| :8881 | Atlasz Secure Server | TCP | Web Services | caution | 67.6k |
| :443 | HTTPS | TCPtls | Web Services | caution | 65.9k |
| :8291 | Winbox MikroTik Admin | TCP | Security | caution | 62.9k |
| :3268 | Microsoft Global Catalog (GC) | TCPUDP | Security | caution | 54.6k |
| :135 | Microsoft EPMAP | TCPUDP | Security | caution | 51.9k |
| :3128 | Squid Proxy HTTP | TCP | Web Services | caution | 45.8k |
| :8080 | HTTP Alternate | TCPtls | Web Services | caution | 44.9k |
| :7000 | Vuze HTTPS Tracker | TCPtls | Security | caution | 28.9k |
| :981 | Check Point Embedded HTTPS Management | TCPtls | Security | caution | 28.5k |
| :9091 | Openfire Admin Console (SSL) | TCPtls | Web Services | caution | 28.3k |
| :4899 | Radmin Remote Administration | TCPUDP | Security | safe | 28.3k |
| :1337 | PowerFolder P2P | TCP | Security | caution | 27.1k |
| :5555 | Freeciv | TCP | Security | caution | 26.9k |
| :3269 | Microsoft Global Catalog SSL | TCPUDPtls | Security | caution | 26.4k |
| :2484 | Oracle SSL Listener | TCPUDPtls | Security | caution | 25.0k |
| :4712 | McAfee Web Gateway GUI | TCPtls | Web Services | caution | 24.8k |
| :4843 | OPC UA over TLS/SSL | TCPUDPtls | Security | caution | 24.6k |
| :9090 | McAfee Web Gateway Proxy | TCPtls | Web Services | caution | 24.3k |
| :9001 | Tor Network | | Security | caution | 23.7k |
| :749 | Kerberos Admin | TCPUDP | Security | safe | 23.6k |
| :992 | Telnet over TLS/SSL | TCPUDPtls | Security | caution | 23.5k |
| :8081 | HTTP Alternate Port | TCP | Web Services | caution | 23.3k |
| :1337 | WASTE Encrypted Sharing | TCP | Security | caution | 22.9k |
| :11371 | OpenPGP Keyserver | | Security | caution | 22.5k |
| :989 | FTPS Data | TCPUDPtls | Security | caution | 22.5k |
| :4711 | McAfee Web Gateway HTTP GUI | TCP | Web Services | caution | 22.3k |
| :8243 | Apache Synapse HTTPS Listener | TCPUDPtls | Web Services | caution | 22.3k |
| :2105 | eklogin Kerberos Remote Login | TCPUDP | Security | safe | 22.1k |
| :21022 | AMLFilter HTTPS | TCPtls | Web Services | caution | 22.0k |
| :990 | FTPS Control | TCPUDPtls | Security | caution | 21.8k |
| :21012 | AMLFilter HTTPS | TCPtls | Web Services | caution | 21.7k |
| :2222 | DirectAdmin & ESET Remote Admin | TCP | Web Services | caution | 21.6k |
| :1920 | IBM Tivoli Monitoring | TCPtls | Web Services | caution | 21.5k |
| :81 | Torpark Onion Routing | TCP | Web Services | caution | 21.4k |
| :31337 | Back Orifice RAT | TCP | Security | caution | 21.3k |
| :19226 | Panda AdminSecure Agent | TCP | Security | caution | 21.2k |
| :475 | tcpnethaspsrv | TCP | Security | caution | 20.7k |
| :21021 | AMLFilter HTTP | TCP | Web Services | caution | 20.6k |
| :22 | SSH | TCPUDPtls | Security | caution | 20.3k |
| :2083 | cPanel SSL | TCPtls | Web Services | safe | 20.3k |
| :21011 | AMLFilter HTTP | TCP | Web Services | caution | 20.2k |
| :12345 | NetBus / NetBuster | | Security | caution | 19.9k |
| :5351 | NAT-PMP | TCPUDP | Security | caution | 19.6k |
| :1521 | Oracle TNS Listener | TCP | Security | caution | 19.6k |
| :21001 | AMLFilter Admin | TCP | Security | caution | 19.2k |
| :995 | POP3S | TCPtls | Email | caution | 18.8k |
| :563 | NNTPS | TCPUDPtls | Web Services | safe | 18.1k |
| :1293 | IPSec | TCPUDPtls | Security | caution | 17.8k |
| :2087 | WHM SSL | TCPtls | Web Services | caution | 17.7k |
| :15000 | Kaspersky Network Agent | TCP | Security | caution | 17.5k |
| :2096 | cPanel SSL Webmail | TCPtls | Web Services | safe | 17.4k |
