Port 1:
Port Service Multiplexer (TCP)
Port 2:
Management Utility (TCP/UDP)
Death (TCP)
Port 3:
Compression Process (TCP/UDP)
Port 5:
Remote Job Entry (TCP/UDP)
Port 7:
Echo (TCP/UDP)
Port 11:
Systat Active Users (TCP/UDP)
Port 13:
Daytime (TCP/UDP)
Port 17:
Quote of the Day (TCP/UDP)
Port 18:
Message Send Protocol (TCP/UDP)
Port 19:
Character Generator (TCP/UDP)
Port 20:
File Transfer Protocol (FTP) [Default Data] (TCP/UDP)
Port 21:
File Transfer Protocol (FTP) [Control] (TCP/UDP)
Back Construction, Blade Runner, Doly Trojan, Fore, 7tp trojan,
Invisible FTP, Larva, MBT, Motiv, Net Administrator,
Senna Spy FTP Server, Traitor, WebEx, WinCrash (TCP)
Port 22:
SSH Remote Login Protocol (TCP/UDP)
Port 23:
Telnet (TCP/UDP)
Prosiak (telnet), Tiny Telnet Server, Truva Atl, Telnet, Wingate (TCP)
Port 25:
Simple Mail Transfer Protocol (SMTP) (TCP/UDP)
Aji, Antigen, Email Password Sender, Email Worms, Gip,
Happy99/Ska, Haebu Coceda, Loveletter, Kuang2, Magic Horse,
Moscow Email Trojan, Neabi, ProMail trojan, NewApt, Shtrilitz,
Stealth, Taripas, Terminator (TCP)
Port 27:
NSW User System FE (TCP/UDP)
Port 29:
MSG ICP (TCP/UDP)
Port 31:
MSG Authentication (TCP/UDP)
Agent 31, Hackers Paradise, Masters Paradise,
Masters Paradise.80 (TCP)
Port 33:
Display Support Protocol (TCP/UDP)
Port 37:
Time (TCP/UDP)
Port 38:
Route Access Protocol (TCP/UDP)
Port 39:
Resource Location Protocol (TCP/UDP)
Port 41:
Graphics (TCP/UDP)
DeepThroat (TCP)
Port 42:
Host Name Server (TCP/UDP)
Port 43:
Whois (TCP/UDP)
Port 44:
MPM FLAGS Protocol (TCP/UDP)
Port 45:
Message Processing Module [recv] (TCP/UDP)
Port 46:
MPM [default send] (TCP/UDP)
Port 47:
NI FTP (TCP/UDP)
Port 48:
Digital Audit Daemon (TCP/UDP)
DRAT (TCP)
Port 49:
Login Host Protocol (TACACS) (TCP/UDP)
Port 50:
Remote Mail Checking Protocol (TCP/UDP)
DRAT (TCP)
Port 51:
IMP Logical Address Maintenance (TCP/UDP)
Port 52:
XNS Time Protocol (TCP/UDP)
Port 53:
DNS (Domain Name Server) (TCP/UDP)
Bonk (DoS) (TCP)
Port 54:
XNS Clearinghouse (TCP/UDP)
Port 55:
ISI Graphics Language (TCP/UDP)
Port 56:
XNS Authentication (TCP/UDP)
Port 58:
XNS Mail (TCP/UDP)
DMSetup (TCP)
Port 59:
DMSetup (TCP)
Port 61:
NI Mail (TCP/UDP)
Port 62:
ACA Services (TCP/UDP)
Port 63:
whois++ (TCP/UDP)
Port 64:
Communications Integrator (CI) (TCP/UDP)
Port 65:
TACACS-Database Service (TCP/UDP)
Port 66:
Oracle SQL*NET (TCP/UDP)
Port 67:
Bootstrap Protocol Server (TCP/UDP)
Port 68:
Bootstrap Protocol Client (TCP/UDP)
Port 69:
Trivial File Transfer (TCP/UDP)
Port 70:
Gopher (TCP/UDP)
Port 71:
Remote Job Service (TCP/UDP)
Port 72:
Remote Job Service (TCP/UDP)
Port 73:
Remote Job Service (TCP/UDP)
Port 74:
Remote Job Service (TCP/UDP)
Port 76:
Distributed External Object Store (TCP/UDP)
Port 78:
vetTCP (TCP/UDP)
Port 79:
Finger (TCP/UDP)
Firehotcker (TCP)
Port 80:
Webserver (IIS, Apache, etc.) (TCP/UDP)
Back End, Executor, Hooker, RingZero (TCP)
Port 81:
HOSTS2 Name Server (TCP/UDP)
Port 82:
XFER Utility (TCP/UDP)
Port 83:
MIT ML Device (TCP/UDP)
Port 84:
Common Trace Facility (TCP/UDP)
Port 85:
MIT ML Device (TCP/UDP)
Port 86:
Micro Focus Cobol (TCP/UDP)
Port 88:
Kerberos (TCP/UDP)
Port 89:
SU | MIT Telnet Gateway (TCP/UDP)
Port 90:
DNSIX Securit Attribute Token Map (TCP/UDP)
Port 91:
MIT Dover Spooler (TCP/UDP)
Port 92:
Network Printing Protocol (TCP/UDP)
Port 93:
Device Control Protocol (TCP/UDP)
Port 94:
Tivoli Object Dispatcher (TCP/UDP)
Port 95:
SUPDUP (TCP/UDP)
Port 96:
DIXIE Protocol Specification (TCP/UDP)
Port 97:
Swift Remote Virtual File Protocol (TCP/UDP)
Port 98:
TAC News (TCP/UDP)
Port 99:
Metagram Relay (TCP/UDP)
Hidden Port (TCP)
Port 101:
NIC Host Name Server (TCP/UDP)
Port 102:
ISO-TSAP Class 0 (TCP/UDP)
Port 103:
Genesis Point-to-Point Trans Net (TCP/UDP)
Port 104:
ACR-NEMA Digital Imag. & Comm. 300 (TCP/UDP)
Port 105:
CCSO name server protocol, Mailbox Name Nameserver
(TCP/UDP)
Port 106:
3COM-TSMUX (TCP/UDP)
Port 107:
Remote Telnet Service (TCP/UDP)
Port 108:
SNA Gateway Access Server (TCP/UDP)
Port 109:
Post Office Protocol – Version 2 (POP2) (TCP/UDP)
Port 110:
Post Office Protocol – Version 3 (POP3) (TCP/UDP)
ProMail trojan (TCP)
Port 111:
SUN Remote Procedure Call (TCP/UDP)
Port 112:
McIDAS Data Transmission Protocol (TCP/UDP)
