Random Port Generator: One Port From 1024 to 49151

One press gives a port number from 1024 to 49151 and skips the numbers that databases, dev servers and other common tools already use.

Random Port Generator: One Port From 1024 to 49151

Between 1,024 and 49,151

  1. 21,983

Odd · 1 of 48,004 ports that are not on the list

Not on the list below. The draw cannot see your machine, so check the port is free before you keep it.

Change the range
Quick ranges
Your picks 0

Nothing yet. Each port you pick is listed here, newest first.

Next step Set your own lowest and highestSee a random byte written in binary

Random Port Generator: One Port From 1024 to 49151: how it works

This random port generator draws one number from 1024 to 49151, the range that IANA registers to applications. Skip what is on the list is switched on, so the 124 numbers held by the 56 listed services in that range, from 3306 for MySQL to the 64 ports of X11, never come up. Switch it off and a listed port shows its entry under the result.

The three port ranges in RFC 6335

A port is a 16-bit number, so there are 65,536. System ports, 0 to 1023, hold the oldest services, and by default Linux lets only root, or a program given that right, open one. User ports, 1024 to 49151, are 48,128 numbers that IANA registers to applications; about 12 in 100 are taken. Dynamic ports, 49152 to 65535, are never assigned.

Worked example: the draw gives 41,852

The line under the result says it is not on the list, and the IANA registry shows it as unassigned. But Linux lends ports 32768 to 60999 to outgoing connections by default, so another program may hold 41852 for a moment. For a server that must start every time, tap 1024 to 32767 and draw again. Copy gives plain digits.

Tips

  • Most everyday defaults sit below 10000. Tap 10001 to 32767 to stay clear of them and of the Linux range. Only three listed ports sit higher: 11211, 15672 and 27017.
  • Need a block? Set How many to 3 and Order to Lowest first: app, admin page, metrics. No repeats is already on.
  • A random port avoids clashes. It does not hide a service: a port scan can try all 65,536.

Questions and answers

Can the draw return a port that is already in use?

Yes. The skip only knows the list, and the draw cannot see your machine. On Linux, ss -ltn lists every listening TCP port, and on macOS netstat -an does. lsof -i :41852 names the program that holds a port, but without sudo it sees only your own programs. On Windows, netstat -ano lists every port in use with its process ID.

Should I pick a registered port or a dynamic one?

For a service that other programs connect to, draw from the registered range. IANA never assigns a dynamic port, 49152 to 65535, so no product claims one, but Windows and FreeBSD lend those ports to outgoing connections, so one may be taken when your server starts.

Is port 8080 official?

Yes: IANA registers 8080 as http-alt, an alternate to port 80. In the registry 3000 belongs to hbci and remoteware-cl, 5000 to commplex-main and 9000 to cslistener, while 5173 and 9229 are unassigned. Dev tools open all five by habit, and the list marks 19 such entries.

