Common Network Ports: TCP and UDP Service Name Reference

Six collapsible tables hold 272 port rows: the number, the transport where the entry belongs to one transport only, and the service name. The page is a static reference and scans nothing.

Runs locally in your browser

View category: Reference & Lookups (21)

Reference for common TCP and UDP service names. A registered port does not prove which application produced the traffic; verify the current IANA entry and inspect the service before changing firewall rules.

1. Frequently used system ports

Port	Service name
1	`tcpmux`
5	`rje`
7	`echo`
9	`discard`
11	`systat`
13	`daytime`
17	`qotd`
18	`msp`
19	`chargen`
20	`ftp-data`
21	`ftp`
22	`ssh`
23	`telnet`
25	`smtp`
37	`time`
39	`rlp`
42	`nameserver`
43	`nicname`
49	`tacacs`
50	`re-mail-ck`
53	`domain`
63	`whois++`
67	`bootps`
68	`bootpc`
69	`tftp`
70	`gopher`
71	`netrjs-1`
72	`netrjs-2`
73	`netrjs-3`
74	`netrjs-4`
79	`finger`
80	`http`
88	`kerberos`
95	`supdup`
101	`hostname`
102	`iso-tsap`
105	`csnet-ns`
107	`rtelnet`
109	`pop2`
110	`pop3`
111	`sunrpc`
113	`auth`
115	`sftp`
117	`uucp-path`
119	`nntp`
123	`ntp`
137	`netbios-ns`
138	`netbios-dgm`
139	`netbios-ssn`
143	`imap`
161	`snmp`
162	`snmptrap`
163	`cmip-man`
164	`cmip-agent`
174	`mailq`
177	`xdmcp`
178	`nextstep`
179	`bgp`
191	`prospero`
194	`irc`
199	`smux`
201	`at-rtmp`
202	`at-nbp`
204	`at-echo`
206	`at-zis`
209	`qmtp`
210	`z39.50`
213	`ipx`
220	`imap3`
245	`link`
347	`fatserv`
363	`rsvp_tunnel`
369	`rpc2portmap`
370	`codaauth2`
372	`ulistproc`
389	`ldap`
427	`svrloc`
434	`mobileip-agent`
435	`mobilip-mn`
443	`https`
444	`snpp`
445	`microsoft-ds`
464	`kpasswd`
468	`photuris`
487	`saft`
488	`gss-http`
496	`pim-rp-disc`
500	`isakmp`
535	`iiop`
538	`gdomap`
546	`dhcpv6-client`
547	`dhcpv6-server`
554	`rtsp`
563	`nntps`
565	`whoami`
587	`submission`
610	`npmp-local`
611	`npmp-gui`
612	`hmmp-ind`
631	`ipp`
636	`ldaps`
674	`acap`
694	`ha-cluster`
749	`kerberos-adm`
750	`kerberos-iv`
765	`webster`
767	`phonebook`
873	`rsync`
992	`telnets`
993	`imaps`
994	`ircs`
995	`pop3s`

2. Traditional UNIX service ports

Port	Service name
512/tcp	`exec`
512/udp	`biff[comsat]`
513/tcp	`login`
513/udp	`who[whod]`
514/tcp	`shell[cmd]`
514/udp	`syslog`
515	`printer[spooler]`
517/udp	`talk`
518/udp	`ntalk`
519	`utime[unixtime]`
520/tcp	`efs`
520/udp	`router[route,routed]`
521	`ripng`
525	`timed[timeserver]`
526/tcp	`tempo[newdate]`
530/tcp	`courier[rpc]`
531/tcp	`conference[chat]`
532	`netnews`
533/udp	`netwall`
540/tcp	`uucp[uucpd]`
543/tcp	`klogin`
544/tcp	`kshell`
548	`afpovertcp`
556	`remotefs[rfs_server,rfs]`

3. Registered user ports

Port	Service name
1080	`socks`
1236	`bvcontrol[rmtcfg]`
1300	`h323hostcallsc`
1433	`ms-sql-s`
1434	`ms-sql-m`
1494	`ica`
1512	`wins`
1524	`ingreslock`
1525	`prospero-np`
1645	`datametrics[old-radius]`
1646	`sa-msg-port[oldradacct]`
1649	`kermit`
1701	`l2tp[l2f]`
1718	`h323gatedisc`
1719	`h323gatestat`
1720	`h323hostcall`
1758	`tftp-mcast`
1759	`mtftp`
1789	`hello`
1812	`radius`
1813	`radius-acct`
1911	`mtp`
1985	`hsrp`
1986	`licensedaemon`
1997	`gdp-port`
2049	`nfs[nfsd]`
2102	`zephyr-srv`
2103	`zephyr-clt`
2104	`zephyr-hm`
2401	`cvspserver`
2430/tcp	`venus`
2430/udp	`venus`
2431/tcp	`venus-se`
2431/udp	`venus-se`
2432/udp	`codasrv`
2433/tcp	`codasrv-se`
2433/udp	`codasrv-se`
2600	`hpstgmgr[zebrasrv]`
2601	`discp-client[zebra]`
2602	`discp-server[ripd]`
2603	`servicemeter[ripngd]`
2604	`nsc-ccs[ospfd]`
2605	`nsc-posa`
2606	`netmon[ospf6d]`
2809	`corbaloc`
3130	`icpv2`
3306	`mysql`
3346	`trnsprntproxy`
4011	`pxe`
4321	`rwhois`
4444	`krb524`
5002	`rfe`
5308	`cfengine`
5999	`cvsup[CVSup]`
6000	`x11[X]`
7000	`afs3-fileserver`
7001	`afs3-callback`
7002	`afs3-prserver`
7003	`afs3-vlserver`
7004	`afs3-kaserver`
7005	`afs3-volser`
7006	`afs3-errors`
7007	`afs3-bos`
7008	`afs3-update`
7009	`afs3-rmtsys`
9876	`sd`
10080	`amanda`
11371	`pgpkeyserver`
11720	`h323callsigalt`
13720	`bprd`
13721	`bpdbm`
13722	`bpjava-msvc`
13724	`vnetd`
13782	`bpcd`
13783	`vopied`
22273	`wnn6[wnn4]`
26000	`quake`
26208	`wnn6-ds`
33434	`traceroute`
Registry note: aliases in /etc/services can differ from the current IANA primary service name. Treat the local services file as configuration data, not as proof of which application is using a port.

