25 Network Ports You Need to Know for Technical Interviews

Because it tests your understanding of:

• Which services run on which ports
• The difference between TCP and UDP
• How to troubleshoot connectivity issues
• Security implications of open ports

You’ll often hear questions like:

• What port does SSH use?
• How do you check for open ports in Linux?
• Can you explain the difference between ports 80 and 443?

The Top 25 Ports You Must Know (With Descriptions)

Let’s go over the most common ports you’ll see in interviews and when working with real systems.

Quick Tip: Just remember these four ports: 20/21 for FTP, 22 for SSH, 80 for HTTP, and 443 for HTTPS – these are the most important ones to know.

Port Categories to Make Life Easier

Instead of memorizing all ports randomly, group them:

How to Check Open Ports on a Linux System

Let’s take a closer look at how to check open ports on a Linux system using a command such as ss, netstat, and nmap.

1. Using ss (Modern and Fast)

The ss command (short for socket statistics) is a modern replacement for the older netstat command. It’s designed to be faster and more efficient for listing open ports and network connections.

sudo netstat -tulpn

Explanation of the command:

• -t: Shows TCP sockets.
• -u: Shows UDP sockets.
• -l: Displays only listening sockets (ports that are open and waiting for incoming connections).
• -p: Shows the process that owns the socket (i.e., which application is using the port).
• -n: Displays port numbers in numeric form (avoiding the need to resolve them to service names).

2. Using netstat (Older but Still Common)

The netstat is a legacy command that was widely used before ss gained popularity. It still exists on most Linux distributions and can be useful in situations where ss might not be available, or when you are working with older systems.

sudo netstat -tulpn

Explanation of the command:

• -t: Displays TCP sockets.
• -u: Displays UDP sockets.
• -l: Shows only listening ports (no established connections).
• -p: Shows the process ID (PID) and the name of the program using the socket.
• -n: Outputs numerical addresses and ports (instead of resolving them to service names like “http“).

3. Scanning with nmap

The nmap (Network Mapper) is a powerful tool primarily used for network exploration and security auditing. It can be used to scan your own system or any remote system to find open ports.

Unlike ss and netstat, nmap is usually used for more detailed network scanning and can provide information about external systems as well.

nmap -sT localhost

Explanation of the command:

• -sT: It tries to make a full connection to each port and checks which ones respond.
• localhost: Refers to the local machine you want to scan. You can replace localhost with any IP address to scan remote systems.

Security Tip: Why Knowing Ports Helps You Stay Safe

Attackers often use port scanning techniques to identify open ports and find services that may be vulnerable. Understanding which ports are exposed on your system is essential for maintaining security.

Here are a few examples of risks associated with commonly open ports:

• Port 23 (Telnet): If this port is open, your system could be vulnerable to attacks, as Telnet transmits data, including passwords, in plain text.
• Port 445 (SMB): This port is often targeted by ransomware and other malware, and leaving it open can give attackers access to sensitive files and resources across your network.

As a Linux or DevOps engineer, it’s your responsibility to proactively secure your system. Here are key strategies to mitigate risks:

• Close Unused Ports: Keep only the necessary ports open. If a service isn’t being used, it’s safer to close that port.
• Use Firewalls: Configure firewalls like ufw (Uncomplicated Firewall) or firewalld to restrict which ports can be accessed, ensuring that only authorized traffic reaches your system.
• Secure Exposed Services with Encryption: For services that need to be accessible, such as SSH or HTTPS, always enforce encryption to protect data in transit from potential eavesdropping.

To block traffic on port 23 (Telnet), use ufw:

sudo ufw deny 23

To deny traffic on port 23 (Telnet), use firewalld:

sudo firewall-cmd --zone=public --add-port=23/tcp --permanent --remove-port=23/tcp

By understanding ports and properly securing them, you minimize the attack surface of your systems, enhancing both their security and performance.

Final Thoughts

Understanding port numbers isn’t just about memorizing them, it’s about knowing how services communicate in Linux and on networks. Once you understand the basics, you’ll be better at troubleshooting, securing your systems, and passing technical interviews.