5190 was the default port, but if it wasn't open, any other port would work. You could have the client do a scan to try ports until one worked.

It'd be fascinating to get an at-scale timeline of ports blocked from common client connection points.

I assume it's drifted over time, but couldn't guess which ways / why. (Other than converging on blocking all non-443)