|
PORT
|
TRANSPORT |
KEYWORD |
DESCRIPTION |
|
5000
|
tcp udp |
commplex-main |
filmaker.com |
|
5000
|
tcp udp |
UPnP |
UPnP Universal Plug & Play microsoft.com |
|
5000-5001
|
tcp udp |
trojans |
Bubbel, Back Door Setup, Sockets De Troie, Blazer 5
Torjan Horses |
|
5001
|
tcp udp |
commplex-link |
filmaker.com |
|
5002
|
tcp udp |
rfe |
Radio Free Ethernet filmaker.com |
|
5003
|
tcp udp |
fmpro-internal |
Filemaker IP filmaker.com |
|
5004
|
tcp udp |
avt-profile-1 |
RTP fokus.gmd.de |
|
5005
|
tcp udp |
avt-profile-2 |
RTP fokus.gmd.de |
|
5006
|
tcp udp |
wsm-server |
wrq.com |
|
5007
|
tcp udp |
wsm-server-ssl |
wrq.com |
|
5010
|
tcp udp |
telepathstart |
vnet.imb.com |
|
5010
|
tcp udp |
yahmess |
Yahoo! Messenger |
|
5011
|
tcp udp |
telepathattack |
vnet.imb.com |
|
5020
|
tcp udp |
zenginkyo-1 |
noa.nttdata.jp |
|
5021
|
tcp udp |
zenginkyo-2 |
noa.nttdata.jp |
|
5042
|
tcp udp |
asnaacceler8db |
asna.com |
|
5050
|
tcp udp |
mmcc |
multimedia conference control tool isi.edu |
|
5051
|
tcp udp |
ita-agent |
axent.com |
|
5052
|
tcp udp |
ita-manager |
axent.com |
|
5055
|
tcp udp |
unot |
cmgsolutions.com |
|
5060
|
tcp udp |
sip |
cs.columbia.edu |
|
5069
|
tcp udp |
i-net-2000-npr |
I/Net 2000-NPR csicontrols.com |
|
5071
|
tcp udp |
powerschool |
powerschool.com |
|
5145
|
tcp udp |
rmonitor-secure |
ascend.com |
|
5150
|
tcp udp |
atmp |
Ascend Tunnel Management Protocol ascend.com |
|
5151
|
tcp udp |
esri_sde |
esri.com |
|
5152
|
tcp udp |
sde-discovery |
esri.com |
|
5165
|
tcp udp |
ife_icorp |
bull.se |
|
5190
|
tcp udp |
aol |
America-Online |
|
5191
|
tcp udp |
aol-1 |
America-Online1 |
|
5192
|
tcp udp |
aol-2 |
America-Online2 |
|
5193
|
tcp udp |
aol-3 |
America-Online3 |
|
5200
|
tcp udp |
targus-aib1 |
targusinfo.com |
|
5201
|
tcp udp |
targus-aib2 |
targusinfo.com |
|
5202
|
tcp udp |
targus-tnts1 |
targusinfo.com |
|
5203
|
tcp udp |
targus-tnts2 |
targusinfo.com |
|
5232
|
tcp |
sgi-dgl |
SGI Distribution Graphics |
|
5236
|
tcp udp |
padl2sim |
nbsp; |
|
5272
|
tcp udp |
pk |
eba.net |
|
5300
|
tcp udp |
hacl-hb |
HA cluster heartbeat hp.com |
|
5301
|
tcp udp |
hacl-gs |
HA cluster general service hp.com |
|
5302
|
tcp udp |
hacl-cfg |
HA cluster configuration hp.com |
|
5303
|
tcp udp |
hacl-probe |
HA cluster probing hp.com |
|
5304
|
tcp udp |
hacl-local |
HA Cluster Commands hp.com |
|
5305
|
tcp udp |
hacl-test |
HA Cluster Test hp.com |
|
5306
|
tcp udp |
sun-mc-grp |
Sun MC Group eng.sun.com |
|
5307
|
tcp udp |
sco-aip |
sco.com |
|
5308
|
tcp udp |
cfengine |
iu.hioslo.no |
|
5309
|
tcp udp |
jprinter |
bristol.com |
|
5310
|
tcp udp |
outlaws |
lucasart.com |
|
5311
|
tcp udp |
tmlogin |
east.sun.com |
|
5321
|
tcp |
firehotker |
Fire Hot Keyer Trojan Horse |
|
5400
|
tcp udp |
excerpt |
Excerpt Search alma.com |
|
5400-5402
|
tcp |
bladerunner |
Bladerunner Trojan Horse |
|
5401
|
tcp udp |
excerpts |
Excerpt Search Secure alma.com |
|
5402
|
tcp udp |
mftp |
starburstscom.com |
|
5403
|
tcp udp |
hpoms-ci-lstn |
cup.hp.com |
|
5404
|
tcp udp |
hpoms-dps-lstn |
cup.hp.com |
|
5405
|
tcp udp |
netsupport |
pe77@dial.pipex.com |
|
5406
|
tcp udp |
systemics-sox |
systemics.com |
|
5407
|
tcp udp |
foresyte-clear |
foresyte.com |
|
5408
|
tcp udp |
foresyte-sec |
foresyte.com |
|
5409
|
tcp udp |
salient-dtasrv |
Salient Data Server salient.com |
|
5410
|
tcp udp |
salient-usrmgr |
Salient User Manager salient.com |
|
5411
|
tcp udp |
actnet |
actresearch.com |
|
5412
|
tcp udp |
continuus |
continuus.com |
|
5413
|
tcp udp |
wwiotalk |
wonderware.com |
|
5414
|
tcp udp |
statusd |
satelnet.org |
|
5415
|
tcp udp |
ns-server |
netsoft.com |
|
5416
|
tcp udp |
sns-gateway |
firstfloor.com |
|
5417
|
tcp udp |
sns-agent |
firstfloor.com |
|
5418
|
tcp udp |
mcntp |
pilhuhn.de |
|
5419
|
tcp udp |
dj-ice |
cor.dowjones.com |
|
5420
|
tcp udp |
cylink-c |
cylink.com |
|
5421
|
tcp udp |
netsupport2 |
p.sanders@dial.pipex.com |
|
5422
|
tcp udp |
salient-mux |
salient.com |
|
5423
|
tcp udp |
virtualuser |
apple.com |
|
5426
|
tcp udp |
devbasic |
vsin.com |
|
5427
|
tcp udp |
sco-peer-tta |
sco.com |
|
5428
|
tcp udp |
telaconsol |
flounder.com |
|
5429
|
tcp udp |
base |
Billing & Accounting System Exchange
ioag.de |
|
5430
|
tcp udp |
radec-corp |
softlife.co.nz |
|
5431
|
tcp udp |
park-agent |
veritas.com |
|
5432
|
tcp |
postgres |
postgres database server |
|
5454
|
tcp udp |
apc-tcp-udp-4 |
apcc.com |
