Repository navigation
TCP Ports
Tim Chappell edited this page Oct 10, 2026
·
1 revision
The list of default IPv6 TCP ports which can be tested, and their common usage is defined in the table below:
| Port Number | Description of the traffic usually assigned to this port |
|---|---|
| 7 | Echo - often used for test/development purposes. |
| 20 | FTP-data |
| 21 | File Transfer (FTP) control |
| 22 | The Secure Shell (SSH) Protocol |
| 23 | Telnet |
| 24 | Private Mail |
| 25 | Simple Mail Transfer Protocol (SMTP) |
| 37 | Time |
| 43 | Whois |
| 53 | Domain Name Server (DNS) |
| 79 | Finger |
| 80 | World Wide Web (HTTP) |
| 110 | Post Office Protocol - Version 3 (POP3) |
| 111 | Sun Remote Procedure Call (RPC) |
| 113 | Authentication Service (ident, auth) |
| 119 | Network News Transfer Protocol (NNTP) |
| 135 | DCE endpoint resolution (epmap), Microsoft EPMAP RPCs, Messenger services |
| 137 | NETBIOS Name Service |
| 138 | NETBIOS Datagram Service |
| 139 | NETBIOS Session Service |
| 143 | Internet Message Access Protocol (IMAP) |
| 179 | BGP |
| 194 | IRC |
| 311 | AppleShare IP WebAdmin, MAC OSX server admin |
| 389 | Lightweight Directory Access Protocol (LDAP) |
| 427 | Server Location (SLP) |
| 443 | HTTP Protocol over TLS/SSL (HTTPS) |
| 445 | Microsoft-DS (SMB, Samba) |
| 465 | SMTPS (RFC8314) |
| 543 | Kerberos login |
| 544 | Kerberos remote shell |
| 548 | Apple Filing Protocol over TCP |
| 563 | NNTPS |
| 587 | ESMTP |
| 631 | Internet Printing Protocol (IPP) |
| 749 | Kerberos Administration |
| 853 | DNS over TLS |
| 873 | Rsync |
| 989 | FTPS-data |
| 990 | FTPS |
| 993 | IMAP4 Protocol over TLS/SSL (IMAPS) |
| 995 | POP3S |
| 1025 | Network Blackjack, sometimes NFS, IIS or RFS |
| 1026 | Calendar Access Protocol (CAP), Microsoft DCOM |
| 1029 | Solid Mux Server, Microsoft DCOM |
| 1030 | BBN IAD |
| 1080 | SOCKS |
| 1433 | Microsoft SQL-server |
| 1720 | H.323 Hostcall - including Microsoft Netmeeting |
| 1801 | MSMQ |
| 2103 | MSMQ-RPC |
| 2105 | MSMQ-RPC |
| 2107 | MSMQ-Mgmt |
| 2869 | SSDP event notification |
| 3128 | Active API Server Port (also default for Squid proxy) |
| 3306 | MySQL |
| 3389 | MS Windows Based Terminal Server (RDP) |
| 3689 | Digital Audio Access Protocol (DAAP, iTunes) |
| 5000 | Commplex-main (Windows Universal Plug and Play service - UPNP) |
| 5100 | Socalia service mux, Yahoo Messenger, Webcams |
| 5357 | WSDAPI HTTP |
| 5900 | Remote Framebuffer (VNC Server) |
| 6379 | Redis |
| 6697 | IRC over TLS |
| 8080 | HTTP alternate |
| 9090 | WebSM |
| 10243 | WMP HTTP |
| 11211 | memcache |
| 16992-5 | Intel AMT |
| 20005 | Router Kcodes NetUSB, see CVE-2021-45608 |
| 27017-27020 | MongoDB server, shard, config, crypt |
| 32764 | Common Router backdoor |