|
PORT
|
PROTOCOL |
KEYWORD |
DESCRIPTION |
|
5000
[Back
to Top]
|
tcp udp |
commplex-main |
filmaker.com |
|
5001
|
tcp udp |
commplex-link |
filmaker.com |
|
5002
|
tcp udp |
rfe |
Radio Free Ethernet filmaker.com |
|
5003
|
tcp udp |
fmpro-internal |
Filemaker IP filmaker.com |
|
5004
|
tcp udp |
avt-profile-1 |
fokus.gmd.de |
|
5005
|
tcp udp |
avt-profile-2 |
fokus.gmd.de |
|
5006
|
tcp udp |
wsm-server |
wrq.com |
|
5007
|
tcp udp |
wsm-server-ssl |
wrq.com |
|
5010
|
tcp udp |
telepathstart |
vnet.imb.com |
|
5011
|
tcp udp |
telepathattack |
vnet.imb.com |
|
5020
|
tcp udp |
zenginkyo-1 |
noa.nttdata.jp |
|
5021
|
tcp udp |
zenginkyo-2 |
noa.nttdata.jp |
|
5042
|
tcp udp |
asnaacceler8db |
asna.com |
|
5050
|
tcp udp |
mmcc |
multimedia conference control tool isi.edu |
|
5051
|
tcp udp |
ita-agent |
axent.com |
|
5052
|
tcp udp |
ita-manager |
axent.com |
|
5055
|
tcp udp |
unot |
cmgsolutions.com |
|
5060
|
tcp udp |
sip |
cs.columbia.edu |
|
5069
|
tcp udp |
i-net-2000-npr |
I/Net 2000-NPR csicontrols.com |
|
5071
|
tcp udp |
powerschool |
powerschool.com |
|
5145
|
tcp udp |
rmonitor-secure |
ascend.com |
|
5150
|
tcp udp |
atmp |
Ascend Tunnel Management Protocol ascend.com |
|
5151
|
tcp udp |
esri_sde |
esri.com |
|
5152
|
tcp udp |
sde-discovery |
esri.com |
|
5165
|
tcp udp |
ife_icorp |
bull.se |
|
5190
|
tcp udp |
aol |
America-Online |
|
5191
|
tcp udp |
aol-1 |
America-Online1 |
|
5192
|
tcp udp |
aol-2 |
America-Online2 |
|
5193
|
tcp udp |
aol-3 |
America-Online3 |
|
5200
|
tcp udp |
targus-aib1 |
targusinfo.com |
|
5201
|
tcp udp |
targus-aib2 |
targusinfo.com |
|
5202
|
tcp udp |
targus-tnts1 |
targusinfo.com |
|
5203
|
tcp udp |
targus-tnts2 |
targusinfo.com |
|
5232
|
tcp |
sgi-dgl |
SGI Distribution Graphics |
|
5236
|
tcp udp |
padl2sim |
|
|
5272
|
tcp udp |
pk |
eba.net |
|
5300
|
tcp udp |
hacl-hb |
HA cluster heartbeat hp.com |
|
5301
|
tcp udp |
hacl-gs |
HA cluster general service hp.com |
|
5302
|
tcp udp |
hacl-cfg |
HA cluster configuration hp.com |
|
5303
|
tcp udp |
hacl-probe |
HA cluster probing hp.com |
|
5304
|
tcp udp |
hacl-local |
HA Cluster Commands hp.com |
|
5305
|
tcp udp |
hacl-test |
HA Cluster Test hp.com |
|
5306
|
tcp udp |
sun-mc-grp |
Sun MC Group eng.sun.com |
|
5307
|
tcp udp |
sco-aip |
sco.com |
|
5308
|
tcp udp |
cfengine |
iu.hioslo.no |
|
5309
|
tcp udp |
jprinter |
bristol.com |
|
5310
|
tcp udp |
outlaws |
lucasart.com |
|
5311
|
tcp udp |
tmlogin |
east.sun.com |
|
5400
|
tcp udp |
excerpt |
