List of TCP and UDP Port Numbers: From Wikipedia, The Free Encyclopedia
List of TCP and UDP Port Numbers: From Wikipedia, The Free Encyclopedia
22/TCP,UDP Secure Shell (SSH)—used for secure logins, file transfers (scp, sftp) and port forwarding Official
25/TCP,UDP Simple Mail Transfer Protocol (SMTP)—used for e-mail routing between mail servers Official
Resource Location Protocol[2] (RLP)—used for determining the location of higher level services
39/TCP,UDP Official
from hosts on a network
67/UDP Bootstrap Protocol (BOOTP) Server; also used by Dynamic Host Configuration Protocol (DHCP) Official
68/UDP Bootstrap Protocol (BOOTP) Client; also used by Dynamic Host Configuration Protocol (DHCP) Official
90/TCP,UDP dnsix (DoD Network Security for Information Exchange) Securit Attribute Token Map Official
119/TCP Network News Transfer Protocol (NNTP)—used for retrieving newsgroup messages Official
Microsoft EPMAP (End Point Mapper), also known as DCE/RPC Locator service[6], used to
135/TCP,UDP Unofficial
remotely manage services including DHCP server, DNS server and WINS. Also used by DCOM
Internet Message Access Protocol (IMAP)—used for retrieving, organizing, and synchronizing e-
143/TCP,UDP Official
mail messages
500/UDP Internet Security Association and Key Management Protocol (ISAKMP) Official
501/TCP STMF, Simple Transportation Management Framework – DOT NTCIP 1101 Unofficial
504/TCP,UDP Citadel – multiservice protocol for dedicated clients for the Citadel groupware system Official
NCP (NetWare Core Protocol) is used for a variety things such as access to primary NetWare
524/TCP,UDP Official
server resources, Time Synchronization, etc.
591/TCP FileMaker 6.0 (and later) Web Sharing (HTTP Alternate, also see port 80) Official
HTTP RPC Ep Map, Remote procedure call over Hypertext Transfer Protocol, often used by
593/TCP,UDP Official
Distributed Component Object Model services and Microsoft Exchange Server
604/TCP TUNNEL profile[10], a protocol for BEEP peers to form an application layer tunnel Official
646/TCP,UDP LDP, Label Distribution Protocol, a routing protocol used in MPLS networks Official
653/TCP,UDP SupportSoft Nexus Remote Command (data): A proxy gateway connecting remote control traffic Official
IBM RMC (Remote monitoring and Control) protocol, used by System p5 AIX Integrated
657/TCP,UDP Virtualization Manager (IVM)[15] and Hardware Management Console to connect managed logical Official
partitions (LPAR) to enable dynamic partition reconfiguration
EPP (Extensible Provisioning Protocol), a protocol for communication between domain name
700/TCP Official
registries and registrars (RFC 4934)
LMP (Link Management Protocol (Internet))[17], a protocol that runs between a pair of nodes and
701/TCP Official
is used to manage traffic engineering (TE) links
IRIS[18][19] (Internet Registry Information Service) over BEEP (Blocks Extensible Exchange
702/TCP Official
Protocol)[20] (RFC 3983)
Cisco TDP, Tag Distribution Protocol[21][22][23]—being replaced by the MPLS Label Distribution
711/TCP Official
Protocol[24]
712/TCP TBRPF, Topology Broadcast based on Reverse-Path Forwarding routing protocol (RFC 3684) Official
760/TCP,UDP ns Official
901/TCP, UDP VMware Virtual Infrastructure Client (UDP from server being managed to management console) Unofficial
902/TCP VMware Server Console (TCP from management console to server being Managed) Unofficial
902/UDP VMware Server Console (UDP from server being managed to management console) Unofficial
904/TCP VMware Server Alternate (if 902 is in use, i.e. SUSE linux) Unofficial
911/TCP Network Console on Acid (NCA)—local tty redirection over OpenSSH Unofficial
SofaWare Technologies Remote HTTPS management for firewall devices running embedded
981/TCP Unofficial
Check Point FireWall-1 software
When investigating TCP traffic, be careful not to confuse the client and server ports. The client port is incremental, typically
beginning at 1024 at boot time and wrapping at 4096. If the port you are investigating is in the lower part of this range, it
may be a client port. Stateful firewalls identify the server port, but packet sniffers and stateless firewalls do not. For
example, a packet sniffer showing a TCP packet with source port 1080 and destination port 1494 might be either the
SOCKetS or Citrix Independent Computing Architecture (ICA) protocols. The only way to know for sure is to examine the
initial TCP handshake.
