Appendix A: Commonly Used Ports

The ports listed in Table A-1 are frequent topics in discussions of Internet security. You’ll probably find it beneficial to know these ports by heart — although (frankly) the more time you spend doing Internet security, the more readily you’ll remember these ports without having to sit down and memorize them.

Table A-1: Common Ports Name
Port
Description

echo
7 TCP
Echoes back whatever was sent

echo
7 UDP
Echoes back whatever was sent

discard
9 TCP
Discards anything sent

discard
9 UDP
Discards anything sent

daytime
13 TCP
Daytime (RFC 867)

daytime
13 UDP
Daytime (RFC 867)

netstat
15 TCP
Network statistics

qotd
17 TCP
Quote of the day

qotd
17 UDP
Quote of the day

chargen
19 TCP
Character generator

chargen
19 UDP
Character generator

ftp-data
20 TCP
Default FTP data port

ftp
21 TCP
File Transfer Protocol (FTP) control port

ssh
22 TCP
Secure Shell

telnet
23 TCP
Telnet

smtp
25 TCP
Simple Mail Transfer Protocol (SMTP) port

time
37 TCP
Timeserver

time
37 UDP
Timeserver

name
42 TCP
Host name server

name
42 UDP
Host name server

dns
53 TCP
Domain Name Server (DNS)

dns
53 UDP
Domain Name Server (DNS)

tacacs-ds
65 TCP
TACACS-database service

tacacs-ds
65 UDP
TACACS-database service

sql*net
66 TCP
Oracle SQL*net

sql*net
66 UDP
Oracle SQL*net

bootps
67 TCP
Bootstrap protocol server (BOOTP)

bootps
67 UDP
Bootp/DHCP server

bootpc
68 TCP
Bootstrap protocol client

bootpc
68 UDP
Bootp/DHCP client

tftp
69 UDP
Trivial file transfer protocol (TFTP)

gopher
70 TCP
Gopher

finger
79 TCP
Finger

http
80 TCP
World Wide Web Hypertext Transfer Protocol (HTTP)

kerberos
88 TCP
Kerberos secondary port

kerberos
88 UDP
Kerberos secondary port

tacnews
98 TCP
Red Hat Linuxconf

pop2
109 TCP
Post Office Protocol - version 2

pop2
109 UDP
Post Office Protocol - version 2

pop3
110 TCP
Post Office Protocol - version 3 (POP)

pop3
110 UDP
Post Office Protocol - version 3

sunrpc
111 TCP
Portmapper, remote procedure call

sunrpc
111 UDP
Portmapper, remote procedure call

ident
113 TCP
Authentication service

auth
113 UDP
Authentication service

nntp
119 TCP
Network (Usenet) news-transfer protocol

nntp
119 UDP
Network (Usenet) news-transfer protocol

ntp
123 TCP
Network time protocol

ntp
123 UDP
Network time protocol

epmap
135 TCP
Microsoft RPC

epmap
135 UDP
Microsoft RPC

netbios-ns
137 TCP
NetBIOS name service

netbios-ns
137 UDP
NetBIOS name service

netbios-dgm
138 TCP
NetBIOS datagram service

netbios-dgm
138 UDP
NetBIOS datagram service

netbios-ssn
139 TCP
NetBIOS session service

netbios-ssn
139 UDP
NetBIOS session service

imap
143 TCP
Interactive mail-access protocol

snmp
161 TCP
Simple Network Management Protocol

snmptrap
162 UDP
Traps for SNMP

bgp
179 TCP
Border Gateway Protocol (Internet backbone-routing protocol)

bgp
179 UDP
Border Gateway Protocol (Internet backbone-routing protocol)

set
257 TCP
Secure Electronic Transaction (SET Payment protocol)

set
257 UDP
Secure Electronic Transaction (SET Payment protocol)

ldap
389 TCP
Lightweight Directory Access Protocol (LDAP)

ldap
389 UDP
Lightweight Directory Access Protocol (LDAP)

https
443 TCP
HTTP protocol over TLS/SSL

microsoft-ds
445 TCP
Microsoft-ds (added with Windows 2000 for Microsoft networking)

microsoft-ds
445 UDP
Microsoft-ds (added with Windows 2000 for Microsoft networking)