Excerpt Search alma.com |
|
5401
|
tcp udp |
excerpts |
Excerpt Search Secure alma.com |
|
5402
|
tcp udp |
mftp |
starburstscom.com |
|
5403
|
tcp udp |
hpoms-ci-lstn |
cup.hp.com |
|
5404
|
tcp udp |
hpoms-dps-lstn |
cup.hp.com |
|
5405
|
tcp udp |
netsupport |
pe77@dial.pipex.com |
|
5406
|
tcp udp |
systemics-sox |
systemics.com |
|
5407
|
tcp udp |
foresyte-clear |
foresyte.com |
|
5408
|
tcp udp |
foresyte-sec |
foresyte.com |
|
5409
|
tcp udp |
salient-dtasrv |
Salient Data Server salient.com |
|
5410
|
tcp udp |
salient-usrmgr |
Salient User Manager salient.com |
|
5411
|
tcp udp |
actnet |
actresearch.com |
|
5412
|
tcp udp |
continuus |
continuus.com |
|
5413
|
tcp udp |
wwiotalk |
wonderware.com |
|
5414
|
tcp udp |
statusd |
satelnet.org |
|
5415
|
tcp udp |
ns-server |
netsoft.com |
|
5416
|
tcp udp |
sns-gateway |
firstfloor.com |
|
5417
|
tcp udp |
sns-agent |
firstfloor.com |
|
5418
|
tcp udp |
mcntp |
pilhuhn.de |
|
5419
|
tcp udp |
dj-ice |
cor.dowjones.com |
|
5420
|
tcp udp |
cylink-c |
cylink.com |
|
5421
|
tcp udp |
netsupport2 |
p.sanders@dial.pipex.com |
|
5422
|
tcp udp |
salient-mux |
salient.com |
|
5423
|
tcp udp |
virtualuser |
apple.com |
|
5426
|
tcp udp |
devbasic |
vsin.com |
|
5427
|
tcp udp |
sco-peer-tta |
sco.com |
|
5428
|
tcp udp |
telaconsol |
flounder.com |
|
5429
|
tcp udp |
base |
Billing & Accounting System Exchange ioag.de |
|
5430
|
tcp udp |
radec-corp |
softlife.co.nz |
|
5431
|
tcp udp |
park-agent |
veritas.com |
|
5432
|
tcp |
postgres |
postgres database server |
|
5454
|
tcp udp |
apc-tcp-udp-4 |
apcc.com |
|
5455
|
tcp udp |
apc-tcp-udp-5 |
apcc.com |
|
5456
|
tcp udp |
apc-tcp-udp-6 |
apcc.com |
|
5461
|
tcp udp |
silkmeter |
segue.com |
|
5465
|
tcp udp |
netops-broker |
netops.com |
|
5500
[Back
to Top]
|
tcp udp |
fcp-addr-srvr1 |
ac.com |
|
5500
|
udp |
secuid |
SecurID |
|
5501
|
tcp udp |
fcp-addr-srvr2 |
ac.com |
|
5502
|
tcp udp |
fcp-srvr-inst1 |
ac.com |
|
5503
|
tcp udp |
fcp-srvr-inst2 |
ac.com |
|
5504
|
tcp udp |
fcp-cics-gwl |
ac.com |
|
5510
|
tcp |
securidprop |
ACE/Server Services |
|
5520
|
tcp |
sdlog |
ACE/Server Services |
|
5530
|
tcp |
sdserv |
ACE/Server Services |
|
5540
|
tcp |
sdreport |
ACE/Server Services |
|
5540
|
udp |
sdxauth |
ACE/Server Services |
|
5550
|
tcp |
sdadmind |
ACE/Server Services |
|
5554
|
tcp udp |
sgi-esphttp |
SGI ESP HTTP sgi.com |
|
5555
|
tcp udp |
personal-agent |
infoseek.com |
|
5555
|
udp |
|
HP Omniback (clashes with personal-agent) |
|
5556
|
