Skip to main content
Port presets define which ports get scanned in each mode. Instead of testing all 65,535 possible ports, each preset covers a selection of ports ranked by how often they appear open on internet-facing systems. Larger presets mean better coverage but longer scan times.

Tools using port presets

TCP and UDP use separate port lists. TCP lists prioritize web (80, 443), SSH (22), and database ports. UDP lists prioritize DNS (53), DHCP (67-68), SNMP (161-162), and NTP (123).

TCP port lists

Light and Deep fixed presets

Port Scanner and Network Scanner Light and Deep scans use fixed TCP port lists.
Network Scanner Deep uses this same list plus ports 4280 and 5013.

Custom presets

These presets are available in Custom scan mode for Port Scanner, Network Scanner, SSL/TLS Scanner, and Sniper. Password Auditor uses the Top 100 list by default.
Sniper supports Top 100, Top 1000, and Top 5000. It does not support the Top 10 preset.
Default port list for Password Auditor.

OpenVAS default (Network Scanner only)

The OpenVAS default preset is only available when the OpenVAS engine is selected in Network Scanner Custom mode.

Kubernetes Scanner port lists

The Kubernetes Scanner uses K8s-specific port lists across all presets. These differ from the general TCP custom presets above.

UDP port lists

Available for Port Scanner and Network Scanner. Port Scanner Light uses the UDP Top 100 list; Port Scanner Deep uses the UDP Top 1000 list.