whatportis.com
suggest an edit →

Port 20FTP Data Transfer

Port 20 is primarily used as the data channel within the File Transfer Protocol (FTP), responsible for the actual transfer of files between client and server. Typically used alongside port 21, which handles control commands, this port facilitates unencrypted file transfers across networks, making it a fundamental component in traditional file sharing and server communication..

inFile TransferNetwork Services
transport
tcp

single transport

in transit
cleartext

payload readable on path

assignment
official

registered with iana

risk
3/10

caution

lookups
12,122

rank 324 of 993 · top 33%

Technical Details

what runs on :20

Port 20 operates as the default data channel in active mode FTP sessions. When an FTP client requests or sends a file, the server establishes a connection from its port 20 back to an ephemeral port on the client to facilitate data transfer. This usage alongside port 21 allows FTP to separate command exchange from data exchange, optimizing connection control and throughput.

In traditional network configurations, port 20 typically initiates outbound connections for data transmission after the client establishes the control connection on port 21. This design leverages the TCP protocol to ensure reliable, ordered delivery of files. Because port 20 is used for the file contents themselves, it handles potentially large data streams, emphasizing the need for both bandwidth considerations and proper flow control.

Modern implementations sometimes employ passive mode, where the client initiates both data and command connections, often avoiding restrictive firewall issues. However, regardless of mode, port 20 remains a core identifier for FTP data transfer sessions and is deeply ingrained in legacy file transfer systems.

Security Information

exposure of :20

risk score

3/ 10caution

worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.

file transfer averages 4.1 across 114 ports — this one sits 1.1 below.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp

every listening transport is another surface to filter at the edge

security overview

FTP data transfer over port 20 commonly faces security vulnerabilities, primarily due to its lack of encryption. Because FTP transmits data in plaintext, sensitive information—including file contents and sometimes command data—can be intercepted easily via network sniffing. This exposure also opens possibilities for session hijacking, man-in-the-middle attacks, and unauthorized data modification during transit.

Additional vulnerabilities stem from improper server configuration, permitting unauthorized or anonymous logins that may lead to data exfiltration. Since port 20 connects outward from the server, it can also be exploited for data exfiltration attacks if an intruder gains access.

To mitigate these risks, organizations should disable unencrypted FTP where possible or replace it with secure alternatives such as FTPS (FTP Secure) or SFTP (SSH File Transfer Protocol). Implementing network segmentation and strict firewall rules to limit FTP use to authorized clients helps reduce attack surfaces. Employing intrusion detection and regularly updating server software to address known vulnerabilities further reinforces security posture.

Related Ports

all 114 in file transfer →

the 8 most looked-up other ports in file transfer — 114 ports carry that label.

portservicerisk
:9080Groove RPCcaution
:17500Dropbox LAN Synccaution
:548Apple Filing Protocolcaution
:7000Vuze HTTPS Trackercaution
:1337PowerFolder P2Pcaution
:9001SharePoint Authoringcaution
:8080FilePhile Relaycaution
:1337WASTE Encrypted Sharingcaution

risk mix of the 8 listed

  • caution100%

1 of 8 encrypted