Port Number Lookup
Look up what runs on a TCP or UDP port, or find the port a service uses, with a warning on the ones that should never face the internet.
Search by either side.
61 matches
| Port | Service | Protocol | Used for |
|---|---|---|---|
| 20 | FTP (data)Do not expose | TCP | File sharing |
| 21 | FTPDo not expose | TCP | File sharing |
| 22 | SSH / SFTP | TCP | Remote access |
| 23 | TelnetDo not expose | TCP | Remote access |
| 25 | SMTP | TCP | |
| 53 | DNS | TCP / UDP | Infrastructure |
| 67 | DHCP (server) | UDP | Infrastructure |
| 68 | DHCP (client) | UDP | Infrastructure |
| 69 | TFTPDo not expose | UDP | File sharing |
| 80 | HTTP | TCP | Web |
| 110 | POP3Do not expose | TCP | |
| 119 | NNTP | TCP | Messaging |
| 123 | NTP | UDP | Infrastructure |
| 137 | NetBIOS (name)Do not expose | UDP | File sharing |
| 139 | NetBIOS (session)Do not expose | TCP | File sharing |
| 143 | IMAPDo not expose | TCP | |
| 161 | SNMPDo not expose | UDP | Monitoring |
| 162 | SNMP trap | UDP | Monitoring |
| 389 | LDAPDo not expose | TCP | Directory |
| 443 | HTTPS | TCP | Web |
| 445 | SMBDo not expose | TCP | File sharing |
| 465 | SMTPS | TCP | |
| 500 | IKE (IPsec) | UDP | Infrastructure |
| 514 | syslog | UDP | Monitoring |
| 587 | SMTP (submission) | TCP | |
| 636 | LDAPS | TCP | Directory |
| 873 | rsync | TCP | File sharing |
| 993 | IMAPS | TCP | |
| 995 | POP3S | TCP | |
| 1080 | SOCKS proxy | TCP | Infrastructure |
| 1194 | OpenVPN | TCP / UDP | Infrastructure |
| 1433 | Microsoft SQL ServerDo not expose | TCP | Database |
| 1521 | Oracle DatabaseDo not expose | TCP | Database |
| 1723 | PPTPDo not expose | TCP | Infrastructure |
| 1883 | MQTT | TCP | Messaging |
| 2049 | NFSDo not expose | TCP / UDP | File sharing |
| 2375 | Docker (no TLS)Do not expose | TCP | Infrastructure |
| 2376 | Docker (TLS) | TCP | Infrastructure |
| 3000 | Node / Next.js (dev) | TCP | Web |
| 3306 | MySQL / MariaDBDo not expose | TCP | Database |
| 3389 | RDPDo not expose | TCP | Remote access |
| 4200 | Angular (dev) | TCP | Web |
| 5000 | Flask / ASP.NET (dev) | TCP | Web |
| 5173 | Vite (dev) | TCP | Web |
| 5353 | mDNS | UDP | Infrastructure |
| 5432 | PostgreSQLDo not expose | TCP | Database |
| 5601 | KibanaDo not expose | TCP | Monitoring |
| 5672 | AMQP (RabbitMQ) | TCP | Messaging |
| 5900 | VNCDo not expose | TCP | Remote access |
| 6379 | RedisDo not expose | TCP | Database |
| 8000 | Django / http.server (dev) | TCP | Web |
| 8080 | HTTP (alternate) | TCP | Web |
| 8081 | HTTP (alternate) | TCP | Web |
| 8443 | HTTPS (alternate) | TCP | Web |
| 8888 | Jupyter / HTTP (alternate) | TCP | Web |
| 9000 | PHP-FPM / SonarQube | TCP | Web |
| 9090 | Prometheus | TCP | Monitoring |
| 9092 | Kafka | TCP | Messaging |
| 9200 | ElasticsearchDo not expose | TCP | Database |
| 11211 | MemcachedDo not expose | TCP / UDP | Database |
| 27017 | MongoDBDo not expose | TCP | Database |
Files are processed in your browser and are never uploaded to a server.
How to use
Free to use with no sign-up, no install and no usage limit.
Type a number to see what usually listens there, or a service name to find its port. Both directions search the same table.
Ports flagged as risky are the ones that should not be reachable from the internet. Some carry credentials in the clear — Telnet, FTP, plain LDAP — and some hand over everything to anyone who connects, which is how an unprotected Redis or MongoDB ends up emptied.
A database port open to the world is the common version of this mistake. Redis, MongoDB, Elasticsearch and Memcached all accept connections without authentication in their default configuration, and scanners find them within minutes.
The three ranges come from IANA. Below 1024 is well known and needs root to bind on Unix; up to 49151 is registered; above that is the ephemeral range your own outgoing connections draw from.
A port number proves nothing about what is actually running. Anything can listen anywhere, and hiding SSH on a high port is a common practice. Use this as a starting point and confirm with a scan.
Nothing you type is sent to a server. The table is searched inside your browser.