HTTPfy

Port 3690 (Subversion (svnserve))

svn:// protocol served by svnserve.

Registered (user) port, 1024-49151 TCP Development tools Expose only to trusted sources

What port 3690 is used for

svn:// protocol served by svnserve.

Security: should port 3690 be open?

Expose only to trusted sources. svnserve is unencrypted; use svn+ssh or HTTPS for anything private. Exposed repos sometimes allow anonymous read.

IANA assignment

Service nameProtoDescriptionAssigneeReference
svn TCP Subversion Greg Hudson 2 -
svn UDP Subversion Greg Hudson 2 -

Registry dates for this port: registered 2003-01.

Check what is listening on port 3690

Linux: is anything listening on TCP 3690?
sudo ss -tlnp 'sport = :3690'
Linux / macOS: which process owns the port
sudo lsof -nP -i :3690
Older Linux / BSD (net-tools)
sudo netstat -tlnp | grep ':3690 '
Windows (Command Prompt)
netstat -ano | findstr :3690
Windows (PowerShell)
Get-NetTCPConnection -LocalPort 3690 -State Listen | Select LocalAddress,OwningProcess

Test it from outside

From another machine
nc -vz -w 5 HOST 3690
From Windows
Test-NetConnection HOST -Port 3690

Allow only trusted sources on port 3690 in the firewall

Replace 203.0.113.10 with the address or network you trust. With ufw, make sure the default incoming policy is deny.

ufw (one trusted source)
sudo ufw allow from 203.0.113.10 to any port 3690 proto tcp
iptables
sudo iptables -A INPUT -p tcp --dport 3690 -s 203.0.113.10 -j ACCEPT
sudo iptables -A INPUT -p tcp --dport 3690 -j DROP
nftables
sudo nft add rule inet filter input ip saddr 203.0.113.10 tcp dport 3690 accept
sudo nft add rule inet filter input tcp dport 3690 drop
Windows Firewall
New-NetFirewallRule -DisplayName 'TCP 3690 trusted' -Direction Inbound -Protocol TCP -LocalPort 3690 -RemoteAddress 203.0.113.10 -Action Allow

Related ports

All port numbers · Open port checker
Assignment data: IANA port number registry (public domain), retrieved 2026-11-10.