More like this

Random tool Browse Numbers, Dates and Letters

All 79 ports

System ports, below the opening range 23

  • 110 POP3 Post Office Protocol version 3: a mail app downloads messages from the server.
  • 123 NTP Network Time Protocol keeps computer clocks in step.
  • 143 IMAP Internet Message Access Protocol: mail stays on the server and syncs to each device.
  • 161 and 162 SNMP Network monitoring: queries go to 161 and alerts, called traps, arrive on 162.
  • 179 BGP Border Gateway Protocol: the routers of separate networks swap routes here.
  • 20 and 21 FTP File Transfer Protocol: 21 carries the commands and 20 carries the files.
  • 22 SSH Secure Shell: remote logins and file copies over an encrypted link.
  • 23 Telnet A plain-text remote terminal. SSH on port 22 does the same job with encryption.
  • 25 SMTP Simple Mail Transfer Protocol: mail servers pass messages to each other here.
  • 389 LDAP Lightweight Directory Access Protocol. Port 636 is the version over TLS.
  • 443 HTTPS HTTP over TLS: the default port for secure web pages.
  • 445 SMB file sharing SMB file sharing on Windows networks. The registry calls it microsoft-ds.
  • 465 mail submission over TLS A mail app hands outgoing mail to its server with TLS from the first byte (RFC 8314).
  • 514 syslog System log messages over UDP. On TCP the same number belongs to the old remote shell.
  • 53 DNS Domain name lookups, registered for both UDP and TCP.
  • 587 mail submission Outgoing mail from an app to its server, as set out in RFC 6409.
  • 631 IPP Internet Printing Protocol, for sending print jobs across a network.
  • 67 and 68 DHCP How a device gets its IP address: servers listen on 67 and clients on 68.
  • 80 HTTP The default port for web pages sent without encryption.
  • 853 DNS over TLS Encrypted DNS lookups, defined in RFC 7858.
  • 88 Kerberos Kerberos sign-in tickets, defined in RFC 4120.
  • 993 IMAP over TLS The encrypted version of IMAP on port 143.
  • 995 POP3 over TLS The encrypted version of POP3 on port 110.

Databases and caches 10

  • 11211 memcached The memcached memory cache, registered under the name memcache.
  • 1433 Microsoft SQL Server The default listener of Microsoft SQL Server, registered as ms-sql-s.
  • 1521 Oracle database listener Oracle's default listener by habit. The registry gives 1521 to nCube License Manager.
  • 27017 MongoDB The mongod and mongos processes, registered for TCP only as mongodb.
  • 3306 MySQL The registered default port of a MySQL server.
  • 5432 PostgreSQL The registered default port of a PostgreSQL server.
  • 5984 CouchDB Registered to the CouchDB database server.
  • 6379 Redis Redis, registered for TCP only as a key-value cache and store.
  • 9042 Cassandra clients Apache Cassandra's native client protocol by habit. The registry lists 9042 as unassigned.
  • 9200 Elasticsearch The default Elasticsearch port by habit. The registry gives 9200 to a WAP session service.

Web servers and dev tools 15

  • 3000 dev servers Ruby on Rails, Create React App and Grafana open here by habit. The registry lists hbci and remoteware-cl.
  • 3128 Squid proxy The Squid caching web proxy by habit. The registry lists it as ndl-aas.
  • 3690 Subversion Registered to the Subversion version control system as svn.
  • 4200 Angular dev server Angular apps by habit. The registry gives 4200 to 4299 to VRML multi-user systems.
  • 5000 Flask and ASP.NET Core Flask and ASP.NET Core dev servers and Apple's AirPlay receiver. Registered as commplex-main.
  • 5173 Vite dev server The Vite dev server by habit. The registry lists 5173 as unassigned.
  • 8000 Django and Python http.server Django's dev server and Python 3 http.server by habit. The registry lists it as irdmi.
  • 8008 HTTP alternate Registered as an alternate port for HTTP, like 8080.
  • 8080 HTTP alternate The registered alternate to port 80, and the port Apache Tomcat opens on.
  • 8123 Home Assistant and ClickHouse Home Assistant and the ClickHouse HTTP interface by habit. Unassigned in the registry.
  • 8443 HTTPS by habit Apache Tomcat's TLS port by habit. The registry lists 8443 as pcsync-https.
  • 8888 Jupyter notebooks Jupyter notebook dashboards by habit. The registry gives 8888 to a NewsEDGE server.
  • 9000 PHP-FPM and SonarQube PHP-FPM, SonarQube and ClickHouse's native interface by habit. Registered as cslistener.
  • 9229 Node.js debugger The Node.js debugger listens here by habit. The registry lists 9229 as unassigned.
  • 9418 Git The git:// protocol, registered as the git pack transfer service.