exec
512 TCP
Remote execution

login
513 TCP
Remote login

who
513 UDP
Remote who

shell
514 TCP
Remote command shell

syslog
514 UDP
System logger

printer
515 TCP
Line-printer spooler

dhcpv6-client
546 TCP
DHCPv6 client

dhcpv6-client
546 UDP
DHCP6 client

dhcpv6-server
547 TCP
DHCPv6 server

dhcpv6-server
547 UDP
DHCPv6 server

mdqs
666 TCP
Doom (Game by ID software)

mdqs
666 UDP
Doom (Game by ID software)

kerberos-adm
749 TCP
Kerberos administration

kerberos-adm
749 UDP
Kerberos administration

iad1
1030 TCP
BBN iad

iad1
1030 UDP
BBN iad

iad2
1031 TCP
BBN iad

iad2
1031 UDP
BBN iad

iad3
1032 TCP
BBN iad

iad3
1032 UDP
BBN iad

socks
1080 TCP
Socks

socks
1080 UDP
Socks

lotusnote
1352 TCP
Lotus Notes port

lotusnote
1352 UDP
Lotus Notes port

ms-sql-s
1433 TCP
Microsoft SQL Server

ms-sql-s
1433 UDP
Microsoft SQL Server

ms-sql-m
1434 TCP
Microsoft SQL Monitor

ms-sql-m
1434 UDP
Microsoft SQL Monitor

ica
1494 TCP
Citrix ICA

ica
1494 UDP
Citrix ICA

sybase-sqlany
1498 TCP
Sybase SQL any

sybase-sqlany
1498 UDP
Sybase SQL any

wins
1512 TCP
Microsoft Windows Internet Name Service (WINS)

wins
1512 UDP
Microsoft Windows Internet Name Service (WINS)

shockwave
1626 TCP
Shockwave

shockwave
1626 UDP
Shockwave

datametrics
1645 UDP
Radius authentication

sa-msg-port
1646 UDP
Radius accounting

h323gatedisc
1718 TCP
H.323gatedisc (Internet Telephony/Video)

h323gatedisc
1718 UDP
H.323gatedisc (Internet Telephony/Video)

h323gatestat
1719 TCP
H.323gatestat (Internet Telephony/Video)

h323gatestat
1719 UDP
H.323gatestat (Internet Telephony/Video)

h323hostcall
1720 TCP
H.323hostcall (Internet Telephony/Video)

h323hostcall
1720 UDP
H.323hostcall (Internet Telephony/Video)

pptp
1723 TCP
Point-to-point tunneling protocol (PPTP)

pptp
1723 UDP
PPTP

msmq
1801 TCP
Microsoft message queue

msmq
1801 UDP
Microsoft message queue

radius
1812 TCP
Radius

radius
1812 UDP
Radius authentication protocol (rfc 2138)

radius-acct
1813 TCP
Radius accounting

radius-acct
1813 UDP
Radius accounting protocol (rfc 2139)

tcp-id-port
1999 TCP
Cisco identification port

tcp-id-port
1999 UDP
Cisco identification port

ms-olap3
2382 TCP
Microsoft OLAP

ms-olap3
2382 UDP
Microsoft OLAP

ms-olap4
2383 TCP
Microsoft OLAP

ms-olap4
2383 UDP
Microsoft OLAP

ovsessionmgr
2389 TCP
HP OpenView session manager

ovsessionmgr
2389 UDP
HP OpenView session manager

ms-olap1
2393 TCP
Microsoft OLAP

ms-olap1
2393 UDP
Microsoft OLAP

ms-olap2
2394 TCP
Microsoft OLAP

ms-olap2
2394 UDP
Microsoft OLAP

ovwdb
2447 TCP
HP OpenView nnm daemon

ovwdb
2447 UDP
HP OpenView nnm daemon

citrixima
2512 TCP
Citrix ima

citrixima
2512 UDP
Citrix ima

citrixadmin
2513 TCP
Citrix admin

citrixadmin
2513 UDP
Citrix admin

call-sig-trans
2517 TCP
H.323 annex e-call signaling transport (Internet Telephony/Video)

call-sig-trans
2517 UDP
H.323 annex e-call signaling transport (Internet Telephony/Video)