4. AppleTalk DDP ports (legacy)

Port	Service name
1/ddp	`rtmp`
2/ddp	`nbp`
4/ddp	`echo`
6/ddp	`zip`

5. Kerberos-related ports

Port	Service name
751	`kerberos_master`
752	`passwd_server`
754	`krb5_prop`
760	`krbupdate[kreg]`
1109	`kpop`
2053	`knetd`
2105	`eklogin`

6. Vendor, private, or historically used ports

Port	Service name
15/tcp	`netstat`
98/tcp	`linuxconf`
106	`poppassd`
465/tcp	`smtps`
616/tcp	`gii`
808	`omirr[omirrd]`
871/tcp	`supfileserv`
901/tcp	`swat`
953	`rndc`
1127	`sufiledbg`
1178/tcp	`skkserv`
1313/tcp	`xtel`
1529/tcp	`support[prmsd,gnatsd]`
2003/tcp	`cfinger`
2150	`ninstall`
2988	`afbackup`
3128/tcp	`squid`
3455	`prsvp`
5432	`postgres`
4557/tcp	`fax`
4559/tcp	`hylafax`
5232	`sgi-dgl`
5354	`noclog`
5355	`hostmon`
5680/tcp	`canna`
6010/tcp	`x11-ssh-offset`
6667	`ircd`
7100/tcp	`xfs`
7666/tcp	`tircproxy`
8008	`http-alt`
8080	`webcache`
8081	`tproxy`
9100/tcp	`jetdirect[laserjet,hplj]`
9359	`mandelspawn[mandelbrot]`
10081	`kamanda`
10082/tcp	`amandaidx`
10083/tcp	`amidxtape`
20011	`isdnlog`
20012	`vboxd`
22305/tcp	`wnn4_Kr`
22289/tcp	`wnn4_Cn`
22321/tcp	`wnn4_Tw`
24554	`binkp`
27374	`asp`
60177	`tfido`
60179	`fido`

How to look up a port

Six collapsible tables hold 272 port rows: the number, the transport where the entry belongs to one transport only, and the service name. The first group is the one that turns up in firewall rules and logs — 22 ssh, 25 smtp, 53 domain, 80 http, 443 https, 3306 mysql, 5432 postgres.

The page is a static reference: opening it requests nothing beyond its own files and scans nothing. The names come from the IANA registry and from the traditional /etc/services list, so part of the rows are aliases, or entries the registry has never held.

Filter the tables with the search field above them: type 636 or ldaps and only the matching rows stay, with the counter showing how many are left. The / key focuses the field and Clear restores all 272 rows.
Read the port cell before the name: 512/tcp exec and 512/udp biff[comsat] are two different services on the same number, while 53 domain is listed once because this list does not split that entry by transport. The copy button in the port cell copies the number on its own.
Treat square brackets as alternative names for the same row — biff[comsat], router[route,routed], jetdirect[laserjet,hplj] — so searching for the alias finds the row too.
Click a group heading to collapse or expand it. The six groups separate frequently used system ports, traditional UNIX services, registered user ports, AppleTalk DDP names, Kerberos project ports, and vendor or historical entries.

What a row does and does not tell you

A registered name is not a running service

A row says the number is registered, or traditionally used, for that name. It says nothing about the machine in front of you: a firewall rule that opens 5432 is only worth writing if something there answers on it.

To see what is actually listening, read the sockets on the host itself: ss -tulpn or netstat -tulpn on Linux, lsof -nP -iTCP -sTCP:LISTEN on macOS. They print the local address, the state and, for the sockets your user is allowed to inspect, the owning process with its PID — nginx on port 80 shows up as users:(“nginx”,pid=6220,fd=26). Run them as root to see every owner.

Where the names come from

Checked against the current IANA registry, 214 of the 272 names are the registered name for exactly that port. 37 keep a traditional name while IANA registers the number under another primary name: 465 smtps against submissions, 5432 postgres against postgresql, 106 poppassd against 3com-tsmux.

19 names do not appear in the registry at all — that is the vendor and historical group, for example swat on 901/tcp, afbackup on 2988, tircproxy on 7666/tcp or x11-ssh-offset on 6010/tcp. Two rows name a service registered on a different number: x11 on 6000, where IANA records the range 6000–6063, and echo on 4/ddp, which the registry lists on 7.

Transports, ranges and the legacy groups

51 of the 272 rows carry a transport tag because the name applies to that one transport only — 512/tcp exec next to 512/udp biff[comsat], or the four /ddp rows of the AppleTalk group. The remaining rows are listed once, without a tag.

The numbers follow the IANA split: 0–1023 system ports, 1024–49151 user ports, 49152–65535 dynamic or private. The registered user ports run from 1080 socks to 33434 traceroute, and the last group reaches into the private range with 60177 tfido and 60179 fido. 272 rows are a lookup aid, not a registry dump.

Recent tools: