Cyberstudy
Supplementary — not in your PDF

Common ports & protocols

Why it matters: Port numbers turn up in firewall-rule, log and scenario questions. Your guide mentions some but has no reference table.

Overview

Supplementary — not from your PDF

Services listen on well-known port numbers. Secure versions of old protocols often use a different port, or upgrade the same port to TLS with STARTTLS. Learn them in insecure/secure pairs.

Port reference

PortProtocolNotes
20/21FTP (TCP)Insecure file transfer; replace with SFTP or FTPS
22SSH / SFTP / SCP (TCP)Encrypted remote shell and file transfer
23Telnet (TCP)Insecure remote shell; replace with SSH
25SMTP (TCP)Mail transfer between servers
53DNS (UDP/TCP)Name resolution; TCP for zone transfers and large replies
67/68DHCP (UDP)Address assignment
69TFTP (UDP)Trivial file transfer, no authentication
80HTTP (TCP)Unencrypted web
88Kerberos (UDP/TCP)Authentication in Windows domains
110POP3 (TCP)Mail retrieval; secure version 995
123NTP (UDP)Time sync; accurate time matters for logs and Kerberos
143IMAP (TCP)Mail access; secure version 993
161/162SNMP (UDP)Monitoring (162 = traps); use SNMPv3
389LDAP (TCP/UDP)Directory queries; secure version 636 (LDAPS)
443HTTPS (TCP)Web over TLS
445SMB (TCP)Windows file sharing
465 / 587SMTPS / submission (TCP)Mail submission from clients, with TLS
514Syslog (UDP)Log forwarding; 6514 for syslog over TLS
636LDAPS (TCP)LDAP over TLS
989/990FTPS (TCP)FTP over TLS
993IMAPS (TCP)IMAP over TLS
995POP3S (TCP)POP3 over TLS
1433Microsoft SQL Server (TCP)Database; should not face the internet
1812/1813RADIUS (UDP)Authentication and accounting for network access
3306MySQL (TCP)Database
3389RDP (TCP)Remote Desktop; put behind a VPN or gateway
5060/5061SIP (TCP/UDP)VoIP signalling; 5061 with TLS

Memory tips

  • Learn in pairs: HTTP 80 → HTTPS 443, LDAP 389 → LDAPS 636, IMAP 143 → IMAPS 993, POP3 110 → POP3S 995, Telnet 23 → SSH 22.
  • SFTP runs over SSH (22). FTPS is FTP over TLS (989/990). They are different protocols.
  • In a firewall-rule question, first find which port the service needs, then whether it should be allowed from that source at all.