Back to Categories

Web Services Ports

Browse 112 ports related to web services

Port 8888

TCP

Sun Answerbook & Alt HTTP

Port 8888 historically hosted Sun Microsystems' AnswerBook DWhttpd server, a technical documentation platform. Nowadays, it is more frequently utilized as an unofficial alternative HTTP port to circumvent conflicts with standard port 80, or to obscure the service slightly. While Sun's original protocol is obsolete, this port remains widely active, mainly for web services, development environments, or embedded system interfaces.

Web ServicesSystem
Insecure

Port 8000

TCP

Intel Remote Desktop / Alternate HTTP Port

Port 8000 is officially allocated to Intel's Remote Desktop Management Interface (iRDMI), though in practice, it is rarely used for this purpose today. Instead, it commonly serves as an alternative port for HTTP or HTTPS web services when default ports like 80 or 443 are unavailable or intentionally changed. Administrators and developers may use this port to avoid conflicts or for basic security through obscurity.

Web ServicesRemote Access
Insecure

Port 8888

TCP

NewsEDGE

NewsEDGE server is a secure, cloud-based content management system used primarily by news organizations. It facilitates collaboration among journalists, enabling content sharing, streamlined editorial workflows, and easy access across devices. Built on the Salesforce platform, it offers integration with mobile apps, making news production more efficient and centralized.

Web ServicesCloud
Insecure

Port 8888

TCP

HTTP Alternative Port

**Port 8888** is commonly utilized as an alternative port for HTTP services, and at times HTTPS. While not officially designated for HTTP by the IANA, it is widely adopted by developers, system administrators, reverse proxies, and application servers to provide web interfaces separate from the standard port 80 or 443. Its popularity stems from the need to run multiple web services on a single machine or to avoid default port conflicts, though using alternative ports should not be mistaken for a security measure.

Web Services
Insecure

Port 8888

TCP

GNUmp3d Streaming HTTP

Port 8888 is commonly used by GNUmp3d, an HTTP music streaming server that provides media streaming capabilities via a web interface. It enables users to browse and stream MP3 collections over a network, making audio content easily accessible through a standard web browser without requiring additional client software.

Web ServicesStreamingMedia
Insecure

Port 9080

TCP

Groove RPC

GLRPC stands for Groove Lightweight Remote Procedure Call, a proprietary protocol used by the Groove Collaboration software suite, which was later integrated into Microsoft SharePoint Workspace before its discontinuation. It facilitated real-time communication, synchronization, and data sharing within Groove's peer-to-peer workspace environment.

Web ServicesFile TransferNetwork Services
Insecure

Port 8881

TCP

Atlasz Secure Server

Port 8881 is commonly associated with Atlasz Informatics Research Ltd.'s Secure Application Server, a platform intended to facilitate secure application deployment and communications, primarily over TCP. While its utilization isn't standardized or well documented, it often serves proprietary secure communication processes or remote management interfaces that demand careful access control and monitoring due to elevated security implications.

Web ServicesSecurityRemote Access
Insecure

Port 80

TCP

HTTP

Hypertext Transfer Protocol (HTTP) facilitates communication between web browsers and servers, enabling retrieval of web content such as HTML pages, images, and other resources. It is the foundation of data exchange on the World Wide Web, operating primarily over TCP port 80 in plaintext. Despite being widely used, its lack of encryption exposes data transmissions to various network-based threats.

Web Services
Insecure

Port 8882

TCP

Atlasz Secure App Server

Atlasz Secure Application Server, developed by Atlasz Informatics Research Ltd, provides secure hosting and deployment for enterprise-level distributed applications. Designed to facilitate robust and scalable software solutions, it is widely used in Hungarian business environments where reliable and secure server operations are essential.

Web ServicesDatabasesMobile
Insecure

Port 443

TCP

HTTPS

HTTPS (Hypertext Transfer Protocol Secure) is the encrypted version of HTTP, which enables secure communication over computer networks. It uses SSL/TLS protocols to encrypt and decrypt requests and responses between web clients and servers, ensuring data integrity and confidentiality. HTTPS is the standard protocol for accessing secure websites, handling sensitive transactions, and protecting user privacy online.

Web ServicesSecurity
Secure

Port 8008

TCP

IBM HTTP Server Admin

**IBM HTTP Server** (IHS) uses port 8008 as a default port for administrative access. This port facilitates management, monitoring, and configuration of the server remotely through a web-based interface or command-line tools. Admins leverage this port to control and maintain Apache-based HTTP servers optimized by IBM, which are often part of larger enterprise web infrastructure deployments.

Web ServicesRemote AccessSystem
Insecure

Port 9080

TCP

WebSphere HTTP Transport (default)

Port 9080 is commonly used by IBM WebSphere Application Server's HTTP Transport as the default HTTP listener port. It facilitates web-based communication between clients and the application server, typically used to serve dynamic content, REST/SOAP APIs, or facilitate internal administrative functions during development and testing phases.

Web ServicesSystemCloud
Insecure

Port 8008

TCP

HTTP Alternate Port

Port 8008 serves as an alternate port for the Hypertext Transfer Protocol (HTTP), commonly used when the default port 80 is unavailable or when administrators wish to separate different web applications on the same server. While not an officially designated HTTP port, it has become widely recognized for such alternative use cases.

