25565/TCPMinecraft (Java Edition)
Game Server · Registered port · OSI layer 7
Default port for a Minecraft Java Edition server. Players connect via TCP.
IANA: commonly used, but unofficial (unassigned)
Look up and open a port
Port 25565: Open the Minecraft server port
Port 25565 is the default port for Minecraft Java Edition servers and uses TCP. This tool shows you the port details and generates firewall commands so players can reach your server.
Built by Justin Schuessler
Try the commands on your own VPS, with root access and your own firewall.
Add multiple ports one at a time, up to 12.
Or choose a preset
Ports
Firewall rule (inbound)
Firewall commands
Open port
sudo ufw allow 25565/tcpNotes on ufw
For Ubuntu and Debian. ufw creates the rule for both IPv4 and IPv6. If ufw is disabled, allow SSH first (sudo ufw allow 22/tcp), then enable it with sudo ufw enable, or you'll lock yourself out.
On a ZAP-Hosting VPS with an active network firewall, you also need to allow the port in the Customer Panel.
Port 25565 explained
What is port 25565 used for?
Purpose
Minecraft Java Edition clients connect to a server over port 25565, whether it runs Vanilla, Paper, Spigot, or a Modpack with Forge or Fabric. If a player enters only the server address without a port, the client automatically tries 25565. You set the port with server-port in server.properties. If you also enable enable-query there, the server responds to status queries over UDP, using port 25565 by default.
Origin and standard
Mojang set port 25565 as the default for Minecraft servers, making it the de facto standard. The port is not registered with IANA for Minecraft, but it falls within the registered port range of 1024 to 49151. Bedrock Edition for consoles, smartphones, and Windows uses a different protocol and defaults to port 19132 over UDP. Minecraft also offers optional RCON for remote administration, which listens on port 25575 over TCP by default.
Typical use
- Game connections to Minecraft Java Edition servers
- Servers running Paper, Spigot, Forge, Fabric, or Modpacks
- Proxy networks where only the proxy is externally reachable on 25565
- Status queries via enable-query over UDP for server lists and bots
Security
For players to reach your server, TCP port 25565 must be open; restricting it to specific IPs isn't practical. Instead, protect the server with a whitelist, enabled online-mode and up-to-date plugins. Don't expose RCON to the internet: anyone who guesses the RCON password can run arbitrary server commands. Keep RCON disabled or allow access to port 25575 only from your own IP. If you run a proxy network, the individual backend servers should only be reachable by the proxy.
More ports
Related ports
These ports are often part of the same setup. Click one to see its explanation and firewall commands.
View all well-known ports and the complete IANA list
Port list source: IANA Service Name and Transport Protocol Port Number Registry, as of October 22, 2026. iana.org
Discover more
More tools
Subnet Calculator
Calculate the network address, broadcast address, subnet mask, and usable host range from a CIDR address, and convert between CIDR and IP ranges (IPv4 and IPv6).
Built by Jakub Martyniak
OSI model
NewInteractively learn the 7 layers of the OSI model: click layers, assign terms such as switch, ARP, or port 443, and explore animated encapsulation, a quiz, and a cheat sheet for the IHK exam.
Built by Justin Schuessler
TCP/IP model
NewInteractively learn the 4 layers of the TCP/IP model (DoD model) according to RFC 1122, with OSI model mapping, animated encapsulation, a port quiz, and a cheat sheet.
Built by Justin Schuessler
Port Checker
Check whether specific ports are open on an IP or hostname—select a protocol or game instead of scanning all ports at once.
Built by Sebastian Rademacher
FAQ
Frequently asked questions
Quick answers about port 25565.
Minecraft Java Edition game connections use TCP. You only need UDP on port 25565 if you've enabled enable-query in server.properties. Bedrock Edition, by contrast, uses UDP on port 19132.
On Linux with ufw, sudo ufw allow 25565/tcp is enough. If you have enabled Query, also run sudo ufw allow 25565/udp. Then use the port checker to see whether the port is reachable from outside.
Yes. Change server-port in server.properties and allow the new port through the firewall. Players will then need to append the port to the address after a colon. You can spare them that step with a DNS SRV record, so they can connect using just the domain again.
No. You only need RCON for remote administration via a console or tool. If you use it, allow access to the port only from your own IP, for example with sudo ufw allow from 203.0.113.10 to any port 25575 proto tcp. A publicly accessible RCON port with a weak password is a common security risk.
Any more questions?
Contact SupportYour own server?
Try the commands on your own VPS
With a ZAP-Hosting VPS, you have root access, can set up services and firewall rules yourself, and can immediately see which ports are open.
4.4/5 Trustpilot32,000+ Active serversSince 2010
No setup. No risk. Online in seconds.
Flexible TermCancel anytimeOnline in 60 seconds
Looking for more tools? View all network tools