{"id":2485,"date":"2026-10-05T15:00:00","date_gmt":"2026-10-05T12:00:00","guid":{"rendered":"https:\/\/narhost.com\/destek\/?p=2485"},"modified":"2026-10-05T15:00:00","modified_gmt":"2026-10-05T12:00:00","slug":"linux-acik-portlari-gorme","status":"publish","type":"post","link":"https:\/\/narhost.com\/destek\/linux-acik-portlari-gorme\/","title":{"rendered":"Linux&#8217;ta A\u00e7\u0131k Portlar Nas\u0131l G\u00f6r\u00fcl\u00fcr (ss ve netstat)"},"content":{"rendered":"<p class=\"kb-dogrulama\">Son g\u00f6zden ge\u00e7irme: Eyl\u00fcl 2026 \u00b7 Ubuntu 24.04 resm\u00ee dok\u00fcman\u0131na g\u00f6re<\/p>\n<div id=\"hizli-cozum\" class=\"ai-box ai-box--cozum\">\n<p class=\"ai-box-title\">H\u0131zl\u0131 \u00e7\u00f6z\u00fcm<\/p>\n<p><strong>Linux a\u00e7\u0131k portlar\u0131 g\u00f6rme<\/strong> i\u015fi tek komutla yap\u0131l\u0131r: <code>sudo ss -tulpn<\/code> sunucuda dinleyen b\u00fct\u00fcn TCP ve UDP portlar\u0131n\u0131, dinlenen adresi ve portu a\u00e7an s\u00fcreci listeler.<\/p>\n<ol>\n<li><code>sudo ss -tulpn<\/code> komutunu \u00e7al\u0131\u015ft\u0131r\u0131n.<\/li>\n<li><strong>Local Address<\/strong> s\u00fctununa bak\u0131n: <code>0.0.0.0<\/code>, <code>[::]<\/code> ya da <code>*<\/code> d\u0131\u015far\u0131ya a\u00e7\u0131k, <code>127.0.0.1<\/code> yaln\u0131z sunucunun kendisine a\u00e7\u0131k demektir.<\/li>\n<li>Tan\u0131mad\u0131\u011f\u0131n\u0131z s\u00fcreci <code>systemctl<\/code> ile durdurup devre d\u0131\u015f\u0131 b\u0131rak\u0131n.<\/li>\n<li>Sonucu ba\u015fka bir bilgisayardan <code>nmap<\/code> ile, yaln\u0131z kendi sunucunuzu tarayarak do\u011frulay\u0131n.<\/li>\n<\/ol>\n<\/div>\n<table class=\"kb-uyg\">\n<tr>\n<th>Panel<\/th>\n<td>Yok \u2014 terminal (SSH)<\/td>\n<\/tr>\n<tr>\n<th>Sistem<\/th>\n<td>Ubuntu 22.04\/24.04, Debian 12, AlmaLinux 8\/9 (VPS\/VDS)<\/td>\n<\/tr>\n<tr>\n<th>Yetki<\/th>\n<td>root ya da sudo yetkili kullan\u0131c\u0131 (s\u00fcre\u00e7 ad\u0131n\u0131 g\u00f6rmek i\u00e7in)<\/td>\n<\/tr>\n<tr>\n<th>Narhost \u00fcr\u00fcn\u00fc<\/th>\n<td><a href=\"https:\/\/narhost.com\/vps-sunucu\" title=\"Narhost VPS Sunucu paketleri\">VPS Sunucu<\/a><\/td>\n<\/tr>\n<\/table>\n<div class=\"kb-once\">\n<p class=\"label\">Ba\u015flamadan \u00f6nce<\/p>\n<ul>\n<li>Sunucuya SSH ile ba\u011flanabiliyor olun; bkz. <a href=\"https:\/\/narhost.com\/destek\/sunucuya-ssh-ile-nasil-baglanilir\/\" title=\"SSH ile sunucuya nas\u0131l ba\u011flan\u0131l\u0131r \u2014 Narhost Destek\">SSH ile sunucuya ba\u011flanma<\/a>.<\/li>\n<li>Komutlar\u0131 <code>sudo<\/code> ile \u00e7al\u0131\u015ft\u0131r\u0131n; yetkisiz \u00e7al\u0131\u015ft\u0131r\u0131lan <code>ss<\/code> ba\u015fka kullan\u0131c\u0131lara ait s\u00fcre\u00e7lerin ad\u0131n\u0131 g\u00f6stermez.