- Bind the service to localhost or a private network, never to a public address.
- Enable authentication, use per-application accounts and require TLS.
- Watch for exposed Docker ports: publish them on 127.0.0.1 only.
Databases & caches ports
SQL and NoSQL databases, search engines and caches. 123 ports, most common first.
| Port | Service | Transport | Risk | Encryption |
|---|---|---|---|---|
| 3306 | MySQL / MariaDB mysql | TCP UDP | 8/10 high | optional |
| 1433 | Microsoft SQL Server ms-sql-s | TCP UDP | 8/10 high | optional |
| 5432 | PostgreSQL postgresql | TCP UDP | 8/10 high | optional |
| 6379 | Redis redis | TCP | 9/10 critical | optional |
| 27017 | MongoDB mongodb | TCP | 9/10 critical | optional |
| 9200 | Elasticsearch wap-wsp | TCP UDP | 9/10 critical | optional |
| 1521 | Oracle Database ncube-lm | TCP UDP | 8/10 high | optional |
| 11211 | Memcached memcache | TCP UDP | 8/10 high | no |
| 5984 | CouchDB couchdb | TCP UDP | 8/10 high | no |
| 9042 | Cassandra | TCP | 7/10 high | optional |
| 8086 | InfluxDB d-s-n | TCP UDP | 7/10 high | no |
| 65 | TACACS-Database Service tacacs-ds | TCP UDP | - | - |
| 66 | Oracle SQL*NET IANA assigned this well-formed service name as a replacement for "sql*net". sql-net, sql*net | TCP UDP | - | - |
| 118 | SQL Services sqlserv | TCP UDP | - | - |
| 134 | INGRES-NET Service ingres-net | TCP UDP | - | - |
| 150 | SQL-NET sql-net | TCP UDP | - | - |
| 156 | SQL Service sqlsrv | TCP UDP | - | - |
| 217 | dBASE Unix dbase | TCP UDP | - | - |
| 400 | Oracle Secure Backup osb-sd | TCP UDP | - | - |
| 446 | DDM-Remote Relational Database Access ddm-rdb | TCP UDP | - | - |
| 448 | DDM-Remote DB Access Using Secure Sockets ddm-ssl | TCP UDP | - | - |
| 523 | IBM-DB2 ibm-db2 | TCP UDP | - | - |
| 635 | RLZ DBase rlzdbase | TCP UDP | - | - |
| 1114 | Mini SQL mini-sql | TCP UDP | - | - |
| 1157 | Oracle iASControl iascontrol | TCP UDP | - | - |
| 1159 | Oracle OMS oracle-oms | TCP UDP | - | - |
| 1160 | DB Lite Mult-User Server olsv | TCP UDP | - | - |
| 1186 | MySQL Cluster Manager mysql-cluster | TCP UDP | - | - |
| 1201 | Nucleus Sand Database Server nucleus-sand | TCP UDP | - | - |
| 1388 | Objective Solutions DataBase Cache objective-dbc | TCP UDP | - | - |
| 1434 | Microsoft-SQL-Monitor ms-sql-m | TCP UDP | - | - |
| 1498 | Sybase SQL Any sybase-sqlany | TCP UDP | - | - |
| 1524 | ingres ingreslock | TCP UDP | - | - |
| 1525 | oracle orasrv, prospero-np | TCP UDP | - | - |
| 1527 | oracle tlisrv | TCP UDP | - | - |
| 1529 | oracle coauthor | TCP UDP | - | - |
| 1551 | HECMTL-DB hecmtl-db | TCP UDP | - | - |
| 1571 | Oracle Remote Data Base rdb-dbs-disp | TCP UDP | - | - |
| 1630 | Oracle Net8 Cman oraclenet8cman | TCP UDP | - | - |
| 1748 | oracle-em1 oracle-em1 | TCP UDP | - | - |
| 1754 | oracle-em2 oracle-em2 | TCP UDP | - | - |
| 1808 | Oracle-VP2 oracle-vp2 | TCP UDP | - | - |
| 1809 | Oracle-VP1 oracle-vp1 | TCP UDP | - | - |
| 1830 | Oracle Net8 CMan Admin net8-cman | TCP UDP | - | - |
| 1862 | MySQL Cluster Manager Agent mysql-cm-agent | TCP UDP | - | - |
| 2073 | DataReel Database Socket gxs-data-port | TCP UDP | - | - |
| 2273 | MySQL Instance Manager mysql-im | TCP UDP | - | - |
| 2278 | Simple Stacked Sequences Database s3db | TCP UDP | - | - |
| 2481 | Oracle GIOP giop | TCP UDP | - | - |
| 2482 | Oracle GIOP SSL giop-ssl | TCP UDP | - | - |
| 2483 | Oracle TTC ttc | TCP UDP | - | - |
| 2484 | Oracle TTC SSL ttc-ssl | TCP UDP | - | - |
| 2497 | Quad DB quaddb | TCP UDP | - | - |
| 2638 | Sybase Anywhere sybaseanywhere | TCP UDP | - | - |
| 2690 | HP NNM Embedded Database hp-nnm-data | TCP UDP | - | - |
| 2786 | aic-oncrpc - Destiny MCD database aic-oncrpc | TCP UDP | - | - |
| 3050 | gds_db gds_db, gds-db | TCP UDP | - | - |
