Port 123: NTP

Port 123 (UDP) is used by NTP. Expose it only when required, with encryption and strong authentication, ideally limited to known IP addresses.

Updated

Port123
ProtocolUDP
ServiceNTP
Internet exposureOpen only if you need it

Port 123 is UDP-only, so the TCP-based Port Checker can’t test it. Use the local commands below.

What is port 123 used for?

Network Time Protocol: keeps clocks in sync.

Should port 123 be open?

Open only if you need it. Expose it only when required, with encryption and strong authentication, ideally limited to known IP addresses. Misconfigured NTP servers have been abused for DDoS amplification, so only answer queries you intend to.

See what is listening on port 123

# Linux
sudo ss -ulnp | grep ':123 '

# macOS
sudo lsof -nP -i UDP:123

# Windows (PowerShell)
Get-NetUDPEndpoint -LocalPort 123

Open or block port 123 in a firewall

# Ubuntu / Debian (ufw)
sudo ufw allow 123/udp
sudo ufw deny 123/udp

# Windows (PowerShell, as administrator)
New-NetFirewallRule -DisplayName "Port 123" -Direction Inbound -Protocol UDP -LocalPort 123 -Action Allow

On cloud servers, also open the port in the provider’s security group or network firewall. At home, a service behind a router needs a port-forwarding rule to the device’s local IP.

Port CheckerTest whether a server accepts connections on specific ports — web (80/443), mail (25/587/993), SSH, databases or remote desktop — and see which are open, closed or filtered by a firewall.
Open the tool

Frequently asked questions

What is port 123?
Network Time Protocol: keeps clocks in sync.
Is it safe to open port 123?
Open only if you need it. Expose it only when required, with encryption and strong authentication, ideally limited to known IP addresses.
How do I check if port 123 is open?
Port 123 uses UDP, which a TCP check can’t test. On the server, run ss -ulnp (Linux) or Get-NetUDPEndpoint (Windows) to see if something listens.