Common TCP and UDP ports

What each well-known port is used for, which protocol it runs on and whether it is safe to open. Official assignments come from the IANA registry; unofficial but widespread uses are marked and linked to the product’s documentation.

Check if a port is open on your IP

We only check the address you are visiting from, one TCP port at a time. You cannot enter someone else’s address: this is not a port scanner.

PortProtocolService
21TCPFTP
22TCPSSH
23TCPTelnet
25TCPSMTP
53TCP and UDPDNS
80TCPHTTP
110TCPPOP3
135TCPMS RPC
139TCPNetBIOS
143TCPIMAP
443TCP and UDPHTTPS
445TCPSMB
465TCPSMTPS
587TCPSMTP submission
993TCPIMAPS
995TCPPOP3S
1080TCPSOCKS
1194TCP and UDPOpenVPN
1433TCPMS SQL Server
1521TCPOracle DB
1723TCPPPTP
2049TCP and UDPNFS
3000TCPdev servers
3128TCPSquid proxy
3306TCPMySQL
3389TCP and UDPRDP
4444TCPMetasploit
5000TCPFlask, Docker Registry
5060TCP and UDPSIP
5432TCPPostgreSQL
5900TCPVNC
6379TCPRedis
8000TCPDjango, Python
8080TCPHTTP alternate
8081TCPMetro, alt HTTP
8443TCPHTTPS alternate
8888TCPJupyter
9000TCPPHP-FPM, SonarQube
9090TCPPrometheus, Cockpit
9200TCPElasticsearch
11211TCP and UDPMemcached
25565TCPMinecraft
27017TCPMongoDB
51820UDPWireGuard

Source: IANA Service Name and Transport Protocol Port Number Registry, last updated 2026-11-10, retrieved 2026-11-12.

Why a port can look closed when your server is running

Most home networks sit behind a router doing NAT: the router owns the public address, and your computer has a private one such as 192.168.1.10. A connection from the internet reaches the router and stops there unless you add a port forwarding rule to your computer.

Many mobile and some home providers go further and use carrier-grade NAT (CGNAT): several customers share one public address, and your router itself gets an address from 100.64.0.0/10. Then no rule on your side can open a port; ask the provider for a public IP or use a tunnel or VPN service.

Even with forwarding in place, the firewall on the computer (Windows Defender Firewall, ufw, firewalld) must allow the port, and the program must listen on all interfaces (0.0.0.0), not only on 127.0.0.1.

UDP cannot be checked this way: a UDP service usually stays silent to packets it does not understand, so “no answer” means nothing. This check uses TCP only.