Web Services
Insecure

Port 3128

TCP

Tatsoft Default HTTP Proxy

Port 3128 is commonly associated with HTTP proxy services, such as those configured as default client connections in industrial automation platforms like Tatsoft. It serves as an intermediary port facilitating client communication, content filtering, or network access control, enabling efficient data transfer and protocol management for connected client applications. This port is frequently used by transparent and explicit proxy servers in enterprise or industrial environments.

Web ServicesNetwork Services
Insecure

Port 3128

TCP

Squid Proxy HTTP

Port 3128 is commonly used by proxy servers, notably Squid, for handling HTTP web caching and proxy services. It enables improved web performance by caching frequently accessed content and provides anonymity and filtering capabilities for clients accessing the internet through the proxy.

Web ServicesSecurityNetwork Services
Insecure

Port 8000

TCP

Alternate HTTP / SHOUTcast

TCP port 8000 is widely recognized as an alternative to the standard HTTP port 80, used extensively for streaming internet radio, particularly with SHOUTcast servers. Its popularity stems from the need to avoid port conflicts and to offer flexible service configurations without interfering with standard web traffic.

Web ServicesStreamingMedia
Insecure

Port 8080

TCP

HTTP Alternate

Port 8080 is a widely used alternative to the default HTTP port 80. It is often utilized for web proxies, caching servers, and development or administrative web interfaces running on non-root privileges. Its versatility makes it prevalent in web server management and testing environments, especially when the default port 80 is already occupied or restricted.

Web ServicesSecurityNetwork Services
Secure

Port 9090

TCP

Openfire Admin Console

**Openfire Administration Console** is a web interface used to configure, manage, and monitor the Openfire real-time collaboration server, which supports XMPP messaging. It enables administrators to easily perform server maintenance, user management, plugin control, and monitor server statistics using an intuitive graphical interface typically accessed via a web browser.

Web ServicesVoice and Chat
Insecure

Port 7002

TCP

WebLogic HTTPS

Port 7002 is typically the default port utilized by BEA WebLogic Server for secure HTTPS communication. During installation or server configuration, administrators often customize this port to align with their security policies and network architecture. This port facilitates encrypted transmission of web application data deployed within the WebLogic environment.

Web Services
Secure

Port 7001

TCP

BEA WebLogic Server HTTP

Port 7001 is commonly used as the default HTTP port for BEA WebLogic Server, a popular Java application server designed to deploy and run enterprise-level Java EE applications. This port facilitates client-server communication during development and testing phases, though administrators often change it during installation for production environments or security considerations.

Web ServicesCloud
Insecure

Port 5800

TCP

VNC over HTTP

Port 5800 is commonly used to access Virtual Network Computing (VNC) remote desktop interfaces over HTTP. This facilitates browser-based connections to remote systems, enabling users to manage another computer’s desktop environment through a web interface without needing dedicated client software.

Web ServicesRemote Access
Insecure

Port 9091

TCP

Openfire Admin Console (SSL)

Openfire's secured web-based Administration Console operates on port 9091, providing administrators encrypted access to configure and manage the Openfire real-time collaboration server. It offers a user-friendly interface for server setup, user management, group chat configuration, and plugin management, all protected by SSL encryption to ensure secure administrator connections.

Web ServicesSecurityVoice and Chat
Secure

Port 8080

TCP

Apache Tomcat

Port 8080 is commonly used by Apache Tomcat, an open-source Java Servlet Container developed by the Apache Software Foundation. As an alternative HTTP port to the default port 80, it facilitates the development, deployment, and management of Java-based web applications. Due to widespread adoption, it's a key component for Java web application hosting and testing environments.

Web Services
Insecure

Port 9043

TCP

WebSphere Admin Console (SSL)

Port 9043 is primarily used for secure access (SSL) to the IBM WebSphere Application Server's administrative console. It allows administrators to manage server configurations, deploy applications, monitor server status, and perform troubleshooting tasks through an encrypted web interface.

Web ServicesSystemCloud
Insecure

Port 2031

TCP

Mobrien Chat

Mobrien Chat is a communication service operating over TCP and UDP on port 2031. It facilitates real-time messaging and chat functionalities for its users, leveraging a dedicated protocol hosted primarily at mobrien.com. Intended to enable efficient text-based conversations, it serves as the backbone of the chat platform's data transfer, supporting a rich and interactive messaging experience. While it provides a straightforward messaging service, it typically operates without encryption by default, which can impact the privacy and security of transmitted information.

Web ServicesVoice and Chat
Insecure

Port 8090

TCP

HTTP Alternate

Port 8090 is commonly utilized as an alternative HTTP port, especially when the default port 80, or the primary alternative 8080, are already occupied or restricted. It facilitates HTTP web traffic, enabling access to web services and applications through an alternative entry point. This port is popular in development environments, custom web server deployments, proxy services, and certain web platforms where port conflicts might arise.

Web Services
Insecure

Port 1431

TCP

Reverse Gossip Transport Protocol (RGTP)

RGTP is a protocol designed to facilitate access to the General-purpose Reverse-Ordered Gossip Gathering System (GROGGS), a bulletin board service initially developed at Cambridge University. It allows users to retrieve, post, and manage discussion threads in a reverse chronological order, maximizing the relevance of recent gossip messages within the academic community's Phoenix system.