|
5455
|
tcp udp |
apc-tcp-udp-5 |
apcc.com |
|
5456
|
tcp udp |
apc-tcp-udp-6 |
apcc.com |
|
5461
|
tcp udp |
silkmeter |
segue.com |
|
5465
|
tcp udp |
netops-broker |
netops.com |
|
5500
|
tcp udp |
fcp-addr-srvr1 |
ac.com |
|
5500
|
udp |
secuid |
SecurID |
|
5501
|
udp |
secuidprop |
SecurID ACE/Server Slave |
|
5501
|
tcp udp |
fcp-addr-srvr2 |
ac.com |
|
5502
|
tcp udp |
fcp-srvr-inst1 |
ac.com |
|
5503
|
tcp udp |
fcp-srvr-inst2 |
ac.com |
|
5504
|
tcp udp |
fcp-cics-gwl |
ac.com |
|
5510
|
tcp |
securidprop |
ACE/Server Services |
|
5520
|
tcp |
sdlog |
ACE/Server Services |
|
5530
|
tcp |
sdserv |
ACE/Server Services |
|
5540
|
tcp |
sdreport |
ACE/Server Services |
|
5540
|
udp |
sdxauth |
ACE/Server Services |
|
5550
|
tcp |
sdadmind |
ACE/Server Services |
|
5554
|
tcp udp |
sgi-esphttp |
SGI ESP HTTP sgi.com |
|
5555
|
tcp udp |
personal-agent |
infoseek.com |
|
5555
|
udp |
nbsp; |
HP Omniback (clashes with personal-agent) |
|
5555
|
tcp, udp |
serverme |
ServerMe Trojan Horse |
|
5556
|
tcp |
mtb |
Mtbd (mtb backup) |
|
5556-5557
|
tcp, udp |
bofacil |
Bo Facil Trojan Horse |
|
5559
|
tcp |
esinstall |
Enterprise Security Remote Install axent.com |
|
5569
|
tcp |
robohack |
Robo Hack trojan Horse |
|
5600
|
tcp |
esmanager |
Enterprise Security Manager axent.com |
|
5601
|
tcp |
esmagent |
Enterprise Security Agent axent.com |
|
5602
|
tcp |
a1-msc |
lucent.com |
|
5603
|
tcp |
a1-bs |
lucent.com |
|
5604
|
tcp |
a3-sdunode |
lucent.com |
|
5605
|
tcp |
a4-sdunode |
lucent.com |
|
5631
|
tcp udp |
pcanywheredata |
pcANYWHEREdata symantec.com |
|
5632
|
tcp udp |
pcanywherestat |
pcANYWHEREstat symantec.com |
|
5678
|
tcp |
rrac |
Remote Replication Agent Connection
microsoft.com |
|
5679
|
tcp |
dccm |
Direct Cable Connect Manager microsoft.com |
|
5680
|
tcp |
canna |
Canna (Japanese Input) |
|
5713
|
tcp udp |
proshareaudio |
Proshare Conf Audio intel.com |
|
5714
|
tcp udp |
prosharevideo |
Proshare Conf Video intel.com |
|
5715
|
tcp udp |
prosharedata |
Proshare Conf Data intel.com |
|
5716
|
tcp udp |
prosharerequest |
Proshare Conf Request intel.com |
|
5717
|
tcp udp |
prosharenotify |
Proshare Conf Notify intel.com |
|
5729
|
tcp udp |
openmail |
Openmail User Agent Layer hp.com |
|
5741
|
tcp udp |
ida-discover1 |
i-data.com |
|
5742
|
tcp udp |
ida-discover2 |
i-data.com |
|
5742
|
tcp |
wincrash |
Wincrash Trojan |
|
5745
|
tcp udp |
fcopy-server |
softlinkusa.com |
|
5746
|
tcp udp |
fcopys-server |
softlinkusa.com |
|
5755
|
tcp udp |
openmailg |
Openmail Desk Gateway Server hp.com |
|
5757
|
tcp udp |
x500ms |
Openmail X.500 Directory Server hp.com |
|
5766
|
tcp udp |
openmailns |
Openmail NewMail Server hp.com |
|
5767
|
tcp udp |
s-openmail |
Openmail Suer Agent Layer (secure) hp.com |
|
5768
|
tcp udp |
openmailpxy |
Openmail CMTS Server hp.com |
|
5771
|
tcp udp |
netagent |
share.com |
|
5800-5801
|
tcp |
vnc |
AT&T Virtual Network Computing |
|
5813
|
tcp udp |
icmpd |
opennms.com |
|
5900-5901
|
tcp |
vnc |
AT&T Virtual Network Computing |
|
5968
|
tcp udp |
mppolicy-v5 |
fujitsu.co.jp |
|
5969
|
tcp udp |
mppolicy-mgr |
fujitsu.co.jp |
|
5977
|
tcp |
ncd-pref-tcp |
NCD preferences tcp port |
|
5978
|
tcp |
ncd-diag-tcp |
NCD diagnostic tcp port |
|
5979
|
tcp |
ncd-conf-tcp |
NCD configuration tcp port |
|
5997
|
tcp |
ncd-pref |
NCD preferences telnet port |
|
5998
|
tcp |
ncd-diag |
NCD diagnostic telnet port |
|
5999
|
tcp |
ncd-conf |
NCD configuration telnet port |
|
5999
|
tcp udp |
cvsup |
inet.org |
|
6000-6063
|
tcp udp |
x11 |
X Windows System mit.edu |
|
6064
|
tcp udp |
ndl-ahp-svc |
dnl.co.uk |
|
6065
|
tcp udp |
winpharaoh |
gnnettest.com |
|
6066
|
tcp udp |
ewctsp |
ericsson.com |
|
6067
|
tcp udp |
srb |
nexos.com |
|
6068
|
tcp udp |
gsmp |
nokia.com |
|
6069
|
tcp udp |
trip |
cisco.com |
|
6070
|
tcp udp |
messageasap |
officedomain.com |
|
6071
|
tcp udp |
ssdtp |
softsys-inc.com |
|
6072
|
tcp udp |
diagmose-proc |
handsfreenetworks.com |
|
6073
|
tcp udp |
directplay8 |
microsoft.com |
|
6100
|
tcp udp |
synchronet-db |
parasoldev.com |
|
6101
|
tcp udp |
synchronet-rtc |
parasoldev.com |
|
6102
|
tcp udp |
synchronet-udp |
parasoldev.com |
|
6103
|
tcp udp |
rets |
optc.com |
|
6104
|
tcp udp |
dbdb |
lithic.org |
|
6105
|
tcp udp |
primaserver |
prima.com.hk |
|
6106
|
tcp udp |
mpsserver |
prima.com.hk |
|
6107
|
tcp udp |
etc-control |
etcconnect.com |
|
6108
|
tcp udp |