Port 113:
Authentication Service, Ident (TCP/UDP)
Invisible Identd Deamon, Kazimas (TCP)
Port 114:
Audio News Multicast (TCP/UDP)
Port 115:
Simple File Transfer Protocol (TCP/UDP)
Port 116:
ANSA REX Notify (TCP/UDP)
Port 117:
UUCP Path Service (TCP/UDP)
Port 118:
SQL Services (TCP/UDP)
Infector 1.4.2 (UDP)
Port 119:
Happy99/Ska (TCP)
Network News Transfer Protocol (NNTP) (TCP/UDP)
Port 120:
CFDPTKT (TCP/UDP)
Port 121:
Encore Expedited Remote Pro.Call (TCP/UDP)
JammerKillah, BO jammerkilla (TCP)
Port 122:
SMAKYNET (TCP/UDP)
Port 123:
Network Time Protocol (NTP) (TCP/UDP)
Net Controller (TCP)
Port 124:
ANSA REX Trader (TCP/UDP)
Port 125:
Locus PC-Interface Net Map Ser (TCP/UDP)
Port 126:
Unisys Unitary Login (TCP/UDP)
Port 127:
Locus PC-Interface Conn Server (TCP/UDP)
Port 128:
GSS X License Verification (TCP/UDP)
Port 129:
Password Generator Protocol (TCP/UDP)
Port 130:
cisco FNATIVE (TCP/UDP)
Port 131:
cisco TNATIVE (TCP/UDP)
Port 132:
cisco SYSMAINT (TCP/UDP)
Port 133:
Statistics Service (TCP/UDP)
Farnaz (TCP)
Port 134:
INGRES-NET Service (TCP/UDP)
Port 135:
DCE endpoint resolution (TCP/UDP)
Port 136:
PROFILER Naming Server (TCP/UDP)
Port 137:
NETBIOS Name Service (MS Windows) (TCP/UDP)
Port 138:
NETBIOS Datagram Service (MS Windows) (TCP/UDP)
Port 139:
NETBIOS Session Service (MS Windows) (TCP/UDP)
Port 140:
EMFIS Data Service (TCP/UDP)
Port 141:
EMFIS Control Service (TCP/UDP)
Port 142:
Britton-Lee IDM (TCP/UDP)
Port 143:
Internet Message Access Protocol (TCP/UDP)
Port 144:
NewS (TCP/UDP)
Port 145:
UAAC Protocol (TCP/UDP)
Port 146:
ISO-IP0 (TCP/UDP)
Infector 1.x (TCP)
Port 147:
ISO-IP (TCP/UDP)
Port 148:
Jargon (TCP/UDP)
Port 149:
AED 512 Emulation Service (TCP/UDP)
Port 150:
SQL-NET (TCP/UDP)
Port 151:
HEMS (TCP/UDP)
Port 152:
Background File Transfer Program (TCP/UDP)
Port 153:
SGMP (TCP/UDP)
Port 154:
NETSC (TCP/UDP)
Port 155:
NETSC (TCP/UDP)
Port 156:
SQL Service (TCP/UDP)
Port 157:
KNET | VM Command | Message Protocol (TCP/UDP)
Port 158:
PCMail Server (TCP/UDP)
Port 159:
NSS-Routing (TCP/UDP)
Port 160:
SGMP-TRAPS (TCP/UDP)
Port 161:
SNMP (TCP/UDP)
Port 162:
SNMPTRAP (TCP/UDP)
Port 163:
CMIP | TCP Manager (TCP/UDP)
Port 164:
CMIP | TCP Agent (TCP/UDP)
Port 165:
Xerox (TCP/UDP)
Port 166:
Sirius Systems (TCP/UDP)
Port 167:
NAMP (TCP/UDP)
Port 168:
RSVD (TCP/UDP)
Port 169:
SEND (TCP/UDP)
Port 170:
Network PostScript (TCP/UDP)
A-Trojan (TCP)
Port 171:
Network Innovations Multiplex (TCP/UDP)
Port 172:
Network Innovations CL | 1 (TCP/UDP)
Port 173:
Xyplex (TCP/UDP)
Port 174:
MAILQ (TCP/UDP)
Port 175:
VMNET (TCP/UDP)
Port 176:
GENRAD-MUX (TCP/UDP)
Port 177:
X Display Manager Control Protocol (TCP/UDP)
Port 178:
NextStep Window Server (TCP/UDP)
Port 179:
Border Gateway Protocol (TCP/UDP)
Port 180:
Intergraph (TCP/UDP)
Port 181:
Unify (TCP/UDP)
Port 182:
Unisys Audit SITP (TCP/UDP)
Port 183:
OCBinder (TCP/UDP)
Port 184:
OCServer (TCP/UDP)
Port 185:
Remote-KIS (TCP/UDP)
Port 186:
KIS Protocol (TCP/UDP)
Port 187:
Application Communication Interface (TCP/UDP)
Port 188:
Plus Five’s MUMPS (TCP/UDP)
Port 189:
Queued File Transport (TCP/UDP)
Port 190:
Gateway Access Control Protocol (TCP/UDP)
Port 191:
Prospero Directory Service (TCP/UDP)
Port 192:
OSU Network Monitoring System (TCP/UDP)
Port 193:
Spider Remote Monitoring Protocol (TCP/UDP)
Port 194:
Internet Relay Chat Protocol (TCP/UDP)
Port 195:
DNSIX Network Level Module Audit (TCP/UDP)
Port 196:
DNSIX Session Mgt Module Audit Redir (TCP/UDP)
Port 197:
Directory Location Service (TCP/UDP)
Port 198:
Directory Location Service Monitor (TCP/UDP)
Port 199:
SMUX (TCP/UDP)
Port 200:
IBM System Resource Controller (TCP/UDP)
Port 201:
AppleTalk Routing Maintenance (TCP/UDP)
Port 202:
AppleTalk Name Binding (TCP/UDP)
Port 203:
AppleTalk Unused (TCP/UDP)
Port 204:
AppleTalk Echo (TCP/UDP)
Port 205:
AppleTalk Unused (TCP/UDP)
Port 206:
AppleTalk Zone Information (TCP/UDP)
Port 207:
AppleTalk Unused (TCP/UDP)
Port 208:
AppleTalk Unused (TCP/UDP)
Port 209:
The Quick Mail Transfer Protocol (TCP/UDP)
Port 210:
ANSI Z39.50 (TCP/UDP)
Port 211:
Texas Instruments 914C | G Terminal (TCP/UDP)
Port 212:
ATEXSSTR (TCP/UDP)
Port 213:
IPX (TCP/UDP)
Port 214:
VM PWSCS (TCP/UDP)
Port 215:
Insignia Solutions (TCP/UDP)