| 3204 | Network Watcher DB Access netwatcher-db | TCP UDP | - | - |
| 3352 | Scalable SQL ssql | TCP UDP | - | - |
| 3355 | Ordinox Dbase ordinox-dbase | TCP UDP | - | - |
| 3584 | U-DBase Access Protocol u-dbap | TCP UDP | - | - |
| 3630 | C&S Remote Database Port cs-remote-db | TCP UDP | - | - |
| 3835 | Spectar Database Rights Service spectardb | TCP UDP | - | - |
| 3841 | ShipRush Database Server shiprush-db-svr | TCP | - | - |
| 3891 | Oracle RTC-PM port rtc-pm-port | TCP UDP | - | - |
| 3938 | Oracle dbControl Agent po dbcontrol_agent, dbcontrol-agent | TCP UDP | - | - |
| 3997 | aes_db agentsease-db | TCP UDP | - | - |
| 4135 | Classic Line Database Server Attach cl-db-attach | TCP UDP | - | - |
| 4136 | Classic Line Database Server Request cl-db-request | TCP UDP | - | - |
| 4137 | Classic Line Database Server Remote cl-db-remote | TCP UDP | - | - |
| 4427 | Drizzle database server drizzle | TCP | - | - |
| 4430 | REAL SQL Server rsqlserver | TCP UDP | - | - |
| 4550 | Perman I Interbase Server gds-adppiw-db | TCP UDP | - | - |
| 4570 | Service to distribute and update within a site deployment information for Oracle Communications Suite deploymentmap | TCP | - | - |
| 4900 | HFSQL Client/Server Database Engine hfcs | TCP UDP | - | - |
| 4950 | Sybase Server Monitor sybasesrvmon | TCP UDP | - | - |
| 4999 | HFSQL Client/Server Database Engine Manager hfcs-manager | TCP UDP | - | - |
| 5029 | Infobright Database Server infobright | TCP UDP | - | - |
| 5102 | Oracle OMS non-secure oms-nonsecure | TCP UDP | - | - |
| 5155 | Oracle asControl Agent asctrl-agent | TCP UDP | - | - |
| 5343 | Sculptor Database Server kfserver | TCP UDP | - | - |
| 5505 | Checkout Database checkoutdb | TCP UDP | - | - |
| 5575 | Oracle Access Protocol ora-oap | TCP | - | - |
| 5629 | Symantec Storage Foundation for Database symantec-sfdb | TCP UDP | - | - |
| 5636 | SFMdb - SFM DB server sfm-db-server | TCP | - | - |
| 5677 | Quest Central DB2 Launchr questdb2-lnchr | TCP UDP | - | - |
| 6100 | SynchroNet-db synchronet-db | TCP UDP | - | - |
| 6446 | MySQL Proxy mysql-proxy | TCP UDP | - | - |
| 6624 | DataScaler database datascaler-db | TCP | - | - |
| 6640 | Open vSwitch Database protocol ovsdb | TCP | - | - |
| 6789 | GSS-API for the Oracle Remote Administration Daemon radg | TCP | - | - |
| 7002 | users & groups database afs3-prserver | TCP UDP | - | - |
| 7003 | volume location database afs3-vlserver | TCP UDP | - | - |
| 7168 | cncKadServer DB & Inventory Services cnckadserver | TCP | - | - |
| 7443 | Oracle Application Server HTTPS oracleas-https | TCP UDP | - | - |
| 7474 | Neo4j Graph Database neo4j | TCP | - | - |
| 7574 | Oracle Coherence Cluster Service coherence, coherence-disc | TCP UDP | - | - |
| 7687 | Bolt database connection bolt | TCP | - | - |
| 7981 | Spotlight on SQL Server Desktop Collect sossd-collect | TCP | - | - |
| 7982 | Spotlight on SQL Server Desktop Agent sossd-agent, sossd-disc | TCP UDP | - | - |
Securing databases & caches services
Other port categories
Web /tools/ports/category/web Remote access /tools/ports/category/remote-access File transfer & sharing /tools/ports/category/file-transfer Email /tools/ports/category/email Directory & authentication /tools/ports/category/directory-auth Network services /tools/ports/category/network-services VPN, tunnels & proxies /tools/ports/category/vpn-tunnels Messaging & queues /tools/ports/category/messaging Voice & chat /tools/ports/category/voice-chat Media & streaming /tools/ports/category/media IoT & industrial (ICS) /tools/ports/category/iot-ics DevOps, cloud & containers /tools/ports/category/devops Monitoring & logging /tools/ports/category/monitoring Gaming /tools/ports/category/gaming Other services /tools/ports/category/other