| :2053 | knetd Demultiplexer | TCP | Security | safe | 17.2k |
| :1984 | Big Brother Monitor | TCP | Security | caution | 16.8k |
| :953 | DNS RNDC | TCPUDP | Security | safe | 16.4k |
| :6697 | IRC over SSL | TCPtls | Security | caution | 16.4k |
| :5223 | XMPP over SSL | TCPtls | Security | caution | 16.3k |
| :1080 | SOCKS Proxy | TCPtls | Security | caution | 16.1k |
| :90 | DNSIX | TCPUDP | Security | safe | 16.1k |
| :6619 | Odette FTPS | TCPUDPtls | Security | caution | 16.0k |
| :10200 | fpscand Virus Scanner | TCP | Security | caution | 15.9k |
| :6646 | McAfee Agent Discovery | UDP | Security | caution | 15.8k |
| :4500 | IPSec NAT Traversal | UDPtls | Security | caution | 15.8k |
| :6679 | IRC SSL | TCPtls | Security | caution | 15.7k |
| :636 | LDAPS | TCPUDPtls | Security | caution | 15.6k |
| :1947 | Aladdin HASP License Manager | TCP | Security | caution | 15.4k |
| :1701 | L2TP & L2F | UDP | Security | caution | 15.1k |
| :1645 | RADIUS Authentication (Cisco/Juniper) | TCPUDP | Security | caution | 15.1k |
| :9898 | Tripwire FIM | TCP | Security | caution | 15.0k |
| :1434 | MSSQL Monitor | TCPUDP | Security | caution | 14.7k |
| :1236 | Symantec BindView UNIX Mgmt | TCP | Security | caution | 14.7k |
| :993 | IMAPS | TCPtls | Email | caution | 14.5k |
| :5061 | SIP over TLS | TCP | Security | caution | 14.4k |
| :533 | Netwall Emergency Broadcasts | UDP | Security | caution | 14.3k |
| :695 | IEEE-MMS-SSL | TCPtls | Security | caution | 14.3k |
| :8086 | Kaspersky Control Center | TCP | Security | caution | 14.1k |
| :2483 | Oracle Listener (Unsecure) | TCPUDP | Security | caution | 14.1k |
| :2082 | cPanel Unencrypted Access | TCP | Web Services | safe | 13.8k |
| :4116 | Smartcard TLS | TCPUDP | Security | caution | 13.6k |
| :5632 | pcAnywhere Status | UDP | Security | caution | 13.4k |
| :2083 | RadSec | TCP | Security | caution | 13.4k |
| :3424 | Xware xTrm over SSL | TCPtls | Security | caution | 13.1k |
| :15000 | psyBNC | TCP | Security | caution | 13.1k |
| :10200 | f-protd Virus Scanning Daemon | TCP | Security | caution | 13.1k |
| :1646 | RADIUS Accounting | TCPUDP | Security | caution | 13.1k |
| :843 | Adobe Flash Socket Policy | TCP | Web Services | caution | 12.9k |
| :1 | TCPMUX | TCPUDP | Security | caution | 12.9k |
| :2211 | MikroTik Dude Secure Management | TCP | Security | caution | 12.9k |
| :3008 | Miralix Proxy | TCPtls | Security | caution | 12.8k |
| :1500 | NetGuard GuardianPro Remote Management | TCP | Security | caution | 12.7k |
| :62078 | TcpWrapped (MacBook) | TCP | Security | caution | 12.4k |
| :113 | Identification Protocol | TCPUDP | Security | caution | 12.1k |
| :1501 | NetGuard GuardianPro Auth Client | UDP | Security | caution | 12.0k |
| :22350 | CodeMeter | TCPUDP | Security | caution | 12.0k |
| :19999 | DNP3 Secure | | Security | caution | 12.0k |
| :1812 | RADIUS Auth Protocol | TCPUDP | Security | caution | 12.0k |
| :7777 | Tini Backdoor | TCP | Security | caution | 11.6k |
| :82 | Torpark Control | UDP | Web Services | caution | 11.5k |
| :49 | TACACS | TCPUDP | Security | caution | 11.3k |
| :1723 | PPTP | TCPUDP | Security | caution | 11.3k |
| :543 | klogin (Kerberos Login) | TCP | Security | safe | 11.3k |
| :1194 | OpenVPN | TCPUDP | Security | caution | 11.2k |
| :4993 | Home FTP Server Web UI | TCPUDP | Web Services | caution | 11.1k |
| :1026 | Microsoft DCOM | TCP | Security | caution | 10.9k |
| :5355 | LLMNR | TCPUDP | Security | caution | 10.8k |
| :161 | SNMP | UDP | Security | caution | 10.8k |
