Port Lookup

Which service uses which port? Searchable list of the most important TCP and UDP ports – from 22 (SSH) and 443 (HTTPS) to databases, VPNs and game servers.

Runs locally in your browser
92 ports
PortProtocolServiceDescription
7TCP/UDPechoEcho – returns what it receives (diagnostics)
20TCPftp-dataFTP data transfer (active mode)
21TCPftpFTP control connection
22TCPsshSSH – secure remote shell, SFTP and SCP
23TCPtelnetTelnet – unencrypted remote shell (outdated)
25TCPsmtpSMTP – email transfer between mail servers
43TCPwhoisWHOIS – domain and IP owner lookup
53TCP/UDPdomainDNS – name resolution
67UDPbootpsDHCP server
68UDPbootpcDHCP client
69UDPtftpTFTP – simple file transfer (e.g. network boot)
80TCPhttpHTTP – unencrypted websites
88TCP/UDPkerberosKerberos authentication
110TCPpop3POP3 – fetching email
119TCPnntpNNTP – Usenet news
123UDPntpNTP – time synchronization
135TCPmsrpcMicrosoft RPC endpoint mapper
137UDPnetbios-nsNetBIOS name service
138UDPnetbios-dgmNetBIOS datagram service
139TCPnetbios-ssnNetBIOS session service (old Windows file sharing)
143TCPimapIMAP – email access
161UDPsnmpSNMP – monitoring of network devices
162UDPsnmptrapSNMP traps (notifications)
179TCPbgpBGP – routing between networks on the internet
389TCP/UDPldapLDAP – directory services (e.g. Active Directory)
443TCP/UDPhttpsHTTPS – encrypted websites (UDP for HTTP/3)
445TCPmicrosoft-dsSMB – Windows file and printer sharing
465TCPsubmissionsSMTP submission with implicit TLS
500UDPisakmpIKE – IPsec VPN key exchange
514UDPsyslogSyslog – log messages
515TCPprinterLPD – line printer daemon
520UDPripRIP – routing protocol
546UDPdhcpv6-clientDHCPv6 client
547UDPdhcpv6-serverDHCPv6 server
554TCP/UDPrtspRTSP – streaming control (e.g. IP cameras)
587TCPsubmissionSMTP submission – sending email from mail programs
631TCPippIPP – Internet Printing Protocol (CUPS)
636TCPldapsLDAP over TLS
853TCP/UDPdomain-sDNS over TLS / DNS over QUIC
873TCPrsyncrsync – file synchronization
989TCPftps-dataFTPS data (FTP over TLS)
990TCPftpsFTPS control (FTP over TLS)
993TCPimapsIMAP over TLS
995TCPpop3sPOP3 over TLS
1080TCPsocksSOCKS proxy
1194UDPopenvpnOpenVPN
1433TCPms-sql-sMicrosoft SQL Server database
1521TCPoracleOracle database listener
1701UDPl2tpL2TP VPN
1723TCPpptpPPTP VPN (insecure, outdated)
1812UDPradiusRADIUS authentication (e.g. WPA Enterprise)
1813UDPradius-acctRADIUS accounting
1883TCPmqttMQTT – IoT messaging
1900UDPssdpSSDP / UPnP device discovery
2049TCP/UDPnfsNFS – network file system
2375TCPdockerDocker API without TLS (do not expose!)
2376TCPdocker-sDocker API with TLS
3000TCP–Common development server port (Node.js, Grafana)
3128TCPsquidSquid HTTP proxy
3268TCPmsft-gcActive Directory global catalog
3306TCPmysqlMySQL / MariaDB database
3389TCP/UDPms-wbt-serverRemote Desktop (RDP)
3478TCP/UDPstunSTUN/TURN – NAT traversal for calls and WebRTC
4369TCPepmdErlang port mapper (RabbitMQ, CouchDB)
4500UDPipsec-nat-tIPsec NAT traversal
5000TCP–Common app port (Flask, Docker registry, UPnP)
5060TCP/UDPsipSIP – VoIP signalling
5061TCPsipsSIP over TLS
5222TCPxmpp-clientXMPP / Jabber chat clients
5353UDPmdnsmDNS – local name resolution (Bonjour, Avahi)
5432TCPpostgresqlPostgreSQL database
5672TCPamqpAMQP message queues (RabbitMQ)
5900TCPrfbVNC remote desktop
5985TCPwsmanWindows Remote Management (HTTP)
5986TCPwsmansWindows Remote Management (HTTPS)
6379TCPredisRedis in-memory database
6443TCPsun-sr-httpsKubernetes API server
6881TCP/UDP–BitTorrent (typical range 6881–6889)
8000TCP–Alternative HTTP / development servers
8080TCPhttp-altAlternative HTTP, proxies and app servers (Tomcat)
8443TCPpcsync-httpsAlternative HTTPS (admin interfaces)
8883TCPsecure-mqttMQTT over TLS
9000TCP–Common app port (PHP-FPM, Portainer, SonarQube)
9090TCP–Prometheus web interface
9092TCP–Apache Kafka
9100TCPjetdirectRaw printing (HP JetDirect); also Prometheus node exporter
9200TCP–Elasticsearch / OpenSearch search database (REST API)
11211TCP/UDPmemcacheMemcached cache server
25565TCP–Minecraft server
27017TCP–MongoDB database
32400TCP–Plex Media Server
51820UDP–WireGuard VPN (default port)

Assignments follow the IANA registry and common practice. Any program can use any port – an open port says nothing about which software is really listening.

About this tool

Network services listen on ports – numbered entrances from 0 to 65535. Web servers use 443, SSH uses port 22, databases like PostgreSQL 5432. Anyone setting up a firewall, troubleshooting or analysing a port scan needs to know which service is behind which number.

The list contains the most important TCP and UDP ports from the IANA registry and common practice – from email and DNS through VPNs and remote access to databases, message brokers and game servers. Search by number, range or keyword. Calculate networks with the IP Subnet Calculator and query DNS records with the DNS Lookup.

How it works

  1. Enter a port number, e.g. 3389, to see the matching service.
  2. Or search for a range such as 5000-6000 or a keyword like “vpn” or “database”.
  3. Hover over the port number to see the IANA range (system, registered, dynamic).
  4. Use the information for firewall rules or troubleshooting.

Frequently asked questions

What is the difference between TCP and UDP?

TCP establishes a connection and makes sure all data arrives completely and in the right order – ideal for websites, email or SSH. UDP sends packets without acknowledgement and is therefore faster, e.g. for DNS, video calls, games or HTTP/3.

What are system, registered and dynamic ports?

Ports 0–1023 are system ports for standard services; on Unix systems programs need special privileges to use them. 1024–49151 are registered with the IANA for specific applications. 49152–65535 are dynamic and assigned by the operating system for outgoing connections.

Which ports should I not expose to the internet?

Databases (3306, 5432, 27017, 6379), remote access such as RDP (3389) and VNC (5900), SMB (445) and the Docker API (2375) never belong on the internet unprotected. Use a VPN like WireGuard or SSH tunnels instead.

Can I check whether a port is open?

Not from the browser – for security reasons, websites may not open arbitrary connections. On your own computer, commands like “ss -tlnp” (Linux), “netstat -an” (Windows) or “lsof -i -P” (macOS) help.