This page lists essential TCP/UDP ports commonly used in IT environments. Useful for configuring firewalls, servers, applications, and diagnostics.
| Port |
Protocol |
Service |
Description |
| 20 |
TCP |
FTP (Data) |
File Transfer Protocol (data) |
| 21 |
TCP |
FTP (Control) |
File Transfer Protocol (control) |
| 22 |
TCP |
SSH |
Secure remote login |
| 23 |
TCP |
Telnet |
Unsecured remote login (legacy) |
| 25 |
TCP |
SMTP |
Sending email |
| 53 |
TCP/UDP |
DNS |
Domain Name Resolution |
| 67 |
UDP |
DHCP (Server) |
Dynamic IP allocation |
| 68 |
UDP |
DHCP (Client) |
Dynamic IP assignment |
| 80 |
TCP |
HTTP |
Web traffic |
| 110 |
TCP |
POP3 |
Incoming email |
| 123 |
UDP |
NTP |
Time synchronization |
| 143 |
TCP |
IMAP |
Email retrieval |
| 443 |
TCP |
HTTPS |
Secure web traffic |
| 445 |
TCP |
SMB |
File/printer sharing (Windows) |
| 3389 |
TCP |
RDP |
Remote Desktop Protocol |
| Port |
Protocol |
Service |
Description |
| 135 |
TCP/UDP |
RPC |
Remote Procedure Call |
| 137-139 |
UDP |
NetBIOS |
Windows file & printer sharing |
| 161 |
UDP |
SNMP |
Network monitoring |
| 162 |
UDP |
SNMP Trap |
Alerts from SNMP devices |
| 389 |
TCP/UDP |
LDAP |
Directory Services (Active Directory) |
| 636 |
TCP |
LDAPS |
Secure LDAP |
| 3268 |
TCP |
Global Catalog |
Active Directory queries across domains |
| 3306 |
TCP |
MySQL |
Database traffic |
| 5432 |
TCP |
PostgreSQL |
PostgreSQL DB traffic |
| 5900 |
TCP |
VNC |
Remote GUI access |
| 5985 |
TCP |
WinRM (HTTP) |
Windows Remote Management |
| 5986 |
TCP |
WinRM (HTTPS) |
Secure remote management |
| 8080 |
TCP |
HTTP-Alt |
Web server alternative port |
| 8443 |
TCP |
HTTPS-Alt |
Secure web admin interfaces |
| Port |
Protocol |
Service |
Description |
| 1194 |
UDP |
OpenVPN |
Secure VPN tunnel |
| 1701 |
UDP |
L2TP |
VPN tunneling |
| 1723 |
TCP |
PPTP |
VPN tunneling (legacy) |
| 500 |
UDP |
IKE/IPSec |
VPN encryption handshake |
| 4500 |
UDP |
IPSec NAT-T |
VPN through NAT |
# Check open ports on Linux
sudo netstat -tulpn
sudo ss -tulpn
# Scan ports using Nmap
nmap -p 1-1000 <IP_ADDRESS>
# Windows port check
netstat -an | find "LISTEN"