sercomm-scadmin |
sercomm.com.tw |
|
6109
|
tcp udp |
globecast-id |
globecastne.com |
|
6110
|
tcp udp |
softcm |
HP SoftBench CM hp.com |
|
6111
|
tcp udp |
sub-process |
HP SoftBench Sub-Process Control hp.com |
|
6112
|
tcp udp |
dtspcd |
CDE subprocess control eng.sun.com |
|
6112
|
tcp udp |
battlenet |
multiplayer game "Diablo" |
|
6123
|
tcp udp |
backup-express |
syncsort.com |
|
6141
|
tcp udp |
meta-corp |
Meta Corporation License Manager |
|
6142
|
tcp udp |
aspentec-lm |
Aspen Technology License Manager aspentec.com |
|
6143
|
tcp udp |
watershed-lm |
Watershed License Manager zion.com |
|
6144
|
tcp udp |
statsci1-lm |
StatSci License Manager-1 statsci.com |
|
6145
|
tcp udp |
statsci2-lm |
StatSci License Manager-2 statsci.com |
|
6146
|
tcp udp |
lonewolf-lm |
Lone Wolf Systems License Manager lonewolf.com |
|
6147
|
tcp udp |
montage-lm |
Montage License Manager montage.com |
|
6148
|
tcp udp |
ricardo-lm |
Ricardo North America License Manager aol.com |
|
6149
|
tcp udp |
tal-pod |
taligent.com |
|
6253
|
tcp udp |
crip |
ciena.com |
|
6346
|
tcp |
gnutella |
Gnutella file sharing Application |
|
6347
|
tcp |
gnutella |
Gnutella file sharing Application |
|
6389
|
tcp udp |
clariion-evr01 |
clariion.com |
|
6400
|
tcp udp |
info-aps |
saegatesoftware.com |
|
6400
|
tcp udp |
thething |
The Thing Trojan Horse |
|
6401
|
tcp udp |
info-was |
saegatesoftware.com |
|
6402
|
tcp udp |
info-eventsvr |
saegatesoftware.com |
|
6403
|
tcp udp |
info-cachesvr |
saegatesoftware.com |
|
6404
|
tcp udp |
info-filesvr |
saegatesoftware.com |
|
6405
|
tcp udp |
info-pagesvr |
saegatesoftware.com |
|
6406
|
tcp udp |
info-processvr |
saegatesoftware.com |
|
6407
|
tcp udp |
reserved1 |
saegatesoftware.com |
|
6408
|
tcp udp |
reserved2 |
saegatesoftware.com |
|
6409
|
tcp udp |
reserved3 |
saegatesoftware.com |
|
6410
|
tcp udp |
info-aps |
saegatesoftware.com |
|
6455
|
tcp udp |
skip-cert-recv |
osmosys.incog.com |
|
6456
|
tcp udp |
skip-cert-send |
osmosys.incog.com |
|
6471
|
tcp udp |
lvision-lm |
lvision.com |
|
6500
|
tcp udp |
boks |
BoKS Master dynas.se |
|
6501
|
tcp udp |
boks_servc |
BoKS Servc dynas.se |
|
6502
|
tcp udp |
boks_servm |
BoKS Servm dynas.se |
|
6502
|
tcp udp |
netconf |
Netscape Conference |
|
6503
|
tcp udp |
boks_clntd |
BoKS Clntd dynas.se |
|
6505
|
tcp udp |
badm_priv |
BoKS Admin Private Port dynas.se |
|
6506
|
tcp udp |
badm_pub |
BoKS Admin Public Port dynas.se |
|
6507
|
tcp udp |
bdir_priv |
BoKS Dir Server, Private Port dynas.se |
|
6508
|
tcp udp |
bdir_pub |
BoKS Dir Server, Public Port dynas.se |
|
6547
|
tcp udp |
apc-tcp-udp-1 |
apcc.com |
|
6548
|
tcp udp |
apc-tcp-udp-2 |
apcc.com |
|
6549
|
tcp udp |
apc-tcp-udp-3 |
apcc.com |
|
6550
|
tcp udp |
fg-sysupdate |
freegate.com |
|
6558
|
tcp udp |
xdsxdm |
nbsp; |
|
6588
|
tcp udp |
analogx |
AnalogX http https proxy, analogx.com |
|
6665-6669
|
tcp udp |
ircu |
Internet Relay Chat acrux.com |
|
6665
|
tcp |
irc |
Internet Relay Chat |
|
6666
|
tcp |
irc-serv |
Internet Relay Chat Server |
|
6667-6669
|
tcp |
irc |
Internet Relay Chat |
|
6670
|
tcp udp |
vocaltec-gold |
Vocaltec Global online Directory vocaltec.com |
|
6670
|
tcp |
deepthroat |
Deep Throat Trojan Horse |
|
6671
|
tcp |
deepthroat |
Deep Throat Trojan Horse |
|
6672
|
tcp udp |
vision_server |
gis.shl.com |
|
6673
|
tcp udp |
vision_elmd |
gis.shl.com |
|
6673
|
tcp udp |
vision_elmd |
gis.shl.com |
|
6699
|
tcp udp |
napster |
www.napster.com communication |
|
6700
|
tcp udp |
napster |
www.napster.com communication |
|
6701
|
tcp udp |
kti-icad-srvr |
KTI/ICAD Nameserver KTIworld.com |
|
6711
|
tcp |
sub7 |
Sub Seven Trojan Horse |
|
6723
|
tcp |
nbsp; |
Mstream DDOS communication TCP |
|
6767
|
tcp udp |
bmc-perf-agent |
bmc.com |
|
6768
|
tcp udp |
bmc-perf-mgrd |
bmc.com |
|
6776
|
tcp |
sub7 |
Sub Seven Trojan Horse |
|
6790
|
tcp udp |
hnmp |
nas.nasa.gov |
|
6831
|
tcp udp |
ambit-lm |
ambit.com |
|
6838
|
udp |
nbsp; |
Mstream DDOS communication UDP |
|
6841
|
tcp udp |
netmo-default |
netmosphere.com |
|
6842
|
tcp udp |
netmo-http |
netmosphere.com |
|
6850
|
tcp udp |
iccrushmore |
icc.net |
|
6888
|
tcp udp |
muse |
muse3d.com |
|
6939
|
tcp udp |
indoc |
Indoctrination trojan Horse |
|
6961
|
tcp udp |
jmact3 |
fujitsu.co.jp |
|
6962
|
tcp udp |
jmevt2 |
fujitsu.co.jp |
|
6963
|
tcp udp |
swismgr1 |
fujitsu.co.jp |
|
6964
|
tcp udp |
swismgr2 |
fujitsu.co.jp |
|
6965
|
