Grátis · Redes e infraestrutura de TI
Pesquisa de portas TCP/UDP.
Pesquise portas TCP e UDP comuns por número, serviço ou categoria, com notas de segurança sobre serviços que nunca devem ficar expostos à Internet.
CALCULATED IN YOUR BROWSER · NOTHING IS UPLOADED
Matching ports123of 123
Ports
| Port | Protocol | Service | Category | Security note |
|---|---|---|---|---|
| 20 | TCP | FTP data | files | Cleartext; prefer SFTP |
| 21 | TCP | FTP control | files | Cleartext credentials; prefer SFTP or FTPS |
| 22 | TCP | SSH, SFTP, SCP | remote | Restrict sources; use keys, not passwords |
| 23 | TCP | Telnet | remote | Cleartext; do not expose |
| 25 | TCP | SMTP (server to server) | Many ISPs block it outbound for home users | |
| 53 | TCP/UDP | DNS | core | Open resolvers are abused for amplification |
| 67 | UDP | DHCP server | core | |
| 68 | UDP | DHCP client | core | |
| 69 | UDP | TFTP | files | No authentication |
| 80 | TCP | HTTP | web | |
| 88 | TCP/UDP | Kerberos | windows | |
| 102 | TCP | Siemens S7 (ISO-TSAP) | industrial | Never expose industrial controllers |
| 110 | TCP | POP3 | Cleartext; prefer 995 | |
| 111 | TCP/UDP | rpcbind / portmapper | unix | Do not expose |
| 119 | TCP | NNTP | other | |
| 123 | UDP | NTP | core | Restrict monlist/mode 7 (amplification) |
| 135 | TCP | Microsoft RPC endpoint mapper | windows | Do not expose |
| 137 | UDP | NetBIOS name service | windows | Do not expose |
| 138 | UDP | NetBIOS datagram | windows | Do not expose |
| 139 | TCP | NetBIOS session (SMB over NetBIOS) | windows | Do not expose |
| 143 | TCP | IMAP | Cleartext; prefer 993 | |
| 161 | UDP | SNMP | monitoring | Use SNMPv3; v1/v2c community strings are cleartext |
| 162 | UDP | SNMP traps | monitoring | |
| 179 | TCP | BGP | routing | |
| 389 | TCP/UDP | LDAP | directory | Use LDAPS or StartTLS |
| 443 | TCP | HTTPS | web | |
| 443 | UDP | HTTP/3 (QUIC) | web | |
| 445 | TCP | SMB (file sharing) | windows | Do not expose to the internet |
| 464 | TCP/UDP | Kerberos password change | windows | |
| 465 | TCP | SMTP submission over TLS (SMTPS) | Preferred submission port (RFC 8314) | |
| 500 | UDP | IKE (IPsec VPN) | vpn | |
| 502 | TCP | Modbus TCP | industrial | No authentication; never expose |
| 514 | UDP | Syslog | monitoring | Cleartext |
| 515 | TCP | LPD printing | printing | |
| 520 | UDP | RIP | routing | |
| 546 | UDP | DHCPv6 client | core | |
| 547 | UDP | DHCPv6 server | core | |
| 548 | TCP | AFP (Apple file sharing) | files | |
| 554 | TCP/UDP | RTSP (camera streams) | media | Cameras often have weak passwords |
| 587 | TCP | SMTP submission (STARTTLS) | ||
| 623 | UDP | IPMI / BMC | remote | Do not expose; known weaknesses |
| 631 | TCP | IPP / CUPS printing | printing | |
| 636 | TCP | LDAPS | directory | |
| 853 | TCP | DNS over TLS | core | |
| 853 | UDP | DNS over QUIC | core | |
| 873 | TCP | rsync | files | Unauthenticated modules leak data |
| 902 | TCP/UDP | VMware ESXi host agent | virtualization | |
| 989-990 | TCP | FTPS (implicit TLS) | files | |
| 993 | TCP | IMAPS | ||
| 995 | TCP | POP3S | ||
| 1080 | TCP | SOCKS proxy | proxy | Open proxies get abused |
| 1194 | UDP | OpenVPN (default) | vpn | |
| 1433 | TCP | Microsoft SQL Server | database | Do not expose |
| 1434 | UDP | SQL Server Browser | database | |
| 1521 | TCP | Oracle Database listener | database | Do not expose |
| 1701 | UDP | L2TP | vpn | |
| 1720 | TCP | H.323 | voip | |
| 1723 | TCP | PPTP VPN | vpn | Broken encryption; do not use |
| 1812 | UDP | RADIUS authentication | vpn | |
| 1813 | UDP | RADIUS accounting | vpn | |
| 1883 | TCP | MQTT | iot | Use 8883 (TLS) |
| 1900 | UDP | SSDP / UPnP discovery | iot | Do not expose (amplification) |
| 2000 | TCP | Cisco SCCP (Skinny) | voip | |
| 2049 | TCP/UDP | NFS | files | Do not expose |
| 2181 | TCP | Apache ZooKeeper | database | |
| 2375 | TCP | Docker API (no TLS) | containers | Exposure gives root on the host |
| 2376 | TCP | Docker API (TLS) | containers | |