Web ServicesSystem
Insecure

Port 16080

TCP

Mac OS X Server Web Cache

Port 16080 is commonly associated with Apple's Mac OS X Server and typically used for the HTTP service featuring a performance cache. This optimizes web content delivery, reducing server load and enhancing end-user experience through accelerated caching mechanisms. Though unofficial, it functions similarly to standard web service ports but is tailored for Apple's server environment.

Web ServicesSystem
Insecure

Port 9001

UDP

SharePoint Authoring

Port 9001 is an unofficial port commonly associated with the Microsoft SharePoint Authoring Environment. This port is utilized in custom configurations or development environments to enable content creation, management, and collaboration features within SharePoint. It facilitates communication between SharePoint services and authoring tools, allowing users and administrators to manage SharePoint sites, documents, and workflows efficiently.

Web ServicesFile TransferCloud
Insecure

Port 4712

TCP

McAfee Web Gateway GUI

The default HTTPS port for the web interface of McAfee Web Gateway 7, primarily used for secure administrative access. It provides a secure layer for configuring and managing web security policies, threat protection features, and monitoring network activity through an encrypted connection.

Web ServicesSecurity
Secure

Port 9090

TCP

McAfee Web Gateway Proxy

Port 9090 is commonly used as the default proxy port for McAfee Web Gateway, formerly known as Webwasher or Secure Web. It facilitates secure web filtering, malware scanning, content inspection, and access control for corporate networks, acting as an intermediary between users and the external internet to enforce organizational security policies.

Web ServicesSecurityNetwork Services
Secure

Port 8880

TCP

WebSphere SOAP Connector

The WebSphere Application Server uses port 8880 by default to enable SOAP-based communication between clients and the server. This connector facilitates remote management, deployment, and configuration interfaces using SOAP, a common protocol supporting structured information exchange. It primarily assists in integrating administrative tools and automated systems with WebSphere's application management capabilities.

Web ServicesRemote AccessSystem
Insecure

Port 311

TCP

Mac OS X Server Admin

Port 311 was historically used by Mac OS X Server's Admin tool, which provided a web-based management interface for AppleShare IP services. This allowed system administrators to configure and control server-side functions, including file sharing, web services, and user management, from any standard web browser with appropriate authentication. Over time, its utility diminished as Apple transitioned to new server management paradigms.

Web ServicesRemote AccessSystem
Insecure

Port 8081

TCP

HTTP Alternate Port

Port 8081 is widely used as an alternative HTTP port for web services and management consoles. It provides access to applications like VibeStreamer, McAfee ePolicy Orchestrator (ePO), or bespoke web server interfaces, typically when the primary HTTP port 80 is restricted or occupied. This port is common in development, testing environments, or for segregating web application management interfaces from the main service endpoints.

Web ServicesSecurityMedia
Insecure

Port 10000

UDP

Webmin

Webmin is a web-based system configuration tool designed for Unix-like systems, allowing administrators to manage server functions through an intuitive web interface rather than command-line operations.

Web ServicesRemote AccessSystem
Insecure

Port 591

TCP

FileMaker Web Sharing

Port 591 is commonly used by FileMaker's Web Publishing feature as an alternate HTTP port, allowing clients to access FileMaker databases via a web browser. It serves as an alternative to the standard port 80 for providing data-driven web interfaces directly from within FileMaker Server, enabling developers and users to publish, view, and interact with database content easily over the network.

Web ServicesDatabases
Insecure

Port 4567

TCP

Sinatra Dev HTTP Port

Port 4567 is commonly used by the Sinatra web framework as its default development server port, enabling quick testing of web applications over HTTP. Designed primarily for local development, this port offers a lightweight, minimal environment for developers to prototype and debug Sinatra-based applications before production deployment. Its default use is inherently non-secure and generally exposed on localhost interfaces, not intended for public-facing or production use.

Web Services
Insecure

Port 9060

TCP

WebSphere Admin Console

The WebSphere Application Server Administration Console is a web-based interface that allows administrators to configure, deploy, monitor, and manage applications and resources on IBM WebSphere servers. It plays a critical role in enterprise environments running Java EE applications.

Web ServicesSystem
Insecure

Port 4711

TCP

McAfee Web Gateway HTTP GUI

TCP port 4711 is primarily used as the default HTTP port for the graphical user interface (GUI) of McAfee Web Gateway 7. This management console allows administrators to configure, monitor, and maintain the web security appliance. Although unofficial and unencrypted by default, understanding and securing access to this port is important, as it offers significant control over web traffic filtering and security policies within an organization.

Web ServicesSecurityNetwork Services
Insecure

Port 8243

TCP

Apache Synapse HTTPS Listener

Port 8243 is primarily used as the default HTTPS listener endpoint for Apache Synapse and WSO2 API Manager. It facilitates secure, encrypted communication over SSL/TLS for API management, mediation, and integration tasks. This port allows clients to securely connect for API publishing, invocation, and governance operations.

Web ServicesSecurityCloud
Secure

Port 21022

TCP

AMLFilter HTTPS

**21022/tcp** is the default HTTPS port for *AMLFilter*, a platform developed by *AMLFilter Inc.* intended for Anti-Money Laundering filtering operations. The port is primarily used by their amlf-engine-02 modules to facilitate secure, encrypted communication between clients and the AMLFilter server.