<\/li>\n<li>Bir servisi kapatmadan \u00f6nce ne i\u015fe yarad\u0131\u011f\u0131n\u0131 \u00f6\u011frenin. SSH portunu (22 ya da de\u011fi\u015ftirdi\u011finiz port) kapatmay\u0131n.<\/li>\n<\/ul>\n<\/div>\n<h2>Linux a\u00e7\u0131k portlar\u0131 g\u00f6rme neden gerekir<\/h2>\n<p>Narhost&#8217;ta VPS ve VDS \u00fcr\u00fcnleri y\u00f6netimsizdir: sunucuda hangi servisin \u00e7al\u0131\u015ft\u0131\u011f\u0131, hangi portun d\u0131\u015far\u0131ya a\u00e7\u0131k oldu\u011fu sizin karar\u0131n\u0131zd\u0131r. Kurdu\u011funuz her paket bir port a\u00e7abilir. MariaDB, Redis ya da bir Node.js uygulamas\u0131 yap\u0131land\u0131rmaya g\u00f6re yaln\u0131z sunucu i\u00e7ini de\u011fil b\u00fct\u00fcn a\u011f aray\u00fczlerini dinleyebilir; bu da internetteki taray\u0131c\u0131lar\u0131n o portu bulmas\u0131 demektir.<\/p>\n<p>G\u00fcncel da\u011f\u0131t\u0131mlarda bu i\u015f i\u00e7in <code>ss<\/code> kullan\u0131l\u0131r. <code>ss<\/code>, iproute2 paketinin par\u00e7as\u0131d\u0131r ve kurulu gelir. Eski <code>netstat<\/code> ise net-tools paketindedir; bir\u00e7ok g\u00fcncel sunucu kurulumunda varsay\u0131lan olarak yoktur. Se\u00e7enekler i\u00e7in <a href=\"https:\/\/man7.org\/linux\/man-pages\/man8\/ss.8.html\" title=\"ss(8) \u2014 Linux k\u0131lavuz sayfas\u0131, man7.org\" target=\"_blank\" rel=\"noopener\">ss k\u0131lavuz sayfas\u0131<\/a> esas al\u0131n\u0131r.<\/p>\n<figure class=\"nh-sema\"><img src=\"https:\/\/narhost.com\/destek\/wp-content\/uploads\/2026\/09\/linux-acik-portlari-gorme-sema-narhost.webp\" alt=\"Linux a\u00e7\u0131k portlar\u0131 g\u00f6rme ak\u0131\u015f \u015femas\u0131 \u2014 ss ile listeleme, adres okuma, d\u0131\u015far\u0131dan test ve servisi kapatma\" width=\"1200\" height=\"500\" loading=\"lazy\" decoding=\"async\"><figcaption>Port denetimi d\u00f6rt ad\u0131mda yap\u0131l\u0131r: dinleyen portlar\u0131 listeleyin, adresi okuyun, d\u0131\u015far\u0131dan do\u011frulay\u0131n, gereksiz servisi kapat\u0131n.<\/figcaption><\/figure>\n<h2>Ad\u0131m ad\u0131m a\u00e7\u0131k portlar\u0131 listeleme<\/h2>\n<ol class=\"kb-adimlar\">\n<li><strong>Dinleyen portlar\u0131 listeleyin.<\/strong><code>-t<\/code> TCP, <code>-u<\/code> UDP, <code>-l<\/code> yaln\u0131z dinleyenler, <code>-p<\/code> s\u00fcre\u00e7, <code>-n<\/code> port ad\u0131 yerine numara demektir.\n<pre><code class=\"language-bash\">sudo ss -tulpn<\/code><\/pre>\n<p class=\"kb-cikti\">Beklenen sonu\u00e7 (\u00f6rnek, k\u0131salt\u0131lm\u0131\u015f):<\/p>\n<pre><code>Netid State  Local Address:Port  Process\nudp   UNCONN 127.0.0.53%lo:53    users:((\"systemd-resolve\",pid=612,fd=13))\ntcp   LISTEN 127.0.0.1:3306      users:((\"mariadbd\",pid=1204,fd=20))\ntcp   LISTEN 0.0.0.0:80          users:((\"nginx\",pid=1300,fd=6))\ntcp   LISTEN [::]:80             users:((\"nginx\",pid=1300,fd=7))<\/code><\/pre>\n<\/li>\n<li><strong>Adres s\u00fctununu okuyun.