With UDP, client port selection depends on the application and may be incremental, fixed to a nonsensical value, or fixed
equal to the server port.
1111/UDP EasyBits School network discovery protocol (for Intel's CMPC platform) Unofficial
1198/TCP,UDP The cajo project Free dynamic transparent distributed computing in Java Official
scol, protocol used by SCOL 3D virtual worlds server to answer world name resolution
1200/TCP Official
client request[27]
scol, protocol used by SCOL 3D virtual worlds server to answer world name resolution
1200/UDP Official
client request
TGP, TrulyGlobal Protocol, also known as "The Gur Protocol" (named for Gur Kimchi of
1223/TCP,UDP Official
TrulyGlobal)
1234/UDP VLC media player Default port for UDP/RTP stream Unofficial
1236/TCP Symantec BindView Control UNIX Default port for TCP management server connections Unofficial
1387/TCP,UDP cadsi-lm, LMS International (formerly Computer Aided Design Software, Inc. (CADSI)) LM Official
1433/TCP MSSQL (Microsoft SQL Server database management system) Server Official
1434/UDP MSSQL (Microsoft SQL Server database management system) Monitor Official
1494/TCP Citrix XenApp Independent Computing Architecture (ICA) thin client protocol Official
1521/TCP Oracle database default listener, in future releases official port 2483 Unofficial
1533/TCP IBM Sametime IM—Virtual Places Chat Microsoft SQL Server Official
radius/radacct, RADIUS authentication protocol (default for Cisco and Juniper Networks
1645/TCP,UDP Unofficial
RADIUS servers)
1701/UDP Layer 2 Forwarding Protocol (L2F) & Layer 2 Tunneling Protocol (L2TP) Official
1762–
cft-1 to cft-7 Official
1768/TCP,UDP
MSNP (Microsoft Notification Protocol), used by the .NET Messenger Service and a number
1863/TCP Official
of Instant Messaging clients
1935/TCP Adobe Systems Macromedia Flash Real Time Messaging Protocol (RTMP) "plain" protocol Official
1994/TCP,UDP Cisco STUN-SDLC (Serial Tunneling—Synchronous Data Link Control) protocol Official
2103/TCP,UDP zephyr-clt Project Athena Zephyr Notification Service serv-hm connection Official
zephyr-hm-srv Project Athena Zephyr Notification Service hm-serv connection (should use
2105/TCP,UDP Unofficial
port 2102)
2303/UDP ArmA multiplayer (default for server reporting) (default port for game +1) Unofficial
2305/UDP ArmA multiplayer (default for VoN) (default port for game +3) Unofficial
IEC 60870-5-104, used to send electric power telecontrol messages between two systems
2404/TCP Official
via directly connected data circuits
Oracle database listening for unsecure client connections to the listener, replaces port
2483/TCP,UDP Official
1521
2484/TCP,UDP Oracle database listening for SSL client connections to the listener Official
2500/TCP THEÒSMESSENGER listening for TheòsMessenger client connections Official
2598/TCP new ICA—when Session Reliability is enabled, TCP port 2598 replaces port 1494 Unofficial
3128/TCP HTTP used by Web caches and the default for the Squid cache Unofficial
3269/TCP,UDP msft-gc-ssl, Microsoft Global Catalog over SSL (similar to port 3268, LDAP over SSL) Official
3283/TCP Apple Remote Desktop reporting (officially Net Assistant, referring to an earlier product) Official
3389/TCP Microsoft Terminal Server (RDP) officially registered as Windows Based Terminal (WBT) Official
3689/TCP Digital Audio Access Protocol (DAAP)—used by Apple’s iTunes and AirPort Express Official
3723/TCP,UDP Used by many Battle.net Blizzard games (Diablo II, Warcraft II, Warcraft III, StarCraft) Unofficial
4664/TCP Default for Unica's Campaign Listener, though often changed during installation Unofficial
4840/TCP,UDP OPC UA TCP Protocol for OPC Unified Architecture from OPC Foundation Official
4843/TCP,UDP OPC UA TCP Protocol over TLS/SSL for OPC Unified Architecture from OPC Foundation Official
4847/TCP,UDP Web Fresh Communication, Quadrion Software & Odorless Entertainment Official
4899/TCP,UDP Radmin remote administration tool (program sometimes used by a Trojan horse) Official
5001/TCP,UDP Iperf (Tool for measuring TCP and UDP bandwidth performance) Unofficial
5004/TCP,UDP,DCCP RTP (Real-time Transport Protocol) media data (RFC 3551, RFC 4571) Official
5005/TCP,UDP,DCCP RTP (Real-time Transport Protocol) control protocol (RFC 3551, RFC 4571) Official
