Is My ISP Blocking My Game Server Port? How to Check

Most home ISPs do not block normal game server ports like 25565, 2456, 7777 or 27015. What they commonly block on residential plans are a handful of low ports used for email, Windows file sharing and sometimes web servers (25, 135 to 139, 445, and on some ISPs 80 and 443). If your game port seems blocked, it is far more likely to be carrier grade NAT, double NAT, a router security feature or your PC's firewall. You can prove it either way by testing the port with the server running from outside your network, then moving the server to a different high port and testing again.

Ports ISPs commonly filter

Port	Used for	Why ISPs block it
25 TCP	Sending email (SMTP)	Stops infected PCs sending spam
135 to 139 TCP/UDP	Windows NetBIOS / RPC	Old worm targets
445 TCP	Windows file sharing (SMB)	Ransomware and worms
1900 UDP	SSDP / UPnP discovery	Abused for amplification attacks
53 UDP inbound	DNS	Open resolvers get used in DDoS
80, 443 TCP	Web servers	Some ISPs block inbound on residential plans
123, 161, 11211 UDP	NTP, SNMP, memcached	Amplification attacks

None of these are game server defaults. Rules differ by ISP and change over time, so check your ISP's acceptable use or network management page if you want a definitive list.

Does my ISP allow servers at all

Many residential terms of service say you may not run "servers" on a home plan. In practice, ISPs enforce this against things like heavy upload hosting, mail servers or abuse complaints, not a Minecraft server for six friends. A small game server at home rarely gets attention. If you plan to run a large public server with heavy upload around the clock, read your ISP's terms, because that is the kind of use the clause is written for.

The four things that look like an ISP block

Before blaming the ISP, rule these out. Each one produces the same symptom: friends time out, you can join on LAN.

CGNAT. The ISP shares a public IP between customers and drops all inbound traffic. It looks like every port is blocked, because effectively it is. Test: compare your router's WAN IP with "what is my IP". Full guide: how to tell if you are behind CGNAT.
Double NAT. A second router in front of yours drops the traffic. See double NAT fix.
Router security features. Xfinity Advanced Security, ASUS AiProtection, Netgear Armor and similar tools can block inbound connections they consider risky.
PC firewall. Windows Defender Firewall or an antivirus firewall. See Windows Firewall rules for a game server.

How to test whether the ISP is blocking a port

Step 1: test the port you want

Start the game server and confirm it is listening (it says so in the console, or netstat -an | find "25565" on Windows shows LISTENING).
Make sure the router forward and the PC firewall rule exist.
From outside your network (phone on mobile data, or a friend), try to connect.

For a TCP port, an online port checker gives a quick answer while the server runs. UDP is harder to test because closed and open often look the same; see how to test if a UDP port is open.

Step 2: move the server to a different high port

Change the game server to an unusual port, for example 25570 instead of 25565, update the router forward and firewall rule, and test again.

Works on the new port, not the old one: something is filtering that specific port. That can be the ISP, but it can also be an old forward or UPnP mapping on the router grabbing the original port. Check the router first.
Fails on both ports: the ISP is not blocking a specific port. You are looking at CGNAT, double NAT or a firewall.

Step 3: ask the ISP the right question

If step 2 points to a specific port, contact support and ask: "Do you filter inbound traffic on port X TCP/UDP on residential plans?" Asking about a specific port and protocol gets a clearer answer than "why is my server blocked".

What to do if your ISP really blocks the port

Use a different port. Almost every game server lets you change its port. Players type address:port. For Minecraft Java you can hide the port behind a domain with an SRV record.
Business plan. Business lines usually come without inbound filtering and often with a static IP. More expensive, but it removes the question.
Tunnel. A tunnel such as playit.gg gives you an outside address and port, and your ISP only sees an outbound connection.
Host it elsewhere. A hosted server never touches your ISP's network rules.

Ports to avoid when you pick a custom one

When you move a server off its default port, avoid ports below 1024, anything in the table above, and ports your router uses itself (some ISP routers reserve ranges for TV boxes or remote management). Something in the 20000 to 40000 range that is not used by another program in your house is a safe choice.

In game view from Rust

A server outside your ISP's rules

If you would rather not argue with your ISP's terms or filters, a hosted server avoids them entirely. GamezServers servers have their own address with the game's ports open, always on DDoS protection, and settings in a panel. Most go live about a minute after checkout, and you can split the bill with friends.

FAQ

Does Xfinity, Spectrum or AT&T block game server ports?

Not the common game ports. They filter some low ports such as 25 and 445 on residential plans. Game server problems on these ISPs are almost always router, firewall or protocol issues.

Can my ISP see that I run a game server?

They can see traffic patterns, such as many inbound connections to one port, but they do not usually act on a small game server.

Will my ISP block me for hosting a Minecraft server?

It is very unlikely for a small private server. Large public servers with heavy upload are the kind of use residential terms try to limit.

Why does a port checker say my port is closed?

Most often because the server was not running when you checked, the port is UDP (which most checkers cannot test), or a router or firewall rule is missing.