Understanding common network ports and protocols is fundamental for network security. Each port represents a potential entry point for attackers.
Critical Ports
- SSH (22): Secure Shell for encrypted remote access. Always use key-based authentication.
- HTTP/HTTPS (80/443): Web traffic. Always redirect HTTP to HTTPS.
- DNS (53): Can be used for data exfiltration and C2 communication.
- RDP (3389): Frequently targeted for brute force attacks. Restrict access strictly.
- SMB (445): Used by ransomware like WannaCry. Never expose to the internet.
Security Best Practices
- Only expose necessary ports
- Use firewalls to restrict access
- Monitor port activity
- Disable unused services