tcp |
mtb |
Mtbd (mtb backup) |
|
5559
|
tcp |
esinstall |
Enterprise Security Remote Install axent.com |
|
5600
|
tcp |
esmanager |
Enterprise Security Manager axent.com |
|
5601
|
tcp |
esmagent |
Enterprise Security Agent axent.com |
|
5602
|
tcp |
a1-msc |
lucent.com |
|
5603
|
tcp |
a1-bs |
lucent.com |
|
5604
|
tcp |
a3-sdunode |
lucent.com |
|
5605
|
tcp |
a4-sdunode |
lucent.com |
|
5631
|
tcp udp |
pcanywheredata |
pcANYWHEREdata symantec.com |
|
5632
|
tcp udp |
pcanywherestat |
pcANYWHEREstat symantec.com |
|
5678
|
tcp |
rrac |
Remote Replication Agent Connection microsoft.com |
|
5679
|
tcp |
dccm |
Direct Cable Connect Manager microsoft.com |
|
5680
|
tcp |
canna |
Canna (Japanese Input) |
|
5713
|
tcp udp |
proshareaudio |
Proshare Conf Audio intel.com |
|
5714
|
tcp udp |
prosharevideo |
Proshare Conf Video intel.com |
|
5715
|
tcp udp |
prosharedata |
Proshare Conf Data intel.com |
|
5716
|
tcp udp |
prosharerequest |
Proshare Conf Request intel.com |
|
5717
|
tcp udp |
prosharenotify |
Proshare Conf Notify intel.com |
|
5729
|
tcp udp |
openmail |
Openmail User Agent Layer hp.com |
|
5741
|
tcp udp |
ida-discover1 |
i-data.com |
|
5742
|
tcp udp |
ida-discover2 |
i-data.com |
|
5745
|
tcp udp |
fcopy-server |
softlinkusa.com |
|
5746
|
tcp udp |
fcopys-server |
softlinkusa.com |
|
5755
|
tcp udp |
openmailg |
Openmail Desk Gateway Server hp.com |
|
5757
|
tcp udp |
x500ms |
Openmail X.500 Directory Server hp.com |
|
5766
|
tcp udp |
openmailns |
Openmail NewMail Server hp.com |
|
5767
|
tcp udp |
s-openmail |
Openmail Suer Agent Layer (secure) hp.com |
|
5768
|
tcp udp |
openmailpxy |
Openmail CMTS Server hp.com |
|
5771
|
tcp udp |
netagent |
share.com |
|
5800-5801
|
tcp |
vnc |
|
|
5813
|
tcp udp |
icmpd |
opennms.com |
|
5968
|
tcp udp |
mppolicy-v5 |
fujitsu.co.jp |
|
5969
|
tcp udp |
mppolicy-mgr |
fujitsu.co.jp |
|
5977
|
tcp |
ncd-pref-tcp |
NCD preferences tcp port |
|
5978
|
tcp |
ncd-diag-tcp |
NCD diagnostic tcp port |
|
5979
|
tcp |
ncd-conf-tcp |
NCD configuration tcp port |
|
5997
|
tcp |
ncd-pref |
NCD preferences telnet port |
|
5998
|
tcp |
ncd-diag |
NCD diagnostic telnet port |
|
5999
|
tcp |
ncd-conf |
NCD configuration telnet port |
|
5999
|
tcp udp |
cvsup |
inet.org |
|
6000-6063
[Back
to Top]
|
tcp udp |
x11 |
X Windows System mit.edu |
|
6064
|
tcp udp |
ndl-ahp-svc |
dnl.co.uk |
|
6065
|
tcp udp |
winpharaoh |
gnnettest.com |
|
6066
|
tcp udp |
ewctsp |
ericsson.com |
|
6067
|
tcp udp |
srb |
nexos.com |
|
6068
|
