Security · 2026-02-14

Common Ports Every Beginner Should Know

Ports help identify which service traffic is trying to reach. Recognizing common ports makes packet captures and scan results easier to read.

Useful ports

• 22: SSH for remote terminal access.
• 53: DNS name resolution.
• 80: HTTP web traffic.
• 443: HTTPS encrypted web traffic.
• 25, 587, 993: common email-related ports.

Why ports exist

An IP address identifies a host, but a port identifies a service on that host. A single server can run a web service, SSH service, and DNS service at the same time because each service listens on a different port.

When a client connects to a website over HTTPS, it usually connects to TCP port 443. When an administrator connects with SSH, the destination is usually TCP port 22. The port helps the operating system deliver the traffic to the right application.

Security meaning

An open port is not automatically bad. It means a service may be reachable. The security question is whether that service is expected, updated, configured safely, and exposed only where needed.

How I review open ports

1. Identify the port number and protocol.
2. Map it to the likely service.
3. Ask whether that service should be exposed.
4. Check whether access should be limited by firewall rules.
5. Document the reason the port is open.

Practice

When I run a scan in my own lab, I write down each open port, the likely service, and whether I expected it. That habit turns a port list into useful documentation.