tcp udp |
swistrap |
fujitsu.co.jp |
|
6966
|
tcp udp |
swispol |
fujitsu.co.jp |
|
6969
|
tcp udp |
acmsoda |
GateCrasher remote access backdoor (Win9x/NT) as
well as ACMSODA and Priority Trojan |
|
6970-7170
|
udp |
|
Real Audio (inclusive) for incoming traffic
only |
|
6998
|
tcp udp |
iatp-highpri |
mci.com |
|
6999
|
tcp udp |
iatp-normalpri |
mci.com |
|
7000
|
tcp udp |
afs3-fileserver |
File server itself, msdos |
|
7000
|
tcp |
nbsp; |
Real Audio Control |
|
7000
|
tcp, udp |
remotegrabber |
Remote Grabber Trojan Horse |
|
PORT
|
TRANSPORT |
KEYWORD |
DESCRIPTION |
|
7001
|
tcp udp |
afs3-callback |
Callbacks to cache managers |
|
7002
|
tcp udp |
afs3-prserver |
Users and groups database |
|
7003
|
tcp udp |
afs3-vlserver |
Volume location database |
|
7004
|
tcp udp |
afs3-kaserver |
AFS Kerberos authentication service |
|
7005
|
tcp udp |
afs3-volser |
Volume management server |
|
7006
|
tcp udp |
afs3-errors |
Error interpretation service |
|
7007
|
tcp udp |
afs3-bos |
Basic overseer process |
|
7007
|
tcp udp |
msbd |
Windows Media Encoder |
|
7008
|
tcp udp |
afs3-update |
Server-to-server updater |
|
7009
|
tcp udp |
afs3-rmtsys |
Remote cache manager service |
|
7010
|
tcp udp |
ups-onlinet |
Onlinet UPS's exide.com |
|
7011
|
tcp udp |
talon-disc |
Talon Discovery Port powerware.com |
|
7012
|
tcp udp |
talon-engine |
Talon Engine powerware.com |
|
7020
|
tcp udp |
dpserve |
hummingbird.com |
|
7021
|
tcp udp |
dpserveadmin |
hummingbird.com |
|
7070
|
tcp udp |
arcp |
nas.nasa.gov |
|
7070
|
tcp |
|
Real Audio Versions 3, 4, 5 / QuickTime |
|
7099
|
tcp udp |
lazy-ptop |
scitex.com |
|
7100
|
tcp udp |
font-service |
X Font Service lcs.mit.edu |
|
7121
|
tcp udp |
virprot-lm |
sarchmo.virtualprototypes.ca |
|
7141
|
tcp udp |
clutild |
vnet.ibm.com |
|
7161
|
tcp |
nbsp; |
Cisco Catalyst |
|
7200
|
tcp udp |
fodms |
FODMS FLIP rockwell.com |
|
7201
|
tcp udp |
dlip |
rockwell.com |
|
7300-7390
|
tcp udp |
swx |
The Swiss Exchange swx.ch |
|
7300-7301
|
tcp |
netmonitor |
Netmonitor Trojan Horse |
|
7306-7308
|
tcp |
netmonitor |
Netmonitor Trojan Horse |
|
7323
|
tcp |
nbsp; |
SyGate 3.11 Remote Administration |
|
7326
|
tcp |
icb |
Internet Citizen's Band |
|
7395
|
tcp udp |
winqedit |
robelle.com |
|
7426
|
tcp udp |
pmdmgr |
OpenView DM Post Manager hp.com |
|
7427
|
tcp udp |
oveadmgr |
OpenView DM Event Agent Manager hp.com |
|
7428
|
tcp udp |
ovladmgr |
OpenView DM log Agent Manager hp.com |
|
7429
|
tcp udp |
opi-sock |
OpenView DM rqt communication hp.com |
|
7430
|
tcp udp |
xmpv7 |
OpenView DM xmpv7 api pipe hp.com |
|
7431
|
tcp udp |
pmd |
OpenView DM ovc/xmpv3 api pipe hp.com |
|
7437
|
tcp udp |
faximum |
faximum.com |
|
7491
|
tcp udp |
telops-lmd |
telops.com |
|
7511
|
tcp udp |
pafec-lm |
pafec.co.uk |
|
7544
|
tcp udp |
nta-ds |
FlowAnalyzer DisplayServer cisco.com |
|
7545
|
tcp udp |
nta-us |
FlowAnalyzer UtilityServer cisco.com |
|
7566
|
tcp udp |
vsi-omega |
vsin.com |
|
7570
|
tcp udp |
aries-kfinder |
ariessys.com |
|
7588
|
tcp udp |
sun-lm |
eng.sun.com |
|
7597
|
tcp udp |
QAZ |
Unassigned QAZ TROJAN WORM |
|
7633
|
tcp udp |
pmdfmgt |
innosoft.com |
|
7640
|
tcp udp |
nbsp; |
CUSeeMe (TCP, UDP) |
|
7648
|
udp |
cucme-1 |
CUCME live video/audio server |
|
7649
|
udp |
cucme-2 |
CUCME live video/audio server |
|
7650
|
udp |
cucme-3 |
CUCME live video/audio server |
|
7651
|
udp |
cucme-4 |
CUCME live video/audio server |
|
7777
|
tcp udp |
cbt |
cs.ucl.ac.uk |
|
7778
|
tcp udp |
unreal |
Unreal Tournament |
|
7781
|
tcp udp |
accu-lmgr |
accugraph.com |
|
7786
|
tcp udp |
minivend |
minivend.com |
|
7789
|
tcp |
ickiller |
ICKiller Trojan Hose |
|
7932
|
tcp udp |
t2-drm |
Tier 2 Data Resource Manager tier2.com |
|
7933
|
tcp udp |
t2-brm |
Tier 2 Business Rules Manager tier2.com |
|
7967
|
tcp udp |
supercell |
sigsci.com |
|
7979
|
tcp udp |
micomuse-ncps |
micromuse.com |
|
7980
|
tcp udp |
quest-vista |
quests.com |
|
7983
|
udp |
nbsp; |
Mstraem DDOS communication UDP |
|
7999
|
tcp udp |
irdmi2 |
intel.com |
|
8000
|
tcp udp |
irdmi |
intel.com |
|
8001
|
tcp udp |
vcom-tunnel |
us.ibm.com |
|
8002
|
tcp udp |
teradataordbms |
Teradata ORDBMS ncr.com |
|
8002
|
tcp |
nbsp; |
Cmail Web Admin |
|
8008
|
tcp udp |
http-alt |
w3.org |
|
8010
|
tcp udp |
wingate |
WinGate 2.1 |
|
8032
|
tcp udp |
pro-ed |
goldrush.com |
|
8033
|
tcp udp |
mindprint |
goldrush.com |
|
8080
|
tcp |
http-proxy |
