| 20 | FTP-Data | FTP data transfer channel. |
| 21 | FTP | File Transfer Protocol control channel. |
| 22 | SSH / SFTP / SCP | Secure remote login and secure file transfer. |
| 23 | Telnet | Unencrypted remote terminal (legacy, insecure). |
| 25 | SMTP | Outgoing email delivery between mail servers. |
| 53 | DNS | Domain Name System name resolution. |
| 67 | DHCP-Server | Dynamic Host Configuration Protocol (server). |
| 68 | DHCP-Client | Dynamic Host Configuration Protocol (client). |
| 69 | TFTP | Trivial File Transfer Protocol (boot images). |
| 80 | HTTP | HyperText Transfer Protocol — web traffic. |
| 110 | POP3 | Post Office Protocol v3 — receive email. |
| 123 | NTP | Network Time Protocol — clock synchronisation. |
| 143 | IMAP4 | Internet Message Access Protocol — read email. |
| 161 | SNMP | Simple Network Management Protocol (agent). |
| 162 | SNMP-Trap | SNMP asynchronous notifications. |
| 179 | BGP | Border Gateway Protocol — internet routing. |
| 194 | IRC | Internet Relay Chat. |
| 443 | HTTPS | HTTP over TLS/SSL — secure web traffic. |
| 445 | SMB | Windows file sharing (Server Message Block). |
| 465 | SMTPS | SMTP over SSL. |
| 514 | Syslog | System log message delivery. |
| 587 | SMTP-Submission | Mail submission for client email apps (STARTTLS). |
| 631 | IPP | Internet Printing Protocol. |
| 993 | IMAPS | IMAP over SSL/TLS. |
| 995 | POP3S | POP3 over SSL/TLS. |
| 1080 | SOCKS | SOCKS proxy protocol. |
| 1433 | MS-SQL | Microsoft SQL Server. |
| 1521 | Oracle-DB | Oracle database listener. |
| 1723 | PPTP | Point-to-Point Tunneling Protocol (VPN). |
| 1812 | RADIUS | RADIUS authentication. |
| 1883 | MQTT | MQTT IoT messaging (TCP). |
| 2049 | NFS | Network File System. |
| 2082 | cPanel | cPanel control panel (HTTPS). |
| 2083 | cPanel-SSL | cPanel over TLS. |
| 2181 | ZooKeeper | Apache ZooKeeper coordination. |
| 2375 | Docker-REST | Docker daemon REST API (plain). |
| 2376 | Docker-TLS | Docker daemon REST API (TLS). |
| 3000 | Dev-Server | Common dev server (Node/React/Astro). |
| 3128 | Squid | Squid caching proxy. |
| 3306 | MySQL | MySQL database server. |
| 3389 | RDP | Windows Remote Desktop Protocol. |
| 4000 | Dev-Server-Alt | Common alternate dev server / Phoenix. |
| 4369 | Erlang-EPMD | Erlang port mapper daemon. |
| 5000 | AirPlay / Flask | AirPlay / Flask dev server. |
| 5001 | Synology-DSM | Synology DSM admin / UPnP. |
| 5432 | PostgreSQL | PostgreSQL database server. |
| 5672 | AMQP | RabbitMQ / Advanced Message Queuing. |
| 5900 | VNC | Virtual Network Computing remote desktop. |
| 5984 | CouchDB | Apache CouchDB database. |
| 6080 | vSphere-Web | vSphere web client. |
| 6379 | Redis | Redis key-value store. |
| 6443 | Kubernetes-API | Kubernetes API server. |
| 6665 | IRC-Alt | IRC alternate ports. |
| 7001 | WebLogic | Oracle WebLogic admin server. |
| 8000 | Dev-8000 | Common dev / Django / Rails server. |
| 8005 | Tomcat-Shutdown | Tomcat shutdown port. |
| 8008 | HTTP-Alt | Alternate HTTP / Plex. |
| 8080 | HTTP-Proxy-Alt | Common web / proxy / dev port. |
| 8081 | HTTP-Alt-2 | Spring Boot / Nexus / dev. |
| 8086 | InfluxDB | InfluxDB HTTP API. |
| 8088 | Asterisk-HTTP | Asterisk manager HTTP. |
| 8090 | HTTP-Alt-3 | SonarQube / Atlassian dev. |
| 8181 | HTTP-Alt-4 | Common API / dev port. |
| 8443 | HTTPS-Alt | Alternate HTTPS (Tomcat/Webmin). |
| 8888 | Dev-8888 | Jupyter / common dev server. |
| 9000 | Portainer / Sonar | Portainer / SonarQube web UI. |
| 9090 | Prometheus / Cockpit | Prometheus metrics / Cockpit web. |
| 9092 | Kafka | Apache Kafka broker. |
| 9200 | Elasticsearch | Elasticsearch REST API. |
| 9300 | Elasticsearch-Transport | Elasticsearch node transport. |
| 9418 | Git | Git smart transport (git://). |
| 10000 | Webmin | Webmin server admin. |
| 11211 | Memcached | Memcached cache daemon. |
| 11214 | Memcached-SSL | Memcached over TLS. |
| 12000 | CCP | Nexus / common services. |
| 12345 | NetBus | Legacy remote access trojan. |
| 15672 | RabbitMQ-Mgmt | RabbitMQ management UI. |
| 17000 | KoolShare | Home-router vendor service. |
| 20000 | Usermin | Usermin user admin. |
| 25565 | Minecraft | Minecraft Java Edition server. |
| 27015 | SRCDS | Source engine game server. |
| 27017 | MongoDB | MongoDB database server. |
| 32400 | Plex | Plex Media Server. |
| 33126 | AirSonos | AirSonos bridge. |
| 33255 | JDWP | Java Debug Wire Protocol. |
| 4711 | Openfire | Openfire XMPP admin console. |
| 50000 | SAP | SAP dispatcher gateway. |
| 54321 | Common-test | Common test port. |
| 55555 | Common-test-2 | Common test port. |
| 61616 | ActiveMQ | Apache ActiveMQ broker. |
| 62078 | iPhone-sync | Apple device sync. |
| 65535 | Max-Ephemeral | Upper bound of the dynamic port range. |