Common Network & Proxy Ports

Standard SOCKS Proxy

IANA-assigned standard port for SOCKS; default listening port for most SOCKS4/SOCKS5 server daemons.

Secondary SOCKS Port

Frequently used for a secondary SOCKS daemon instance or local port-forwarded proxy tunnels.

Squid Web Proxy Default

Default listening port for Squid, the historic open-source web caching proxy; prominent in public lists.

Squid Secondary / SSL Bump

Commonly used for Squid transparent interception, SSL-bump gateway listeners, or secondary worker pools.

Historical SOCKS Proxy

Long-standing convention inherited from legacy SOCKS4 server releases; still frequent on free proxy lists.

Public Proxy Pool Convention

De-facto port adopted by many automated proxy rotation scripts and open internet SOCKS gateways.

Modern Proxy Client Port

Default mixed port for Clash and Mihomo desktop cores, accepting both HTTP and SOCKS5 connections.

HTTP Alternate / Proxy

The single most widely published HTTP proxy port globally, chosen when non-root users cannot bind port 80.

Secondary HTTP Proxy

Default rollover port when 8080 is already occupied on the same host or container.

Privoxy Privacy Proxy

Default listening port for Privoxy; commonly chained in front of Tor to sanitize HTTP headers and block ads.

Fiddler / Charles / Debugger

Default listening port for Fiddler, Charles, and Jupyter Notebook; widely used for local traffic inspection.

Tor Network SOCKS5

Default SOCKS5 listener for the background Tor daemon; forwards TCP streams through onion routing circuits.

Tor Browser Dedicated SOCKS

Dedicated SOCKS5 listener spawned by the official Tor Browser Bundle to avoid collisions with system Tor.

Cockpit / Prometheus / Proxy Panel

Popular high port for proxy admin web interfaces, Clash REST API, and Prometheus server metrics.

High-Number Ad-hoc Proxy

Memorable high port often chosen for ad-hoc proxy servers, port forwarders, and reverse tunnels.

v2ray / Xray Local SOCKS

Default local inbound SOCKS5 port for popular client GUIs (v2rayN, v2rayA) across Windows and Linux.

v2ray / Xray Local HTTP

Default local inbound HTTP proxy port for v2ray / Xray desktop frontends for applications lacking SOCKS support.

World Wide Web HTTP

Standard default port for unencrypted web traffic; also utilized by transparent HTTP forwarders and CDN edge nodes.

Secure TLS/SSL Web

Standard port for TLS-encrypted web traffic. Effectively never blocked outbound; ideal for proxy tunnels.

Development Server HTTP

Default port for Python http.server, Django, and local API mock gateways; often used as testing proxies.

Secondary HTTPS Gateway

Commonly used for Apache Tomcat SSL, cloud console webhooks, and secure admin interfaces without root privileges.

FTP Active Mode Data Channel

Used in active FTP mode where the server initiates a connection back to the client to stream file payloads.

File Transfer Protocol (Control)

Command channel for authenticating users, directory listings, and negotiating data connections (plain text).

Trivial File Transfer Protocol

Lightweight UDP file transfer without authentication; primarily used for PXE network booting and router firmware.

Rsync Remote Synchronization

Default port for rsync daemon mode; used for fast incremental file backups across Linux servers.

Secure Shell & SFTP

Standard encrypted administrative shell on Linux/macOS; supports SSH dynamic SOCKS tunneling via 'ssh -D'.

Telnet Terminal (Legacy)

Insecure unencrypted remote shell. Now obsolete for login, but widely used to probe if a target TCP port is listening.

Remote Desktop Protocol

Proprietary Microsoft protocol for full GUI remote access to Windows PCs and Windows Server instances.

Virtual Network Computing

Cross-platform desktop sharing standard used by TightVNC, RealVNC, and macOS Screen Sharing.

Alternative SSH / Docker

Popular non-standard port configured to evade automated bots scanning port 22; common in Git hosting and Docker SSH.

MySQL Relational Database

Default communication port for MySQL and MariaDB servers. Should almost always be restricted to local or VPC traffic.

PostgreSQL Database

Default port for PostgreSQL advanced open-source database connections.

Redis In-Memory Data Store

Default listening port for Redis cache. Unauthenticated public exposure is a critical security vulnerability.

MongoDB Document Database

Default port for MongoDB instances. Requires authorization to prevent unauthenticated database dumps.

Microsoft SQL Server

Default listening port for Microsoft SQL Server standard database engine instances.

Oracle Database Listener

Default port for Oracle Net Listener, handling client connection handshakes to Oracle Database instances.

Elasticsearch REST API

Default HTTP REST API endpoint for indexing and query requests across Elasticsearch clusters.

Memcached In-Memory Cache

High-performance distributed memory caching system; historically exploited in massive UDP reflection DDoS attacks.

Domain Name System

Resolves hostnames to IP addresses. UDP 53 handles normal lookups; TCP 53 handles payloads >512B and zone transfers.

DHCP Server Listener

Listens for broadcast requests from new network clients to automatically assign IP, subnet mask, and default gateway.

DHCP Client Listener

Destination port on client devices where DHCP server offers and acknowledgments are received.

Network Time Protocol

Synchronizes computer clocks over network latency. Out-of-sync local time directly breaks TLS/SSL handshake validation.

Simple Network Management

Queries device metrics (bandwidth, CPU, status) from routers, switches, and servers via monitoring tools like Zabbix.

Lightweight Directory Access

Centralized user identity and access directory in enterprise environments (OpenLDAP, Active Directory).

Secure LDAP over TLS

Encrypted version of LDAP over TLS, mandatory for enterprise networks preventing password eavesdropping.

Simple Mail Transfer (MTA)

Server-to-server mail routing. Cloud providers (AWS, Alibaba, GCP) block outbound port 25 by default to combat spam.

SMTP over Implicit TLS

Implicit SSL/TLS encryption for mail submission from desktop and mobile email clients.

Modern Mail Submission

Standard IETF submission port for authenticated email clients, upgrading to TLS via STARTTLS.

Post Office Protocol (Plain)

Traditional email retrieval protocol (downloads inbox to client without state synchronization; unencrypted).

POP3 over TLS/SSL

Secure TLS-encrypted version of POP3 for reading mailbox messages without leaking passwords.

Internet Message Access (Plain)

Modern email retrieval standard keeping folders and message read states synced across multiple devices (unencrypted).

IMAP over TLS/SSL

Secure TLS-encrypted version of IMAP; the most recommended port for connecting modern email clients.

OpenVPN Gateway

Official IANA port for OpenVPN tunnels. Best run over UDP to prevent TCP-over-TCP meltdown during packet loss.

WireGuard Modern VPN

Default UDP port for WireGuard, the state-of-the-art fast, modern, and lean kernel-level VPN tunnel.