Network

What is Port?

A port is a 16-bit number that identifies one network service on a host, so a single IP address can run many services at once. TCP and UDP each have their own range from 0 to 65535. Proxy endpoints are written host:port, and the port decides which listener answers you.

TCP and UDP maintain separate port spaces, so UDP 53 and TCP 53 are different listeners that happen to share a number. IANA splits the range into well-known ports 0-1023, registered ports 1024-49151, and a dynamic range above that. On Unix-like systems, binding anything below 1024 needs elevated privileges. Web traffic lands on 80 and 443. SOCKS proxies default to 1080, Squid ships on 3128, and 8080 and 8888 are common HTTP proxy defaults, though nothing in the protocol enforces any of those numbers.

Proxy providers use ports in two patterns. In a per-port setup, each port on the gateway maps to one fixed upstream device or session, so port 10001 is one modem and 10002 is another, and you scale by taking more ports. In a gateway setup, everyone connects to a single port and the session is chosen by parameters carried in the username. Providers often publish the same service on 443 as well, because outbound firewalls in offices and cloud environments frequently permit only 80 and 443.

Two failures account for most port trouble. A refused connection means a machine answered and nothing was listening on that port. A connection that hangs and then times out means something dropped the packets without replying, which is what an egress filter or a cloud security group looks like from the outside. Under heavy concurrency you can also run out of source ports, since every outbound TCP connection consumes an ephemeral port on your own machine, and Linux defaults to a local range of roughly 32768-60999.

Port numbers move around, too. A NAT device or a container runtime can map an external port to a different internal one, so the number your client dials is not always the number the service binds to. When a proxy string fails, read it left to right before debugging anything else: scheme, host, port, then credentials. A port copied one digit short from a dashboard produces exactly the same refused connection as a dead endpoint, and it costs nothing to rule out first.

Where you meet it

You meet ports when you paste a proxy string into a scraper, a browser extension or an antidetect profile, and again when something will not connect. A dashboard that hands you a block of numbered ports is handing you separate sessions or devices, not one service repeated. On locked-down company networks and inside cloud VPCs, the port a provider gives you decides whether you can reach it at all, which is why 443 endpoints exist.

Common questions

What port number do proxies use?

There is no single standard. HTTP proxies commonly listen on 8080, 3128 or 8888, SOCKS proxies on 1080, and commercial providers assign high-numbered ports per customer or per device. Many also publish an endpoint on 443 so traffic passes outbound firewalls that allow only web ports. Use the number your provider gives you.

Can two services share the same port?

Not on the same IP address and protocol. An operating system allows one listener per combination of address, port and protocol, so a second bind fails with an address-already-in-use error. The same port number can be reused on a different IP, and TCP 8080 and UDP 8080 are separate listeners that never collide.

Why does my proxy port time out instead of refusing the connection?

A refusal means a host answered and had nothing listening there. A timeout means the packets were dropped without any reply, which is the signature of a firewall, a cloud security group or an ISP filter sitting between you and the proxy. Testing from another network tells the two cases apart.

Related terms

Endpoint
A proxy endpoint is the address a client dials to reach a proxy, a hostname or IP plus a port, usually with credentials attached. Written as host:port, it is the single string you paste into a browser, scraper or antidetect profile. One endpoint can map to one fixed device or to a whole rotating pool.
HTTP Proxy
An HTTP proxy is a server that forwards HTTP requests on a client's behalf, parsing the protocol rather than blindly relaying bytes. The client sends the full target URL in the request line, or issues a CONNECT to tunnel an HTTPS session. Proxies conventionally listen on ports such as 8080 or 3128; port 80 belongs to the origin web server.
IP Address
An IP address is the numeric identifier a device presents on an IP network so packets can be routed to and from it. IPv4 writes 32 bits as four decimal octets, such as 203.0.113.7. IPv6 writes 128 bits as hexadecimal groups, such as 2001:db8::1. Every request a server logs is tied to one.
IPv4
IPv4 is version 4 of the Internet Protocol, addressing hosts with 32 bits written as four dot-separated octets, which gives roughly 4.3 billion addresses. The top-level pool ran dry in 2011, pushing providers toward private addressing, carrier-grade NAT and a paid transfer market. Nearly all proxy traffic still runs over IPv4 because that is what target sites accept.
IPv6
IPv6 is version 6 of the Internet Protocol, addressing hosts with 128 bits written as eight hexadecimal groups, such as 2001:db8::1. The space is large enough that carriers assign each subscriber a whole subnet, usually a /64 or wider, so reputation systems score prefixes instead of single addresses. Adoption is broad but far from universal.
CGNAT
Carrier-grade NAT is address translation performed by an ISP rather than in the customer's router, putting many subscribers behind one public IPv4 address. Mobile networks depend on it. Each customer holds a private or shared-range address, usually from 100.64.0.0/10, and the carrier rewrites the source address and port on every outbound flow.
NAT
Network Address Translation rewrites the address and port fields of packets as they cross a router, letting many private hosts share one public IP. The router keeps a translation table, mapping each outbound flow to a free public port and reversing the rewrite on replies. Home routers do this for a household; carriers do it for whole regions.
ASN
An Autonomous System Number identifies a network that announces its own IP address ranges to the rest of the internet through BGP. Every routable address sits inside a prefix announced by some AS, so the ASN behind an IP tells you who operates it - a mobile carrier, a hosting provider, a home ISP or a corporate network.

Real 4G/5G mobile and residential IPs

PROXIES.SX runs carrier IPs in 100+ countries with HTTP and SOCKS5 on every endpoint. $4/GB down to $2.40/GB at volume, free endpoints and rotation, and your GB never expire.