Queues, containers and monitoring 14

  • 15672 RabbitMQ management The RabbitMQ management plugin by habit. The registry lists 15672 as unassigned.
  • 1883 MQTT Message Queuing Telemetry Transport, a publish and subscribe protocol for small devices.
  • 2375 and 2376 Docker API The Docker REST API: 2375 in plain text and 2376 over TLS.
  • 2379 and 2380 etcd The etcd key-value store: 2379 for clients and 2380 between servers.
  • 4369 Erlang port mapper epmd, the Erlang Port Mapper Daemon, which tells Erlang nodes where to find each other.
  • 5222 XMPP clients Chat clients connect to an XMPP server here (RFC 6120).
  • 5269 XMPP servers XMPP servers pass messages to each other here (RFC 6120).
  • 5601 Kibana The Kibana dashboard by habit. The registry lists it as esmagent.
  • 5672 AMQP Advanced Message Queuing Protocol, registered for TCP, UDP and SCTP.
  • 6443 Kubernetes API server The Kubernetes API server by habit. The registry lists it as sun-sr-https.
  • 6514 syslog over TLS Encrypted system log messages, defined in RFC 5425.
  • 8883 MQTT over TLS The encrypted version of MQTT on port 1883, registered as secure-mqtt.
  • 9090 Prometheus The Prometheus metrics server and the Cockpit admin page by habit. Registered as websm.
  • 9092 Kafka brokers Apache Kafka by habit. The registry lists 9092 as XmlIpcRegSvc.

Remote access, VPN and network 17

  • 10000 NDMP and Webmin Registered for network backups (NDMP). The Webmin admin panel defaults here too.
  • 1080 SOCKS proxy The registered port of the SOCKS proxy protocol.
  • 1194 OpenVPN Registered to OpenVPN for both TCP and UDP.
  • 1701 L2TP Layer 2 Tunneling Protocol. The older l2f service shares the number in the registry.
  • 1723 PPTP Point-to-Point Tunneling Protocol, a VPN method set out in RFC 2637.
  • 1812 and 1813 RADIUS Network sign-in checks on 1812 (RFC 2865) and usage accounting on 1813 (RFC 2866).
  • 1900 SSDP Simple Service Discovery Protocol: how UPnP devices find each other on a network.
  • 2049 NFS Network File System, for mounting folders that live on another machine.
  • 3260 iSCSI Disk storage carried over a network, defined in RFC 7143.
  • 3389 Remote Desktop Windows Remote Desktop (RDP). The registry calls it ms-wbt-server.
  • 3478 STUN and TURN Helps calls find a path through NAT routers (RFC 8489 and RFC 8656).
  • 5060 and 5061 SIP Session Initiation Protocol for internet phone calls: 5060 plain and 5061 over TLS.
  • 5353 Multicast DNS Finds devices by name on a local network without a DNS server (RFC 6762).
  • 5900 VNC Remote Framebuffer, the protocol under VNC screen sharing (RFC 6143).
  • 5985 and 5986 WinRM Windows Remote Management: 5985 over HTTP and 5986 over HTTPS.
  • 6000 to 6063 X11 The X Window System holds this whole block of 64 ports.
  • 6697 IRC over TLS Internet Relay Chat with encryption, set out in RFC 7194.

How this list was compiled: 79 port numbers (or short blocks) that a developer is likely to meet, written for this site and checked 2026-09-18. Port 3000 was read again on 2026-09-19: the registry has rows for hbci and for remoteware-cl, the second with a note that the entry records an unassigned but widespread use. Every service name, RFC number and 'unassigned' or 'TCP only' note was matched by script against the IANA Service Name and Transport Protocol Port Number Registry, last updated 2026-09-11: https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml (the CSV at https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.csv). The three ranges (system ports 0 to 1023, user ports 1024 to 49151, dynamic ports 49152 to 65535, never assigned) are from RFC 6335 section 6: https://www.rfc-editor.org/rfc/rfc6335 and the note at the head of the registry. Uses marked 'by habit' are not IANA assignments; each was matched by script against the row for that port in https://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers (wikitext fetched 2026-09-18), and a use that the article tags 'citation needed' was left out. Product names are plain-text references and belong to their owners. IANA's own note applies: an assignment does not endorse a product, and traffic on a registered port is not proof of the assigned service. Licence: own work