Common HTTP proxy/second web server port |
|
8181
|
tcp |
nbsp; |
Imail Monitor plus HTTP management |
|
8200
|
tcp udp |
trivent1 |
trivnet.com |
|
8201
|
tcp udp |
trivent2 |
trivnet.com |
|
8204
|
tcp udp |
lm-perfworks |
LM Perfworks landmark.com |
|
8205
|
tcp udp |
lm-instmgr |
LM Instmgr landmark.com |
|
8206
|
tcp udp |
lm-dta |
LM Dta landmark.com |
|
8207
|
tcp udp |
lm-sserver |
LM SServer landmark.com |
|
8208
|
tcp udp |
lm-webwatcher |
LM Webwatcher landmark.com |
|
8351
|
tcp udp |
server-find |
chancery.com |
|
8376
|
tcp udp |
cruise-enum |
Cruise ENUM cruisetech.com |
|
8377
|
tcp udp |
cruise-swroute |
Cruise SWROUTE cruisetech.com |
|
8378
|
tcp udp |
cruise-config |
Cruise CONFIG cruisetech.com |
|
8379
|
tcp udp |
cruise-diags |
Cruise DIAGS cruisetech.com |
|
8380
|
tcp udp |
cruise-update |
Cruise UPDATE cruisetech.com |
|
8383
|
tcp udp |
imailwww |
IMail http www.ipswitch.com |
|
8400
|
tcp udp |
cvd |
CVD commvault.com |
|
8401
|
tcp udp |
sabarsd |
SABARSD commvault.com |
|
8402
|
tcp udp |
abarsd |
ABARSD commvault.com |
|
8403
|
tcp udp |
admind |
ADMIND commvault.com |
|
8431
|
tcp |
nbsp; |
Trend Micro PC-Cilin |
|
8450
|
tcp udp |
npmp |
npmp tanagra.demon.co.uk |
|
8473
|
tcp udp |
vp2p |
Virtual Point to Point atos-group.com |
|
8554
|
tcp udp |
rtsp-alt |
RTSP Alternate (see port 554) precept.com |
|
8602
|
tcp udp |
XBConnect |
XBConnect for playing Microsoft xbox linkable games
online |
|
8763
|
tcp udp |
mc-appsserver |
microcomgroup.com |
|
8764
|
tcp udp |
openqueue |
newsblip.com |
|
8765
|
tcp udp |
ultraseek-http |
Ultraseek HTTP infoseek.com |
|
8804
|
tcp udp |
truecm |
truebluesoftware.com |
|
8875
|
tcp udp |
napster |
napster |
|
8880
|
tcp udp |
CDDBP |
moonsoft.com |
|
8888
|
tcp udp |
napster |
napster |
|
8888
|
tcp |
sun-answerbook |
Sun Answerbook HTTP server |
|
8888
|
tcp udp |
ddi-tcp-1 |
NewsEDGE server desktopdata.com |
|
8889
|
tcp udp |
ddi-tcp2 |
Desktop Data (tcp 1) NewsEDGE server broadcast(udp)
desktopdata.com |
|
8890
|
tcp udp |
ddi-tcp3 |
Desktop Data (tcp 2) NewsEDGE client broadcast(udp)
desktopdata.com |
|
8891
|
tcp udp |
ddi-tcp4 |
Desktop Data (tcp 3) NESS application
desktopdata.com |
|
8892
|
tcp udp |
ddi-tcp5 |
Desktop Data (tcp 4) FARM product
desktopdata.com |
|
8893
|
tcp udp |
ddi-tcp6 |
Desktop Data (tcp 5) NewsEDGE/Web application
desktopdata.com |
|
8894
|
tcp udp |
ddi-tcp7 |
Desktop Data (tcp 6) COAL application
desktopdata.com |
|
8900
|
tcp udp |
jmb-cds1 |
creativedesign.com |
|
8901
|
tcp udp |
jmb-cds2 |
creativedesign.com |
|
8999
|
tcp |
nbsp; |
Gauntlet Firewall |
|
9000
|
tcp udp |
clistener |
CSlistener cincom.com |
|
9090
|
tcp udp |
websm |
WebSM austin.ibm.com |
|
9100
|
tcp |
jetdirect |
HP JetDirect card hp.com |
|
9160
|
tcp udp |
netlock1 |
netlock.com |
|
9161
|
tcp udp |
netlock2 |
netlock.com |
|
9162
|
tcp udp |
netlock3 |
netlock.com |
|
9163
|
tcp udp |
netlock4 |
netlock.com |
|
9164
|
tcp udp |
netlock5 |
netlock.com |
|
9200
|
tcp udp |
wap-wsp |
WAP connectionless session service
wapforum.org |
|
9201
|
tcp udp |
wap-wsp-wtp |
WAP session service wapforum.org |
|
9202
|
tcp udp |
wap-wsp-s |
WAP secure connectionless session service
wapforum.org |
|
9203
|
tcp udp |
wap-wsp-wtp-s |
WAP secure session service wapforum.org |
|
9204
|
tcp udp |
wap-vcard |
WAP vCard wapforum.org |
|
9205
|
tcp udp |
wap-vcal |
WAP vCal wapforum.org |
|
9206
|
tcp udp |
wap-vcard-s |
WAP vCard Secure wapforum.org |
|
9207
|
tcp udp |
wap-vcal-s |
WAP vCal Secure wapforum.org |
|
9297
|
udp |
netlock6 |
Netlock Agent communication over NAT
netlock.com |
|
9321
|
tcp udp |
guibase |
fujitsu.co.jp |
|
9325
|
udp |
nbsp; |
Mstream DDOS communication UDP |
|
9343
|
tcp udp |
mpidcmgr |
fujitsu.co.jp |
|
9344
|
tcp udp |
mphlpdmc |
fujitsu.co.jp |
|
9374
|
tcp udp |
fjdmimgr |
fujitsu.co.jp |
|
9396
|
tcp udp |
fjinvmgr |
fujitsu.co.jp |
|
9397
|
tcp udp |
mpidcagt |
fujitsu.co.jp |
|
9500
|
tcp udp |
ismserver |
micromuse.co.uk |
|
9535
|
tcp udp |
man |
Remote man server intel.com |
|
9536
|
tcp |
W |
nbsp; |
|
9537
|
tcp |
mantst |
Remote man server, testing |
|
9594
|
tcp udp |
msgsys |
Message System intel.com |
|
9595
|
tcp udp |
pds |
Ping Discovery Service intel.com |
|
9753
|
tcp udp |
rasadv |
microsoft.com |
|
9872-9875
|
tcp |
portalofdoom |
Portal of Doom Trojan Horse |
|
9876
|
tcp udp |
sd |
Session Director ee.lbl.gov |
|
9888
|
tcp udp |