Port 216:
Computer Associates Int’l License Server (TCP/UDP)
Port 217:
dBase Unix (TCP/UDP)
Port 218:
Netix Message Posting Protocol (TCP/UDP)
Port 219:
Unisys ARPs (TCP/UDP)
Port 220:
Interactive Mail Access Protocol v3 (TCP/UDP)
Port 221:
Berkeley rlogind with SPX auth (TCP/UDP)
Port 222:
Berkeley rsdh with SPX auth (TCP/UDP)
Port 223:
Certificate Distribution Center (TCP/UDP)
Port 242:
Direct (TCP/UDP)
Port 243:
Survey Measurement (TCP/UDP)
Port 244:
Dayna (TCP/UDP)
Port 245:
LINK (TCP/UDP)
Port 246:
Display Systems Protocol (TCP/UDP)
Port 247:
SUBNTBCST_TFTP (TCP/UDP)
Port 248:
bhfhs (TCP/UDP)
Port 256:
RAP (TCP/UDP)
Port 257:
Secure Electronic Transaction (TCP/UDP)
Port 258:
Yak Winsock Personal Chat (TCP/UDP)
Port 259:
Efficient Short Remote Operations (TCP/UDP)
Port 260:
Openport (TCP/UDP)
Port 261:
IIOP Name Service over TLS | SSL (TCP/UDP)
Port 262:
Arcisdms (TCP/UDP)
Port 263:
HDAP (TCP/UDP)
Port 280:
http-mgmt (TCP/UDP)
Port 281:
Personal Link (TCP/UDP)
Port 282:
Cable Port A | X (TCP/UDP)
Port 309:
EntrustTime (TCP/UDP)
Port 310:
bhmds (TCP/UDP)
Port 315:
The Invasor (TCP)
Port 344:
Prospero Data Access Protocol (TCP/UDP)
Port 345:
Perf Analysis Workbench (TCP/UDP)
Port 346:
Zebra server (TCP/UDP)
Port 347:
Fatmen Server (TCP/UDP)
Port 348:
Cabletron Management Protocol (TCP/UDP)
Port 349:
mftp (TCP/UDP)
Port 350:
MATIP Type A (TCP/UDP)
Port 351:
MATIP Type B, bhoetty (TCP/UDP)
Port 352:
DTAG (TCP/UDP)
bhoedap4 (TCP/UDP)
Port 354:
bh611 (TCP/UDP)
Port 357:
bhevent (TCP/UDP)
Port 368:
Wingate 3.0 (UDP)
Port 371:
Clearcase (TCP/UDP)
Port 372:
ListProcessor (TCP/UDP)
Port 373:
Legent Corporation (TCP/UDP)
Port 374:
Legent Corporation (TCP/UDP)
Port 375:
Hassle, Direct Connect (TCP/UDP)
Port 376:
Amiga Envoy Network Inquiry Protocol (TCP/UDP)
Port 377:
NEC Corporation (TCP/UDP)
Port 378:
NEC Corporation (TCP/UDP)
Port 379:
TIA | EIA | IS-99 modem client (TCP/UDP)
Port 380:
TIA | EIA | IS-99 modem server (TCP/UDP)
Port 381:
hp performance data collector (TCP/UDP)
Port 382:
hp performance data managed node (TCP/UDP)
Port 383:
hp performance data alarm manager (TCP/UDP)
Port 384:
A Remote Network Server System (TCP/UDP)
Port 385:
IBM Application (TCP/UDP)
Port 386:
ASA Message Router Object Def. (TCP/UDP)
Port 387:
AppleTalk Update-Based Routing Pro. (TCP/UDP)
Port 388:
Unidata LDM Version 4 (TCP/UDP)
Port 389:
Lightweight Directory Access Protocol (TCP/UDP)
Port 390:
UIS (TCP/UDP)
Port 391:
SynOptics SNMP Relay Port (TCP/UDP)
Port 392:
SynOptics Port Broker Port (TCP/UDP)
Port 393:
Data Interpretation System (TCP/UDP)
Port 394:
EMBL Nucleic Data Transfer (TCP/UDP)
Port 395:
NETscout Control Protocol (TCP/UDP)
Port 396:
Novell Netware over IP (TCP/UDP)
Port 397:
Multi Protocol Trans. Net. (TCP/UDP)
Port 398:
Kryptolan (TCP/UDP)
Port 399:
ISO Transport Class 2 Non-Control over TCP (TCP/UDP)
Port 400:
Workstation Solutions (TCP/UDP)
Port 401:
Uninterruptible Power Supply (TCP/UDP)
Port 402:
Genie Protocol (TCP/UDP)
Port 403:
decap (TCP/UDP)
Port 404:
nced (TCP/UDP)
Port 405:
ncld (TCP/UDP)
Port 406:
Interactive Mail Support Protocol (TCP/UDP)
Port 407:
Timbuktu (TCP/UDP)
Port 408:
Prospero Resource Manager Sys. Man. (TCP/UDP)
Port 409:
Prospero Resource Manager Node Man. (TCP/UDP)
Port 410:
DECLadbug Remote Debug Protocol (TCP/UDP)
Port 411:
Remote MT Protocol (TCP/UDP)
Port 412:
Trap Convention Port (TCP/UDP)
Port 413:
SMSP (TCP/UDP)
Port 414:
InfoSeek (TCP/UDP)
Port 415:
BNet (TCP/UDP)
Port 416:
Silverplatter (TCP/UDP)
Port 417:
Onmux (TCP/UDP)
Port 418:
Hypter-G (TCP/UDP)
Port 419:
Ariel (TCP/UDP)
Port 420:
SMPTE (TCP/UDP)
Port 421:
Ariel (TCP/UDP)
(TCP Wrappers) (TCP)
Port 422:
Ariel (TCP/UDP)
Port 423:
IBM Operatings Planning and Control Start (TCP/UDP)
Port 424:
IBM Operatings Planning and Control Track (TCP/UDP)
Port 425:
ICAD (TCP/UDP)
Port 426:
smartsdp (TCP/UDP)
Port 427:
Server Location (TCP/UDP)
Port 428:
OCS_CMU (TCP/UDP)
Port 429:
OCS_AMU (TCP/UDP)
Port 430:
UTMPSD (TCP/UDP)
Port 431:
UTMPCD (TCP/UDP)
Port 432:
IASD (TCP/UDP)
Port 433:
NNSP (TCP/UDP)
Port 434:
MobileIP-Agent (TCP/UDP)
Port 435:
MobileIP-MN (TCP/UDP)
Port 436:
DNA-CML (TCP/UDP)
Port 437:
comscm (TCP/UDP)
Port 438:
dsfgw (TCP/UDP)
Port 439:
dasp (TCP)
