Random Port Generator

A port number for a dev server or test service, drawn clear of 124 numbers that common tools already use.

Random Port Generator

Between 1,024 and 49,151

  1. 21,983

Odd · 1 of 48,004 ports that are not on the list

Not on the list below. The draw cannot see your machine, so check the port is free before you keep it.

Your range type the lowest and highest

48,004 ports from 1,024 to 49,151

Options
Quick ranges
More optionsmore quick ranges, order, skip what is on the list
More quick ranges

Next step Set your own lowest and highestA port is 16 bits: see 16 bits written in binary

All 79 ports

System ports, below the opening range 23

  • 20 and 21 FTP File Transfer Protocol: 21 carries the commands and 20 carries the files.
  • 22 SSH Secure Shell: remote logins and file copies over an encrypted link.
  • 23 Telnet A plain-text remote terminal. SSH on port 22 does the same job with encryption.
  • 25 SMTP Simple Mail Transfer Protocol: mail servers pass messages to each other here.
  • 53 DNS Domain name lookups, registered for both UDP and TCP.
  • 67 and 68 DHCP How a device gets its IP address: servers listen on 67 and clients on 68.
  • 80 HTTP The default port for web pages sent without encryption.
  • 88 Kerberos Kerberos sign-in tickets, defined in RFC 4120.
  • 110 POP3 Post Office Protocol version 3: a mail app downloads messages from the server.
  • 123 NTP Network Time Protocol keeps computer clocks in step.
  • 143 IMAP Internet Message Access Protocol: mail stays on the server and syncs to each device.
  • 161 and 162 SNMP Network monitoring: queries go to 161 and alerts, called traps, arrive on 162.
  • 179 BGP Border Gateway Protocol: the routers of separate networks swap routes here.
  • 389 LDAP Lightweight Directory Access Protocol. Port 636 is the version over TLS.
Show all 79 ports (65 more)

System ports, below the opening range, continued

  • 443 HTTPS HTTP over TLS: the default port for secure web pages.
  • 445 SMB file sharing SMB file sharing on Windows networks. The registry calls it microsoft-ds.
  • 465 mail submission over TLS A mail app hands outgoing mail to its server with TLS from the first byte (RFC 8314).
  • 514 syslog System log messages over UDP. On TCP the same number belongs to the old remote shell.
  • 587 mail submission Outgoing mail from an app to its server, as set out in RFC 6409.
  • 631 IPP Internet Printing Protocol, for sending print jobs across a network.
  • 853 DNS over TLS Encrypted DNS lookups, defined in RFC 7858.
  • 993 IMAP over TLS The encrypted version of IMAP on port 143.
  • 995 POP3 over TLS The encrypted version of POP3 on port 110.

Databases and caches 10

  • 1433 Microsoft SQL Server The default listener of Microsoft SQL Server, registered as ms-sql-s.
  • 1521 Oracle database listener Oracle's default listener by habit. The registry gives 1521 to nCube License Manager.
  • 3306 MySQL The registered default port of a MySQL server.
  • 5432 PostgreSQL The registered default port of a PostgreSQL server.
  • 5984 CouchDB Registered to the CouchDB database server.
  • 6379 Redis Redis, registered for TCP only as a key-value cache and store.
  • 9042 Cassandra clients Apache Cassandra's native client protocol by habit. The registry lists 9042 as unassigned.
  • 9200 Elasticsearch The default Elasticsearch port by habit. The registry gives 9200 to a WAP session service.
  • 11211 memcached The memcached memory cache, registered under the name memcache.
  • 27017 MongoDB The mongod and mongos processes, registered for TCP only as mongodb.