Web ServicesSecurity
Secure

Port 901

TCP

Samba Web Admin (SWAT)

The Samba Web Administration Tool (SWAT) is a web-based graphical interface designed to simplify the configuration and management of Samba servers. It provides administrators with an accessible means to configure Samba shares, manage users, and adjust server settings directly from a browser, easing tasks that would otherwise require manual editing of configuration files.

Web ServicesFile TransferSystem
Insecure

Port 21012

TCP

AMLFilter HTTPS

Port 21012 is commonly used by AMLFilter Inc.'s amlf-engine-01 as its default HTTPS communication port. It's designed primarily to facilitate secure, encrypted data exchange between the AMLFilter platform components and client systems. This port supports secure transmission essential for anti-money laundering (AML) filtering and related financial data processing.

Web ServicesSecurity
Secure

Port 2222

TCP

DirectAdmin & ESET Remote Admin

Port 2222 is widely recognized as the default TCP port for DirectAdmin, a commercial web hosting control panel, and is also employed by ESET Remote Administrator for centralized management of ESET security solutions. This dual-purpose port is predominantly used for secure web-based management interfaces, allowing administrators to manage servers or endpoint clients remotely. Due to its remote administration capabilities, it is a notable target and should be protected accordingly.

Web ServicesSecurityRemote Access
Insecure

Port 1920

TCP

IBM Tivoli Monitoring

IBM Tivoli Monitoring Console over HTTPS provides a secure, web-based interface for monitoring and managing IT resources across an enterprise. It enables IT administrators to observe system health, performance, and application status, facilitating proactive management of hardware and software assets.

Web ServicesSecuritySystem
Secure

Port 81

TCP

Torpark Onion Routing

Port 81 is commonly associated with HTTP traffic used for Onion routing through tools like Torpark, an anonymized web browser based on the Tor network. It often serves as an alternative or secondary HTTP port leveraged by onion routing gateways and proxy servers to facilitate user anonymity while browsing the internet.

Web ServicesSecurity
Insecure

Port 21021

TCP

AMLFilter HTTP

Port 21021 is commonly associated with AMLFilter, an anti-money laundering solution developed by AMLFilter Inc. This port serves as the default HTTP communication channel for the amlf-engine-02 service, facilitating web-based management, data transfer, and detection operations that support financial compliance workflows.

Web ServicesSecurity
Insecure

Port 4125

TCP

Remote Web Workplace

Remote Web Workplace (RWW) is a Microsoft web-based portal enabling remote access for administrators and users to internal resources such as desktops, email, and file shares. Typically integrated with Windows Small Business Server, it provides a central, browser-based interface designed to simplify connectivity and management tasks for offsite personnel.

Web ServicesRemote AccessSystem
Insecure

Port 2083

TCP

cPanel SSL

**Port 2083** is commonly used for secure, encrypted access to the **cPanel web hosting control panel**. This SSL-enabled port provides administrators and users a secure interface to manage their hosting environment, including website files, email accounts, databases, and domain settings. Through HTTP over TLS/SSL (HTTPS), cPanel ensures that all transmitted data, such as login credentials and sensitive configurations, is protected from interception or tampering.

Web ServicesSecurity
Secure

Port 21011

TCP

AMLFilter HTTP

Port 21011 is the default HTTP port for AMLFilter's amlf-engine-01, a software produced by AMLFilter Inc., which specializes in financial compliance solutions. It provides a web interface that facilitates communication with anti-money laundering (AML) data filtering systems designed to assist financial organizations in detecting suspicious activities and ensure compliance with regulatory norms. As this is an HTTP service, the port provides unencrypted access unless rerouted through secure protocols.

Web ServicesSecurity
Insecure

Port 8280

TCP

Apache Synapse HTTP

Port 8280 is used primarily for Apache Synapse, an enterprise service bus (ESB) and mediation platform widely adopted in service-oriented architecture (SOA) deployments. This port functions predominantly as an HTTP listener, facilitating the reception and forwarding of HTTP requests for integration, transformation, and routing between disparate services within distributed systems.

Web ServicesCloud
Insecure

Port 3100

TCP

Tatsoft HTTP Port

Port 3100 is primarily utilized by Tatsoft's software suite as its default HTTP listening port for communication. It facilitates interaction between client and server components, enabling users and integrations to interface with Tatsoft applications over a network via standard HTTP protocols.

Web ServicesIoT
Insecure

Port 5357

TCP

WSDAPI

**Web Services for Devices API (WSDAPI)** enables automatic discovery and communication between connected devices in a network, streamlining device management and integration on **Windows Vista, Windows 7, and Windows Server 2008** systems. This protocol simplifies the interaction between PCs and network-enabled devices such as printers, scanners, and cameras by utilizing **web service standards** like SOAP to provide plug-and-play functionality.

Web ServicesNetwork ServicesIoT
Insecure

Port 563

TCP

NNTPS

NNTPS (Network News Transfer Protocol Secure) is the encrypted version of NNTP, which facilitates the distribution, querying, retrieval, and posting of Usenet articles using TLS/SSL encryption to ensure privacy and integrity during data transmission.