tcp udp |
gsmp |
nokia.com |
|
6069
|
tcp udp |
trip |
cisco.com |
|
6070
|
tcp udp |
messageasap |
officedomain.com |
|
6071
|
tcp udp |
ssdtp |
softsys-inc.com |
|
6072
|
tcp udp |
diagmose-proc |
handsfreenetworks.com |
|
6073
|
tcp udp |
directplay8 |
microsoft.com |
|
6100
|
tcp udp |
synchronet-db |
parasoldev.com |
|
6101
|
tcp udp |
synchronet-rtc |
parasoldev.com |
|
6102
|
tcp udp |
synchronet-udp |
parasoldev.com |
|
6103
|
tcp udp |
rets |
optc.com |
|
6104
|
tcp udp |
dbdb |
lithic.org |
|
6105
|
tcp udp |
primaserver |
prima.com.hk |
|
6106
|
tcp udp |
mpsserver |
prima.com.hk |
|
6107
|
tcp udp |
etc-control |
etcconnect.com |
|
6108
|
tcp udp |
sercomm-scadmin |
sercomm.com.tw |
|
6109
|
tcp udp |
globecast-id |
globecastne.com |
|
6110
|
tcp udp |
softcm |
HP SoftBench CM hp.com |
|
6111
|
tcp udp |
sub-process |
HP SoftBench Sub-Process Control hp.com |
|
6112
|
tcp udp |
dtspcd |
CDE subprocess control eng.sun.com |
|
6123
|
tcp udp |
backup-express |
syncsort.com |
|
6141
|
tcp udp |
meta-corp |
Meta Corporation License Manager |
|
6142
|
tcp udp |
aspentec-lm |
Aspen Technology License Manager aspentec.com |
|
6143
|
tcp udp |
watershed-lm |
Watershed License Manager zion.com |
|
6144
|
tcp udp |
statsci1-lm |
StatSci License Manager-1 statsci.com |
|
6145
|
tcp udp |
statsci2-lm |
StatSci License Manager-2 statsci.com |
|
6146
|
tcp udp |
lonewolf-lm |
Lone Wolf Systems License Manager lonewolf.com |
|
6147
|
tcp udp |
montage-lm |
Montage License Manager montage.com |
|
6148
|
tcp udp |
ricardo-lm |
Ricardo North America License Manager aol.com |
|
6149
|
tcp udp |
tal-pod |
taligent.com |
|
6253
|
tcp udp |
crip |
ciena.com |
|
6346
|
tcp |
gnutella |
Gnutella file sharing Application |
|
6389
|
tcp udp |
clariion-evr01 |
clariion.com |
|
6400
|
tcp udp |
info-aps |
saegatesoftware.com |
|
6401
|
tcp udp |
info-was |
saegatesoftware.com |
|
6402
|
tcp udp |
info-eventsvr |
saegatesoftware.com |
|
6403
|
tcp udp |
info-cachesvr |
saegatesoftware.com |
|
6404
|
tcp udp |
info-filesvr |
saegatesoftware.com |
|
6405
|
tcp udp |
info-pagesvr |
saegatesoftware.com |
|
6406
|
tcp udp |
info-processvr |
saegatesoftware.com |
|
6407
|
tcp udp |
reserved1 |
saegatesoftware.com |
|
6408
|
tcp udp |
reserved2 |
saegatesoftware.com |
|
6409
|
tcp udp |
reserved3 |
saegatesoftware.com |
|
6410
|
tcp udp |
info-aps |
saegatesoftware.com |
|
6455
|
tcp udp |
skip-cert-recv |
osmosys.incog.com |
|
6456
|
tcp udp |
skip-cert-send |
osmosys.incog.com |
|
6471