cyborg-systems |
cyborg.com |
|
9898
|
tcp udp |
monkeycom |
niftyserve.or.jp |
|
9899
|
tcp udp |
sctp-tunneling |
nortelnetworks.com |
|
9989
|
tcp |
inikiller |
IniKiller Trojan Horse |
|
9900
|
tcp udp |
iua |
nortelnetworks.com |
|
9909
|
tcp udp |
domaintime |
greyware.com |
|
9950
|
tcp udp |
apcpcpluswin1 |
apcc.com |
|
9951
|
tcp udp |
apcpcpluswin2 |
apcc.com |
|
9952
|
tcp udp |
apcpcpluswin3 |
apcc.com |
|
9992-9997
|
tcp udp |
palace |
thepalace.com |
|
9998
|
tcp udp |
distinct32 |
distinct.com |
|
9999
|
tcp udp |
distinct |
distinct.com |
|
10000
|
tcp udp |
ndmp |
Network Data Management Protocol netapp.com |
|
10000
|
tcp |
bnews |
nbsp; |
|
10000
|
udp |
rscsO |
nbsp; |
|
10001
|
tcp |
queue |
nbsp; |
|
10001
|
udp |
rscsl |
nbsp; |
|
10002
|
tcp |
poker |
nbsp; |
|
10002
|
udp |
rscs2 |
nbsp; |
|
10003
|
tcp |
gateway |
nbsp; |
|
10003
|
udp |
rscs3 |
nbsp; |
|
10004
|
tcp |
remp |
nbsp; |
|
10004
|
udp |
rscs4 |
nbsp; |
|
10005
|
tcp |
stel |
Secure telnet |
|
10005
|
udp |
rscs5 |
nbsp; |
|
10006
|
udp |
rscs6 |
nbsp; |
|
10007
|
tcp udp |
mvs-capacity |
us.ibm.com |
|
10007
|
udp |
rscs7 |
nbsp; |
|
10008
|
udp |
rscs8 |
nbsp; |
|
10008
|
udp |
cworm |
Cheese Worm |
|
10009
|
udp |
rscs9 |
nbsp; |
|
10010
|
udp |
rscsa |
nbsp; |
|
10011
|
udp |
rscsb |
nbsp; |
|
10012
|
tcp |
qmaster |
nbsp; |
|
10012
|
udp |
qmaster |
nbsp; |
|
10067
|
udp |
pod |
Portal of Doom remote access backdoor |
|
10080
|
tcp udp |
amanda |
Backup Server Control amanda.org |
|
10082
|
tcp |
amandaidx |
Amanda Indexing amanda.org |
|
10083
|
tcp |
amidxtape |
Amanda Tape Indexing amanda.org |
|
10115
|
tcp udp |
ganymede-endpt |
ganymede.com |
|
10128
|
tcp udp |
bmc-perf-sd |
bmc.com |
|
10167
|
udp |
pod |
Portal of Doom remote access backdoor |
|
10288
|
tcp udp |
blocks |
Blocks |
|
10498
|
udp |
nbsp; |
Mstream DDOS Communication UDP |
|
10520
|
tcp, udp |
acidshivers |
Acid Shivers Trojan Horse |
|
10607
|
tcp, udp |
coma |
Coma Trojan Horse |
|
11000
|
tcp udp |
irisa |
datamedia.fr |
|
11000
|
tcp |
sennaspy |
Senna Spy Trojan Horse |
|
11001
|
tcp udp |
metasys |
jci.com |
|
11111
|
tcp udp |
vce |
Viral Computing Enviroment all.net |
|
11223
|
tcp |
projenic |
Projenic Trojan Horse |
|
11367
|
tcp udp |
atm-uhas |
attachmate.com |
|
11371
|
tcp udp |
pgp5 |
PGP 5 Keyserver |
|
11720
|
tcp udp |
h323callsigalt |
H323 Call Signal Alternate cisco.com |
|
12000
|
tcp udp |
entextxid |
IBM Enterprise Exteneder SNA XID Exchnage
ibm.com |
|
12001
|
tcp udp |
entextnetwork |
IBM Enterprise Exteneder SNA COS Network Priority
ibm.com |
|
12002
|
tcp udp |
entexthigh |
IBM Enterprise Exteneder SNA COS High Priority
ibm.com |
|
12003
|
tcp udp |
entextmed |
IBM Enterprise Exteneder SNA COS Medium Priority
ibm.com |
|
12004
|
tcp udp |
entextlow |
IBM Enterprise Exteneder SNA COS Low Priority
ibm.com |
|
12076
|
tcp |
gjammer |
GJamer Trojan Horse |
|
12172
|
tcp udp |
hivep |
HiveP skenbe.net |
|
12223
|
tcp |
hack99 |
kack99 Trojan Horse |
|
12223
|
tcp |
keylogger |
KeyLogger Trojan Horse |
|
12345
|
tcp |
NetBus |
Gabanbus, X-bill, NetBus Backdoor Trojan |
|
12346
|
tcp |
NetBus |
NetBus Backdoor Trojan |
|
12361-12362
|
tcp |
whackamole |
Whack a Mole Trojan Horse |
|
12631
|
tcp |
whackjob |
Whack Job Trojan Horse |
|
12753
|
tcp udp |
tsaf |
tsaf port |
|
12754
|
tcp |
nbsp; |
Mstream DDOS communication TCP |
|
13000
|
tcp udp |
sennaspy |
Senna Spy Trojan Horse |
|
13160
|
tcp udp |
i-zipqd |
quarterdeck.com |
|
13223
|
tcp udp |
popwow |
PowWow by Tribal Voice |
|
13224
|
tcp udp |
popwow |
PowWow by Tribal Voice |
|
13326
|
tcp |
nbsp; |
Crossfire game |
|
13720
|
tcp udp |
bprd |
BPRD protocol (Veritas NetBackup) veritas.com |
|
13721
|
tcp udp |
bpbm |
BPBEM protocol (Veritas NetBackup) veritas.com |
|
13722
|
tcp udp |
bjava-msvc |
BP Java MSVC protocol veritas.com |
|
13782
|
tcp udp |
bpcd |
Veritas NetBackup veritas.com |
|
13783
|
tcp udp |
vopied |
VOPIED Protocol veritas.com |
|
13818
|
tcp udp |
dsmcc-config |
DSMCC Config sciatl.com |
|
13819
|
tcp udp |
dsmcc-session |
DSMCC Session Message sciatl.com |
|
13820
|
tcp udp |
dsmcc-passthru |
DSMCC Pass-Thru Message sciatl.com |
|
13821
|
tcp udp |
dsmcc-download |
DSMCC Download Protocol sciatl.com |
|
13822
|
tcp udp |
dsmcc-ccp |
DSMCC Channel Change Protocol sciatl.com |
|
14001
|
tcp udp |
itu-sccp-ss7 |
ericsson.com |
|
14237
|
tcp udp |
palm |
Palm HotSync |
|
14238
|
tcp udp |
