| 1025 | Microsoft RPC | TCP | Microsoft Remote Procedure Call |
| 1026-1029 | Windows Messenger | UDP | Windows Messenger popup spam |
| 1080 | SOCKS proxy | TCP (or UDP since SOCKS5) | SOCKS stands for Socket Secure. This protocol exchanges network packets between a client and server through a proxy server. |
| 1080 | MyDoom | TCP | Computer virus |
| 1194 | OpenVPN | TCP, UDP | OpenVPN |
| 1214 | KAZAA | TCP | A peer-to-peer file-sharing protocol |
| 1241 | Nessus | TCP, UDP | Nessus Security Scanner |
| 1311 | Dell OpenManage | TCP | Dell EMC OpenManage Server Administrator Web GUI |
| 1337 | WASTE | TCP | WASTE peer-to-peer encrypted file-sharing Program |
| 1589 | Cisco VQP | TCP, UDP | Cisco VLAN Query Protocol (VQP) |
| 1701 | L2TP VPN | TCP | Layer Two Tunneling Protocol Virtual Private Networking |
| 1720 | H.323 | TCP | H.323 Call Control Signaling, a VoIP call control protocol |
| 1723 | Microsoft PPTP | TCP, UDP | Point-to-Point Tunneling Protocol Virtual Private Networking |
| 1725 | Steam | UDP | Valve Steam Client uses port 1725 |
| 1741 | CiscoWorks SNMS 2000 | TCP | CiscoWorks Small Network Management Solution web server |
| 1755 | MMS | TCP, UDP | Microsoft Media Server |
| 1812 | RADIUS | UDP | RADIUS server authentication and authorization |
| 1813 | RADIUS | UDP | RADIUS server accounting |
| 1863 | (Multiple uses) | TCP, UDP | MSN Messenger, Xbox Live 360 |
| 1900 | UPnP | UDP | Universal Plug and Play |
| 1985 | Cisco HSRP | UDP | Hot Standby Router Protocol |
| 2000 | Cisco SCCP | TCP | Skinny Client Control Protocol |
| 2002 | Cisco ACS | TCP | Access Control Server |
| 2049 | NFS | UDP | Network File Sharing |
| 2082 | cPanel | TCP, UDP | cPanel default |
| 2083 | radsec, cPanel | TCP, UDP | Secure RADIUS Service (radsec), cPanel default SSL |
| 2100 | amiganetfs | TCP | Amiga Network Filesystem |
| 2222 | DirectAdmin | TCP | Graphical web hosting control panel |
| 2302 | Gaming | UDP | The game HALO uses this port extensively |
| 2483 | Oracle | TCP, UDP | Oracle database listening for insecure client connections to the listener, replaces port 1521 |
| 2484 | Oracle | TCP, UDP | Oracle database listening for SSL client connections to the listener |
| 2745 | Bagle.C – Bagle.H | TCP | Computer worms |
| 2967 | Symantec AV | TCP, UDP | Symantec System Center agent (SSC-AGENT) |
| 3050 | Interbase DB | TCP, UDP | Borland Interbase database |
| 3074 | XBOX Live | TCP, UDP | Gaming: Xbox LIVE and Games for Windows – Live |
| 3127 | MyDoom | TCP | Computer worm |
| 3128 | HTTP Proxy | TCP | Common web proxy server ports: 80, 8080, 3128, 6588 |
| 3222 | GLBP | TCP, UDP | Gateway Load Balancing Protocol |
| 3260 | iSCSI Target | TCP, UDP | Microsoft iSCSI Target Server |
| 3306 | MySQL | TCP | MySQL database system |
| 3389 | RDP | TCP | Windows Remote Desktop Protocol (Microsoft Terminal Server) |
| 3689 | DAAP | TCP | Digital Audio Access Protocol, used by Apple’s iTunes and AirPort Express |
| 3690 | SVN | TCP, UDP | Apache Subversion, a version control system |
| 3724 | World of Warcraft | TCP, UDP | Some Blizzard games, Unofficial Club Penguin Disney online game for kids |
| 3784-3785 | Ventrilo VoIP | TCP, UDP | Ventrilo’s Voice over Internet Protocol program |
| 4333 | mSQL | TCP | Mini SQL server |
| 4444 | Blaster | TCP, UDP | Computer worm |
| 4500 | IPSec NAT Traversal | UDP | Internet Protocol Security Network Address Translation (NAT) Traversal |
| 4664 | Google Desktop | TCP | Google Desktop’s built-in HTTP server and indexing software |
| 4672 | eMule | UDP | Peer-to-peer file-sharing software |
| 4899 | Radmin | TCP | Remote computer control software |
| 5000 | UPnP | TCP | Universal Plug and Play |
| 5001 | iperf | TCP | Tool for measuring TCP and UDP bandwidth performance |
| 5004-5005 | RTP, RTSP | UDP | Real-time Transport Protocol, Real Time Streaming Protocol |
| 5050 | Yahoo! Messenger | TCP | Instant messaging service from Yahoo |
| 5060 | SIP | TCP, UDP | Session Initiation Protocol |
| 5061 | SIP-TLS | TCP | Session Initiation Protocol over TLS |
| 5190 | (Multiple uses) | TCP, UDP | ICQ, AIM (AOL Instant Messenger), Apple iChat |
| 5222-5223 | XMPP | TCP, UDP | Extensible Messaging and Presence Protocol Client Connection; also used in Google Talk, Jabber, Apple iChat, WhatsApp, etc. |
| 5353 | MDNS | UDP | Multicast DNS |
| 5432 | PostgreSQL | TCP | PostgreSQL database system |
| 5554 | Sasser | TCP | Computer worm |
| 5631-5632 | pcAnywhere | UDP | Symantec pcAnywhere |
