CyberHunter
LinkedIn profile - Bastien Cordier Email: contact@bastiencordier.pro
// Gaming

Port 25565: Minecraft

Default Minecraft Java Edition server port.

25565

How Minecraft works

Gaming
playergame serverposition, input, state × 60 / s playerserver60 updates / s

The game client and server exchange small updates many times per second over port 25565. It travels in clear text: anyone on the path can read it.

Transport
TCP
Exposure risk
3/10 moderate if reachable from the Internet
Encryption
Clear textreadable on the network
IANA status
Unassignedcommon use differs from the registry
Range
Registered (1024-49151)
Category
Gaming
01 Security

Is port 25565 dangerous?

Common attacks and weaknesses

  • Server-side plugin vulnerabilities (Log4Shell hit Minecraft first).
  • DDoS.

How to secure it

  • Keep the server and plugins updated; enable online-mode and a whitelist.

Unofficial use. The IANA assignment below differs from what is usually found on this port in practice.

02 Registry

IANA registry entries for port 25565

No entry. The port is free for any application, so check what uses it on your hosts.

// source: IANA service name and port number registry

03 Check it

Which program uses port 25565, and is it reachable?

Linux

sudo ss -ltnup 'sport = :25565'      # process listening on 25565
sudo lsof -nP -i :25565

macOS

sudo lsof -nP -i :25565

Windows (PowerShell)

Get-NetTCPConnection -LocalPort 25565 -State Listen | Select LocalAddress, OwningProcess
Get-NetUDPEndpoint -LocalPort 25565
netstat -ano | findstr :25565

From another machine

nmap -p 25565 -sV <host>
nc -zv <host> 25565

Block it in the firewall

sudo ufw deny 25565/tcp                                         # Linux (ufw)
New-NetFirewallRule -DisplayName "Block 25565" -Direction Inbound -LocalPort 25565 -Protocol TCP -Action Block  # Windows
04 FAQ
What is port 25565 used for?

Default Minecraft Java Edition server port.

Is port 25565 TCP or UDP?

Port 25565 is registered for TCP.

Is it safe to open port 25565?

It is rated 3/10 (moderate) when exposed to the Internet. Server-side plugin vulnerabilities (Log4Shell hit Minecraft first). Keep the server and plugins updated; enable online-mode and a whitelist.

How do I check if port 25565 is open?

On Linux run "ss -ltnup 'sport = :25565'", on macOS "lsof -nP -i :25565", and on Windows "netstat -ano | findstr :25565" to see the local process. From another machine, "nmap -p 25565 <host>" shows whether it is reachable.

05 Related
:27015 Steam / Source engine udp · tcp · moderate risk :666 doom Id Software tcp · udp :1926 Evolution Game Server tcp · udp :2346 Game Connection Port tcp · udp :2347 Game Announcement and Location tcp · udp :2348 Information to query for game status tcp · udp :2914 Game Lobby tcp · udp :3074 Xbox game port tcp · udp

Latest vulnerability news

All news