palm |
Palm HotSync |
|
15104
|
tcp |
nbsp; |
Mstream DDOS communication TCP |
|
16360
|
tcp udp |
netserialext1 |
aquilagroup.com |
|
16361
|
tcp udp |
netserialext2 |
aquilagroup.com |
|
16367
|
tcp udp |
netserialext3 |
aquilagroup.com |
|
16368
|
tcp udp |
netserialext4 |
aquilagroup.com |
|
16660
|
tcp |
stacheldraht |
Stacheldraht distributed attack tool client -->
handler |
|
16959
|
tcp |
subseven |
Subseven DEFCON8 2.1 backdoor remote access
tool |
|
16969
|
tcp |
priority |
Priority Trojan Horse |
|
16991
|
tcp udp |
intel-rci-mp |
intel.com |
|
17007
|
tcp udp |
isode-dua |
nbsp; |
|
17219
|
tcp udp |
chipper |
achipper.nl |
|
17300
|
tcp udp |
kuang2 |
Kuang2 Trojan Virus |
|
18000
|
tcp udp |
biimenu |
Beckman Instrumnets Inc beckman.com |
|
18181
|
tcp udp |
opsec-cvp |
checkpoint.com |
|
18182
|
tcp udp |
opsec-ufp |
checkpoint.com |
|
18183
|
tcp udp |
opsec-sam |
checkpoint.com |
|
18184
|
tcp udp |
opsec-lea |
checkpoint.com |
|
18185
|
tcp udp |
opsec-omi |
checkpoint.com |
|
18187
|
tcp udp |
opsec-ela |
checkpoint.com |
|
18487
|
tcp udp |
ac-cluster |
cup.hp.com |
|
18753
|
tcp udp |
shaft |
Shaft distributed attack tool handler -->
agent |
|
18888
|
tcp udp |
apc-necmp |
astralpoint.com |
|
18888
|
tcp udp |
liquidaudio |
Liquid Audio Server |
|
19283
|
tcp udp |
keysrvr |
Key Server sassafras.com |
|
19315
|
tcp udp |
keyshadow |
Key Shadow sassafras.com |
|
19410
|
tcp udp |
hp-sco |
cup.hp.com |
|
19411
|
tcp udp |
hp-sca |
cup.hp.com |
|
19412
|
tcp udp |
hp-sessmon |
cup.hp.com |
|
19541
|
tcp udp |
jcp |
JCP Clinet jci.co.jp |
|
20000
|
tcp udp |
dnp |
acsatlanta.com |
|
20000-20001
|
tcp |
millennium |
Millennium Trojan Horse |
|
20005
|
tcp |
btx |
xcept4 (Interacts with German Telekom's CEPT
videotext service) |
|
20034
|
tcp |
netbusn |
NetBus II (!!! trojan) |
|
20432
|
tcp |
shaft |
Shaft distributed attack client --> handler |
|
20432
|
udp |
shaft |
Shaft distributed attack agent --> handler |
|
20670
|
tcp udp |
track |
nawcad.navy.mil |
|
20999
|
tcp udp |
athand-mmp |
At Hand MMP hand.com |
|
21157
|
udp |
activision |
Activision gaming protocol (UDP) |
|
21544
|
tcp |
girlf |
GirlFriend Trojan Horse |
|
21554
|
tcp |
girlf |
GirlFriend Trojan Horse |
|
21590
|
tcp udp |
vofr-gateway |
tollbridgetech.com |
|
21845
|
tcp udp |
webphone |
webphona netspeak.com |
|
21846
|
tcp udp |
netspeak-is |
Directory Service netspeak.com |
|
21847
|
tcp udp |
netspeak-cs |
Connection Service netspeak.com |
|
21848
|
tcp udp |
netspeak-acd |
Automatic Call Distribution netspeak.com |
|
21849
|
tcp udp |
netspeak-cps |
Credit Processing System netspeak.com |
|
22000
|
tcp udp |
snapenetio |
SNAPenetIO opto22.com |
|
22001
|
tcp udp |
optocontrol |
OptoControl opto22.com |
|
22222
|
tcp |
prosiak |
Prosiak Trojan Horse |
|
22273
|
tcp |
wnn6 |
Wnn6 (Japanese Input) omronsoft.co.jp |
|
22289
|
tcp |
wnn6_Cn |
Wnn6 (Chinese Input) |
|
22305
|
tcp |
wnn6_Kr |
Wnn6 (Korean Input) |
|
22321
|
tcp |
wnn6_Tw |
Wnn6 (Taiwanese Input) |
|
22555
|
tcp udp |
vocaltec-wconf |
Vocaltec Web Conference Internet Phone
vocaltec.com |
|
22800
|
tcp udp |
aws-brf |
Telerate Information Platform LAN dowjones.com |
|
22951
|
tcp udp |
brf-gw |
Telerate Information Platform WAN dowjones.com |
|
23213
|
tcp |
powwow |
PowWow by Tribal Voice |
|
23214
|
tcp |
powwow |
PowWow by Tribal Voice |
|
23456
|
tcp |
evilftp |
Evil FTP or WhackJob Trojan Horse |
|
24000
|
tcp udp |
med-ltp |
hp.com |
|
24001/td>
|
tcp udp |
med-fsp-rx |
hp.com |
|
24002
|
tcp udp |
med-fsp-tx |
hp.com |
|
24003
|
tcp udp |
med-supp |
hp.com |
|
24004
|
tcp udp |
med-ovw |
hp.com |
|
24005
|
tcp udp |
med-ci |
hp.com |
|
24006
|
tcp udp |
med-net-svc |
hp.com |
|
24386
|
tcp udp |
intel_rci |
intel.com |
|
24554
|
tcp udp |
blickp |
ritlabs.com |
|
25000
|
tcp udp |
icl-twobase1 |
icl.co.uk |
|
25001
|
tcp udp |
icl-twobase2 |
icl.co.uk |
|
25002
|
tcp udp |
icl-twobase3 |
icl.co.uk |
|
25003
|
tcp udp |
icl-twobase4 |
icl.co.uk |
|
25004
|
tcp udp |
icl-twobase5 |
icl.co.uk |
|
25005
|
tcp udp |
icl-twobase6 |
icl.co.uk |
|
25006
|
tcp udp |
icl-twobase7 |
icl.co.uk |
|
25007
|
tcp udp |
icl-twobase8 |
icl.co.uk |
|
25008
|
tcp udp |
icl-twobase9 |
icl.co.uk |
|
25009
|
tcp udp |
icl-twobase10 |
icl.co.uk |
|
25793
|
tcp udp |
vocaltec-hos |
Vocaltec Address Server vocaltec.com |
|
26000
|
tcp udp |
quake |
Quake-based games (e.g. Half-Life, Quakeworld,
QuakeIII, etc.)