Web servers and dev tools 15

  • 3000 dev servers Ruby on Rails, Create React App and Grafana open here by habit. The registry lists hbci and remoteware-cl.
  • 3128 Squid proxy The Squid caching web proxy by habit. The registry lists it as ndl-aas.
  • 3690 Subversion Registered to the Subversion version control system as svn.
  • 4200 Angular dev server Angular apps by habit. The registry gives 4200 to 4299 to VRML multi-user systems.
  • 5000 Flask and ASP.NET Core Flask and ASP.NET Core dev servers and Apple's AirPlay receiver. Registered as commplex-main.
  • 5173 Vite dev server The Vite dev server by habit. The registry lists 5173 as unassigned.
  • 8000 Django and Python http.server Django's dev server and Python 3 http.server by habit. The registry lists it as irdmi.
  • 8008 HTTP alternate Registered as an alternate port for HTTP, like 8080.
  • 8080 HTTP alternate The registered alternate to port 80, and the port Apache Tomcat opens on.
  • 8123 Home Assistant and ClickHouse Home Assistant and the ClickHouse HTTP interface by habit. Unassigned in the registry.
  • 8443 HTTPS by habit Apache Tomcat's TLS port by habit. The registry lists 8443 as pcsync-https.
  • 8888 Jupyter notebooks Jupyter notebook dashboards by habit. The registry gives 8888 to a NewsEDGE server.
  • 9000 PHP-FPM and SonarQube PHP-FPM, SonarQube and ClickHouse's native interface by habit. Registered as cslistener.
  • 9229 Node.js debugger The Node.js debugger listens here by habit. The registry lists 9229 as unassigned.
  • 9418 Git The git:// protocol, registered as the git pack transfer service.

Queues, containers and monitoring 14

  • 1883 MQTT Message Queuing Telemetry Transport, a publish and subscribe protocol for small devices.
  • 2375 and 2376 Docker API The Docker REST API: 2375 in plain text and 2376 over TLS.
  • 2379 and 2380 etcd The etcd key-value store: 2379 for clients and 2380 between servers.
  • 4369 Erlang port mapper epmd, the Erlang Port Mapper Daemon, which tells Erlang nodes where to find each other.
  • 5222 XMPP clients Chat clients connect to an XMPP server here (RFC 6120).
  • 5269 XMPP servers XMPP servers pass messages to each other here (RFC 6120).
  • 5601 Kibana The Kibana dashboard by habit. The registry lists it as esmagent.
  • 5672 AMQP Advanced Message Queuing Protocol, registered for TCP, UDP and SCTP.
  • 6443 Kubernetes API server The Kubernetes API server by habit. The registry lists it as sun-sr-https.
  • 6514 syslog over TLS Encrypted system log messages, defined in RFC 5425.
  • 8883 MQTT over TLS The encrypted version of MQTT on port 1883, registered as secure-mqtt.
  • 9090 Prometheus The Prometheus metrics server and the Cockpit admin page by habit. Registered as websm.
  • 9092 Kafka brokers Apache Kafka by habit. The registry lists 9092 as XmlIpcRegSvc.
  • 15672 RabbitMQ management The RabbitMQ management plugin by habit. The registry lists 15672 as unassigned.

Remote access, VPN and network 17

  • 1080 SOCKS proxy The registered port of the SOCKS proxy protocol.
  • 1194 OpenVPN Registered to OpenVPN for both TCP and UDP.
  • 1701 L2TP Layer 2 Tunneling Protocol. The older l2f service shares the number in the registry.
  • 1723 PPTP Point-to-Point Tunneling Protocol, a VPN method set out in RFC 2637.
  • 1812 and 1813 RADIUS Network sign-in checks on 1812 (RFC 2865) and usage accounting on 1813 (RFC 2866).
  • 1900 SSDP Simple Service Discovery Protocol: how UPnP devices find each other on a network.
  • 2049 NFS Network File System, for mounting folders that live on another machine.
  • 3260 iSCSI Disk storage carried over a network, defined in RFC 7143.
  • 3389 Remote Desktop Windows Remote Desktop (RDP). The registry calls it ms-wbt-server.
  • 3478 STUN and TURN Helps calls find a path through NAT routers (RFC 8489 and RFC 8656).
  • 5060 and 5061 SIP Session Initiation Protocol for internet phone calls: 5060 plain and 5061 over TLS.
  • 5353 Multicast DNS Finds devices by name on a local network without a DNS server (RFC 6762).
  • 5900 VNC Remote Framebuffer, the protocol under VNC screen sharing (RFC 6143).
  • 5985 and 5986 WinRM Windows Remote Management: 5985 over HTTP and 5986 over HTTPS.
  • 6000 to 6063 X11 The X Window System holds this whole block of 64 ports.
  • 6697 IRC over TLS Internet Relay Chat with encryption, set out in RFC 7194.
  • 10000 NDMP and Webmin Registered for network backups (NDMP). The Webmin admin panel defaults here too.