Web ServicesSecurity
Secure

Port 2087

TCP

WHM SSL

Port 2087 is primarily used for secure access to WebHost Manager (WHM), a popular web hosting control panel component of cPanel. This SSL-enabled port facilitates encrypted management of server and hosting configurations, allowing administrators to handle server tasks safely over HTTPS. It plays a crucial role in secure server administration in hosting environments where protecting credentials and sensitive operations is essential.

Web ServicesSecurityCloud
Secure

Port 2096

TCP

cPanel SSL Webmail

Port 2096 is commonly used by cPanel's webmail service over an encrypted SSL/TLS connection. It enables users to securely access their email accounts via a web-based interface, providing convenient email management for domains hosted on servers utilizing cPanel. The SSL encryption ensures data privacy during transmission, protecting sensitive email content from interception by unauthorized parties.

Web ServicesEmailSecurity
Secure

Port 8009

TCP

Apache JServ Protocol (AJP)

Port 8009 is primarily used by the Apache JServ Protocol (AJP), which facilitates communication between web servers like Apache HTTP and servlet containers such as Apache Tomcat. It enables the passing of requests and responses efficiently and is commonly used for load balancing and proxying dynamic content. As a binary protocol, AJP is faster than traditional HTTP forwarding, but improper configuration may expose applications to security risks.

Web ServicesNetwork Services
Insecure

Port 14439

TCP

APRS UI-WebServer

Port 14439 is primarily used by the UI-WebServer component of APRS UI-View, a Windows program for Amateur Radio enthusiasts leveraging APRS (Automatic Packet Reporting System). It facilitates remote web-based access to APRS data, enabling users to monitor real-time tracking information and exchange messages via a web browser. This allows a convenient interface for radio operators and remote users to access and manage APRS transmissions.

Web ServicesIoT
Insecure

Port 5000

TCP

Commplex Main

Port 5000, known as Commplex Main, is a versatile port primarily associated with common network communications. It is used by various services, development frameworks, and applications for handling web and API traffic, remote administration interfaces, and network testing. Due to its flexible nature, this port often serves as a default or fallback listening port for many applications, making it prevalent in diverse environments.

Web ServicesNetwork Services
Insecure

Port 8500

TCP

ColdFusion Server

Port 8500 is most commonly associated with Adobe ColdFusion Server's default web service for development and testing environments. It can also serve as the default port for legacy applications such as Duke Nukem 3D multiplayer hosting. Primarily, it functions as a development HTTP service that allows developers to create, test, and manage ColdFusion applications before deployment to production servers.

Web Services
Insecure

Port 2381

TCP

HP Insight Manager Web

Port 2381 is the default port used by HP Insight Manager's embedded web server interface. This management tool allows administrators to remotely monitor, control, and maintain Hewlett-Packard servers and hardware. Access via an HTTP-based browser interface simplifies system management and offers visibility into hardware status, configuration, and alerts.

Web ServicesNetwork ServicesSystem
Insecure

Port 1025

TCP

NFS / IIS / Teradata

Port 1025 is commonly associated with multiple services, including Network File System (NFS), Microsoft Internet Information Services (IIS) administration, and Teradata database systems. These services may use this high-numbered port dynamically or for specific management, file sharing, or database communication functions.

Web ServicesDatabasesFile Transfer
Insecure

Port 9000

TCP

SqueezeCenter

Port 9000 is primarily used by Logitech SqueezeCenter (formerly SlimServer) to provide its web-based user interface and stream audio content to Squeezebox devices and clients. This application allows users to manage, control, and access their music libraries remotely through an intuitive web portal and facilitates network audio streaming.

Web ServicesStreamingMedia
Insecure

Port 8443

TCP

Plesk/Tomcat SSL

Port 8443 is commonly used for secure web-based administrative interfaces such as the SW Soft Plesk Control Panel, Apache Tomcat Manager over SSL, and Promise WebPAM SSL management. Typically, it facilitates encrypted communications for web applications running outside the default HTTPS port (443), enabling secure management and service access without conflicting with standard HTTPS content.

Web ServicesRemote AccessCloud
Secure

Port 2082

TCP

cPanel Unencrypted Access

Port 2082 is commonly used for accessing the cPanel web hosting control panel over an unencrypted HTTP connection. It provides administrators and users a graphical interface to manage web hosting accounts, websites, databases, email accounts, and server configurations. Being an unencrypted default access port, it transmits data in plaintext, which exposes sensitive credentials and information to network interception, making its use deprecated in favor of secure alternatives.

Web ServicesSecurity
Insecure

Port 9999

UDP

Urchin Analytics

Urchin Web Analytics is a discontinued web traffic analysis software suite, historically used to analyze web server log files and provide insightful reports on website visitors, behaviors, and traffic sources. It was a popular tool for webmasters and marketers before being acquired and eventually phased out by Google in favor of Google Analytics. Port 9999 was often utilized in default setups for the Urchin administrative console or remote data collection agents.

Web ServicesSystem
Insecure

Port 9800

UDP

WebCT e-learning

Port 9800 is primarily associated with WebCT, a pioneering e-learning portal used to deliver online educational content, facilitate virtual classrooms, and manage coursework. It provided a web-based platform enabling universities and colleges to conduct blended and distance learning programs effectively.

Web ServicesCloud
Insecure

Port 843

TCP

Adobe Flash Socket Policy

Port 843 is primarily associated with the Adobe Flash socket policy server, which was used historically to deliver cross-domain policy files to Flash applications. This enabled Flash clients embedded in browsers or standalone applications to determine whether they were allowed to establish socket connections to specific servers. Its usage peaked during the prominence of Adobe Flash content across the web, but it has since declined considerably due to the deprecation of Flash technology.

