常用端口速查

搜索 70+ 个常用 TCP/UDP 端口及其说明。

您的数据永远不会离开浏览器

端口	协议	服务	说明
80	TCP	HTTP	Standard unencrypted web traffic. Usually redirects to HTTPS (443) on modern sites.
443	TCP	HTTPS	HTTP over TLS/SSL. The default for secure websites and APIs.
591	TCP	FileMaker HTTP	FileMaker Pro web publishing over HTTP (alternate for port 80).
8000	TCP	HTTP Alt / Django	Common alternative HTTP port; default for Django and many Python dev servers.
8008	TCP	HTTP Alt	Official IANA alternative for HTTP; used by some appliances and admin panels.
8080	TCP	HTTP Alt / Proxy	The most common HTTP alternative — Tomcat, proxies, caching services, and dev servers.
8443	TCP	HTTPS Alt	Alternative HTTPS port, typical for Tomcat SSL and admin consoles.
20	TCP	FTP (Data)	FTP data transfer channel in active mode.
21	TCP	FTP (Control)	FTP command/control channel. Plain-text credentials — prefer SFTP or FTPS.
22	TCP	SSH / SFTP	Secure Shell for encrypted logins, tunneling, and SFTP file transfer.
69	UDP	TFTP	Trivial File Transfer Protocol. Lightweight, no auth — used for PXE boot and device firmware.
115	TCP	SFTP (legacy)	Simple File Transfer Protocol, an early predecessor — not the SSH-based SFTP.
873	TCP	rsync	rsync daemon protocol for fast incremental file synchronization.
989	TCP	FTPS (Data)	FTP data channel over TLS/SSL.
990	TCP	FTPS (Control)	FTP control channel over TLS/SSL (implicit FTPS).
2049	TCP/UDP	NFS	Network File System for sharing directories between Unix/Linux systems.
25	TCP	SMTP	Server-to-server email relay. Often blocked for outbound use by ISPs and cloud hosts.
110	TCP	POP3	Post Office Protocol v3 — downloads mail to one device, usually deleting it from the server.
143	TCP	IMAP	Internet Message Access Protocol — mail stays on the server and syncs across devices.
465	TCP	SMTPS	SMTP over implicit TLS. Deprecated once, now re-standardized for message submission.
587	TCP	SMTP (Submission)	Message submission with STARTTLS. The recommended port for sending mail from clients.
993	TCP	IMAPS	IMAP over TLS/SSL. The standard for secure mailbox access.
995	TCP	POP3S	POP3 over TLS/SSL for encrypted mail retrieval.
53	TCP/UDP	DNS	Domain Name System. UDP for queries, TCP for zone transfers and large responses.
67	UDP	DHCP (Server)	DHCP server side — hands out IP addresses and network configuration to clients.
68	UDP	DHCP (Client)	DHCP client side — receives address leases and renewals from the server.
88	TCP/UDP	Kerberos	Kerberos authentication, central to Active Directory domains.
123	UDP	NTP	Network Time Protocol for clock synchronization across systems.
137	TCP/UDP	NetBIOS-NS	NetBIOS name service on legacy Windows networks.
138	UDP	NetBIOS-DGM	NetBIOS datagram service on legacy Windows networks.
139	TCP	NetBIOS-SSN	NetBIOS session service; older SMB file sharing transport.
161	UDP	SNMP	Simple Network Management Protocol for monitoring routers, switches, and servers.
162	UDP	SNMP Trap	Receives asynchronous SNMP trap alerts from managed devices.
179	TCP	BGP	Border Gateway Protocol — the routing protocol of the internet backbone.
389	TCP/UDP	LDAP	Lightweight Directory Access Protocol for directory services like Active Directory.
445	TCP	SMB	Server Message Block — Windows file and printer sharing (SMB direct over TCP).
514	UDP	Syslog	Syslog for forwarding log messages to a central collector.
515	TCP	LPD	Line Printer Daemon protocol for network printing.
631	TCP/UDP	IPP / CUPS	Internet Printing Protocol, used by CUPS on Linux and macOS.
636	TCP	LDAPS	LDAP over TLS/SSL for encrypted directory access.
1194	TCP/UDP	OpenVPN	Default port for OpenVPN tunnels (usually UDP).
1723	TCP	PPTP	Point-to-Point Tunneling Protocol VPN. Legacy and considered insecure.
5060	TCP/UDP	SIP	Session Initiation Protocol for VoIP call setup.
5061	TCP	SIP over TLS	Encrypted SIP signaling.
23	TCP	Telnet	Unencrypted remote terminal. Obsolete and insecure — use SSH instead.
3389	TCP/UDP	RDP	Remote Desktop Protocol for Windows remote administration.
5900	TCP	VNC	Virtual Network Computing for graphical remote desktop access.
1433	TCP	Microsoft SQL Server	Default MSSQL database engine port.
1434	UDP	MSSQL Browser	SQL Server Browser service for resolving named instances.
1521	TCP	Oracle DB	Oracle Database listener default port.
3306	TCP	MySQL / MariaDB	Default port for MySQL and MariaDB servers.
5432	TCP	PostgreSQL	Default PostgreSQL server port.
5984	TCP	CouchDB	Apache CouchDB HTTP API.
6379	TCP	Redis	Redis in-memory data store. Never expose to the public internet without auth.
9042	TCP	Cassandra (CQL)	Apache Cassandra native CQL transport.
9200	TCP	Elasticsearch	Elasticsearch REST/HTTP API.
9300	TCP	Elasticsearch (Transport)	Elasticsearch inter-node cluster communication.
11211	TCP/UDP	Memcached	Memcached distributed memory caching system.
27017	TCP	MongoDB	Default MongoDB server port.
27018	TCP	MongoDB (Shard)	MongoDB shard server default port.
1883	TCP	MQTT	MQTT lightweight publish/subscribe messaging, common in IoT.
4222	TCP	NATS	NATS messaging system client connections.
5672	TCP	AMQP (RabbitMQ)	Advanced Message Queuing Protocol — default RabbitMQ port.
8883	TCP	MQTT over TLS	Secure MQTT over TLS/SSL.
9092	TCP	Kafka	Apache Kafka broker default port.
15672	TCP	RabbitMQ Management	RabbitMQ web management console and HTTP API.
61613	TCP	STOMP (ActiveMQ)	STOMP text-based messaging protocol on ActiveMQ.
2181	TCP	Zookeeper	Apache Zookeeper coordination service client port.
2375	TCP	Docker (unencrypted)	Docker REST API without TLS. Extremely dangerous if exposed publicly.
2376	TCP	Docker (TLS)	Docker REST API over TLS — the secure way to expose the Docker daemon.
3000	TCP	Dev Server	Default for many dev servers: React (create-react-app), Rails, Grafana, Express demos.
5000	TCP	Dev Server	Default for Flask and many Python/Node dev servers (also Docker Registry, UPnP on some systems).
5601	TCP	Kibana	Kibana web UI for visualizing Elasticsearch data.
6443	TCP	Kubernetes API	Kubernetes API server default port.
8081	TCP	HTTP Alt	Common secondary admin/proxy port; React Native Metro runs on 8081 by default.
8500	TCP	Consul	HashiCorp Consul HTTP API and web UI.
9000	TCP	PHP-FPM / SonarQube	Used by PHP-FPM, SonarQube, Portainer, and many admin panels.
10250	TCP	Kubelet API	Kubernetes kubelet HTTPS API on each node.
1080	TCP	SOCKS Proxy	SOCKS proxy protocol, widely used for tunneling traffic.
3128	TCP	Squid Proxy	Squid caching web proxy default port.