How this list was compiled: 79 port numbers (or short blocks) that a developer is likely to meet, written for this site and checked 2026-09-18. Port 3000 was read again on 2026-09-19: the registry has rows for hbci and for remoteware-cl, the second with a note that the entry records an unassigned but widespread use. Every service name, RFC number and 'unassigned' or 'TCP only' note was matched against the IANA Service Name and Transport Protocol Port Number Registry, last updated 2026-09-11: https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml (the CSV at https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.csv). The three ranges (system ports 0 to 1023, user ports 1024 to 49151, dynamic ports 49152 to 65535, never assigned) are from RFC 6335 section 6: https://www.rfc-editor.org/rfc/rfc6335 and the note at the head of the registry. Uses marked 'by habit' are not IANA assignments; each was matched against the row for that port in https://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers (wikitext fetched 2026-09-18), and a use that the article tags 'citation needed' was left out. Product names are plain-text references and belong to their owners. IANA's own note applies: an assignment does not endorse a product, and traffic on a registered port is not proof of the assigned service. Licence: own work

How it works

This random port generator draws from 1024 to 49151, the range IANA registers to applications. Skip what is on the list starts on; switch it off and a listed port, such as MySQL's 3306, shows its entry under the result.

Read the full guide

The three port ranges in RFC 6335

A port is a 16-bit number, so there are 65,536. System ports, 0 to 1023, hold the oldest services, and by default Linux lets only root, or a program given that right, open one. User ports, 1024 to 49151, are 48,128 numbers; about 12 in 100 are assigned. Dynamic ports, 49152 to 65535, are never assigned.

Worked example: the draw gives 41,852

The line under the result says it is not on the list, and the IANA registry shows it as unassigned. But Linux lends ports 32768 to 60999 to outgoing connections by default, so another program may hold 41852 for a moment. For a server that must start every time, tap 1024 to 32767 and draw again. Copy gives plain digits.

  • Most everyday defaults sit below 10000. Tap 10001 to 32767 to clear them and the Linux range; only 11211, 15672 and 27017 are listed higher.
  • Need a block? Set How many to 3 and Order to Lowest first: app, admin page, metrics. No repeats is already on.
  • A random port avoids clashes. It does not hide a service: a port scan can try all 65,536.

Questions and answers

Can the draw return a port that is already in use?

Yes. The draw cannot see your machine. To see which ports are taken, run ss -ltn on Linux, netstat -an on macOS or netstat -ano on Windows. lsof -i :41852 names the program holding a port, but without sudo it sees only your own programs.

Should I pick a registered port or a dynamic one?

For a service other programs connect to, draw from the registered range. IANA never assigns a dynamic port, 49152 to 65535, so no product claims one, but Windows and FreeBSD lend those ports to outgoing connections, so one may be taken when your server starts.

Is port 8080 official?

Yes: IANA registers 8080 as http-alt, an alternate to port 80. The registry gives 3000 to hbci and remoteware-cl, 5000 to commplex-main and 9000 to cslistener, while 5173 and 9229 are unassigned. Dev tools open all five by habit; the list marks 19 such entries.

More tools

Show 7 more

Browse Numbers, Dates and Letters