Port 20 (FTP-DATA)

What is Port 20?

Port 20 is used by FTP (File Transfer Protocol) for data transfer. While port 21 handles FTP control commands and session management, port 20 is specifically designated for the actual file data stream in active mode FTP connections.

In active mode FTP, the server initiates the data connection from its port 20 to the client's specified port. This design dates back to the original FTP specification in RFC 959. Modern FTP implementations often use passive mode instead, where the client initiates data connections to a random high port on the server.

FTP data transfer on port 20 is unencrypted by default, meaning file contents are transmitted in plain text. For secure file transfers, SFTP (port 22) or FTPS with TLS encryption should be used instead.

Port 20 Security

FTP-DATA on port 20 should be secured with appropriate access controls and monitoring. Ensure the service is only accessible from trusted networks by configuring firewall rules to restrict access. If the protocol supports encryption, enable TLS/SSL to protect data in transit.

Regularly update FTP-DATA to the latest version to patch known vulnerabilities. Monitor port 20 for unauthorized access attempts and implement rate limiting where possible. Follow the principle of least privilege when configuring access permissions.

How to Check Port 20

To check if port 20 is open on a remote host, use nmap: 'nmap -p 20 hostname'. For a quick TCP connection test, use: 'telnet hostname 20' or 'nc -zv hostname 20'. On Windows PowerShell, use: 'Test-NetConnection -ComputerName hostname -Port 20'.

To check if port 20 is listening on your local machine, use: 'netstat -tlnp | grep 20' on Linux, or 'ss -tlnp | grep 20'. On Windows, use: 'netstat -an | findstr 20'. For a comprehensive scan, use: 'nmap -sV -p 20 hostname' to detect the service version running on the port.

Related Ports

🔍 Check Your IP Address

While you're here, find out your public IP address, location, and ISP details instantly.