端口速查是一份可搜索、按分类筛选的常用 TCP/UDP 端口大全，覆盖 Web、邮件、数据库、消息队列、开发服务器和基础设施服务。不用再翻帖子回忆 Elasticsearch 到底是 9200 还是 9300,几秒钟就能查到。适合配置防火墙的开发者、看连接日志的运维，以及想搞清楚机器上到底有什么在监听的人。

如何使用

搜索： 输入 443 这样的端口号，或 redis 这样的关键词，实时过滤。
按分类筛选： 只看 Web、邮件、数据库、远程访问、消息队列等某一类。
复制： 点击行尾的复制按钮，把端口号复制到剪贴板。

功能特性

收录 70+ 个常用 TCP/UDP 端口，附通俗说明
支持按端口号、服务名或描述搜索
分类筛选：Web、文件传输、邮件、网络基础、远程访问、数据库、消息队列、开发运维
一键复制端口号
纯浏览器本地运行，不发送任何数据

知名端口、注册端口与动态端口

端口号范围是 0–65535，分三段。0–1023 是 IANA 分配的“知名端口”——22 SSH、25 SMTP、53 DNS、80 HTTP、443 HTTPS。1024–49151 是“注册端口”，MySQL(3306)、PostgreSQL(5432)、Redis(6379)、MongoDB(27017)都在这一段。49152–65535 是动态/临时端口，操作系统会把它分给每个连接的客户端一侧临时使用。

两个常见坑：一是很多服务在同一个号上同时用 TCP 和 UDP(DNS 的 53 就是典型);二是有些默认端口暴露公网极其危险——Docker 未加密 API 的 2375、Redis 的 6379、Elasticsearch 的 9200 都曾在重大数据泄露事件中出现。拿不准时，绑 localhost,其余一律防火墙拦掉。

使用场景

写防火墙规则或安全组时，核对服务需要的端口
解读 netstat / ss 输出，确认服务器上在跑什么
配置数据库和消息队列的连接串
备考网络认证（Network+、CCNA、Security+)

常见问题

443 端口是干什么用的？

443 是 HTTPS 的标准端口，承载 TLS/SSL 加密的网页流量。现在几乎所有网站和 API 都用它。

80 和 8080 端口有什么区别？

80 是 HTTP 的官方端口；8080 是非官方的替代端口，常用于 Tomcat、代理服务器和本地开发服务器。

SSH 用哪个端口？

SSH 使用 TCP 22 端口，SFTP 文件传输和 SSH 隧道也走这个端口。

发邮件用 465 还是 587？

推荐用 587（STARTTLS）提交邮件。465（隐式 TLS）也已重新标准化；25 只用于服务器之间中转。

为什么不能把 6379、27017 暴露到公网？

Redis（6379）和 MongoDB（27017）默认常常没有鉴权，直接暴露公网是数据泄露的重灾区。务必绑定 localhost 或用防火墙隔离。