5093/UDP SPSS (Statistical Package for the Social Sciences) License Administrator Unofficial
5222/TCP Extensible Messaging and Presence Protocol (XMPP) client connection (RFC 3920) Official
5223/TCP Extensible Messaging and Presence Protocol (XMPP) client connection over SSL Unofficial
5269/TCP Extensible Messaging and Presence Protocol (XMPP) server connection (RFC 3920) Official
Extensible Messaging and Presence Protocol (XMPP) JEP-0174: Link-Local Messaging / XEP-
5298/TCP,UDP Official
0174: Serverless Messaging
5402/TCP,UDP mftp, Stratacache OmniCast content delivery system MFTP file sharing protocol Official
5500/TCP VNC remote desktop protocol—for incoming listening viewer, Hotline control connection Unofficial
5631/TCP pcANYWHEREdata, Symantec pcAnywhere (version 7.52 and later[34])[35] data Official
5632/UDP pcANYWHEREstat, Symantec pcAnywhere (version 7.52 and later) status Official
Virtual Network Computing (VNC) remote desktop protocol (used by Apple Remote
5900/TCP,UDP Official
Desktop and others)
6000/TCP X11—used between an X client and server over the network Official
6001/UDP X11—used between an X client and server over the network Official
6005/TCP Default for BMC Software CONTROL-M/Server—Socket used for communication between Official
CONTROL-M processes—though often changed during installation
6005/TCP Default for Camfrog Chat & Cam Client http://www.camfrog.com Unofficial
"dtspcd"—a network daemon that accepts requests from clients to execute commands
6112/TCP,UDP Official
and launch applications remotely
6566/TCP SANE (Scanner Access Now Easy)—SANE network scanner daemon Unofficial
6619/TCP,UDP odette-ftps, Odette File Transfer Protocol (OFTP) over TLS/SSL Official
6881–
BitTorrent part of full range of ports used most often Unofficial
6887/TCP,UDP
6888/TCP,UDP BitTorrent part of full range of ports used most often Unofficial
6889–
BitTorrent part of full range of ports used most often Unofficial
6890/TCP,UDP
6891–
BitTorrent part of full range of ports used most often Unofficial
6900/TCP,UDP
6901/TCP,UDP BitTorrent part of full range of ports used most often Unofficial
6902–
BitTorrent part of full range of ports used most often Unofficial
6968/TCP,UDP
6970–
BitTorrent part of full range of ports used most often Unofficial
6999/TCP,UDP
7001/TCP Default for BEA WebLogic Server's HTTP server, though often changed during installation Unofficial
7002/TCP Default for BEA WebLogic Server's HTTPS server, though often changed during installation Unofficial
7010/TCP Default for Cisco AON AMC (AON Management Console) [2] Unofficial
8000–8001/TCP Commonly used for internet radio streams such as those using SHOUTcast Unofficial
HTTP alternate (http_alt)—commonly used for Web proxy and caching server, or for
8080/TCP Official
running a Web server as a non-root user
VMware Server Management User Interface (insecure Web interface)[41]. See also port
8222 Unofficial
8333
8333 VMware Server Management User Interface (secure Web interface)[41]. See also port 8222 Unofficial
8443/TCP SW Soft Plesk Control Panel, Apache Tomcat SSL, Promise WebPAM SSL Unofficial
8500/TCP,IPX ColdFusion Macromedia/Adobe ColdFusion default and Duke Nukem 3D—default Unofficial
8888/TCP D2GS Admin Console Telnet administration console for D2GS servers (Diablo 2) Unofficial
9300/TCP IBM Cognos 8 SOAP Business Intelligence and Performance Management Unofficial
9443/TCP WSO2 Web Services Application Server HTTPS transport (officially WSO2 Tungsten HTTPS Official
9535/TCP BBOS001, IBM Websphere Application Server (WAS) High Avail Mgr Com Unofficial
9996/TCP,UDP The Palace "The Palace" Virtual Reality Chat software. – 5 Official
Octopus Multiplexer, primary port for the CROMP protocol, which provides a platform-
10008/TCP,UDP Official
independent means for communication of objects across a network
10200/TCP FRISK Software International's fpscand virus scanning daemon for Unix platforms [5] Unofficial
10200–10204/TCP FRISK Software International's f-protd virus scanning daemon for Unix platforms [6] Unofficial
12012/TCP,UDP Audition Online Dance Battle, Korea Server – Status/Version Check Unofficial
NetBus—remote administration tool (often Trojan horse). Also used by NetBuster. Little
12345 Unofficial
Fighter 2 (TCP).
