Messer Security+ Ports

TCP/20,21

FTP - Unencrypted and sends passwords in cleartext, avoid

TCP/22

SSH/SFTP - Encrypted Remote Shell and File Transfer

TCP/23

Telnet - Unencrypted Remote Access - avoid

TCP/25

SMTP (Simple Mail Transfer Protocol) - Routing email between servers, Unencrypted

TCP/110

POP3 - Download emails, insecure unless secured by SSL/TLS

TCP/143

IMAP - Synchronizes email on the server (Unencrypted)

TCP/465/587

SMTPS - Encrypted SMTP, replaces the unencrypted version at port 465

TCP/993

IMAPS - Secure Internet Message Access Protocol

TCP/995

POP3S - Secure Post Office Protocol

TCP/80

HTTP - Unencrypted

TCP/443

HTTPS - Encrypted

TCP/8080

HTTP Alt - Common Alternate Port

TCP+UDP/53

DNS - Domain Name Resolution, resolves domain names to IP addresses

UDP/123

NTP - Network Time Protocol, ensures logs are correctly synchronized

TCP/389

LDAP - Unencrypted Directory Queries

TCP/636

LDAPS - Encrypted LDAP, queries using TLS encryption

UDP/161

SNMP (Simple Network Management Protocol) - Poll/Query Devices

UDP/162

SNMP Trap (Simple Network Management Protocol Trap) - Alerts the Manager

UDP/514

Syslog - Log Forwarding to SIEM

TCP/445

SMB (Server Message Block) - Allows windows devices to share files, printers, and serial ports

TCP/3389

RDP - Remote Desktop Protocol, common attack target

TCP/1433

Defaults Microsoft SQL Server port for connections and queries

TCP/3306

Default MySQL port for client connections, data queries, and administration

TCP+UDP/5060

SIP(Session Initiation Protocol) - Unencrypted VoIP signaling

TCP+UDP/5061

Encrypted Session Initiation Protocol over TLS/Transport Layer Security

UDP/67

DHCP Server - Listens for incoming network requests and Assigns IP Addresses

UDP/68

DHCP Client - Broadcasts discovery messages and Receives IP Address