TCP/IPLOCALRuns in your browser
Well-Known Port Reference
Searchable quick-reference of common TCP and UDP port assignments, with IANA range classification for any port number.
This tool handles input and primary processing in your browser and is designed not to send the input to QuickKit’s server.
Well-known port reference table
| Port | Protocol | Service | Description |
|---|---|---|---|
| 9 | TCP/UDP | Discard | Discard Protocol (RFC 863); a sink that throws away input. Wake-on-LAN magic packets are also commonly sent to UDP 9. |
| 19 | TCP/UDP | CHARGEN | Character Generator Protocol (RFC 864); historically abused for traffic-amplification attacks. |
| 20 | TCP | FTP-DATA | File Transfer Protocol default data channel (RFC 959). |
| 21 | TCP | FTP | File Transfer Protocol control channel (RFC 959). |
| 22 | TCP | SSH | Secure Shell remote login; also carries SFTP and SCP (RFC 4251). |
| 23 | TCP | Telnet | Telnet remote terminal (RFC 854); traffic is unencrypted. |
| 25 | TCP | SMTP | Simple Mail Transfer Protocol for server-to-server mail relay (RFC 5321). |
| 43 | TCP | WHOIS | WHOIS directory service for domain and IP registration data (RFC 3912). |
| 49 | TCP | TACACS+ | Cisco TACACS+ authentication, authorization and accounting (RFC 8907). Legacy TACACS/XTACACS used UDP 49. |
| 53 | TCP/UDP | DNS | Domain Name System. UDP for ordinary queries; TCP for zone transfers and responses that exceed the UDP limit (RFC 1035). |
| 67 | UDP | DHCP / BOOTP server | DHCP and BOOTP server port; clients send requests here (RFC 2131). |
| 68 | UDP | DHCP / BOOTP client | DHCP and BOOTP client port; servers send replies here (RFC 2131). |
| 69 | UDP | TFTP | Trivial File Transfer Protocol (RFC 1350); common for network boot and device firmware. |
| 79 | TCP | Finger | Finger user information protocol (RFC 1288). |
| 80 | TCP | HTTP | Hypertext Transfer Protocol (RFC 9110). |
| 88 | TCP/UDP | Kerberos | Kerberos network authentication service (RFC 4120). |
| 102 | TCP | ISO-TSAP | OSI transport service on top of TCP (RFC 1006); used by Siemens S7 and IEC 61850 MMS. |
| 110 | TCP | POP3 | Post Office Protocol version 3 (RFC 1939). |
| 111 | TCP/UDP | rpcbind / portmapper | ONC RPC port mapper (RFC 1833); used by NFS, NIS and other Sun RPC services. |
| 113 | TCP | ident | Identification Protocol / auth service (RFC 1413). |
| 119 | TCP | NNTP | Network News Transfer Protocol for Usenet (RFC 3977). |
| 123 | UDP | NTP | Network Time Protocol (RFC 5905). |
| 135 | TCP | MS RPC endpoint mapper | Microsoft DCE/RPC endpoint mapper (EPMAP); clients query it to locate dynamic RPC ports. |
| 137 | TCP/UDP | NetBIOS Name Service | NetBIOS name registration and resolution over TCP/IP (RFC 1002). |
| 138 | UDP | NetBIOS Datagram Service | Connectionless NetBIOS datagram service (RFC 1002). |
| 139 | TCP | NetBIOS Session Service | NetBIOS session service (RFC 1002); carries SMB over legacy NetBIOS. |
| 143 | TCP | IMAP | Internet Message Access Protocol version 4rev1 (RFC 3501). |
| 161 | UDP | SNMP | Simple Network Management Protocol get/set queries (RFC 1157). |
| 162 | UDP | SNMP Trap | SNMP trap and notification (inform) messages sent to a manager. |
| 179 | TCP | BGP | Border Gateway Protocol (RFC 4271). |
| 194 | TCP | IRC | Internet Relay Chat (RFC 1459); the IANA-registered port. |
