Port 67 (DHCP server) 68
Port 68 (DHCP client) 123
Port 123 (NTP) 161
Port 161 (SNMP) 162
Port 162 (SNMP Trap) 179
Port 179 (BGP) 514
Port 514 (Syslog) 515
Port 515 (LPD printing) 631
Port 631 (IPP / CUPS) 1900
Port 1900 (SSDP / UPnP) 4786
Port 4786 (Cisco Smart Install) 19
Port 19 (CHARGEN) 37
Port 37 (Time Protocol) 49
Port 49 (TACACS+) 427
Port 427 (SLP) 520
Port 520 (RIP) 1812
Port 1812 (RADIUS) 3702
Port 3702 (WS-Discovery) 5353
Port 5353 (mDNS / Bonjour) 7547
Port 7547 (TR-069 / CWMP) 9100
Port 9100 (RAW printing / JetDirect)
Port 67 (DHCP server) 68
Port 68 (DHCP client) 123
Port 123 (NTP) 161
Port 161 (SNMP) 162
Port 162 (SNMP Trap) 179
Port 179 (BGP) 514
Port 514 (Syslog) 515
Port 515 (LPD printing) 631
Port 631 (IPP / CUPS) 1900
Port 1900 (SSDP / UPnP) 4786
Port 4786 (Cisco Smart Install) 19
Port 19 (CHARGEN) 37
Port 37 (Time Protocol) 49
Port 49 (TACACS+) 427
Port 427 (SLP) 520
Port 520 (RIP) 1812
Port 1812 (RADIUS) 3702
Port 3702 (WS-Discovery) 5353
Port 5353 (mDNS / Bonjour) 7547
Port 7547 (TR-069 / CWMP) 9100
Port 9100 (RAW printing / JetDirect)
// Other
111
Port 111 (RPCbind / Portmapper) 135
Port 135 (MSRPC) 137
Port 137 (NetBIOS Name) 138
Port 138 (NetBIOS Datagram) 1883
Port 1883 (MQTT) 2375
Port 2375 (Docker API) 2376
Port 2376 (Docker API TLS) 3690
Port 3690 (Subversion) 4444
Port 4444 (Metasploit / malware) 5060
Port 5060 (SIP) 5061
Port 5061 (SIP-TLS) 5222
Port 5222 (XMPP client) 6000
Port 6000 (X11) 6443
Port 6443 (Kubernetes API) 6667
Port 6667 (IRC) 79
Port 79 (Finger) 102
Port 102 (Siemens S7 / ICS) 113
Port 113 (Ident) 119
Port 119 (NNTP) 502
Port 502 (Modbus / ICS) 1099
Port 1099 (Java RMI) 3478
Port 3478 (STUN / TURN) 10250
Port 10250 (Kubelet)
Port 111 (RPCbind / Portmapper) 135
Port 135 (MSRPC) 137
Port 137 (NetBIOS Name) 138
Port 138 (NetBIOS Datagram) 1883
Port 1883 (MQTT) 2375
Port 2375 (Docker API) 2376
Port 2376 (Docker API TLS) 3690
Port 3690 (Subversion) 4444
Port 4444 (Metasploit / malware) 5060
Port 5060 (SIP) 5061
Port 5061 (SIP-TLS) 5222
Port 5222 (XMPP client) 6000
Port 6000 (X11) 6443
Port 6443 (Kubernetes API) 6667
Port 6667 (IRC) 79
Port 79 (Finger) 102
Port 102 (Siemens S7 / ICS) 113
Port 113 (Ident) 119
Port 119 (NNTP) 502
Port 502 (Modbus / ICS) 1099
Port 1099 (Java RMI) 3478
Port 3478 (STUN / TURN) 10250
Port 10250 (Kubelet)
// media
Assignments per the IANA port registry. Educational content.