Port 440:
sgcp (TCP/UDP)
Port 441:
decvms-sysmgt (TCP/UDP)
Port 442:
cvc_hostd (TCP/UDP)
Port 443:
HTTPS Webserver (SSL) Secure HTTP Protocol (TCP/UDP)
Port 444:
Simple Network Paging Protocol (TCP/UDP)
Port 445:
Microsoft-DS (TCP/UDP)
Port 446:
DDM-RDB (TCP/UDP)
Port 447:
DDM-RFM (TCP/UDP)
Port 448:
DDM-BYTE (TCP/UDP)
Port 449:
AS Server Mapper (TCP/UDP)
Port 450:
TServer (TCP/UDP)
Port 451:
Cray Network Semaphore server (TCP/UDP)
Port 452:
Cray SFS config server (TCP/UDP)
Port 453:
CreativeServer (TCP/UDP)
Port 454:
ContentServer (TCP/UDP)
Port 455:
CreativePartnr (TCP/UDP)
Port 456:
macon-UDP (TCP/UDP)
Hackers Paradise (TCP)
Port 457:
scohelp (TCP/UDP)
Port 458:
apple quick time (TCP/UDP)
Port 459:
ampr-rcmd (TCP/UDP)
Port 460:
skronk (TCP/UDP)
Port 461:
DataRampSrv (TCP/UDP)
Port 462:
DataRampSrvSec (TCP/UDP)
Port 463:
alpes (TCP/UDP)
Port 464:
kpasswd (TCP/UDP)
Port 465:
smtp protocol over TLS | SSL (was ssmtp) (TCP/UDP)
Port 466:
digital-vrc (TCP/UDP)
Port 467:
mylex-mapd (TCP/UDP)
Port 468:
proturis (TCP/UDP)
Port 469:
Radio Control Protocol (TCP/UDP)
Port 470:
scx-proxy (TCP/UDP)
Port 471:
Mondex (TCP/UDP)
Port 472:
ljk-login (TCP/UDP)
Port 473:
hybrid-pop (TCP/UDP)
Port 474:
tn-tl-w2 (TCP/UDP)
Port 475:
TCPnethaspsrv (TCP)
Port 476:
tn-tl-fd1 (TCP/UDP)
Port 477:
ss7ns (TCP/UDP)
Port 478:
spsc (TCP/UDP)
Port 479:
iafserver (TCP/UDP)
Port 480:
iafdbase (TCP/UDP)
Port 481:
Ph service (TCP/UDP)
Port 482:
bgs-nsi (TCP/UDP)
Port 483:
ulpnet (TCP/UDP)
Port 484:
Integra Software Management Environment (TCP/UDP)
Port 485:
Air Soft Power Burst (TCP/UDP)
Port 486:
avian (TCP/UDP)
Port 487:
saft (TCP/UDP)
Port 488:
gss-http (TCP/UDP)
Port 489:
nest-protocol (TCP/UDP)
Port 490:
micom-pfs (TCP/UDP)
Port 491:
go-login (TCP/UDP)
Port 492:
Transport Independent Convergence for FNA (TCP/UDP)
Port 493:
Transport Independent Convergence for FNA (TCP/UDP)
Port 494:
POV-Ray (TCP/UDP)
Port 495:
intecourier (TCP/UDP)
Port 496:
PIM-RP-DISC (TCP/UDP)
Port 497:
dantz (TCP/UDP)
Port 498:
siam (TCP/UDP)
Port 499:
ISO ILL Protocol (TCP/UDP)
Port 500:
isakmp (TCP/UDP)
Port 501:
STMF (TCP/UDP)
Port 502:
asa-appl-proto (TCP/UDP)
Port 503:
Intrinsa (TCP/UDP)
Port 504:
citadel (TCP/UDP)
Port 505:
mailbox-lm (TCP/UDP)
Port 506:
ohimsrv (TCP/UDP)
Port 507:
crs (TCP/UDP)
Port 508:
xvttp (TCP/UDP)
Port 509:
snare (TCP/UDP)
Port 510:
FirstClass Protocol (TCP/UDP)
Port 511:
mynet-as (TCP/UDP)
Port 512:
remote procexx execution, Comsat, Biff (TCP/UDP)
Port 513:
login (remote login a la telnet) (TCP)
who (who is logged in) (UDP)
Port 514:
shell (cmd like exed) (TCP)
syslog (UDP)
Port 515:
printer spooler (TCP/UDP)
Port 516:
videotex (TCP/UDP)
Port 517:
talk (rendezvous port from wich a TCP connection ist etablished)
(TCP/UDP)
Port 518:
ntalk (TCP/UDP)
Port 519:
unixtime (TCP/UDP)
Port 520:
extended file name server, router (TCP/UDP)
Port 521:
ripng (TCP/UDP)
Port 522:
ULP (TCP/UDP)
Port 523:
IBM-DB2 (TCP)
Port 524:
NCP (TCP/UDP)
Port 525:
timeserver (TCP/UDP)
Port 526:
Newdate (TCP/UDP)
Port 527:
Stock IXChange (TCP/UDP)
Port 528:
Customer IXChange (TCP/UDP)
Port 529:
IRC-SERV (TCP/UDP)
Port 530:
rpc (TCP/UDP)
Port 531:
chat (TCP/UDP)
Rasmin (TCP)
Port 532:
readnews (TCP/UDP)
Port 533:
for emergency broadcasts (TCP/UDP)
Port 534:
MegaMedia Admin (TCP/UDP)
Port 535:
iiop (TCP/UDP)
Port 536:
opalis-rdv (TCP/UDP)
Port 537:
Networked Media Streaming Protocol (TCP/UDP)
Port 538:
gdomap (TCP/UDP)
Port 539:
Apertus Technologies Load Determination (TCP/UDP)
Port 540:
uucpd (TCP/UDP)
Port 541:
uucp-rlogin (TCP/UDP)
Port 542:
commerce (TCP/UDP)
Port 543:
klogin (TCP/UDP)
Port 544:
krcmd (TCP/UDP)
Port 545:
applegtcsrvr (TCP/UDP)
Port 546:
DHCPv6 Client (TCP/UDP)
Port 547:
DHCPv6 Server (TCP/UDP)
Port 548:
AFP over TCP (TCP/UDP)
Port 549:
IDFP (TCP/UDP)
Port 550:
new-who (TCP/UDP)
Port 551:
cybercash (TCP/UDP)
Port 552:
deviceshare (TCP/UDP)
Port 553:
Pirp (TCP/UDP)
Port 554:
Real Time Stream Control Protocol (TCP/UDP)
Port 555:
dsf (TCP/UDP)
Ini-Killer, NeTAdministrator, Phase Zero, Stealth Spy (TCP/UDP)
Port 556:
rfs server (TCP/UDP)
Port 557:
openvms-sysipc (TCP/UDP)
Port 558:
SDNSKMP (TCP/UDP)
Port 559:
TEEDTAP (TCP/UDP)
Port 560:
rmonitord (TCP/UDP)
Port 561:
monitor (TCP/UDP)