| 319 | UDP | PTP event | Precision Time Protocol event messages that require hardware timestamping (IEEE 1588). |
| 320 | UDP | PTP general | Precision Time Protocol general messages (IEEE 1588). |
| 389 | TCP | LDAP | Lightweight Directory Access Protocol (RFC 4511). |
| 443 | TCP | HTTPS | HTTP over TLS (RFC 9110). HTTP/3 additionally uses UDP 443 via QUIC. |
| 445 | TCP | SMB / CIFS | SMB directly over TCP without the NetBIOS layer (microsoft-ds). |
| 464 | TCP/UDP | kpasswd | Kerberos change/set password protocol (RFC 3244). |
| 465 | TCP | SMTPS | Message submission over implicit TLS (RFC 8314). |
| 500 | UDP | ISAKMP / IKE | IPsec key exchange, IKEv1 and IKEv2 (RFC 7296). |
| 514 | UDP | syslog | Syslog event message reception (RFC 5424 / RFC 5426). |
| 514 | TCP | rsh / rcmd | BSD remote shell (rsh); unencrypted and weakly authenticated. |
| 515 | TCP | LPD / LPR | Line Printer Daemon protocol (RFC 1179). |
| 520 | UDP | RIP | Routing Information Protocol versions 1 and 2 (RFC 2453). |
| 521 | UDP | RIPng | RIP next generation, for IPv6 (RFC 2080). |
| 523 | TCP/UDP | IBM Db2 | IBM Db2 database instance connection port (DRDA). |
| 546 | UDP | DHCPv6 client | DHCPv6 client port (RFC 8415). |
| 547 | UDP | DHCPv6 server | DHCPv6 server and relay agent port (RFC 8415). |
| 548 | TCP | AFP | Apple Filing Protocol over TCP. |
| 554 | TCP/UDP | RTSP | Real Time Streaming Protocol (RFC 2326). |
| 587 | TCP | SMTP submission | Authenticated mail submission from clients, with STARTTLS (RFC 6409). |
| 593 | TCP | MS RPC over HTTP | Microsoft DCE/RPC over HTTP endpoint mapper (ncacn_http). |
| 623 | UDP | ASF-RMCP / IPMI | ASF Remote Management Control Protocol; carries IPMI-over-LAN for out-of-band server management. |
| 631 | TCP/UDP | IPP | Internet Printing Protocol; the basis of CUPS and modern network printing (RFC 8010). |
| 636 | TCP | LDAPS | LDAP over implicit TLS/SSL. |
| 646 | TCP/UDP | LDP | MPLS Label Distribution Protocol (RFC 5036); UDP for hello discovery, TCP for session setup. |
| 830 | TCP | NETCONF over SSH | NETCONF network configuration protocol carried over SSH (RFC 6242). |
| 853 | TCP | DNS over TLS | DNS over TLS, DoT (RFC 7858). |
| 873 | TCP | rsync | rsync file synchronization daemon. |
| 989 | TCP | FTPS-DATA | FTP data channel over implicit TLS. |
| 990 | TCP | FTPS | FTP control channel over implicit TLS. |
| 992 | TCP | Telnet over TLS | Telnet protocol over implicit TLS/SSL. |
| 993 | TCP | IMAPS | IMAP over implicit TLS. |
| 995 | TCP | POP3S | POP3 over implicit TLS. |
| 1080 | TCP | SOCKS | SOCKS proxy protocol, SOCKS4 and SOCKS5 (RFC 1928). |
| 1194 | TCP/UDP | OpenVPN | OpenVPN tunnel; UDP by default, TCP as a fallback. |
| 1433 | TCP | Microsoft SQL Server | Microsoft SQL Server database engine default instance. |
| 1434 | UDP | MS SQL Server Browser | SQL Server Resolution Service / Browser; reports the TCP port of named instances. |
| 1521 | TCP | Oracle DB | Oracle database TNS listener (de facto default; not IANA-assigned to Oracle). |
| 1645 | UDP | RADIUS authentication (legacy) | Pre-standard RADIUS authentication port; still accepted by many servers. |
| 1646 | UDP | RADIUS accounting (legacy) | Pre-standard RADIUS accounting port. |
| 1701 | UDP | L2TP | Layer 2 Tunneling Protocol (RFC 3931); often paired with IPsec. |