|
tcp udp |
lvision-lm |
lvision.com |
|
6500
[Back
to Top]
|
tcp udp |
boks |
BoKS Master dynas.se |
|
6501
|
tcp udp |
boks_servc |
BoKS Servc dynas.se |
|
6502
|
tcp udp |
boks_servm |
BoKS Servm dynas.se |
|
6503
|
tcp udp |
boks_clntd |
BoKS Clntd dynas.se |
|
6505
|
tcp udp |
badm_priv |
BoKS Admin Private Port dynas.se |
|
6506
|
tcp udp |
badm_pub |
BoKS Admin Public Port dynas.se |
|
6507
|
tcp udp |
bdir_priv |
BoKS Dir Server, Private Port dynas.se |
|
6508
|
tcp udp |
bdir_pub |
BoKS Dir Server, Public Port dynas.se |
|
6547
|
tcp udp |
apc-tcp-udp-1 |
apcc.com |
|
6548
|
tcp udp |
apc-tcp-udp-2 |
apcc.com |
|
6549
|
tcp udp |
apc-tcp-udp-3 |
apcc.com |
|
6550
|
tcp udp |
fg-sysupdate |
freegate.com |
|
6558
|
tcp udp |
xdsxdm |
|
|
6665-6669
|
tcp udp |
ircu |
Internet Relay Chat acrux.com |
|
6665
|
tcp |
irc |
Internet Relay Chat |
|
6666
|
tcp |
irc-serv |
Internet Relay Chat Server |
|
6667-6669
|
tcp |
irc |
Internet Relay Chat |
|
6670
|
tcp udp |
vocaltec-gold |
Vocaltec Global online Directory vocaltec.com |
|
6672
|
tcp udp |
vision_server |
gis.shl.com |
|
6673
|
tcp udp |
vision_elmd |
gis.shl.com |
|
6699
|
tcp udp |
napster |
www.napster.com communication |
|
6700
|
tcp udp |
napster |
www.napster.com communication |
|
6701
|
tcp udp |
kti-icad-srvr |
KTI/ICAD Nameserver KTIworld.com |
|
6723
|
tcp |
|
Mstream DDOS communication TCP |
|
6767
|
tcp udp |
bmc-perf-agent |
bmc.com |
|
6768
|
tcp udp |
bmc-perf-mgrd |
bmc.com |
|
6790
|
tcp udp |
hnmp |
nas.nasa.gov |
|
6831
|
tcp udp |
ambit-lm |
ambit.com |
|
6838
|
udp |
|
Mstream DDOS communication UDP |
|
6841
|
tcp udp |
netmo-default |
netmosphere.com |
|
6842
|
tcp udp |
netmo-http |
netmosphere.com |
|
6850
|
tcp udp |
iccrushmore |
icc.net |
|
6888
|
tcp udp |
muse |
muse3d.com |
|
6961
|
tcp udp |
jmact3 |
fujitsu.co.jp |
|
6962
|
tcp udp |
jmevt2 |
fujitsu.co.jp |
|
6963
|
tcp udp |
swismgr1 |
fujitsu.co.jp |
|
6964
|
tcp udp |
swismgr2 |
fujitsu.co.jp |
|
6965
|
tcp udp |
swistrap |
fujitsu.co.jp |
|
6966
|
tcp udp |
swispol |
fujitsu.co.jp |
|
6969
|
tcp udp |
acmsoda |
GateCrasher remote access backdoor (Win9x/NT) as well as
ACMSODA |
|
6970-7170
|
udp |
|
Real Audio (inclusive) for incoming traffic only |
|
6998
|
tcp udp |
iatp-highpri |
mci.com |
|
6999
|
tcp udp |
iatp-normalpri |
mci.com |
|
7000
[Back
to Top]
|
tcp udp |
afs3-fileserver |
File server itself, msdos |
|
7000
|
tcp |
|
Real Audio Control |
|
PORT
|
PROTOCOL |
KEYWORD |
DESCRIPTION |
|
7001
|
tcp udp |