netmon
2606 TCP
Dell Network Monitor

netmon
2606 UDP
Dell Network Monitor

connection
2607 TCP
Dell connection

connection
2607 UDP
Dell connection

realsecure
2998 TCP
ISS Real Secure (NIDS software)

realsecure
2998 UDP
ISS Real Secure (NIDS software)

cifs
3020 TCP
CIFS

cifs
3020 UDP
CIFS

ccmail
3264 TCP
Lotus CC:mail

ccmail
3264 UDP
Lotus CC:mail

altav-tunnel
3265 TCP
AltaVista VPN tunnel

altav-tunnel
3265 UDP
AltaVista VPN tunnel

msft-gc
3268 TCP
Microsoft global catalog

msft-gc
3268 UDP
Microsoft global catalog

msft-gc-ssl
3269 TCP
Microsoft global catalog with LDAP/SSL

msft-gc-ssl
3269 UDP
Microsoft global catalog with LDAP/SSL

mysql
3306 TCP
MySQL

mysql
3306 UDP
MySQL

aol
5190 TCP
America Online

aol
5190 UDP
America Online

aol-1
5191 TCP
America Online

aol-1
5191 UDP
America Online

aol-2
5192 TCP
America Online

aol-2
5192 UDP
America Online

aol-3
5193 TCP
America Online

aol-3
5193 UDP
America Online

pcanywheredata
5631 TCP
PC/Anywhere data

pcanywheredata
5631 UDP
PC/Anywhere data

pcanywherestat
5632 TCP
PC/Anywhere status

pcanywherestat
5632 UDP
PC/Anywhere status

x11
6000 TCP
X Windows Server

x11
6001 TCP
X Windows Server

x11
6002 TCP
X Windows Server

x11
6003 TCP
X Windows Server

x11
6004 TCP
X Windows Server

x11
6005 TCP
X Windows Server

x11
6006 TCP
X Windows Server

x11
6007 TCP
X Windows Server

x11
6008 TCP
X Windows Server

x11
6009 TCP
X Windows Server

x11
6010 TCP
X Windows Server

x11
6011 TCP
X Windows Server

x11
6012 TCP
X Windows Server

x11
6013 TCP
X Windows Server

x11
6014 TCP
X Windows Server

x11
6015 TCP
X Windows Server

x11
6016 TCP
X Windows Server

x11
6017 TCP
X Windows Server

x11
6018 TCP
X Windows Server

x11
6019 TCP
X Windows Server

x11
6020 TCP
X Windows Server

x11
6021 TCP
X Windows Server

x11
6022 TCP
X Windows Server

x11
6023 TCP
X Windows Server

x11
6024 TCP
X Windows Server

x11
6025 TCP
X Windows Server

x11
6026 TCP
X Windows Server

x11
6027 TCP
X Windows Server

x11
6028 TCP
X Windows Server

x11
6029 TCP
X Windows Server

x11
6030 TCP
X Windows Server

x11
6031 TCP
X Windows Server

x11
6032 TCP
X Windows Server

x11
6033 TCP
X Windows Server

x11
6034 TCP
X Windows Server

x11
6035 TCP
X Windows Server

x11
6036 TCP
X Windows Server

x11
6037 TCP
X Windows Server

x11
6038 TCP
X Windows Server

x11
6039 TCP
X Windows Server

x11
6040 TCP
X Windows Server

x11
6041 TCP
X Windows Server

x11
6042 TCP
X Windows Server

x11
6043 TCP
X Windows Server

x11
6044 TCP
X Windows Server

x11
6045 TCP
X Windows Server

x11
6046 TCP
X Windows Server

x11
6047 TCP
X Windows Server

x11
6048 TCP
X Windows Server

x11
6049 TCP
X Windows Server

x11
6050 TCP
X Windows Server

x11
6051 TCP
X Windows Server

x11
6052 TCP
X Windows Server

x11
6053 TCP
X Windows Server

x11
6054 TCP
X Windows Server

x11
6055 TCP
X Windows Server

x11
6056 TCP
X Windows Server

x11
6057 TCP
X Windows Server

x11
6058 TCP
X Windows Server

x11
6059 TCP
X Windows Server

x11
6060 TCP
X Windows Server

x11
6061 TCP
X Windows Server

x11
6062 TCP
X Windows Server

x11
6063 TCP
X Windows Server

directplay8
6073 TCP
Microsoft Directplay 8

directplay8
6073 UDP
Microsoft Directplay 8

ircu
6665 TCP
Internet Relay Chat Server (IRC)