| 1720 | TCP | H.323 call signaling | H.323 call setup via Q.931 (H.225.0). |
| 1723 | TCP | PPTP | Point-to-Point Tunneling Protocol control channel (RFC 2637); data rides in GRE. |
| 1812 | UDP | RADIUS authentication | RADIUS authentication and authorization (RFC 2865). |
| 1813 | UDP | RADIUS accounting | RADIUS accounting (RFC 2866). |
| 1883 | TCP | MQTT | MQTT publish/subscribe messaging, plaintext (OASIS MQTT). |
| 1900 | UDP | SSDP | Simple Service Discovery Protocol used by UPnP device discovery. |
| 2000 | TCP | Cisco SCCP | Cisco Skinny Client Control Protocol (SCCP) for IP phones. |
| 2049 | TCP/UDP | NFS | Network File System (RFC 8881). |
| 2055 | UDP | NetFlow | Common collector port for Cisco NetFlow / IPFIX export (de facto; not a fixed assignment). |
| 2181 | TCP | Apache ZooKeeper | ZooKeeper client connections (de facto default). |
| 2375 | TCP | Docker API (plaintext) | Docker Engine remote REST API without TLS; must not be exposed to untrusted networks. |
| 2376 | TCP | Docker API (TLS) | Docker Engine remote REST API secured with TLS client certificates. |
| 2379 | TCP | etcd client | etcd key-value store client API (de facto default). |
| 2380 | TCP | etcd peer | etcd server-to-server peer communication. |
| 3128 | TCP | Squid proxy | Squid HTTP caching proxy (de facto default). |
| 3260 | TCP | iSCSI target | iSCSI target portal (RFC 7143). |
| 3268 | TCP | AD Global Catalog | Active Directory global catalog LDAP queries across a forest. |
| 3269 | TCP | AD Global Catalog over TLS | Active Directory global catalog over implicit TLS. |
| 3306 | TCP | MySQL / MariaDB | MySQL and MariaDB database (de facto default). |
| 3389 | TCP/UDP | RDP | Microsoft Remote Desktop Protocol; TCP always, UDP for the optional accelerated transport. |
| 3478 | TCP/UDP | STUN / TURN | NAT traversal for real-time media: STUN (RFC 8489) and TURN relay (RFC 8656). |
| 3690 | TCP | Subversion | Apache Subversion custom svn:// protocol. |
| 3784 | UDP | BFD control | Bidirectional Forwarding Detection single-hop control packets (RFC 5881). |
| 4369 | TCP | Erlang Port Mapper (EPMD) | Erlang Port Mapper Daemon; used by RabbitMQ and Elixir/Erlang clustering. |
| 4500 | UDP | IPsec NAT-T | IPsec NAT traversal; encapsulates ESP and IKE when a NAT is on the path (RFC 3948). |
| 4739 | TCP/UDP | IPFIX | IP Flow Information Export collector (RFC 7011). |
| 4789 | UDP | VXLAN | Virtual Extensible LAN overlay encapsulation (RFC 7348). |
| 5060 | TCP/UDP | SIP | Session Initiation Protocol signaling, plaintext (RFC 3261). |
| 5061 | TCP | SIP over TLS | SIP signaling secured with TLS (RFC 3261). |
| 5222 | TCP | XMPP client | XMPP / Jabber client-to-server connections (RFC 6120). |
| 5269 | TCP | XMPP server | XMPP server-to-server federation (RFC 6120). |
| 5353 | UDP | mDNS | Multicast DNS (RFC 6762); the basis of Bonjour and Avahi. |
| 5355 | UDP | LLMNR | Link-Local Multicast Name Resolution (RFC 4795). |
| 5432 | TCP | PostgreSQL | PostgreSQL database (de facto default). |
| 5601 | TCP | Kibana | Kibana web UI (de facto default). |
| 5671 | TCP | AMQP over TLS | AMQP 0-9-1 / 1.0 secured with TLS. |
| 5672 | TCP | AMQP | Advanced Message Queuing Protocol; the RabbitMQ default. |
| 5683 | UDP | CoAP | Constrained Application Protocol for IoT devices (RFC 7252). |