afs3-callback |
Callbacks to cache managers |
|
7002
|
tcp udp |
afs3-prserver |
Users and groups database |
|
7003
|
tcp udp |
afs3-vlserver |
Volume location database |
|
7004
|
tcp udp |
afs3-kaserver |
AFS Kerberos authentication service |
|
7005
|
tcp udp |
afs3-volser |
Volume management server |
|
7006
|
tcp udp |
afs3-errors |
Error interpretation service |
|
7007
|
tcp udp |
afs3-bos |
Basic overseer process |
|
7008
|
tcp udp |
afs3-update |
Server-to-server updater |
|
7009
|
tcp udp |
afs3-rmtsys |
Remote cache manager service |
|
7010
|
tcp udp |
ups-onlinet |
Onlinet UPS's exide.com |
|
7011
|
tcp udp |
talon-disc |
Talon Discovery Port powerware.com |
|
7012
|
tcp udp |
talon-engine |
Talon Engine powerware.com |
|
7020
|
tcp udp |
dpserve |
hummingbird.com |
|
7021
|
tcp udp |
dpserveadmin |
hummingbird.com |
|
7070
|
tcp udp |
arcp |
nas.nasa.gov |
|
7070
|
tcp |
|
Real Audio Versions 3, 4, 5 |
|
7099
|
tcp udp |
lazy-ptop |
scitex.com |
|
7100
|
tcp udp |
font-service |
X Font Service lcs.mit.edu |
|
7121
|
tcp udp |
virprot-lm |
sarchmo.virtualprototypes.ca |
|
7141
|
tcp udp |
clutild |
vnet.ibm.com |
|
7161
|
tcp |
|
Cisco Catalyst |
|
7200
|
tcp udp |
fodms |
FODMS FLIP rockwell.com |
|
7201
|
tcp udp |
dlip |
rockwell.com |
|
7300-7390
|
tcp udp |
swx |
The Swiss Exchange swx.ch |
|
7323
|
tcp |
|
SyGate 3.11 Remote Administration |
|
7326
|
tcp |
icb |
Internet Citizen's Band |
|
7395
|
tcp udp |
winqedit |
robelle.com |
|
7426
|
tcp udp |
pmdmgr |
OpenView DM Post Manager hp.com |
|
7427
|
tcp udp |
oveadmgr |
OpenView DM Event Agent Manager hp.com |
|
7428
|
tcp udp |
ovladmgr |
OpenView DM log Agent Manager hp.com |
|
7429
|
tcp udp |
opi-sock |
OpenView DM rqt communication hp.com |
|
7430
|
tcp udp |
xmpv7 |
OpenView DM xmpv7 api pipe hp.com |
|
7431
|
tcp udp |
pmd |
OpenView DM ovc/xmpv3 api pipe hp.com |
|
7437
|
tcp udp |
faximum |
faximum.com |
|
7491
|
tcp udp |
telops-lmd |
telops.com |
|
7511
|
tcp udp |
pafec-lm |
pafec.co.uk |
|
7544
|
tcp udp |
nta-ds |
FlowAnalyzer DisplayServer cisco.com |
|
7545
|
tcp udp |
nta-us |
FlowAnalyzer UtilityServer cisco.com |
|
7566
|
tcp udp |
vsi-omega |
vsin.com |
|
7570
|
tcp udp |
aries-kfinder |
ariessys.com |
|
7588
|
tcp udp |
sun-lm |
eng.sun.com |
|
7597
|
tcp udp |
QAZ |
Unassigned QAZ TROJAN WORM |
|
7633
|
tcp udp |
pmdfmgt |
innosoft.com |
|
7640
|
tcp udp |
|
CUSeeMe (TCP, UDP) |
|
7648
|
udp |
cucme-1 |
CUCME live video/audio server |
|
7649
|
udp |
cucme-2 |