Web ServicesSecurity
Insecure

Port 9300

TCP

IBM Cognos 8 SOAP BI

Port 9300 is predominantly used by IBM Cognos 8 for Business Intelligence through its SOAP-based services, facilitating data querying, analysis, reporting, and performance management. This port enables client applications and web services to communicate with the Cognos server to generate insights and analytics essential for business-driven decisions.

Web ServicesCloud
Insecure

Port 1313

TCP

Xbiim Canvii Server

Port 1313 is primarily associated with the Xbiim service, specifically the Canvii server, which facilitates multimedia content distribution, interactive media applications, or custom data transfers for specialized environments.

Web ServicesMedia
Insecure

Port 9000

TCP

Buffalo NAS Web Access

Port 9000 is primarily used by Buffalo Technology's LinkStation and TeraStation network-attached storage (NAS) devices to provide web-based access to stored files and configure device settings. It allows users to connect remotely or locally via a web browser to upload, manage, and share files securely within their network environment.

Web ServicesFile TransferIoT
Insecure

Port 8086

TCP

HELM Control Panel

HELM is a web-based Windows hosting automation control panel used by hosting providers to manage web hosting services, customer accounts, reseller management, billing, and server configuration through an intuitive graphical interface accessible via web browsers.

Web ServicesSystemCloud
Insecure

Port 82

UDP

Torpark Control

Port 82 is commonly associated with alternative web service configurations or specialized control functions, such as for proxy networks like Torpark. It is sometimes used for managing Torpark, a privacy-centric portable web browsing system designed to anonymize internet usage by routing traffic over the Tor network.

Web ServicesSecurity
Insecure

Port 2086

TCP

WebHost Manager

Port 2086 is the default port used for accessing WebHost Manager (WHM), a powerful administrative control panel built by cPanel. WHM enables server administrators and resellers to manage hosting accounts, configure servers, handle security, and perform numerous server management operations effortlessly. By default, it operates over an unencrypted HTTP connection, though it has a secure counterpart on a different port.

Web ServicesNetwork Services
Insecure

Port 4993

TCP

Home FTP Server Web UI

Port 4993 is predominantly associated with the web interface of Home FTP Server, an application designed for personal file sharing. It enables users to remotely manage their FTP server via a web browser, providing a convenient and user-friendly method to configure server settings, users, and access permissions without requiring direct console access.

Web ServicesSecurityFile Transfer
Insecure

Port 1935

TCP

RTMP

The Real Time Messaging Protocol (RTMP) is a proprietary protocol developed by Macromedia, now owned by Adobe, primarily used for high-performance transmission of audio, video, and data between a server and Flash player. Operating over TCP port 1935, RTMP enables low-latency streaming which contributed to Flash's dominance in web video delivery during its peak. Despite Flash's decline, RTMP remains popular in live streaming infrastructure and content delivery due to its robustness, simplicity, and widespread support.

Web ServicesStreamingMedia
Insecure

Port 2095

TCP

cPanel Webmail

Port 2095 is primarily used by cPanel hosting control panel installations for providing unsecured webmail access. This allows users to access their email through a web interface when connecting to their hosting provider's cPanel-managed services. Despite its convenience, this port transmits data in plaintext, making encrypted alternatives recommended for secure communication.

Web ServicesEmail
Insecure

Port 2809

TCP

IBM WebSphere WAS Bootstrap RMI

Port 2809 is primarily used by IBM WebSphere Application Server (WAS) for its bootstrap and Remote Method Invocation (RMI) default communications. It allows Java clients and other middleware to connect to the WebSphere server for enterprise Java applications' initialization, remote procedure calls, and distributed object management. As a key component in enterprise middleware infrastructure, this port plays a critical role in establishing connections with WebSphere services, aiding in the deployment, management, and interaction with Java EE applications.

Web ServicesCloud
Insecure

Port 9800

TCP

WebDAV Source

WebDAV (Web Distributed Authoring and Versioning) Source on port 9800 facilitates collaborative editing and file management over the web. It extends the HTTP protocol, allowing users to create, change, and move documents directly on a server, streamlining content sharing and version control across distributed environments.

Web ServicesFile Transfer
Insecure

Port 3051

TCP

Galaxy Server

Galaxy Server by Gateway Ticketing Systems is a comprehensive, enterprise ticketing and access control software primarily used by theme parks, museums, zoos, and other attractions to manage ticket sales, admissions, and revenue operations. It provides integration of multiple sales channels and supports real-time transaction processing.

Web ServicesSystemCloud
Insecure

Port 8123

TCP

Polipo Proxy

Polipo is a lightweight caching and forwarding web proxy designed to speed up browsing by reusing network connections and reducing bandwidth consumption. It serves as an intermediary between web clients and servers, optimizing traffic and caching frequently accessed web resources. Its streamlined design makes it particularly suitable for embedded systems or situations where resource efficiency is critical.

Web ServicesSecurity
Secure

Port 8087

TCP

Plesk Control Panel

Parallels Plesk Control Panel (Plesk) is a popular web hosting control panel that provides a graphical interface and automation tools designed to simplify the management of websites, mail services, databases, and hosting accounts on a server. It allows administrators and resellers to efficiently manage multiple websites and streamline hosting operations through an intuitive dashboard.