| :1581 | MIL-STD-2045-47001 VMF | UDP | Security | caution | 10.6k |
| :464 | Kerberos Password Change | TCPUDP | Security | safe | 10.6k |
| :25 | SMTP | TCP | Email | caution | 10.5k |
| :8087 | Kaspersky AV Control Center | UDP | Security | caution | 10.5k |
| :465 | SMTP over SSL | TCPtls | Email | caution | 10.4k |
| :2086 | GNUnet | TCP | Security | caution | 10.3k |
| :38 | RAP - Internet Route Access Protocol | TCPUDP | Security | caution | 10.3k |
| :5631 | Symantec pcAnywhere | TCP | Security | caution | 10.3k |
| :4100 | WatchGuard Auth Applet | | Security | caution | 10.1k |
| :7787 | GFI EventsManager | TCP | Security | caution | 10.1k |
| :8123 | Polipo Proxy | TCPtls | Web Services | caution | 10.1k |
| :544 | Kerberos Remote Shell (kshell) | TCP | Security | safe | 10.0k |
| :370 | SecureCast | TCPUDP | Security | caution | 10.0k |
| :88 | Kerberos | TCPUDP | Security | safe | 10.0k |
| :3999 | Norman Scanning Service | TCPUDP | Security | caution | 9.9k |
| :1241 | Nessus Scanner | TCPUDP | Security | caution | 9.9k |
| :8118 | Privoxy Web Proxy | TCPtls | Web Services | caution | 9.8k |
| :587 | SMTP Submission | TCP | Email | caution | 9.8k |
| :5000 | VTun VPN | TCPUDP | Security | caution | 9.7k |
| :8702 | SoftPerfect Bandwidth Manager | UDP | Security | caution | 9.7k |
| :691 | Exchange Routing | TCP | Email | caution | 9.7k |
| :19 | CHARGEN | TCPUDP | Security | caution | 9.5k |
| :162 | SNMP Trap | TCPUDP | Security | caution | 9.5k |
| :1169 | Tripwire | TCPUDP | Security | caution | 9.4k |
| :5852 | Adeona OpenDHT Client | TCP | Security | caution | 9.3k |
| :2223 | Office OS X Anti-Piracy Monitor | UDP | Security | caution | 9.3k |
| :514 | RSH / REMSH | TCP | Security | caution | 9.2k |
| :500 | ISAKMP | UDP | Security | caution | 9.1k |
| :22136 | FLIR Camera Protocol | TCP | Security | caution | 9.1k |
| :6502 | Netop Remote Control | TCPUDP | Security | caution | 9.1k |
| :370 | CodaAuth2 Authentication | TCPUDP | Security | caution | 8.9k |
| :32245 | MMTSG | TCP | Security | caution | 8.9k |
| :4433 | Axence nVision | TCP | Security | caution | 8.9k |
| :514 | Syslog | UDP | Security | caution | 8.9k |
| :2599 | SonicWALL Antispam | TCP | Email | caution | 8.8k |
| :12012 | Axence nVision | TCP | Security | caution | 8.8k |
| :10025 | Zimbra SMTP Amavis Integration | TCP | Email | caution | 8.8k |
| :10024 | Zimbra SMTP to Amavis | TCP | Email | caution | 8.7k |
| :753 | Kerberos User Registration | UDP | Security | safe | 8.5k |
| :5110 | ProRat Server | TCP | Security | caution | 8.4k |
| :8194 | Sophos RMS | TCP | Security | caution | 8.3k |
| :12011 | Axence nVision | TCP | Security | caution | 8.3k |
| :113 | Ident | TCP | Security | caution | 8.3k |
| :9051 | Tor Control | TCP | Security | caution | 8.3k |
| :389 | LDAP | TCPUDP | Security | caution | 8.2k |
| :8089 | Splunk Daemon | TCP | Security | caution | 8.2k |
| :37659 | Axence nVision | TCP | Security | caution | 8.2k |
| :9030 | Tor Directory | TCP | Security | caution | 8.1k |
| :513 | Who Service | UDP | Security | caution | 8.1k |
| :750 | Kerberos IV | UDP | Security | safe | 8.0k |
| :3516 | Smartcard Service | TCPUDP | Security | caution | 8.0k |
| :22347 | WibuKey Protection | TCPUDP | Security | caution | 7.9k |
| :1109 | KPOP - Kerberos POP | TCP | Email | safe | 7.9k |
| :9050 | Tor SOCKS Proxy | TCP | Security | caution | 7.8k |
| :10050 | Zabbix Agent | TCPUDP | Security | caution | 7.8k |
| :3605 | ComCam IO | UDP | Security | caution | 7.8k |