Port 562:
chcmd (TCP/UDP)
Port 563:
nntp protocol over TLS | SSL (was snntp) (TCP/UDP)
Port 564:
plan 9 file service (TCP/UDP)
Port 565:
whoami (TCP/UDP)
Port 566:
streettalk (TCP/UDP)
Port 567:
banyan-rpc (TCP/UDP)
Port 568:
microsoft shuttle (TCP/UDP)
Port 569:
microsoft rome (TCP/UDP)
Port 570:
demon (TCP/UDP)
Port 571:
udemon (TCP/UDP)
Port 572:
sonar (TCP/UDP)
Port 573:
banyan-vip (TCP/UDP)
Port 574:
FTP Software Agent System (TCP/UDP)
Port 575:
VEMMI (TCP/UDP)
Port 576:
ipcd (TCP/UDP)
Port 577:
vnas (TCP/UDP)
Port 578:
ipdd (TCP/UDP)
Port 579:
decbsrv (TCP/UDP)
Port 580:
SNTP HEARTBEAT (TCP/UDP)
Port 581:
Bundle Discovery Protocol (TCP/UDP)
Port 582:
SCC Security (TCP/UDP)
Port 583:
Phillips Video-Conferencing (TCP/UDP)
Port 584:
Key Server (TCP/UDP)
Port 585:
IMAP4+SSL (not recommended, use 993 instead) (TCP/UDP)
Port 586:
Password Change (TCP/UDP)
Port 587:
Submission (TCP/UDP)
Port 588:
CAL (TCP/UDP)
Port 589:
EyeLink (TCP/UDP)
Port 590:
TNS CML (TCP/UDP)
Port 591:
FMPRO4 – http (TCP/UDP)
Port 592:
Eudora Set (TCP/UDP)
Port 600:
Sun IPC server (TCP/UDP)
Port 606:
Cray Unified Resource Manager (TCP/UDP)
Secret Service (TCP)
Port 607:
nqs (TCP/UDP)
Port 608:
Sender-Initiated | Unsolicited File Transfer (TCP/UDP)
Port 609:
npmp-trap (TCP/UDP)
Port 610:
npmp-local (TCP/UDP)
Port 611:
npmp-gui (TCP/UDP)
Port 612:
HMMP Indication (TCP/UDP)
Port 613:
HMMP Operation (TCP/UDP)
Port 614:
SSLshell (TCP/UDP)
Port 615:
Internet Configuration Manager (TCP/UDP)
Port 616:
SCO System Administration Server (TCP/UDP)
Port 617:
SCO Desktop Administration Server (TCP/UDP)
Port 618:
DEI-ICDA (TCP/UDP)
Port 619:
Digital EVM (TCP/UDP)
Port 620:
SCO WebServer Manager (TCP/UDP)
Port 621:
ESCP (TCP/UDP)
Port 633:
Service Status update (Sterling Software) (TCP/UDP)
Port 634:
ginad (TCP/UDP)
Port 635:
RLZ DBase (TCP/UDP)
Port 636:
ldap protocol over TLS | SSL (was sldap) (TCP/UDP)
Port 637:
lanserver (TCP/UDP)
Port 666:
doom Id Software (TCP/UDP)
Attack FTP, Satanz Backdoor (TCP)
Port 667:
SniperNet (TCP)
campaign contribution disclosures – SDR Technologies (TCP/UDP)
Port 668:
MeComm (TCP/UDP)
Port 669:
MeRegister (TCP/UDP)
DP Trojan (TCP)
Port 670:
VACDSM-SWS (TCP/UDP)
Port 671:
VACDSM-APP (TCP/UDP)
Port 672:
VPPS-QUA (TCP/UDP)
Port 673:
CIMPLEX (TCP/UDP)
Port 674:
ACAP (TCP/UDP)
Port 675:
DCTP (TCP/UDP)
Port 692:
GayOL (TCP)
Port 704:
errlog copy | server daemon (TCP/UDP)
Port 705:
AgentX (TCP/UDP)
Port 709:
Entrust Key Management Service Handler (TCP/UDP)
Port 710:
Entrust Administration Service Handler (TCP/UDP)
Port 729:
IBM NetView DM | 6000 Server | Client (TCP/UDP)
Port 730:
IBM NetView DM | 6000 send | TCP (TCP/UDP)
Port 731:
IBM NetView DM | 6000 receive | TCP (TCP/UDP)
Port 741:
netGW (TCP/UDP)
Port 742:
Network based Rev. Cont. Sys. (TCP/UDP)
Port 744:
Flexible License Manager (TCP/UDP)
Port 747:
Fujitsu Device Control (TCP/UDP)
Port 748:
Russell Info Sci Calendar Manager (TCP/UDP)
Port 749:
kerberos administration (TCP/UDP)
Port 750:
kerberos version IV (UDP)
Port 777:
Aim Spy (TCP)
Port 799:
Remotely Possible Server (TCP)
Port 808:
WinHole (TCP)
Port 815:
Everyone’s Darling (TCP/UDP)
Port 886:
ICL coNETion locate server (TCP/UDP)
Port 887:
ICL coNETion server info (TCP/UDP)
Port 888:
AccessBuilder (TCP/UDP)
Port 900:
OMG Initial Refs (TCP/UDP)
Port 911:
xact-backup (TCP)
Dark Shadow (TCP)
Port 989:
ftp protocol, data, over TLS | SSL (TCP/UDP)
Port 990:
ftp protocol, control, over TLS | SSL (TCP/UDP)
Port 991:
Netnews Administration System (TCP/UDP)
Port 992:
telnet protocol over TLS | SSL (TCP/UDP)
Port 993:
imap4 protocol over TLS | SSL (TCP/UDP)
Port 994:
irc protocol over TLS | SSL (TCP/UDP)
Port 995:
pop3 protocol over TLS | SSL (was spop3) (TCP/UDP)
Port 999:
DeepThroat (TCP)
Port 1000:
Der Spaeher 3 (TCP)
Port 1001:
Der Spaeher 3, Le Guardian, Silencer, WebEx (TCP)
Port 1003:
BackDoor 2.0x (TCP)
Port 1010:
Doly Trojan 1.3 + 1.35, CafeIni 0.9 (1010:1100) (TCP)
Port 1011:
Doly Trojan 1.1/1.2 (TCP)
Port 1012:
Doly Trojan 1.5 (TCP)
Port 1015:
Doly Trojan 1.6 (TCP)
Port 1016:
Doly Trojan (TCP)
Port 1020:
Vampire (TCP)
Port 1024:
mIRC DCC / IRC DCC (1024-5000), Dwyco Video, ICUII Client,
H.323 compliant video player, NetMeeting 2.0, 3.0,
