What is port 1521 used for?
The Oracle TNS listener.
Should port 1521 be open?
Don’t expose to the internet. Keep this port on private networks and reach it through a VPN or SSH tunnel. Keep database listeners on private networks only.
See what is listening on port 1521
# Linux
sudo ss -tlnp | grep ':1521 '
# macOS
sudo lsof -nP -i TCP:1521 -sTCP:LISTEN
# Windows (PowerShell)
Get-NetTCPConnection -LocalPort 1521 -State Listen
Open or block port 1521 in a firewall
# Ubuntu / Debian (ufw)
sudo ufw allow 1521/tcp
sudo ufw deny 1521/tcp
# Windows (PowerShell, as administrator)
New-NetFirewallRule -DisplayName "Port 1521" -Direction Inbound -Protocol TCP -LocalPort 1521 -Action Allow
On cloud servers, also open the port in the provider’s security group or network firewall. At home, a service behind a router needs a port-forwarding rule to the device’s local IP.
Test it from outside
A port can be open on the server but blocked upstream. The Port Checker connects from the internet, so it shows what the world sees. From your own machine, use nc -vz example.com 1521 (macOS/Linux) or Test-NetConnection example.com -Port 1521 (Windows).