Toolman 100% local

What port does RDP use?

RDP uses port 3389 over TCP.

PortProtocolNameWhat it is for
3389TCPRDPWindows Remote Desktop.

What catches people out

A primary ransomware entry vector. Put it behind a VPN, require network level authentication, and never expose it directly.

Checking it is listening

sudo lsof -i :3389          # macOS, Linux
netstat -ano | findstr :3389   # Windows
nc -zv host 3389              # from elsewhere

An "address already in use" error on a port nothing appears to be holding usually means the socket is in TIME_WAIT rather than that a process has it — the ports reference covers that and the ephemeral range.

Frequently asked questions

What port does RDP use?

RDP uses port 3389 over TCP. Windows Remote Desktop.

What should I watch out for with port 3389?

A primary ransomware entry vector. Put it behind a VPN, require network level authentication, and never expose it directly.

How do I check whether RDP is listening?

sudo lsof -i :3389 on macOS or Linux, netstat -ano | findstr :3389 on Windows. From another machine, nc -zv host 3389 says whether anything answers.

Other services

Port 3389 in full · Every service · All port numbers