Intel Video Phone (TCP)
NetSpy, Latinus (TCP)
Port 1025:
Windows RPC, Scheduled Tasks (TCP/UDP)
NetSpy, Maverick's Matrix, RemoteStorm (TCP/UDP)
Port 1027:
ICQ (TCP)
Port 1029:
ICQ, LSASS (TCP/UDP)
InCommand (TCP/UDP)
Port 1030:
Need for Speed 3- Hot Pursuit (TCP)
Port 1031:
Computer Associated FTP Server (TCP)
Port 1032:
ICQ (TCP)
Port 1033:
NetSpy (TCP)
Port 1034:
PhoneFree (TCP/UDP)
Mydoom.M (TCP)
Port 1035:
PhoneFree (TCP/UDP)
Port 1042:
Bla 1.1 (TCP)
Port 1045:
Rasmin (TCP)
Port 1047:
GateCrasher.b, GateCrasher.c (TCP)
Port 1050:
MiniCommand (TCP)
Port 1080:
WinHole, Wingate, Bagle.AI (TCP)
Socks, Wingate (TCP/UDP)
Port 1081:
WinHole (TCP)
Port 1082:
WinHole (TCP)
Port 1083:
WinHole (TCP)
Port 1090:
Xtreme (TCP)
Port 1095:
Rat (TCP)
Port 1097:
Rat (TCP)
Port 1098:
Rat (TCP)
Port 1099:
BFevolution, Rat (TCP)
Port 1100:
CafeIni 0.9 (1010:1100) (TCP)
ICQ Lite (TCP)
Port 1117:
Audiogalaxy Satellite (1117-5190) (TCP)
Port 1137:
MTX (TCP)
Port 1140:
Westwood Online - C&C Tiberian Sun & Dune 2000 (TCP/UDP)
Port 1155:
Network File Access (TCP/UDP)
Port 1170:
Psyber Stream Server, Streaming Audio Trojan, Voice (TCP)
Port 1200:
NoBackO (UDP)
Port 1201:
NoBackO (UDP)
Port 1207:
SoftWAR (TCP)
Port 1208:
Infector 1.3 + 1.4.1 (TCP/UDP)
Port 1212:
Kaos (TCP)
lupa (TCP/UDP)
Port 1214:
KaZaA (TCP)
Port 1225:
Scarab (TCP)
Port 1234:
Ultors Trojan, SubSeven 2.0, Bagle.AF (TCP)
Port 1243:
BackDoor-G, SubSeven, Sub7(*), SubSeven Apocalypse,
Tiles (TCP)
Port 1245:
VooDoo Doll (TCP)
Port 1255:
Scarab (TCP)
Port 1256:
Project nEXT (TCP)
Port 1269:
Maverick’s Matrix (TCP)
Port 1313:
NETrojan (TCP)
Port 1338:
Millenium Worm (TCP)
Port 1349:
BO DLL (UDP)
Port 1352:
Lotus Notes Server (TCP)
Port 1417:
Timbuktu (TCP/UDP)
Port 1418:
Timbuktu (TCP/UDP)
Port 1419:
Timbuktu (TCP/UDP)
Port 1420:
Timbuktu (TCP/UDP)
Port 1433:
Microsoft-SQL-Server (TCP/UDP)
Port 1434:
Microsoft-SQL-Monitor (TCP/UDP)
Port 1437:
Kohan Immortal Sovereigns (TCP/UDP)
Port 1441:
RemoteStorm (TCP)
Port 1451:
IBM Information Management (TCP/UDP)
Port 1492:
FTP99CMP, Back.Orifice.FTP (TCP)
Port 1494:
CITRIX Metaframe / ICA client (TCP)
Port 1503:
H.323 compliant video player, NetMeeting 2.0, 3.0,
Intel Video Phone (TCP)
Port 1504:
H.323 compliant video player, NetMeeting 2.0, 3.0,
Intel Video Phone (TCP)
Port 1509:
Psyber Streaming Server (TCP)
Port 1512:
Wins (Microsoft’s Windows Internet Name Service) (TCP/UDP)
Port 1524:
Trin00 (DDoS) (TCP)
Port 1547:
Laplink (TCP/UDP)
Port 1559:
web2host (TCP/UDP)
Port 1584:
Dialpad (TCP)
Port 1585:
Dialpad (TCP)
Port 1600:
Shivka-Burka (TCP)
Port 1611:
Black and White (TCP)
Port 1612:
Black and White (TCP)
Port 1680:
CarbonCopy32 host on your LAN (TCP)
Port 1700:
Rux.Tick (TCP)
Port 1731:
H.323 compliant video player, NetMeeting 2.0, 3.0,
Intel Video Phone (TCP)
Port 1732:
H.323 compliant video player, NetMeeting 2.0, 3.0,
Intel Video Phone (TCP)
Port 1735:
PrivateChat (TCP/UDP)
Port 1745:
remote-winsock (TCP/UDP)
Port 1777:
Scarab (TCP)
Port 1784:
Snid X2 (TCP)
Port 1789:
hello (TCP/UDP)
Port 1801:
Microsoft Message Que (TCP/UDP)
Port 1807:
SpySender (TCP)
Port 1863:
MSN Messenger (TCP/UDP)
Port 1966:
Fake FTP (TCP)
Port 1969:
OpC BO (TCP)
Port 1981:
Shockrave (TCP)
Port 1986:
cisco license management (TCP/UDP)
Port 1987:
cisco RSRB Priority 1 Port (TCP/UDP)
Port 1988:
cisco RSRB Priority 2 Port (TCP/UDP)
Port 1989:
cisco RSRB Priority 3 Port (TCP/UDP)
Port 1990:
cisco STUN Priority 1 Port (TCP/UDP)
Port 1991:
cisco STUN Priority 2 Port (TCP/UDP)
Port 1992:
cisco STUN Priority 3 Port, IPsendmsg (TCP/UDP)
Port 1993:
cisco SNMP TCP port (TCP/UDP)
Port 1994:
cisco serial tunnel port (TCP/UDP)
Port 1995:
cisco perf port (TCP/UDP)
Port 1996:
cisco Remote SRB port (TCP/UDP)
Port 1997:
cisco Gateway Discovery Protocol (TCP/UDP)
Port 1998:
cisco X.25 service (XOT) (TCP/UDP)
Port 1999:
cisco identification port (TCP/UDP)
BackDoor, BackDoor 1.00-1.03, BackDoor 2.x,
TransScout 1.x (TCP)
Port 2000:
Der Spaeher 3, TransScout, Insane Network (TCP)
Remotely AnyWhere (TCP)
Port 2001:
Der Spaeher 3, TransScout, Trojan Cow (TCP)
Port 2002:
TransScout (TCP)
Port 2003:
TransScout (TCP)
Port 2004:
TransScout (TCP)
Port 2005:
TransScout (TCP)
Port 2023:
HackCity Ripper Pro (TCP)