| 2379-2380 | TCP | etcd client / peer | containers | Holds cluster secrets |
| 3000 | TCP | Grafana, Node.js dev servers | web | |
| 3128 | TCP | Squid proxy | proxy | |
| 3260 | TCP | iSCSI | storage | Keep on a storage network |
| 3268-3269 | TCP | Active Directory global catalog | directory | |
| 3306 | TCP | MySQL / MariaDB | database | Do not expose |
| 3389 | TCP/UDP | Remote Desktop (RDP) | remote | Frequent ransomware entry point; use a VPN or gateway |
| 3478 | TCP/UDP | STUN / TURN | voip | |
| 4369 | TCP | Erlang port mapper (RabbitMQ) | database | |
| 4500 | UDP | IPsec NAT traversal | vpn | |
| 4789 | UDP | VXLAN | routing | |
| 5000 | TCP | UPnP, Flask dev, Synology DSM | web | |
| 5044 | TCP | Logstash Beats input | monitoring | |
| 5060 | TCP/UDP | SIP | voip | Scanned constantly for toll fraud |
| 5061 | TCP | SIP over TLS | voip | |
| 5201 | TCP | iperf3 | monitoring | |
| 5222 | TCP | XMPP client | other | |
| 5353 | UDP | mDNS (Bonjour) | iot | |
| 5355 | UDP | LLMNR | windows | Disable; used for credential capture |
| 5432 | TCP | PostgreSQL | database | Do not expose |
| 5601 | TCP | Kibana | monitoring | |
| 5672 | TCP | AMQP (RabbitMQ) | database | |
| 5900 | TCP | VNC | remote | Often weakly protected; do not expose |
| 5938 | TCP | TeamViewer | remote | |
| 5985 | TCP | WinRM (HTTP) | windows | Do not expose |
| 5986 | TCP | WinRM (HTTPS) | windows | |
| 6379 | TCP | Redis | database | No authentication by default; do not expose |
| 6443 | TCP | Kubernetes API server | containers | |
| 6514 | TCP | Syslog over TLS | monitoring | |
| 6881-6889 | TCP/UDP | BitTorrent | other | |
| 8000 | TCP | HTTP alternative (dev servers) | web | |
| 8080 | TCP | HTTP alternative, proxies | web | |
| 8086 | TCP | InfluxDB | database | |
| 8291 | TCP | MikroTik Winbox | remote | Do not expose |
| 8443 | TCP | HTTPS alternative | web | |
| 8728 | TCP | MikroTik API | remote | |
| 8729 | TCP | MikroTik API (TLS) | remote | |
| 8883 | TCP | MQTT over TLS | iot | |
| 9000 | TCP | PHP-FPM, various admin panels | web | PHP-FPM must stay local |
| 9090 | TCP | Prometheus | monitoring | |
| 9092 | TCP | Apache Kafka | database | |
| 9100 | TCP | Prometheus node exporter / raw printing (JetDirect) | monitoring | |
| 9200 | TCP | Elasticsearch HTTP | database | Do not expose |
| 9300 | TCP | Elasticsearch transport | database | |
| 10000 | TCP | Webmin | remote | |
| 10050 | TCP | Zabbix agent | monitoring | |
| 10051 | TCP | Zabbix server | monitoring | |
| 10250 | TCP | Kubelet API | containers | Do not expose |
| 11211 | TCP/UDP | Memcached | database | UDP enabled it is a DDoS amplifier |
| 15672 | TCP | RabbitMQ management | database | |
| 20000 | TCP | DNP3 | industrial | Never expose |
| 25565 | TCP | Minecraft | other | |
| 27017 | TCP | MongoDB | database | Do not expose |
| 44818 | TCP/UDP | EtherNet/IP (CIP) | industrial | Never expose |
| 47808 | UDP | BACnet (building automation) | industrial | Never expose |
| 51820 | UDP | WireGuard (common default) | vpn |
- Port numbers only indicate the usual service; any program can listen on any port. Check what is really running with ss -tulpn (Linux), Get-NetTCPConnection (Windows) or netstat.
- The official registry is the IANA Service Name and Transport Protocol Port Number Registry.
Como usar esta ferramenta: Pesquisa de portas TCP/UDP
Insira os dados ou escolha o arquivo. Ajuste as opções, gere o resultado e confira antes de copiar ou baixar.
Limites e formatos aceitos
Seus dados são processados no seu dispositivo.
Notas técnicas em inglês
A curated list of 123 common ports, not the full IANA registry. Any program can listen on any port. Everything is calculated in your browser; nothing is sent or probed on the network.
Ranges such as 6881–6889 match any number inside them; text searches look at the service, category and notes.
3389 is RDP (TCP/UDP): a frequent ransomware entry point that should sit behind a VPN or gateway.