use numerous ports in the 26000-28000 range. |
|
26208
|
tcp udp |
wnn6_Ds |
Wnn6 (Dserver) omronsoft.co.jp |
|
26274
|
udp |
deltasource |
Delta Source Trojan Horse |
|
27000-27009
|
tcp udp |
flex-lm |
FLEX LM (1-10) globes.com |
|
27001
|
tcp udp |
quakew |
Quake World |
|
27010
|
tcp udp |
halflife |
Half-Life Game |
|
27015
|
tcp udp |
halflife |
Half-Life Game |
|
27374
|
tcp udp |
ramen |
Linux.Ramen.Worm attacks RedHat Linux |
|
27444
|
udp |
trinoo_bcast |
Trinoo distributed attack tool Master -> Bcast
Daemon communication |
|
27665
|
tcp |
trinoo_master |
Trinoo distributed attack tool Master server
control port |
|
27960
|
udp |
q3 |
Quake3 server |
|
27999
|
tcp udp |
tw-auth-key |
TW Authenication Key Distribution and Attribute
Certificate Services sse.ie |
|
29891
|
udp |
theunexplained |
The Unexplained Trojan Horse |
|
30029
|
tcp |
aoladmin |
AOL Admin 1.1 |
|
30100
|
tcp |
netsphere |
Netsphere Remote Access Trojan (Win 9x) |
|
30102
|
tcp |
netsphere |
Netsphere Remote Access Trojan (Win 9x) |
|
30129
|
tcp |
netsphere |
Masters Paradise Trojan |
|
30303
|
tcp |
socketdetroie |
Socket de Troie Trojan Horse |
|
30999
|
tcp |
kuang |
Kuang Trojan |
|
31335
|
udp |
trinoo_register |
Trinoo distributed attack tool Bcast Daemon
registration port |
|
31337
|
tcp |
Elite |
Sometimes interseting stuff found on this port |
|
31337
|
udp |
orifice |
Back orifice and NetBus Trogan Horse Programs |
|
31338
|
udp |
deepbo |
Deep bo Trick Trojan Horse |
|
31339
|
tcp, udp |
netspy |
NetSpy Trojan Horse |
|
31666
|
tcp |
bowhack |
BoWhack Trojan Horse |
|
31785
|
tcp |
hack-a-tack |
Hack-A-Tack Remote Access Trojan (Win 9x) |
|
31787
|
tcp |
hack-a-tack |
Hack-A-Tack Remote Access Trojan (Win 9x) |
|
31789
|
tcp udp |
hack-a-tack |
Hack-A-Tack Remote Access Trojan (Win 9x) |
|
31790
|
tcp udp |
hack-a-tack |
Hack-A-Tack Remote Access Trojan (Win 9x) |
|
31791
|
tcp udp |
hack-a-tack |
Hack-A-Tack Remote Access Trojan (Win 9x) |
|
32000
|
tcp |
nbsp; |
Artisoft XtraMail v1.11 |
|
32770-32780
|
tcp udp |
sometimes-rpc |
Sometimes an RPC port on a Solaris box |
|
32768
|
tcp udp |
filenet-tms |
filenet.com |
|
32769
|
tcp udp |
filenet-rpc |
filenet.com |
|
32770
|
tcp udp |
filenet-nch |
filenet.com |
|
32773
|
tcp udp |
rpcttd |
Sun puts RPC services in this region |
|
32776
|
tcp udp |
rpcspray |
Sun puts RPC services in this region |
|
32779
|
tcp udp |
rpccmds |
Sun puts RPC services in this region |
|
33270
|
udp |
trinity |
Trinity v3 distributed attack tool |
|
33333
|
tcp |
prosiak |
Prosiak Trojan Horse |
|
33434
|
tcp udp |
traceroute |
traceroute use iana.org |
|
34324
|
tcp, udp |
biggluck,tn |
Biggluck & TN or Tiny Telnet Server Trojan
Horses |
|
34555
|
udp |
wintrinoo |
Trinoo distributed attack tool Handler to/from
agent |
|
36794
|
tcp udp |
bugbear |
Bugbear Email Worm/Trojan |
|
36865
|
tcp udp |
kastenxpipe |
kastenchase.com |
|
38036
|
tcp udp |
timestep |
Timestep VPN from Saytek |
|
40193
|
tcp udp |
novellbug |
Novell servers can be crashed by sending random
data to this port. |
|
40412
|
tcp udp |
thespy |
The Spy Trojan Horse |
|
40421
|
tcp |
paradise |
Master's Paradise Trojan Horse |
|
40422
|
tcp |
paradise |
Master's Paradise Trojan Horse |
|
40423
|
tcp |
paradise |
Master's Paradise Trojan Horse |
|
40425
|
tcp |
paradise |
Master's Paradise Trojan Horse |
|
40426
|
tcp |
paradise |
Master's Paradise Trojan Horse |
|
40841
|
tcp udp |
cscp |
centerspan.com |
|
41524
|
tcp udp |
arcedis |
Arcserver Discovery |
|
41525
|
udp |
casdscsvc.exe |
Computer Associates BrighStor Enterprise Backup |
|
43188
|
tcp |
reachout |
Reach Out |
|
44818
|
tcp udp |
rockwell-encap |
Rockwell Encapsulation rockwell.com |
|
45000
|
tcp udp |
cisconet |
RCisco SAFE IDS /NetRanger postofficed |
|
45678
|
tcp udp |
eba |
EBA Prise eba.net |
|
45966
|
tcp udp |
ssr-servermgr |
geac.com |
|
47262
|
udp |
deltasource |
Delta Source Trojan Horse |
|
47557
|
tcp udp |
dbbrowse |
Databeam Corporation databeam.com |
|
47624
|
tcp udp |
directplaysrvr |
Direct Play Server microsoft.com |
|
47806
|
tcp udp |
ap |
ALC Protocol automatedlogic.com |
|
47808
|
tcp udp |
bacnet |
Building Automation and Control Networks
cornell.edu |
|
48000
|
tcp udp |
nimcontroller |
Nimbus Controller nimsoft.no |
|
48001
|
tcp udp |
nimspooler |
Nimbus Spooler nimsoft.no |
|
48002
|
tcp udp |
nimhub |
Nimbus Hub nimsoft.no |
|
48003
|
tcp udp |
nimgtw |
Nimbus Gateway nimsoft.no |
|
50505
|
tcp |
sockdetrois |
Sockets de Trois V2 Trojan Horse |
|
50766
|
tcp, udp |
fore |
Fore or Schwindler Trojan Horse |
|
53001
|
tcp, udp |
remoteshut |
Remote Shutdown Trojan Horse |
|
54320
|
tcp |
bo2k |
Back Orifice 2000 (TCP) |
|
54321
|
udp |
nbsp; |
Back Orifice 2000 (UDP) |
|
61466
|
|
telecom |
Telecommando Trojan |
|
65000
|
tcp |
devil |
Devil Trojan, Stacheldraht distributed attack tool
Handler to/from agent |
|
65301
|
tcp |
pcanywhere |
Used sometimes by PCAnywhere |