Port 2047:
Camerades (TCP/UDP)
Port 2048:
Camerades (TCP/UDP)
Port 2049:
Network File System – Sun Microsystems (TCP/UDP)
Port 2080:
Wingate 3.0 (TCP)
WinHole (TCP)
Port 2090:
Pal Talk (file transfer) (TCP/UDP)
Go2Call (TCP/UDP)
Port 2091:
Go2Call (TCP)
Pal Talk (video listening) (TCP/UDP)
Port 2095:
Pal Talk (file transfer) (TCP)
Port 2115:
Bugs (TCP)
Port 2140:
Deep Throat (all versions), The Invasor (UDP)
Port 2208:
Rux.PSW (TCP)
Port 2233:
Shiva VPN (UDP)
Port 2283:
HLV Rat 5, Rat (TCP)
Port 2300:
Xplorer (TCP)
Battlecom (2300-2400) (TCP)
Port 2346:
Rogue Spear, Rainbow Six (Client and Server) (TCP/UDP)
Port 2565:
Striker (TCP)
Port 2583:
WinCrash 2 (TCP)
Port 2600:
Digital RootBeer (TCP)
Port 2644:
PhoneFree (TCP)
Port 2718:
The Prayer 2 (TCP)
Port 2773:
BackDoor-G, SubSeven, Sub7(*) (TCP)
Port 2784:
world wide web – development (TCP/UDP)
Port 2801:
Phineas Phucker (TCP)
Port 2989:
Rat 1.2 (TCP/UDP)
Port 3000:
Remote Shutdown (TCP)
Deerfield MDaemon Email Server, Active Worlds (TCP)
Port 3001:
Deerfield MDaemon Email Server (TCP)
Port 3024:
WinCrash (TCP)
Port 3100:
Delta Force (Client and Server) (TCP/UDP)
Port 3128:
RingZero (TCP)
Port 3129:
Masters Paradise, MastersParadise.92 (TCP)
Port 3150:
Deep Throat, Deep Throat 10, The Invasor (UDP)
Port 3230:
Polycom ViaVideo H.323 (3230-3235) (TCP/UDP)
Port 3264:
cc:mail | lotus (TCP/UDP)
Port 3268:
Microsoft Global Catalog (TCP/UDP)
Port 3269:
Microsoft Global Catalog with LDAP | SSL (TCP/UDP)
Port 3270:
Verismart (TCP/UDP)
Port 3389:
Windows NT/2000 Terminal Server (TCP/UDP)
Port 3453:
Bungie.net, Myth, Myth II Server (TCP)
Port 3456:
Teror Trojan (TCP)
Port 3459:
Eclipse 2000, Sanctuary (TCP)
Port 3586:
Snid X2 (TCP)
Port 3700:
Portal of Doom (PoD), al of Doom (TCP)
Port 3782:
Roger Wilco (TCP/UDP)
Port 3791:
Total Eclipse (FTP) (TCP)
Port 3801:
Total Eclipse (UDP)
Port 3855:
Kohan Immortal Sovereigns (TCP/UDP)
Port 3999:
Remote Anything (TCP)
Port 4000:
Remote Anything, Blizzard Battlenet, Westwood Online -
C&C Tiberian Sun & Dune 2000 (TCP/UDP)
Skydance (TCP)
Port 4092:
WinCrash (TCP)
Port 4242:
Virtual hacking Machine (TCP)
Port 4245:
Rux.Backdoor (TCP)
Port 4321:
BoBo, Schoolbus 1.0 (TCP)
Port 4444:
Prosiak, Swift remote (TCP)
Port 4567:
File Nail (TCP)
Port 4590:
ICQTrojan (TCP)
Port 4711:
Olfactor (UDP)
Port 4899:
RAdmin (Fama Tech) (TCP)
Port 4950:
ICQTrojan, Icq Trojan (TCP)
Port 5000:
Windows ME, XP and 2003 Network Plug & Play (TCP)
Bubbel, Back Door Setup, Blazer 5, Socket 23,
Sockets de Troie (TCP)
Port 5001:
Yahoo Messenger Chat (TCP)
Back Door Setup, Sockets de Troie (TCP)
Port 5003:
Claris FileMaker Pro (TCP/UDP)
Port 5011:
OOTLT (TCP)
Port 5031:
NetMetropolitan 1.0, NetMetropolitan 1.04 (TCP)
Port 5032:
NetMetropolitan 1.04 (TCP)
Port 5190:
AIM Talk (TCP)
Port 5310:
Outlaws (TCP/UDP)
Port 5321:
Firehotcker (TCP)
Port 5333:
Backage Trojan Box 3 (TCP)
Port 5343:
WCrat (TCP)
Port 5400:
Blade Runner, Back Construction 1.2 (TCP)
Port 5401:
Blade Runner 1.x, Back Construction (TCP)
Port 5402:
Blade Runner 2.x, Back Construction (TCP)
Port 5500:
Virtual Network Computing (VNC), Hotline Server (5500-5503)
(TCP)
Port 5512:
Illusion Mailer (TCP)
Port 5521:
Illusion Mailer (TCP)
Port 5550:
Xtcp 2 (TCP)
Port 5555:
ServeMe (TCP)
Port 5556:
BO Facil, H0rtiga (TCP)
Port 5557:
BO Facil (TCP)
Port 5569:
RoboHack (TCP)
Port 5598:
BackDoor 2.03 (TCP)
Port 5631:
pcANYWHEREdat (TCP/UDP)
Port 5632:
pcANYWHEREstat (TCP/UDP)
Port 5637:
PC Crasher (TCP)
Port 5638:
PC Crasher (TCP)
Port 5670:
Active Worlds (TCP)
Port 5698:
BackDoor.203 (TCP)
Port 5714:
WinCrash, WinCrash 3 (TCP)
Port 5741:
WinCrash, WinCrash 3 (TCP)
Port 5742:
WinCrash (TCP)
Port 5800:
Virtual Network Computing (VNC) (TCP)
Port 5881:
Y3K RAT (UDP)
Port 5882:
Y3K RAT (TCP/UDP)
Port 5888:
Y3K RAT (TCP/UDP)
Port 5889:
Y3K RAT (TCP)
Port 5900:
Virtual Network Computing (VNC) (TCP)
Port 6000:
The Thing, APStrojan (TCP)
Port 6006:
The Thing, APStrojan (TCP)
Port 6112:
Starcraft, Blizzard Battlenet (TCP)
Port 6272:
Secret Service (TCP)
Port 6346:
GNUtella (TCP/UDP)
Port 6400:
The Thing, APStrojan (TCP)
Port 6500:
Devil 1.03 (TCP)
Port 6666:
TCPshell.c (TCP)
Port 6667:
Schedule Agent (TCP)
MSN Game Zone, Black and White, mIRC Chat (TCP)
