Port Lookup
Search ports by number or service name, with security notes
76 ports
Default port for the web, plaintext HTTP traffic.
Encrypted web traffic over TLS/SSL.
Common HTTP alternative: Tomcat, Nginx reverse proxy, dev servers.
HTTPS alternative port, Tomcat SSL default.
Common dev-server port for Django/Flask and others.
Node.js (Express/Nuxt/React) dev default; also Grafana default.
Flask dev-server default; also used by Windows UPnP discovery.
PHP-FPM FastCGI default listen port.
Webmin server admin panel default port.
Security note: The Webmin panel is a weak-password risk; restrict who can reach it.
MySQL / MariaDB default port.
PostgreSQL default port.
Security note: A password brute-force target; restrict sources and enforce strong auth.
Microsoft SQL Server default port.
Oracle database listener default port.
Redis in-memory database default port.
Security note: Unauthenticated access is a mining and ransomware hot spot; bind internally, set a password, rename risky commands.
MongoDB default port.
Security note: Many data leaks come from unauthenticated access; enable auth and restrict sources.
Elasticsearch REST API default port (HTTP).
Security note: Unauthenticated access reads and writes all indices; never expose it.
Apache CouchDB default port.
ArangoDB default port.
RabbitMQ AMQP protocol default port.
RabbitMQ management UI default port.
Security note: The console ships with default credentials; change them and restrict sources.
Apache Kafka broker default port.
ActiveMQ web console default port.
Security note: The ActiveMQ console defaults to admin/admin; change it.
ActiveMQ OpenWire default port.
MQTT IoT messaging default port.
MQTT over TLS/SSL.
Mail relay between servers (MTA to MTA).
Security note: An open relay gets abused by spammers; restrict who may relay.
SMTP over implicit SSL submission port.
Mail client submission with STARTTLS; the recommended sending port.
POP3 mail retrieval (plaintext).
POP3 over SSL.
IMAP mail retrieval (plaintext).
IMAP over SSL.
SSH remote login and SFTP default port.
Security note: Exposed to the internet it is brute-forced constantly; use keys, disable password login, restrict source IPs.
Telnet plaintext remote login protocol.
Security note: Credentials travel in plaintext; replace it with SSH.
Windows Remote Desktop default port.
Security note: A high-risk brute-force target; put it behind a VPN or restrict source IPs.
VNC remote desktop, starting at 5900 + display number.
Security note: Weak passwords are common and traffic is unencrypted; do not expose it directly.
Docker Remote API without TLS.
Security note: The unencrypted Docker API equals host root; never expose it.
Docker Remote API over TLS.
Security note: TLS-protected but still host root; keep source IP restrictions.
FTP data channel (active mode).
FTP control connection default port.
Security note: Plaintext, and anonymous login is often enabled; switch to SFTP or FTPS.
Trivial FTP over UDP; used for firmware and PXE boot.
Windows file sharing and printer port.
Security note: A primary ransomware and lateral-movement surface; never expose it.
NetBIOS session service (legacy Windows sharing).
Security note: A legacy sharing protocol; disable it instead of exposing it.
rsync daemon default port.
NFS network file system default port.
Security note: No built-in authentication; restrict it to trusted internal IPs.
Domain name resolution (UDP for queries, TCP for zone transfer).
Security note: Public DNS invites amplification attacks and zone transfer leaks; keep it internal.
DHCP server address assignment (bootps).
DHCP client requests (bootpc).
Network time synchronization protocol.
SNMP network device monitoring queries.
Security note: The default community string leaks device details; change it and restrict sources.
SNMP trap (device-initiated alerts).
LDAP directory service (Active Directory queries).
LDAP over SSL.
RADIUS authentication/authorization (enterprise Wi-Fi).
RADIUS accounting port.
Border Gateway Protocol for inter-AS routing.
ZooKeeper default client port.
Security note: Unauthenticated access exposes node data; keep it internal.
Hadoop HDFS NameNode RPC port.
Hadoop YARN resource manager web UI.
Security note: The YARN UI can submit jobs; restrict who can reach it.
HBase Master web UI.
Security note: The HBase admin UI should stay internal.
Cassandra CQL native transport port.
ClickHouse HTTP interface default port.
Kerberos authentication default port.
Kerberos password change port.
SOCKS4/5 proxy server default port.
Squid HTTP proxy default port.
RTMP live streaming default port.
VoIP SIP signaling default port.
SIP signaling over TLS.
H.323 video conferencing registration.
H.323 call setup port.
Android Debug Bridge network connection.
Multicast DNS local service discovery (Bonjour/Avahi).
Memcached distributed cache default port.
Security note: Historically abused for huge UDP amplification; disable UDP or keep it internal.
UPnP device discovery (SSDP).
Security note: A known SSDP amplification source; block it at the edge.
The unencrypted git:// protocol port.
Something broken or missing?
Send feedback