CUCME live video/audio server |
|
7650
|
udp |
cucme-3 |
CUCME live video/audio server |
|
7651
|
udp |
cucme-4 |
CUCME live video/audio server |
|
7777
|
tcp udp |
cbt |
cs.ucl.ac.uk |
|
7781
|
tcp udp |
accu-lmgr |
accugraph.com |
|
7786
|
tcp udp |
minivend |
minivend.com |
|
7932
|
tcp udp |
t2-drm |
Tier 2 Data Resource Manager tier2.com |
|
7933
|
tcp udp |
t2-brm |
Tier 2 Business Rules Manager tier2.com |
|
7967
|
tcp udp |
supercell |
sigsci.com |
|
7979
|
tcp udp |
micomuse-ncps |
micromuse.com |
|
7980
|
tcp udp |
quest-vista |
quests.com |
|
7983
|
udp |
|
Mstraem DDOS communication UDP |
|
7999
|
tcp udp |
irdmi2 |
intel.com |
|
8000
|
tcp udp |
irdmi |
intel.com |
|
8001
|
tcp udp |
vcom-tunnel |
us.ibm.com |
|
8002
|
tcp udp |
teradataordbms |
Teradata ORDBMS ncr.com |
|
8002
|
tcp |
|
Cmail Web Admin |
|
8008
|
tcp udp |
http-alt |
w3.org |
|
8032
|
tcp udp |
pro-ed |
goldrush.com |
|
8033
|
tcp udp |
mindprint |
goldrush.com |
|
8080
|
tcp |
http-proxy |
Common HTTP proxy/second web server port |
|
8181
|
tcp |
|
Imail Monitor |
|
8431
|
tcp |
|
Trend Micro PC-Cilin |
|
8765
|
tcp |
|
Infoseek Ultraseek |
|
8888
|
tcp |
sun-answerbook |
Sun Answerbook HTTP server |
|
8999
|
tcp |
|
Gauntlet Firewall |
|
9100
[Back
to Top]
|
tcp |
jetdirect |
HP JetDirect card hp.com |
|
9325
|
udp |
|
Mstream DDOS communication UDP |
|
9535
|
tcp udp |
man |
Remote man server |
|
9536
|
tcp |
W |
|
|
9537
|
tcp |
mantst |
Remote man server, testing |
|
9876
|
tcp udp |
sd |
Session Director |
|
10000
[Back
to Top]
|
tcp |
bnews |
|
|
10000
|
udp |
rscsO |
|
|
10001
|
tcp |
queue |
|
|
10001
|
udp |
rscsl |
|
|
10002
|
tcp |
poker |
|
|
10002
|
udp |
rscs2 |
|
|
10003
|
tcp |
gateway |
|
|
10003
|
udp |
rscs3 |
|
|
10004
|
tcp |
remp |
|
|
10004
|
udp |
rscs4 |
|
|
10005
|
tcp |
stel |
Secure telnet |
|
10005
|
udp |
rscs5 |
|
|
10006
|
udp |
rscs6 |
|
|
10007
|
udp |
rscs7 |
|
|
10008
|
udp |
rscs8 |
|
|
10009
|
udp |
rscs9 |
|
|
10010
|
udp |
rscsa |
|
|
10011
|
udp |
rscsb |
|
|
10012
|
tcp |
qmaster |
|
|
10012
|
udp |
qmaster |
|
|
10067
|
udp |
pod |
Portal of Doom remote access backdoor |
|
10080
|
udp |
amanda |
Backup Server Control |
|
10082
|
tcp |
amandaidx |
Amanda Indexing |
|
10083
|
tcp |
amidxtape |
Amanda Tape Indexing |
|
10167
|
udp |
pod |
Portal of Doom remote access backdoor |
|
10498
|
udp |
|
Mstream DDOS Communication UDP |
|
12345
|
tcp |
NetBus |
NetBus Backdoor Trojan |
|
12346
|
tcp |
NetBus |
NetBus Backdoor Trojan |
|
12754
|
tcp |
|