Web ServicesSystem
Insecure

Port 119

TCP

NNTP

Network News Transfer Protocol (NNTP) facilitates the distribution, retrieval, and posting of Usenet articles, which function similarly to online forum messages across a distributed network of news servers. Primarily designed for reading and managing discussion groups, NNTP streamlines communication by enabling fast article transfers, centralized indexing, and efficient management of a vast amount of newsgroup content.

Web ServicesVoice and Chat
Insecure

Port 8118

TCP

Privoxy Web Proxy

Privoxy is a non-caching web proxy designed to protect user privacy and block advertisements. It operates with filtering capabilities for HTTP traffic, allowing removal of banners, pop-ups, and intrusive content on websites, while offering users control over their browsing experience and improved privacy.

Web ServicesSecurity
Secure

Port 3235

TCP

Galaxy Network Service

**Galaxy Network Service (GNS)** is designed to facilitate communication and data exchange for Gateway Ticketing Systems, widely used in ticketing and access control across entertainment venues, museums, and attractions. It helps back-end ticketing servers, point-of-sale devices, web portals, and entry control systems stay connected and synchronized, supporting high-volume transactions and seamless visitor management.

Web ServicesNetwork Services
Insecure

Port 90

TCP

PointCast

**PointCast** was an early push technology service prominent in the late 1990s, which delivered personalized news and information to users' desktops over the internet, typically via a screensaver interface. It relied heavily on port 90 for communication, using both TCP and UDP protocols to transfer data streams and content updates.

Web ServicesStreaming
Insecure

Port 70

TCP

Gopher

The Gopher protocol is a distributed document search and retrieval protocol designed for distributing, searching, and retrieving documents over the Internet. It preceded the World Wide Web and offered a menu-driven interface to access text-based resources. Although largely obsolete today, Gopher played a critical role in early Internet navigation and information access.

Web ServicesNetwork Services
Insecure

Port 20000

UDP

Usermin User Tool

Usermin is a web-based interface that allows users to manage various aspects of their UNIX/Linux accounts. It provides functionalities like changing passwords, managing email filters, viewing emails, and editing files through an easy-to-use GUI accessible via web browsers.

Web ServicesSystem
Insecure

Port 24465

TCP

Tonido Directory Server

Tonido Directory Server operates as the central access point for Tonido—a cross-platform personal cloud and peer-to-peer (P2P) sharing platform. It facilitates device discovery, management, secure login, and resource listing for users running private Tonido servers. End-users can remotely access, sync, and share files across devices without hosting data on third-party servers, offering greater privacy and control.

Web ServicesFile TransferCloud
Insecure

Port 8087

TCP

Hosting Accelerator Panel

Port 8087 is commonly utilized by Hosting Accelerator, a web hosting control panel designed to simplify the management of hosted environments. It provides an interface for administrators to oversee hosting services, manage domains, email accounts, databases, and other critical components of web hosting infrastructure.

Web ServicesSystemCloud
Insecure

Port 8222

UDP

VMware Server UI (Insecure)

Port 8222 is primarily associated with the VMware Server Management User Interface, which provides web-based access to VMware virtualization servers. Notably, connections on this port are unsecured, exposing management functions without encryption and posing potential security risks. It is commonly seen alongside its secure counterpart on port 8333.

Web ServicesSystemVirtualization
Insecure

Port 8333

UDP

VMware Server UI (Secure)

Port 8333 is commonly used by VMware Server as a secure web interface for management. This interface provides administrators with access to control and configure virtual machines remotely through a browser-based console, offering convenient virtualization management capabilities.

Web ServicesCloudVirtualization
Insecure

Port 5108

TCP

VPOP3 Webmail

VPOP3 Mail Server Webmail provides a web-based interface for users to access their email hosted on VPOP3 servers. It enables convenient email management via standard web browsers, offering features such as sending, receiving, and organizing emails without requiring dedicated email client software.

Web ServicesEmail
Insecure

Port 1085

TCP

WebObjects

WebObjects is an application framework developed by Apple for building web-based applications. It provides a set of tools for creating scalable enterprise applications that run on Java technologies, with frameworks supporting rapid development and deployment. Port 1085 is commonly used by WebObjects services for communication over the network during application runtime.

Web Services
Insecure

Port 32123

TCP

x3Lobby

x3Lobby is a port used by the x3Lobby application for internet communication.

Web ServicesNetwork Services
Insecure

Port 4847

TCP

Quadrion WebFresh

Port 4847 is officially registered for Web Fresh Communication services tied to Quadrion Software and Odorless Entertainment. It supports both TCP and UDP protocols, facilitating diverse communication needs across various applications associated with these entities. While it provides flexible connectivity for custom web and multimedia interactions, administrators should remain mindful of its use to ensure system integrity and security.

Web ServicesMedia
Insecure

Port 11211

UDP

Memcached

Memcached is a high‑performance, distributed memory caching system designed to optimize dynamic web applications by alleviating database load. It temporarily stores key-value pairs in RAM to accelerate data retrieval and reduce latency for frequently accessed data.