<\/strong><code>0.0.0.0:80<\/code> ve <code>[::]:80<\/code> portun IPv4 ve IPv6&#8217;da b\u00fct\u00fcn aray\u00fczlere a\u00e7\u0131k oldu\u011funu g\u00f6sterir. <code>127.0.0.1:3306<\/code> ise veritaban\u0131n\u0131n yaln\u0131z sunucu i\u00e7inden eri\u015filebildi\u011fini g\u00f6sterir; uzaktan ba\u011flanm\u0131yorsan\u0131z do\u011fru ayar budur. Veritaban\u0131 <code>0.0.0.0:3306<\/code> dinliyorsa yap\u0131land\u0131rmadaki <code>bind-address<\/code> de\u011ferini <code>127.0.0.1<\/code> yap\u0131n.<\/li>\n<li><strong>Tek bir portu sorgulay\u0131n.<\/strong> Portu hangi s\u00fcrecin tuttu\u011funu g\u00f6rmek i\u00e7in filtre ya da <code>lsof<\/code> kullan\u0131n (<code>lsof<\/code> yoksa <code>sudo apt install lsof<\/code>).\n<pre><code class=\"language-bash\">sudo ss -tlnp 'sport = :80'\nsudo lsof -i :80 -P -n<\/code><\/pre>\n<p class=\"kb-cikti\">Beklenen sonu\u00e7: yaln\u0131z 80 numaral\u0131 porta ait sat\u0131rlar ve s\u00fcrecin ad\u0131 ile PID&#8217;si g\u00f6r\u00fcn\u00fcr.<\/p>\n<\/li>\n<li><strong>netstat al\u0131\u015fkanl\u0131\u011f\u0131n\u0131z varsa<\/strong> paketi kurup ayn\u0131 bayraklarla \u00e7al\u0131\u015ft\u0131rabilirsiniz; \u00e7\u0131kt\u0131 <code>ss<\/code> ile ayn\u0131 bilgiyi verir.\n<pre><code class=\"language-bash\">sudo apt install net-tools\nsudo netstat -tulpn<\/code><\/pre>\n<\/li>\n<li><strong>D\u0131\u015far\u0131dan test edin.<\/strong><code>ss<\/code> sunucunun neyi dinledi\u011fini g\u00f6sterir; g\u00fcvenlik duvar\u0131n\u0131n neyi ge\u00e7irdi\u011fini g\u00f6stermez. Kendi bilgisayar\u0131n\u0131zdan <code>nmap<\/code> ile sunucunuzu taray\u0131n.\n<div class=\"warn-box\">\n<p class=\"label\">Dikkat<\/p>\n<p>Yaln\u0131z size ait sunucuyu taray\u0131n. Ba\u015fkas\u0131na ait bir adresi izinsiz taramak k\u00f6t\u00fcye kullan\u0131m bildirimine ve hukuki sorumlulu\u011fa yol a\u00e7abilir.<\/p>\n<\/div>\n<pre><code class=\"language-bash\">nmap -Pn 203.0.113.10\nnmap -Pn -p 1-65535 203.0.113.10<\/code><\/pre>\n<p class=\"kb-cikti\">Beklenen sonu\u00e7: <code>open<\/code> sat\u0131rlar\u0131 d\u0131\u015far\u0131dan eri\u015filen portlard\u0131r; <code>filtered<\/code> g\u00fcvenlik duvar\u0131n\u0131n paketi d\u00fc\u015f\u00fcrd\u00fc\u011f\u00fcn\u00fc g\u00f6sterir.<\/p>\n<\/li>\n<li><strong>Gereksiz servisi kapat\u0131n.<\/strong> Kullanmad\u0131\u011f\u0131n\u0131z servisi durdurun ve a\u00e7\u0131l\u0131\u015fta ba\u015flamas\u0131n\u0131 engelleyin. \u00d6rnek olarak <code>rpcbind<\/code>:\n<pre><code class=\"language-bash\">sudo systemctl disable --now rpcbind\nsudo systemctl disable --now rpcbind.socket<\/code><\/pre>\n<p class=\"kb-cikti\">Beklenen sonu\u00e7: <code>Removed ...