1.
Web & Internet Services
Port Protocol Description
80 HTTP Unsecured web browsing
443 HTTPS Secure web browsing
8080 HTTP Proxy Alternative HTTP port
8443 HTTPS Alternative Secure web services
53 DNS Domain Name Resolution
2. Remote Access & Administration
Port Protocol Description
22 SSH Secure remote login
23 Telnet Unsecured remote login
3389 RDP Remote Desktop Protocol (Windows)
5900 VNC Virtual Network Computing
1494, 2598 Citrix ICA Remote desktop access
3. Email Services
Port Protocol Description
25 SMTP Sending emails
110 POP3 Retrieving emails
143 IMAP Accessing emails remotely
465 SMTPS Secure SMTP
587 SMTP (TLS) Secure email sending
993 IMAPS Secure IMAP
995 POP3S Secure POP3
4. File Transfer & Sharing
Port Protocol Description
20, 21 FTP File Transfer Protocol
69 TFTP Trivial File Transfer Protocol
989, 990 FTPS Secure FTP
2049 NFS Network File System
445 SMB Windows file sharing
137-139 NetBIOS Windows networking
5. Database Services
Port Protocol Description
1433 MSSQL Microsoft SQL Server
1521 Oracle SQL Oracle Database
3306 MySQL MySQL Database
5432 PostgreSQL PostgreSQL Database
27017 MongoDB MongoDB Database
6. Authentication & Directory Services
Port Protocol Description
389 LDAP Lightweight Directory Access Protocol
636 LDAPS Secure LDAP
88 Kerberos Authentication protocol
1812, 1813 RADIUS Remote Authentication Dial-In User Service
7. VPN & Secure Communication
Port Protocol Description
500 ISAKMP VPN Key Exchange
1194 OpenVPN OpenVPN service
1701 L2TP Layer 2 Tunneling Protocol
1723 PPTP Point-to-Point Tunneling Protocol
4500 IPsec NAT-T IPsec VPN traffic
8. Network & Security Monitoring
Port Protocol Description
162 SNMP Trap Network management
514 Syslog Logging service
9200 Elasticsearch Log monitoring
9. Attack & Exploitation Ports (Used in Hacking)
Port Protocol Description
4444 Metasploit Default Metasploit reverse shell
6667 IRC Used for botnet command & control
1080 SOCKS Proxy Used for anonymization
1337 Elite Sometimes used for hacker services
Port Protocol Description
31337 Back Orifice Trojan backdoor
10. IoT & Industrial Control Systems (ICS)
Port Protocol Description
1883 MQTT IoT message queue protocol
502 Modbus Industrial automation
47808 BACnet Building automation