Mstream DDOS communication TCP |
|
13326
|
tcp |
|
Crossfire game |
|
15104
|
tcp |
|
Mstream DDOS communication TCP |
|
16660
|
tcp |
stacheldraht |
Stacheldraht distributed attack tool client -->
handler |
|
16959
|
tcp |
subseven |
Subseven DEFCON8 2.1 backdoor remote access tool |
|
17007
|
tcp udp |
isode-dua |
|
|
18000
|
tcp udp |
biimenu |
Beckman Instrumnets Inc |
|
18753
|
tcp udp |
shaft |
Shaft distributed attack tool handler --> agent |
|
20005
|
tcp |
btx |
xcept4 (Interacts with German Telekom's CEPT videotext
service) |
|
20034
|
tcp |
|
NetBus II (!!! trojan) |
|
20432
|
tcp |
shaft |
Shaft distributed attack client --> handler |
|
20432
|
udp |
shaft |
Shaft distributed attack agent --> handler |
|
21554
|
tcp |
|
GirlFriend |
|
22273
|
tcp |
wnn6 |
Wnn6 (Japanese Input) |
|
22289
|
tcp |
wnn6_Cn |
Wnn6 (Chinese Input) |
|
22305
|
tcp |
wnn6_Kr |
Wnn6 (Korean Input) |
|
22321
|
tcp |
wnn6_Tw |
Wnn6 (Taiwanese Input) |
|
25793
|
tcp |
|
Vocaltec Address Server |
|
26208
|
tcp |
wnn6_Ds |
Wnn6 (Dserver) |
|
27444
|
udp |
trinoo_bcast |
Trinoo distributed attack tool Master -> Bcast Daemon
communication |
|
27665
|
tcp |
trinoo_master |
Trinoo distributed attack tool Master server control
port |
|
30100
|
tcp |
netsphere |
Netsphere Remote Access Trojan (Win 9x) |
|
30102
|
tcp |
netsphere |
Netsphere Remote Access Trojan (Win 9x) |
|
31335
|
udp |
trinoo_register |
Trinoo distributed attack tool Bcast Daemon registration
port |
|
31337
|
tcp |
Elite |
Sometimes interseting stuff found on this port |
|
31337
|
udp |
orifice |
Back orifice and NetBus Trogan Horse Programs |
|
31785
|
tcp |
hack-a-tack |
Hack-A-Tack Remote Access Trojan (Win 9x) |
|
31787
|
tcp |
hack-a-tack |
Hack-A-Tack Remote Access Trojan (Win 9x) |
|
31789
|
tcp udp |
hack-a-tack |
Hack-A-Tack Remote Access Trojan (Win 9x) |
|
31791
|
tcp udp |
hack-a-tack |
Hack-A-Tack Remote Access Trojan (Win 9x) |
|
32000
|
tcp |
|
Artisoft XtraMail v1.11 |
|
32770-32780
|
tcp udp |
sometimes-rpc |
Sometimes an RPC port on a Solaris box |
|
33270
|
udp |
trinity |
Trinity v3 distributed attack tool |
|
34555
|
udp |
wintrinoo |
Trinoo distributed attack tool Handler to/from agent |
|
43118
|
tcp |
reachout |
|
|
47557
|
tcp udp |
dbbrowse |
Databeam Corporation |
|
54320
|
tcp |
|
Back Orifice 2000 (TCP) |
|
54321
|
udp |
|
Back Orifice 2000 (UDP) |
|
65000
|
tcp |
stacheldraht |
Stacheldraht distributed attack tool Handler to/from
agent |
|
65301
|
tcp |
pcanywhere |
Used sometimes by PCAnywhere |