| 5684 | UDP | CoAP over DTLS | Secure CoAP using DTLS (RFC 7252). |
| 5900 | TCP | VNC / RFB | Remote Framebuffer protocol; display :0. Additional displays use 5901, 5902, and so on. |
| 5985 | TCP | WinRM HTTP | Windows Remote Management over HTTP (WS-Management). |
| 5986 | TCP | WinRM HTTPS | Windows Remote Management over HTTPS. |
| 6000 | TCP | X11 | X Window System server; displays :0 to :63 map to 6000-6063. |
| 6379 | TCP | Redis | Redis in-memory data store (de facto default). |
| 6443 | TCP | Kubernetes API server | Kubernetes API server, served over HTTPS. |
| 6514 | TCP | syslog over TLS | Syslog transported over TLS (RFC 5425). |
| 6653 | TCP | OpenFlow | OpenFlow switch-to-controller channel (IANA-assigned; older deployments used 6633). |
| 6667 | TCP | IRC | Internet Relay Chat, the most common historical port (de facto). |
| 6697 | TCP | IRC over TLS | IRC over TLS (de facto standard port). |
| 8000 | TCP | HTTP alternate | Common alternate and development HTTP port. |
| 8080 | TCP | HTTP alternate / proxy | Alternate HTTP port; Apache Tomcat default and a common proxy port. |
| 8086 | TCP | InfluxDB | InfluxDB HTTP API (de facto default). |
| 8443 | TCP | HTTPS alternate | Alternate HTTPS port; Tomcat SSL connector and many management consoles. |
| 8883 | TCP | MQTT over TLS | Secure MQTT over TLS (IANA secure-mqtt). |
| 9042 | TCP | Apache Cassandra | Cassandra CQL native transport (de facto default). |
| 9090 | TCP | Prometheus | Prometheus server web UI and query API (de facto default). |
| 9092 | TCP | Apache Kafka | Kafka broker listener (de facto default). |
| 9100 | TCP | Raw print / node_exporter | PDL raw print data stream (HP JetDirect). Also the Prometheus node_exporter default. |
| 9200 | TCP | Elasticsearch / OpenSearch | Elasticsearch and OpenSearch HTTP REST API (de facto default). |
| 9300 | TCP | Elasticsearch transport | Elasticsearch node-to-node transport protocol (de facto default). |
| 9418 | TCP | Git | Git native transfer protocol (git://). |
| 10250 | TCP | Kubernetes kubelet API | kubelet HTTPS API used by the control plane for logs, exec and metrics. |
| 11211 | TCP/UDP | memcached | memcached cache. UDP was historically enabled and is disabled by default in modern versions due to amplification risk. |
| 27017 | TCP | MongoDB | MongoDB database (de facto default). |
| 51820 | UDP | WireGuard | WireGuard VPN (de facto default; the port is configurable). |
Curated common assignments only, not the full IANA registry. A listed port is not proof of what is actually running on it.
How it works
A curated quick-reference of port assignments operators meet often — not the complete IANA Service Name and Transport Protocol Port Number Registry. A port being listed here does not mean that service is what is actually running on it in a given host; it only records the conventional assignment. Search by port number (exact) or by a word in the service name or description. Enter a valid port number to also see its IANA range: well-known (0-1023), registered (1024-49151), or dynamic/private (49152-65535). Entries marked "de facto" are widespread conventions rather than formal IANA assignments. The full table works without JavaScript; search and the classification panel need JavaScript.