QNAP NAS Port Reference Guide (2025 Edition)

For users looking to secure and configure their QNAP NAS correctly, understanding the many system and application ports is crucial. Below is a consolidated and sorted list of known ports used by QNAP services, apps, and protocols as of 2025. This guide is ideal for users setting up firewalls, VPN tunnels, or remote access via Tailscale, WireGuard, or QuWAN.

Important: Ports such as 5000 (HTTP) and 5001 (HTTPS) used for WebDAV should always be changed or secured, especially if port forwarding is involved. If remote access is required, VPN-based solutions like Tailscale or QNAP QVPN (WireGuard/OpenVPN) are highly recommended.

System Management & Web Access

21    TCP    FTP/FTPES
22    TCP    SSH/SFTP Server
25    TCP    SMTP
53    TCP/UDP    DNS Server
67-68    TCP/UDP    DHCP/DNS Server
69    UDP    TFTP
80    TCP    Web Server (HTTP)
111    TCP/UDP    NFS
137-139    UDP    NetBIOS/SAMBA
443    TCP    NAS Web (HTTPS), Qsync, Virtualization Station 4 Web (HTTPS)
443    UDP    QVPN (QBelt Server)
445    TCP    SMB
514    TCP/UDP    Syslog
548    TCP    AFP
873    TCP    Rsync
874-875    TCP/UDP    SnapSync (QuTS Hero)
1194    UDP    QVPN (OpenVPN)
1514    TCP/UDP    QuLog Center
1645-1646    UDP    Radius Server
1701    UDP    QVPN (L2TP/IPSec Server)
1723    TCP    QVPN (PPTP Server)
1812-1813    UDP    Radius Server
2049    TCP/UDP    NFS (dynamic)
2376    TCP    Container Station
3128    TCP    Proxy Server
3260    TCP    iSCSI
3306-3310    TCP    MariaDB / MySQL
38898-38899    TCP    RTRR
4222    TCP    AMIZcloud Agent
4500    UDP    QVPN (L2TP/IPSec Server), QuWAN NAT-T
500    UDP    QVPN / QuWAN IPsec
5000    TCP    WebDAV (Change this!)
5001    TCP    WebDAV Secure (Change this!)
5002-5005    TCP    AMIZcloud Agent
5027-5029    TCP    Qsirch
5100-5300    TCP    AMIZcloud Agent
5300    TCP    AMIZcloud Agent
6443    TCP    Container Station
6600-6623    TCP/UDP    Q'center Server / Client NAS
6681-6999    TCP/UDP    BitTorrent / Download Station
7788    TCP    QuWAN Hub-to-Edge Connections
8080    TCP/UDP    System Web / Download / File Manager / Multimedia / Music / Virtualization Station
8081    TCP    Web Server (HTTPS Alt)
8088-8089    TCP    Virtualization Station 3 Web (HTTP/HTTPS)
8097    UDP    Qfinder Pro
8825-8832    TCP    AMIZcloud Agent
8899    TCP    RTRR
9000    TCP/UDP    Twonkymedia
9045-9049    TCP    Boxafe
10100-11299    TCP    QVR Pro
13131    TCP    Telnet (deprecated – disable if not in use)
16500-16550    TCP    VM Live Migration
2376    TCP    Docker (Container Station)
3306-3310    TCP    MariaDB / MySQL
38000-42100    TCP    QVR Pro
49152    TCP/UDP    UPnP IGD Daemon
50052-50054    TCP    QuMagie
51820    UDP    QVPN (WireGuard Server)
61000-62000    TCP    Container Station

Best Practices for Security

• Change default ports: Especially 5000/5001 used by WebDAV.
• Disable Telnet: Port 13131 should be turned off unless explicitly required.
• Avoid opening ports unless necessary: If remote access is needed, consider using Tailscale, OpenVPN, or WireGuard instead of exposing ports.
• Use Access Control + Firewalls: Limit traffic to necessary IPs and services.
• Keep firmware updated: Many vulnerabilities are fixed silently with QNAP updates.

Credits
Thanks to Chris Hicks (APAC Director, SVS) for compiling, cleaning, and organizing this list. If you’d like to contribute additional data or corrections, feel free to get in touch at NASCompares.com/contact.

Where to Buy a Product
			VISIT RETAILER ➤
			VISIT RETAILER ➤
			VISIT RETAILER ➤
			VISIT RETAILER ➤

☕ WE LOVE COFFEE ☕

Or support us by using our affiliate links on Amazon UK and Amazon US