- Patch VPN gateways quickly: they are a top initial access target.
- Use certificates or MFA rather than shared secrets.
- Investigate unexpected tunnels and proxies: they are also attacker tools.
VPN, tunnels & proxies ports
IPsec, OpenVPN, WireGuard, PPTP, SOCKS and other tunnels. 64 ports, most common first.
| Port | Service | Transport | Risk | Encryption |
|---|---|---|---|---|
| 1080 | SOCKS proxy socks | TCP UDP | 7/10 high | no |
| 3128 | Squid proxy ndl-aas | TCP UDP | 6/10 high | no |
| 1194 | OpenVPN openvpn | UDP TCP | 3/10 moderate | yes |
| 51820 | WireGuard | UDP | 2/10 low | yes |
| 500 | IKE (IPsec) isakmp | UDP TCP | 4/10 moderate | yes |
| 4500 | IPsec NAT-T ipsec-nat-t | UDP TCP | 3/10 moderate | yes |
| 1723 | PPTP pptp | TCP UDP | 8/10 high | no |
| 363 | RSVP Tunnel rsvp_tunnel, rsvp-tunnel | TCP UDP | - | - |
| 470 | scx-proxy scx-proxy | TCP UDP | - | - |
| 604 | TUNNEL tunnel | TCP UDP | - | - |
| 1078 | Avocent Proxy Protocol avocent-proxy | TCP UDP | - | - |
| 1164 | QSM Proxy Service qsm-proxy | TCP UDP | - | - |
| 1180 | Millicent Client Proxy mc-client | TCP UDP | - | - |
| 1293 | PKT-KRB-IPSec pkt-krb-ipsec | TCP UDP | - | - |
| 1795 | dpi-proxy dpi-proxy | TCP UDP | - | - |
| 1994 | cisco serial tunnel port stun-port | TCP UDP | - | - |
| 2218 | Bounzza IRC Proxy bounzza | TCP UDP | - | - |
| 2277 | Bt device control proxy bluectrlproxy | TCP UDP | - | - |
| 2303 | Proxy Gateway proxy-gateway | TCP UDP | - | - |
| 2335 | ACE Proxy ace-proxy | TCP UDP | - | - |
| 2644 | Travsoft IPX Tunnel travsoft-ipx-t | TCP UDP | - | - |
| 2790 | PLG Proxy plgproxy | TCP UDP | - | - |
| 2865 | pit-vpn pit-vpn | TCP UDP | - | - |
| 2876 | SPS Tunnel sps-tunnel | TCP UDP | - | - |
| 3190 | ConServR Proxy csvr-proxy | TCP UDP | - | - |
| 3191 | ConServR SSL Proxy csvr-sslproxy | TCP UDP | - | - |
| 3206 | IronMail POP Proxy ironmail | TCP UDP | - | - |
| 3210 | Flamenco Networks Proxy flamenco-proxy | TCP UDP | - | - |
| 3265 | Altav Tunnel altav-tunnel | TCP UDP | - | - |
| 3277 | AWG Proxy awg-proxy | TCP UDP | - | - |
| 3307 | OP Session Proxy opsession-prxy | TCP UDP | - | - |
| 3346 | Trnsprnt Proxy trnsprntproxy | TCP UDP | - | - |
| 3568 | DOF Secure Tunnel dof-tunnel-sec | TCP UDP | - | - |
| 3653 | Tunnel Setup Protocol tsp | TCP UDP | - | - |
| 3663 | DIRECWAY Tunnel Protocol dtp | TCP UDP | - | - |
| 3772 | Chantry Tunnel Protocol ctp | TCP UDP | - | - |
| 3845 | V-ONE Single Port Proxy v-one-spp | TCP UDP | - | - |
| 4112 | Apple VPN Server Reporting Protocol apple-vpns-rp | TCP UDP | - | - |
| 4176 | Translattice Cluster IPC Proxy tl-ipcproxy | TCP | - | - |
| 4187 | Cascade Proxy csc_proxy, csc-proxy | TCP | - | - |
| 4370 | ELPRO V2 Protocol Tunnel elpro_tunnel, elpro-tunnel | TCP UDP | - | - |
| 4754 | GRE-in-UDP Encapsulation gre-in-udp | UDP | - | - |
| 4755 | GRE-in-UDP Encapsulation with DTLS gre-udp-dtls | UDP | - | - |
| 5150 | Ascend Tunnel Management Protocol atmp | TCP UDP | - | - |
| 5463 | TTL Price Proxy ttlpriceproxy | TCP UDP | - | - |
| 7674 | iMQ SSL tunnel imqtunnels | TCP UDP | - | - |
| 7675 | iMQ Tunnel imqtunnel | TCP UDP | - | - |
| 7802 | Virtualized Network Services Tunnel Protocol vns-tp | UDP | - | - |
| 8001 | VCOM Tunnel vcom-tunnel | TCP UDP | - | - |
| 8081 | Sun Proxy Admin Service sunproxyadmin | TCP UDP | - | - |
| 8118 | Privoxy HTTP proxy privoxy | TCP UDP | - | - |
| 8567 | DOF Tunneling Protocol dof-tunnel | TCP UDP | - | - |
| 9889 | Port for Cable network related data proxy or repeater gt-proxy | TCP UDP | - | - |
| 12009 | Green Hills VPN ghvpn | UDP | - | - |
| 13217 | R&S Proxy Installation Assistant Service rs-pias | TCP UDP | - | - |
| 16665 | Reliable multipath data transport for high latencies axon-tunnel | TCP | - | - |
| 16666 | Vidder Tunnel Protocol vtp | UDP | - | - |
| 17234 | Integrius Secure Tunnel Protocol integrius-stp | TCP UDP | - | - |
| 22305 | CompactIS Tunnel cis | TCP UDP | - | - |
| 22343 | CompactIS Secure Tunnel cis-secure | TCP UDP | - | - |
| 30004 | Amicon FPSU-IP VPN amicon-fpsu-s | UDP | - | - |
| 38201 | Galaxy7 Data Tunnel galaxy7-data | TCP UDP | - | - |
| 44123 | Z-Wave Secure Tunnel z-wave-tunnel | TCP | - | - |
| 44322 | PCP proxy (pmproxy) pmproxy | TCP UDP | - | - |
Securing vpn, tunnels & proxies services
Other port categories
Web /tools/ports/category/web Remote access /tools/ports/category/remote-access File transfer & sharing /tools/ports/category/file-transfer Email /tools/ports/category/email Databases & caches /tools/ports/category/databases Directory & authentication /tools/ports/category/directory-auth Network services /tools/ports/category/network-services Messaging & queues /tools/ports/category/messaging Voice & chat /tools/ports/category/voice-chat Media & streaming /tools/ports/category/media IoT & industrial (ICS) /tools/ports/category/iot-ics DevOps, cloud & containers /tools/ports/category/devops Monitoring & logging /tools/ports/category/monitoring Gaming /tools/ports/category/gaming Other services /tools/ports/category/other