ircu
6666 TCP
Internet Relay Chat Server (IRC)

ircu
6667 TCP
Internet Relay Chat Server (IRC)

ircu
6668 TCP
Internet Relay Chat Server (IRC)

ircu
6669 TCP
Internet Relay Chat Server (IRC)

pmdmgr
7426 TCP
HP OpenView dm postmaster manager

pmdmgr
7426 UDP
HP OpenView dm postmaster manager

oveadmgr
7427 TCP
HP OpenView dm event agent manager

oveadmgr
7427 UDP
HP OpenView dm event agent manager

ovladmgr
7428 TCP
HP OpenView dm log agent manager

ovladmgr
7428 UDP
HP OpenView dm log agent manager

opi-sock
7429 TCP
HP OpenView dm rqt communication

opi-sock
7429 UDP
HP OpenView dm rqt communication

xmpv7
7430 TCP
HP OpenView dm xmpv7 api pipe

xmpv7
7430 UDP
HP OpenView dm xmpv7 api pipe

pmd
7431 TCP
HP OpenView dm ovc/xmpv3 api pipe

pmd
7431 UDP
HP OpenView dm ovc/xmpv3 api pipe

http-alt
8080 TCP
Common port for HTTP proxy server or second Web server; non-root UNIX HTTP servers such as Apache default to this port.

quake
26000 TCP
Quake (Game by ID Software)

quake
26000 UDP
Quake (Game by ID Software)

Trinoo_Bcast
27444 UDP
Trinoo DDOS attack tool, master-to-bcast daemon communication

Trinoo_Master
27665 TCP
Trinoo DDOS attack tool, master server-control port

Trinoo_Register
31335 UDP
Trinoo DDOS attack tool, bcast daemon registration port

Elite
31337 TCP
Sometimes interesting stuff can be found here (hacker signature port)

BackOrifice
31337 UDP
CDC Back Orifice remote-administration tool

filenet-nch
32770 TCP
Alternate RPC port on Solaris (filenet nch)

filenet-nch
32770 UDP
Alternate RPC port on Solaris (filenet nch)

sometimes-rpc5
32771 TCP
Alternate RPC port on Solaris (rusersd)

sometimes-rpc6
32771 UDP
Alternate RPC port on Solaris (rusersd)

sometimes-rpc7
32772 TCP
Alternate RPC port on Solaris (status)

sometimes-rpc8
32772 UDP
Alternate RPC port on Solaris (status)

sometimes-rpc9
32773 TCP
Alternate RPC port on Solaris (rquotad)

sometimes-rpc10
32773 UDP
Alternate RPC port on Solaris (rquotad)

sometimes-rpc11
32774 TCP
Alternate RPC port on Solaris (rusersd)

sometimes-rpc12
32774 UDP
Alternate RPC port on Solaris (rusersd)

sometimes-rpc13
32775 TCP
Alternate RPC port on Solaris (status)

sometimes-rpc14
32775 UDP
Alternate RPC port on Solaris (status)

sometimes-rpc15
32776 TCP
Alternate RPC port on Solaris (sprayd)

sometimes-rpc16
32776 UDP
Alternate RPC port on Solaris (sprayd)

sometimes-rpc17
32777 TCP
Alternate RPC port on Solaris (walld)

sometimes-rpc18
32777 UDP
Alternate RPC port on Solaris (walld)

sometimes-rpc19
32778 TCP
Alternate RPC port on Solaris (rstatd)

sometimes-rpc20
32778 UDP
Alternate RPC port on Solaris (rstatd)

sometimes-rpc21
32779 TCP
Alternate RPC port on Solaris

sometimes-rpc22
32779 UDP
Alternate RPC port on Solaris

sometimes-rpc23
32780 TCP
Alternate RPC port on Solaris

sometimes-rpc24
32780 UDP
Alternate RPC port on Solaris