| 5800 | VNC over HTTP | TCP | Virtual Network Computing (VNC) |
| 5900-5999 | RFB/VNC Server | TCP, UDP | VNC Remote Frame Buffer RFB protocol |
| 6000 | X11 | TCP | X Window System protocol for delivering payloads between X clients and servers |
| 6001 | X11 | UDP | X Window System protocol for delivering payloads between X clients and servers |
| 6112 | Diablo | TCP, UDP | Gaming |
| 6129 | DameWare | TCP | Remote access software developed by SolarWinds |
| 6257 | WinMX | UDP | Windows Music Exchange, peer-to-peer file-sharing freeware |
| 6346-6347 | Gnutella2 | TCP, UDP | Peer-to-peer network protocol |
| 6379 | Redis | TCP | Popular non-relational database management system (NoSql) |
| 6500 | GameSpy | TCP, UDP | Gaming |
| 6566 | SANE | TCP, UDP | Scanner Access Now Easy |
| 6588 | AnalogX | TCP | AnalogX proxy server |
| 6588 | HTTP Proxy | TCP | Common web proxy server ports: 80, 8080, 3128, 6588 |
| 6665-6669 | IRC | TCP | Internet Relay Chat |
| 6679, 6697 | IRC over SSL | TCP | Internet Relay Chat |
| 6699 | Napster | TCP | Peer-to-peer file-sharing application |
| 6881-6999 | BitTorrent | TCP, UDP | BitTorrent uses this range of ports the most often |
| 6891-6901 | Windows Live Messenger | TCP, UDP | Alternatively: MSN Messenger |
| 6970 | Quicktime | TCP, UDP | QuickTime streaming server |
| 7000 | Cassandra | TCP | Inter-node communication within the cluster on Apache Cassandra |
| 7001 | Cassandra | TCP | SSL-enabled inter-node communication within the cluster on Apache Cassandra |
| 7199 | Cassandra JMX | TCP | Java Management Extensions on Apache Cassandra |
| 7648-7649 | CU-SeeMe | TCP, UDP | Internet video conferencing client made by Cornell University |
| 8000 | Internet Radio | TCP | Commonly choice of alternate HTTP port for web applications |
| 8080 | HTTP Proxy | TCP | Common web proxy server ports: 80, 8080, 3128, 6588 |
| 8086 | Kaspersky AV | TCP | Kaspersky AV Control Center |
| 8087 | Kaspersky AV | UDP | Kaspersky AV Control Center |
| 8118 | Privoxy | TCP | Advertisement-filtering Web proxy |
| 8200 | VMware Server | TCP, UDP | VMware vSphere Fault Tolerance |
| 8222 | VMware Server | TCP, UDP | VMware Server Management User Interface (insecure Web interface). |
| 8500 | (Multiple uses) | TCP, UDP | Adobe ColdFusion, Flight Message Transfer Protocol |
| 8767 | Teamspeak | UDP | VoIP communication system for online gaming |
| 8866 | Bagle.B | TCP | Computer worm |
| 9042 | Cassandra | TCP | Apache Cassandra, a NoSql database |
| 9100 | PDL | TCP | PDL Data Stream, used for printing to certain network printers |
| 9101-9103 | Bacula | TCP, UDP | For automating backup tasks |
| 9119 | MXit | TCP, UDP | MXit Instant Messaging (deprecated) |
| 9800 | WebDAV | TCP, UDP | Web-based Distributed Authoring and Versioning, an extension of HTTP |
| 9898 | Dabber | TCP | Computer worm (Sasser) |
| 9999 | Urchin | TCP, UDP | Urchin Web Analytics |
| 10000 | (Multiple uses) | TCP, UDP | Network Data Management Protocol; applications: Webmin, BackupExec, Viatalk; gaming: The Matrix Online, Dungeon Fighter |
| 10161 | SNMP-agents (encrypted) | TCP | Simple network management protocol; agents communicate on this port |
| 10162 | SNMP-trap (encrypted) | TCP | Simple network management protocol; listens for asynchronous traps |
| 10113 | NetIQ | TCP, UDP | NetIQ Endpoint |
| 10114 | NetIQ | TCP, UDP | NetIQ Qcheck |
| 10115 | NetIQ | TCP, UDP | NetIQ Endpoint |
| 10116 | NetIQ | TCP, UDP | NetIQ VoIP Assessor |
| 11371 | OpenPGP | TCP, UDP | OpenPGP HTTP Keyserver |
| 12345 | NetBus | TCP | NetBus remote administration tool (Trojan horse) |
| 13720-13721 | NetBackup | TCP, UDP | NetBackup request daemon |
| 14567 | Battlefield | UDP | Gaming |
| 15118 | Dipnet/Oddbob | TCP | Trojan horse |
| 19226 | AdminSecure | TCP | Panda Software AdminSecure Communication Agent |
| 19638 | Ensim | TCP | Ensim Control Panel |
| 20000 | Usermin | TCP, UDP | Web email interface for regular non-root users |
| 24800 | Synergy | TCP, UDP | Keyboard/mouse sharing software |
| 25999 | Xfire | TCP | Communication tool for gamers (deprecated) |
| 27015 | Half-Life | UDP | Gaming |
| 27017 | MongoDB | TCP | NoSql database |
| 27374 | Sub7 | TCP, UDP | Trojan horse |
| 28960 | Call of Duty | TCP, UDP | Gaming |
| 31337 | Back Orifice | TCP, UDP | Remote administration tool used for Trojan horses |
| 33434+ | traceroute | UDP | Utility for displaying paths and measuring transit delays of packets across a network |