| :3544 | Teredo | UDP | Security | caution | 7.8k |
| :751 | Kerberos Master Authentication | TCPUDP | Security | safe | 7.8k |
| :5421 | NetSupport Manager | TCPUDP | Security | caution | 7.7k |
| :3868 | Diameter Protocol | TCPSCTP | Security | caution | 7.7k |
| :3945 | EMCADS | TCPUDP | Security | caution | 7.6k |
| :754 | Kerberos Slave Propagation | TCP | Security | safe | 7.6k |
| :2002 | Secure Access Control Server (ACS) | TCP | Security | caution | 7.5k |
| :1524 | Ingreslock | TCPUDP | Security | caution | 7.5k |
| :8192 | Sophos RMS | TCP | Security | caution | 7.4k |
| :752 | Kerberos kpasswd Server | UDP | Security | safe | 7.3k |
| :5721 | Kaseya | TCPUDP | Security | caution | 7.2k |
| :1813 | RADIUS Accounting | TCPUDP | Security | caution | 7.2k |
| :911 | NCA over OpenSSH | TCPtls | Security | caution | 7.1k |
| :6343 | sFlow Monitoring | UDP | Security | caution | 7.1k |
| :8193 | Sophos RMS | TCP | Security | caution | 7.0k |
| :5051 | Symantec ITA Agent | TCP | Security | caution | 7.0k |
| :20014 | DART Reporting Server | TCP | Security | caution | 6.8k |
| :33434 | traceroute | TCPUDP | Security | caution | 6.7k |
| :2221 | ESET Antivirus Updates | TCP | Security | caution | 6.7k |
| :12222 | LWAPP Data | UDP | Security | caution | 6.7k |
| :3606 | Splitlock Server | TCPUDP | Security | caution | 6.5k |
| :1470 | Kiwi Log Server | TCP | Security | caution | 6.4k |
| :1985 | HSRP | UDP | Security | caution | 6.3k |
| :1589 | Cisco VQP / VMPS | UDP | Security | caution | 6.2k |
| :829 | Certificate Management Protocol | TCP | Security | caution | 6.1k |
| :783 | SpamAssassin spamd | TCP | Email | caution | 6.0k |
| :465 | SMTPS | TCP | Email | caution | 6.0k |
| :5176 | ConsoleWorks UI | TCP | Security | caution | 6.0k |
| :6 | Unassigned Port | TCPUDP | Security | safe | 6.0k |
| :760 | Kerberos Registration | TCPUDP | Security | safe | 6.0k |
| :8 | Unassigned Port | TCPUDP | Security | safe | 5.9k |
| :2967 | Symantec AV Corporate | TCP | Security | caution | 5.9k |
| :318 | PKIX Time Stamp Protocol | TCPUDP | Security | safe | 5.7k |
| :750 | rfile Protocol | TCP | Security | caution | 5.6k |
| :652 | DTCP | TCP | Security | caution | 5.6k |
| :14 | Unassigned Port | TCPUDPSCTP | Security | safe | 5.5k |
| :808 | Microsoft Net.TCP Port Sharing | UDP | Security | caution | 5.4k |
| :2219 | NetIQ NCAP | TCPUDP | Security | caution | 5.4k |
| :12223 | LWAPP Control | UDP | Security | caution | 5.4k |
| :8116 | Check Point CCP | UDP | Security | caution | 5.3k |
| :40815 | Rapid7 InsightVM Engine-to-Console | TCP | Security | caution | 5.3k |
| :3313 | Verisys FIM | TCP | Security | caution | 5.3k |
| :40814 | Rapid7 InsightVM Console-to-Engine | TCP | Security | caution | 5.3k |
| :750 | loadav | UDP | Security | caution | 5.2k |
| :604 | TUNNEL Profile (BEEP) | TCP | Security | caution | 5.1k |
| :2868 | Norman NPEP | TCPUDP | Security | caution | 5.0k |
| :752 | QRH | TCP | Security | caution | 4.9k |
| :2525 | SMTP Alternate | TCP | Email | caution | 4.9k |
| :2115 | KDM - Key Distribution Manager | TCP | Security | caution | 4.8k |
| :706 | Secure Internet Live Conferencing (SILC) | TCP | Security | caution | 4.7k |
| :27374 | Sub7 | | Security | caution | 4.7k |
| :1970 | Netop Remote Control | TCPUDP | Security | caution | 4.7k |
| :9536 | IP Fabrics Buffering | TCPUDP | Security | caution | 4.4k |
| :10115 | NetIQ Endpoint | TCPUDP | Security | caution | 4.4k |
| :10113 | NetIQ Endpoint | TCPUDP | Security | caution | 4.3k |