<\/code> sat\u0131rlar\u0131 g\u00f6r\u00fcn\u00fcr, 111 numaral\u0131 port <code>ss<\/code> \u00e7\u0131kt\u0131s\u0131ndan kalkar. Servis y\u00f6netimi i\u00e7in bkz. <a href=\"https:\/\/narhost.com\/destek\/linux-servisini-durdurma-ve-aktif-etme\/\" title=\"Linux servisini durdurma ve aktif etme \u2014 Narhost Destek\">Linux servisini durdurma ve aktif etme<\/a>.<\/p>\n<\/li>\n<\/ol>\n<h2>Do\u011frulama<\/h2>\n<div class=\"success-box\">\n<p class=\"label\">Sonu\u00e7<\/p>\n<p><code>sudo ss -tulpn<\/code> \u00e7\u0131kt\u0131s\u0131nda yaln\u0131z bilerek a\u00e7t\u0131\u011f\u0131n\u0131z portlar (SSH, web, gerekiyorsa e-posta) <code>0.0.0.0<\/code> ya da <code>[::]<\/code> \u00fczerinde g\u00f6r\u00fcn\u00fcyor, veritaban\u0131 ve \u00f6nbellek servisleri <code>127.0.0.1<\/code> dinliyor ve d\u0131\u015far\u0131dan yap\u0131lan <code>nmap<\/code> taramas\u0131 ayn\u0131 listeyi veriyorsa i\u015flem tamamd\u0131r.<\/p>\n<\/div>\n<h2>H\u00e2l\u00e2 \u00e7\u00f6z\u00fclmediyse<\/h2>\n<ul>\n<li><strong>Port <code>ss<\/code> \u00e7\u0131kt\u0131s\u0131nda var ama d\u0131\u015far\u0131dan kapal\u0131.<\/strong> G\u00fcvenlik duvar\u0131 paketi d\u00fc\u015f\u00fcr\u00fcyordur; <code>sudo ufw status<\/code> ya da <code>sudo firewall-cmd --list-all<\/code> ile kurallar\u0131 kontrol edin.<\/li>\n<li><strong>Servisi durdurdum, port geri geldi.<\/strong> Port bir systemd soketine ba\u011fl\u0131d\u0131r; <code>systemctl list-sockets<\/code> ile soketi bulup onu da devre d\u0131\u015f\u0131 b\u0131rak\u0131n.<\/li>\n<li><strong>Process s\u00fctunu bo\u015f.<\/strong> Komutu <code>sudo<\/code> olmadan \u00e7al\u0131\u015ft\u0131rd\u0131n\u0131z; yeniden <code>sudo<\/code> ile deneyin.<\/li>\n<li><strong>Tan\u0131mad\u0131\u011f\u0131n\u0131z bir s\u00fcre\u00e7 y\u00fcksek bir portu dinliyor.<\/strong> Sunucu ele ge\u00e7irilmi\u015f olabilir; bkz. <a href=\"https:\/\/narhost.com\/destek\/sunucuda-guvenlik-acigi-tespit-edilirse-ne-yapmali\/\" title=\"Sunucuda g\u00fcvenlik a\u00e7\u0131\u011f\u0131 tespit edilirse ne yapmal\u0131 \u2014 Narhost Destek\">sunucuda g\u00fcvenlik a\u00e7\u0131\u011f\u0131 tespit edilirse<\/a>.<\/li>\n<\/ul>\n<div class=\"cta-box\">\n<p class=\"label\">Narhost deste\u011fi<\/p>\n<p>Talebe \u015funlar\u0131 ekleyin: sunucunuzun IP adresi, <code>sudo ss -tulpn<\/code> \u00e7\u0131kt\u0131s\u0131, eri\u015femedi\u011finiz port ve d\u0131\u015far\u0131dan ald\u0131\u011f\u0131n\u0131z <code>nmap<\/code> sonucu.<\/p>\n<p><a class=\"cta-btn\" href=\"https:\/\/narhost.com\/submitticket.php\" title=\"Narhost destek talebi olu\u015ftur\">Destek talebi a\u00e7<\/a><\/div>\n<div class=\"kb-ilgili\">\n<p class=\"label\">Sonraki ad\u0131mlar<\/p>\n<ul>\n<li><a href=\"https:\/\/narhost.com\/destek\/vps-server\/\" title=\"VPS ve VDS sunucu y\u00f6netimi kartlar\u0131 \u2014 Narhost Destek\">Sunucu y\u00f6netimi kartlar\u0131n\u0131n