Web ServicesDatabases
Insecure

Port 19638

TCP

Ensim Control Panel

Ensim Control Panel is an interface for the Ensim hosting automation platform, which enables administrators and resellers to manage web hosting services, customer accounts, websites, email configurations, and other server settings in a simplified, accessible fashion. It is designed to streamline hosting management with user-friendly graphical tools backed by server-side automation.

Web ServicesSystemCloud
Insecure

Port 18104

TCP

RAD PDF Service

RAD PDF Service is a server component for the RAD PDF library, allowing web applications to display, edit, and manage PDF documents directly in the browser without the need for third-party PDF viewers. It acts as a backend service that handles PDF file rendering, annotation, and secure distribution, supporting integration with various web technologies. This service enables rich PDF interaction capabilities within enterprise web solutions, streamlining workflow and document management.

Web ServicesFile Transfer
Insecure

Port 692

TCP

Hyperwave ISP

Hyperwave ISP is an official port associated with the Hyperwave Internet Information Server Platform, primarily supporting enterprise-level content management and web publishing solutions. It facilitates communication between client applications and the server backend, enabling functionalities such as content retrieval, indexing, and system management over a network connection.

Web ServicesSystem
Insecure

Port 43

TCP

WHOIS

WHOIS is a query and response protocol commonly used for querying databases of Internet resources such as domain names and IP address registrations. Often used by network administrators, cybersecurity professionals, and domain registrars, it provides useful information about domain ownership, status, and contacts. Originally developed as a simple and open service, it still plays a vital role in Internet governance and investigations.

Web ServicesNetwork Services
Insecure

Port 7880

TCP

PowerSchool Gradebook

PowerSchool Gradebook Server is a component of the PowerSchool Student Information System, facilitating communication between client applications and the core server for managing gradebooks, assignments, and educational records. It typically operates over both TCP and UDP and is widely deployed in educational institutions to streamline grading workflows.

Web ServicesSystemCloud
Insecure

Port 700

TCP

Extensible Provisioning Protocol

Extensible Provisioning Protocol (EPP) is a flexible application layer protocol designed for reliable and secure communications between Internet domain name registrars and registries. Standardized in RFC 5734, it facilitates operations such as domain registration, management, and transfer. EPP primarily uses XML over TCP for structured data exchange and has become the industry standard for automated provisioning within domain name systems.

Web ServicesNetwork Services
Insecure

Port 5433

TCP

Bouwsoft Server

Bouwsoft server operates on port 5433, typically providing file-sharing and web interface capabilities to users. It allows for document management, project collaboration, and remote access through its proprietary services, primarily aimed at the construction and building management industry.

Web ServicesFile Transfer
Insecure

Port 20720

TCP

Symantec i3 Web GUI

Symantec i3 Web GUI Server provides a browser-based management interface for the Symantec i3 performance monitoring suite, facilitating administrators to manage, configure, and monitor applications in real time.

Web ServicesNetwork Services
Insecure

Port 648

TCP

Registry Registrar Protocol

Registry Registrar Protocol (RRP) is a network protocol primarily used to facilitate communication between domain name registrars and a registry. It allows registrars to perform domain management operations such as registration, deletion, updating, and querying of domain names held by the registry. RRP streamlines the domain provisioning process in top-level domain management systems, serving as a key component in early domain registration services before the advent of newer protocols like EPP.

Web ServicesNetwork Services
Insecure

Port 9306

TCP

Sphinx API

Port 9306 is commonly used by Sphinx Search, a popular open-source full-text search server, via its native binary protocol. This port facilitates communication between client applications and the Sphinx server for efficient, high-performance search queries across large datasets. The native API provides optimized indexing and retrieval, allowing developers to build scalable search features within websites or applications.

Web ServicesDatabases
Insecure

Port 504

TCP

Citadel Groupware

Port 504 is primarily used by Citadel groupware, a collaborative client-server platform offering email, calendar, contacts, bulletin boards, and more. This port facilitates dedicated Citadel protocol communications between specialized clients and the Citadel server, enabling multiservice access within the unified groupware environment. Both TCP and UDP are supported for flexible and reliable data transfer, underpinning internal messaging, directory access, and real-time collaboration functions.

Web ServicesEmailVoice and Chat
Insecure

Port 532

TCP

NetNews Service

Port 532, designated as NetNews, was historically used for distributing network news within USENET and other news delivery systems. While largely obsolete for public services in the modern internet, it exemplifies early distributed communication protocols that formed the backbone of sharing discussions before the widespread adoption of web-based forums and social media.

Web ServicesNetwork Services
Insecure

Port 542

TCP

Commerce Services

**Port 542** is associated with commerce and transaction applications, facilitating data exchange in online business frameworks. It traditionally supports services that enable secure and managed financial transactions, order processing, and related activities within e-commerce and business-to-business transaction environments.

Web ServicesCloud
Insecure

Port 9312

TCP

SphinxQL

SphinxQL is a SQL-like query language used by the Sphinx search server to efficiently retrieve indexed data. It enables developers to perform complex full-text searches and data manipulations, similar to interacting with a traditional relational database. Typically communicating over port 9312, SphinxQL offers a robust solution for integrating scalable, high-performance full-text search capabilities into applications.

Web ServicesDatabases
Insecure

Port 4664

TCP

Wrapper: Offline asset server

<p>Wrapper: Offline asset server</p>

Web ServicesSystem
Insecure