Port 143IMAP
Internet Message Access Protocol (IMAP) enables email clients to access, manage, and synchronize email messages stored on a remote mail server. Unlike older protocols like POP3, IMAP allows users to view their mailbox contents from multiple devices while keeping messages on the server, maintaining consistent state across platforms. IMAP supports functions such as folder management, message searching, selective download, and flagging, providing a comprehensive solution for modern email management as defined in RFC 3501..
- transport
- tcp · udp
- in transit
- cleartext
- assignment
- official
- risk
- 4/10
- lookups
- 20,665
2 transports registered
payload readable on path
registered with iana
caution
rank 116 of 993 · top 12%
Technical Details
what runs on :143Internet Message Access Protocol (IMAP), standardized primarily by RFC 3501, is a widely used protocol designed for retrieving and managing email messages stored on a mail server. Developed initially in the 1980s, it offers a sophisticated set of commands enabling clients to maintain complex folder hierarchies, perform searches, and download specific portions or attributes of messages, which reduces bandwidth consumption and improves responsiveness on limited connections.
IMAP operates primarily over TCP on port 143, enabling persistent bidirectional communication between the client and the server. A distinctive feature of IMAP compared to other email retrieval protocols such as POP3 is that it allows users to manipulate messages directly on the server rather than downloading and deleting them locally. This model supports consistent mailbox state across multiple devices, as users can read, flag, delete, or move messages with changes reflected globally. Clients often use IMAP in conjunction with SMTP (commonly on ports 25, 587, or 465) for outbound message submission.
The protocol supports advanced capabilities like folder management (create, delete, rename folders), message flag management (read/unread, answered, flagged), server-side searching, and partial message fetching. Especially in its modern version, IMAP4rev1, extensions enhance its capabilities, including support for idle notifications (push email), server-side sorting, quota management, and more. While IMAP natively transmits data in plaintext, it is generally paired with Transport Layer Security (TLS) to protect confidentiality and integrity during transit.
Security Information
exposure of :143risk score
4/ 10caution
worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.
email averages 3.9 across 42 ports — this one sits 0.1 above.
in transit
cleartext
credentials and payloads are readable by anyone on path
assignment
official
registered with iana for this service — scanners fingerprint it by number
reachable over
tcp · udp
udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite
security overview
Common vulnerabilities associated with IMAP include:
- Plaintext authentication and data transmission: Without TLS, IMAP credentials and email contents are exposed to interception.
- Brute-force attacks: Attackers may attempt to exploit weak or reused passwords.
- Authentication bypass and implementation flaws: Vulnerabilities in specific server implementations can allow attackers unauthorized access or privilege escalation.
- Resource exhaustion: Improperly configured servers may be susceptible to denial-of-service attacks exploiting connection or command resource limits.
To mitigate these risks:
- Enforce strong, complex password policies and employ multi-factor authentication when available.
- Require encrypted connections, utilizing IMAP over TLS (via STARTTLS or port 993 for IMAPS) to secure credential exchange and data transmission.
- Implement rate limiting and account lockouts to defend against brute-force attempts.
- Regularly update and patch mail server software to address discovered vulnerabilities.
- Restrict IP ranges or require VPNs for administrative or sensitive access.
- Monitor logs and suspicious activity, enabling rapid detection and response to potential compromise.
Related Ports
the 8 most looked-up other ports in email — 42 ports carry that label.
| port | service | risk | |||
|---|---|---|---|---|---|
| :995 | POP3S | TCPtls | caution | 18.8k | |
| :109 | POP2 | TCP | caution | 17.9k | |
| :2096 | cPanel SSL Webmail | TCPtls | Web Services | safe | 17.4k |
| :110 | POP3 | TCP | caution | 15.5k | |
| :993 | IMAPS | TCPtls | caution | 14.5k | |
| :1352 | Lotus Notes RPC | TCP | caution | 12.3k | |
| :24 | Private Mail | TCPUDP | caution | 11.7k | |
| :7025 | Zimbra LMTP | TCP | caution | 11.4k |
risk mix of the 8 listed
- safe13%
- caution88%
3 of 8 encrypted