12975/TCP LogMeIn Hamachi (VPN tunnel software; also port 32976)—used to connect to Mediation Unofficial
Server (bibi.hamachi.cc); will attempt to use SSL (TCP port 443) if both 12975 & 32976 fail
to connect
16080/TCP Mac OS X Server Web (HTTP) service with performance cache[46] Unofficial
16384/UDP Iron Mountain Digital online backup Unofficial
18010/TCP Super Dancer Online Extreme(SDO-X) – CiB Net Station Malaysia Server Unofficial
18200/TCP,UDP Audition Online Dance Battle, AsiaSoft Thailand Server – Status/Version Check Unofficial
18206/TCP,UDP Audition Online Dance Battle, AsiaSoft Thailand Server – FAM Database Unofficial
18300/TCP,UDP Audition Online Dance Battle, AsiaSoft SEA Server – Status/Version Check Unofficial
18306/TCP,UDP Audition Online Dance Battle, AsiaSoft SEA Server – FAM Database Unofficial
18400/TCP,UDP Audition Online Dance Battle, KAIZEN Brazil Server – Status/Version Check Unofficial
18505/TCP,UDP Audition Online Dance Battle, Nexon Server – Status/Version Check Unofficial
19000/TCP,UDP Audition Online Dance Battle, G10/alaplaya Server – Status/Version Check Unofficial
19283/TCP,UDP K2 - KeyAuditor & KeyServer, Sassafras Software Inc. Software Asset Management tools Official
KeyShadow for K2 - KeyAuditor & KeyServer, Sassafras Software Inc. Software Asset
19315/TCP,UDP Official
Management tools
24465/TCP,UDP Tonido Directory Server for Tonido which is a Personal Web app and peer-to-peer platform Official
27000/TCP FlexNet Publisher's License server (from the range of default ports) Unofficial
27001/TCP FlexNet Publisher's License server (from the range of default ports) Unofficial
27002/TCP FlexNet Publisher's License server (from the range of default ports) Unofficial
27003/TCP FlexNet Publisher's License server (from the range of default ports) Unofficial
27004/TCP FlexNet Publisher's License server (from the range of default ports) Unofficial
27005/TCP FlexNet Publisher's License server (from the range of default ports) Unofficial
27006/TCP FlexNet Publisher's License server (from the range of default ports) Unofficial
27007/TCP FlexNet Publisher's License server (from the range of default ports) Unofficial
27008/TCP FlexNet Publisher's License server (from the range of default ports) Unofficial
27009/TCP FlexNet Publisher's License server (from the range of default ports) Unofficial
27374 Sub7 default. Most script kiddies do not change from this. Unofficial
(through 27969) Activision's Enemy Territory and id Software's Quake III Arena and Quake
27960/UDP Unofficial
III and some ioquake3 derived games
LogMeIn Hamachi (VPN tunnel software; also port 12975)—used to connect to Mediation
32976/TCP Server (bibi.hamachi.cc); will attempt to use SSL (TCP port 443) if both 12975 & 32976 fail Unofficial
to connect
36963 Counter Strike 2D multiplayer (2D clone of popular CounterStrike computer game) Unofficial
Many Linux kernels and/or distros use 32768 to 61000. /proc/sys/net/ipv4/ip_local_port_range indicates the range in use.