tamam\u0131<\/a><\/li>\n<li><a href=\"https:\/\/narhost.com\/destek\/ssh-portu-nasil-degistirilir\/\" title=\"SSH portu nas\u0131l de\u011fi\u015ftirilir \u2014 Narhost Destek\">SSH portunu de\u011fi\u015ftirme<\/a><\/li>\n<li><a href=\"https:\/\/narhost.com\/destek\/web-sitesi-ve-sunucu-guvenligi-rehberi\/\" title=\"Web sitesi ve sunucu g\u00fcvenli\u011fi rehberi \u2014 Narhost Destek\">Sunucu g\u00fcvenli\u011fi rehberi<\/a><\/li>\n<li><a href=\"https:\/\/narhost.com\/blog\/yonetilen-mi-yonetilmeyen-sunucu-mu\/\" title=\"Y\u00f6netilen mi y\u00f6netilmeyen sunucu mu \u2014 Narhost Blog\">VPS&#8217;te port g\u00fcvenli\u011fi neden size ait<\/a><\/li>\n<\/ul>\n<\/div>\n<div class=\"kb-faq\">\n<h2>S\u0131k\u00e7a sorulan sorular<\/h2>\n<h3>ss ile netstat aras\u0131nda fark var m\u0131?<\/h3>\n<p>G\u00f6sterdikleri bilgi ayn\u0131d\u0131r. <code>ss<\/code> bilgiyi do\u011frudan \u00e7ekirdekten okudu\u011fu i\u00e7in daha h\u0131zl\u0131d\u0131r ve g\u00fcncel da\u011f\u0131t\u0131mlarda kurulu gelir; <code>netstat<\/code> i\u00e7in net-tools paketini ayr\u0131ca kurman\u0131z gerekir.<\/p>\n<h3>Yaln\u0131z TCP portlar\u0131n\u0131 nas\u0131l listelerim?<\/h3>\n<p><code>sudo ss -tlnp<\/code> yaz\u0131n. <code>-u<\/code> bayra\u011f\u0131n\u0131 \u00e7\u0131kard\u0131\u011f\u0131n\u0131zda UDP sat\u0131rlar\u0131 listelenmez.<\/p>\n<h3>Linux a\u00e7\u0131k portlar\u0131 g\u00f6rme komutu kurulu ba\u011flant\u0131lar\u0131 da g\u00f6sterir mi?<\/h3>\n<p><code>-l<\/code> bayra\u011f\u0131yla yaln\u0131z dinleyen portlar listelenir. Kurulu ba\u011flant\u0131lar\u0131 g\u00f6rmek i\u00e7in <code>sudo ss -tnp state established<\/code> kullan\u0131n.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Linux sunucuda dinleyen portlar\u0131 ss -tulpn ile listeleme, 0.0.0.0 ve 127.0.0.1 adreslerinin anlam\u0131, lsof ve netstat alternatifleri, nmap ile d\u0131\u015far\u0131dan do\u011frulama ve gereksiz servisi kapatma.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[13],"tags":[],"class_list":["post-2485","post","type-post","status-publish","format-standard","hentry","category-vps-server"],"meta_box":[],"_links":{"self":[{"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/posts\/2485","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/comments?post=2485"}],"version-history":[{"count":1,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/posts\/2485\/revisions"}],"predecessor-version":[{"id":2858,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/posts\/2485\/revisions\/2858"}],"wp:attachment":[{"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/media?parent=2485"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/categories?post=2485"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/tags?post=2485"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}