Status: Updated through I2P 2.10.0 (October 2025). This list consolidates all active, deprecated, and reserved ports used by the I2P Java Router, i2pd, and related plugins. All ports are listed in numeric order for consistency.
| Port | Service / Component | Description | Notes |
|---|---|---|---|
| 123 | SNTP | Network time synchronization | Uses external NTP servers; required for accurate LeaseSet timestamps. |
| 2827 | BOB interface | Legacy client API bridge | Deprecated; disabled by default. |
| 4444 | HTTP Proxy | Standard web proxy for eepsite browsing | Default for both HTTP and HTTPS browser traffic. |
| 4445 | HTTPS Proxy | Dedicated SSL/TLS proxy | Optional; often redundant with 4444. |
| 6667–6669 | IRC Proxy | Access to I2P IRC networks | Default = 6668; alternate ports avoid conflicts. |
| 7650 | I2PControl Plugin | JSON‑RPC management API | Auth required; default password itoopie. |
| 7652 | UPnP HTTP events | UPnP control interface | Supports automatic port forwarding. |
| 7653 | UPnP SSDP responses | UPnP discovery | UDP response listener for device search. |
| 7654 | I2CP | Core application API | Used by Java apps and i2pd for router integration. |
| 7655 | SAM Datagram | UDP bridge for SAM API | SAM v3 support for real‑time apps. |
| 7656 | SAM Stream | TCP bridge for SAM API | Primary non‑Java application interface. |
| 7657 | Router Console (HTTP) | Web admin interface | Loopback‑only by default (127.0.0.1). |
| 7658 | Eepsite | Default web server for I2PTunnel | Used for locally hosted services. |
| 7659 | SMTP Proxy | Outgoing mail via I2P‑Bote | Bridges standard email clients. |
| 7660 | POP3 Proxy | Incoming mail via I2P‑Bote | Serverless email retrieval. |
| 7661 | I2PBote SMTP / Pebble Blog | Plugin dual‑use port | Rarely conflicts since plugins don’t co‑install. |
| 7662 | I2PBote IMAP / Zzzot Tracker | Plugin dual‑use port | Used by Zzzot for BitTorrent tracking. |
| 7663 | — | Reserved for future plugins | Unused as of 2.10.0. |
| 7664 | JAMWiki Plugin | Wiki platform for I2P sites | Optional plugin. |
| 7667 | Router Console (HTTPS) | Secure web admin interface | Self‑signed cert by default. |
| 7672 | Railroad Plugin | Plugin port reservation | Last documented plugin port in series. |
| 7644 | Browser Mode Proxy | HTTP proxy for I2P Browser Bundle | Used when running Browser mode alongside router. |
| 7647 | Browser Mode Console | Router console for I2P Browser Bundle | Avoids conflict with 7657. |
| 8002 | I2PSnark Web UI (HTTP) | BitTorrent client UI | Integrated in router console. |
| 8003 | I2PSnark Web UI (HTTPS) | BitTorrent client UI (SSL) | Optional secure mode. |
| 8887 | Router Network Port (Legacy) | Old default for peer connections | Replaced by randomized 9151–30777 range. |
| 8118 | Privoxy (Reserved) | External web proxy integration | Not part of core I2P; reserved for compatibility. |
| 8123 | Polipo (Reserved) | Alternate proxy integration | Legacy Tor proxy compatibility. |
| 8888 | Freenet (Reserved) | Anonymous network port | Prevents conflicts on privacy nodes. |
| 9050–9053 | Tor SOCKS (Reserved) | Tor proxy range for co‑installation | Avoids conflicts with I2P. |
| 9150–9153 | Tor Browser SOCKS (Reserved) | Tor Browser integration | Reserved for cross‑tool coexistence. |
| 9151–30777 | Router Network Port (Random) | Active TCP/UDP transport port | Randomized per install for anti‑fingerprinting. |
| 1488 / 1776 | XD BitTorrent Client | Standalone I2P torrent client | Alternate to I2PSnark. |
| 31000–32000 | Java Service Wrapper | Router process management | Handles service control and restart. |
| 3456 / 3458 / 3459 | Tahoe‑LAFS Plugin | Decentralized file storage | Optional third‑party plugin. |
| 4691 / 8997–8999 | Monotone Version Control | Distributed VCS support | Historical usage for developer tools. |
| 7070 | i2pd Console | Web console for C++ implementation | Equivalent to Java router console. |
| 767x | Plugin Range (General) | Recommended port block for plugins | Developers start from 7672 upward. |
| 11371 | SKS/GPG Key Server (Reserved) | Key distribution service | Used for PGP/GPG over I2P. |
Implementation Notes
- All ports below 9000 (except 8887) bind to 127.0.0.1 by default for security.
- The router network port (9151–30777) must be open to the internet for full participation.
- i2pd uses mostly the same assignments for compatibility (7070 console, 7654 I2CP, 7656/7655 SAM).
- Plugin developers should coordinate new assignments through the I2P community to avoid conflicts.