Port 6669:
Host Control, Vampyre 1.0 (TCP)
Port 6670:
DeepThroat, BackWeb Server, WinNuke eXtreame (TCP)
Port 6699:
Napster (TCP/UDP)
Port 6700:
Dwyco Video Conferencing (6700-6702) (TCP)
Port 6711:
BackDoor-G, SubSeven, Sub7(*) (TCP)
Port 6712:
BackDoor-G, SubSeven, Sub7(*), Funny Trojan (TCP)
Port 6713:
BackDoor-G, SubSeven, Sub7(*) (TCP)
Port 6723:
Mstream (TCP)
Port 6767:
NT Remote Control (TCP)
Port 6771:
DeepThroat (TCP)
Port 6776:
2000 Cracks, BackDoor-G, SubSeven, Sub7(*) (TCP)
Port 6789:
Doly Trojan (TCP)
Port 6838:
Mstream (UDP)
Port 6880:
Dwyco Video Conferencing (TCP)
Port 6883:
DeltaSource (TCP)
Port 6891:
MSN Messenger (6891-6900) (TCP)
Port 6901:
MSN Messenger (TCP/UDP)
Port 6912:
Shit Heep (TCP)
Port 6939:
Indoctrination, Gatecrasher.a (TCP)
Port 6969:
GateCrasher, IRC 3, NetController, Priority (TCP/UDP)
Port 6970:
QuickTime 4 Server (TCP/UDP)
GateCrasher (TCP)
Port 7000:
Active Worlds (7000-7100) (TCP)
BackDoor-G, SubSeven, Sub7*, Remote Grab, Kazimas (TCP)
Port 7001:
Freak88 (TCP)
Port 7013:
Anarchy Online (TCP/UDP)
Port 7070:
RealAudio (TCP/UDP)
Port 7201:
NetMonitor (TCP)
Port 7215:
BackDoor-G, SubSeven, Sub7(*) (TCP)
Port 7300:
NetMonitor (TCP)
Port 7301:
NetMonitor (TCP)
Port 7306:
NetMonitor (TCP)
Port 7307:
NetMonitor (TCP)
Port 7308:
NetMonitor (TCP)
Port 7424:
Host Control (TCP/UDP)
Port 7597:
Qaz (TCP)
Port 7609:
Snid X2 (TCP)
Port 7777:
Active Worlds (TCP)
Port 7789:
Back Door Setup, ICQKiller (TCP)
Port 7875:
Ultima UOMonitor (TCP)
Port 7983:
Mstream (TCP)
Port 8000:
ShoutCast Server (TCP)
PhoneFree (TCP)
Port 8010:
Wingate 3.0 (TCP)
Port 8076:
IStreamVideo2HP (TCP/UDP)
Port 8077:
IStreamVideo2HP (TCP/UDP)
Port 8080:
WebWasher 2.x, Unreal Tournament server (TCP/UDP)
RingZero (TCP)
Port 8787:
Back Orifice 2000, BO2K(*) (TCP)
Port 8888:
Ultima Patch (TCP)
Port 8897:
HackOffice Armageddon (TCP)
Port 8989:
Rcon (TCP)
Port 9000:
Netministrator (TCP)
Port 9325:
Mstream (UDP)
Port 9400:
InCommand (TCP)
Port 9442:
Need for Speed - Porche (TCP)
Port 9872:
Portal of Doom (PoD) (TCP)
Port 9873:
Portal of Doom (PoD) (TCP)
Port 9874:
Portal of Doom (PoD) (TCP)
Port 9875:
Portal of Doom (PoD) (TCP)
Port 9876:
Cyber Attacker, Rux.Backdoor (TCP)
Port 9878:
TransScout (TCP)
Port 9989:
iNi-Killer (TCP)
Port 9999:
The Prayer 1 (TCP)
Ultima Patch (TCP)
Port 10067:
Portal of Doom (PoD) (UDP)
Port 10085:
Syphillis (TCP)
Port 10086:
Syphillis (TCP)
Port 10101:
BrainSpy (TCP)
Port 10167:
Portal of Doom (PoD) (UDP)
Port 10520:
Acid Shivers (TCP)
Port 10528:
Host Control (TCP)
Port 10607:
Coma (TCP)
Port 10666:
Ambush (UDP)
Port 11000:
Senna Spy, Senna Spy Trojans (TCP)
Port 11050:
Host Control (TCP)
Port 11051:
Host Control (TCP)
Port 11223:
Progenic Trojan, Secret Agent (TCP)
Port 12053:
Delta Three PC to Phone (TCP)
Port 12076:
GJamer, MSH.104b (TCP)
Port 12083:
Delta Three PC to Phone (TCP)
Port 12223:
Hack’99 KeyLogger (TCP)
Port 12345:
GabanBus, NetBus 1.x, NetBus 1.7(*), Pie Bill Gates, WhackJob,
X-bill (TCP)
Port 12346:
GabanBus, NetBus 1.x, NetBus 1.7(*), X-bill (TCP)
Port 12349:
BioNet (TCP)
Port 12361:
Whack-a-mole (TCP)
Port 12362:
Whack-a-mole (TCP)
Port 12623:
DUN Control (UDP)
Port 12624:
Buttman (TCP)
Port 12631:
WhackJob, WhackJob.NB1.7 (TCP)
Port 12701:
Eclipse 2000 (TCP)
Port 12754:
Mstream (TCP)
Port 13000:
Senna Spy (TCP)
Port 13010:
Hacker Brazil (TCP)
Port 13700:
Kuang2 The Virus (TCP)
Port 14456:
Solero (TCP)
Port 14500:
PC Invader 0.7 (TCP)
Port 14501:
PC Invader 0.7 (TCP)
Port 14502:
PC Invader 0.7 (TCP)
Port 14503:
PC Invader 0.7 (TCP)
Port 15000:
NetDaemon 1.0 (TCP)
Port 15092:
Host Control (TCP)
Port 15104:
Mstream (TCP)
Port 16000:
Motorhead Server (TCP)
Port 16484:
Mosucker (TCP)
Port 16639:
SWAT3 (TCP)
Port 16660:
Stacheldraht (DDoS) (TCP)
Port 16772:
ICQ Revenge (TCP)
Port 16969:
Priority (TCP)
Port 17166:
Mosaic (TCP)
Port 17300:
Kuang2 The Virus (TCP)
Port 17490:
CrazyNet (TCP)
Port 17500:
CrazyNet (TCP)
Port 17569:
Infector 1.4.x + 1.6.x (TCP)
Port 17777:
Nephron (TCP)
Port 18753:
Shaft (DDoS) (UDP)
Port 19864:
ICQ Revenge (TCP)
Port 20000:
Millennium II (TCP)
ICQ (TCP)
Port 20001:
Millennium (TCP)
Port 20002:
AcidkoR (TCP)
Port 20034:
NetBus 2.0 Pro, NetRex, WhackJob (TCP)
Port 20203:
Chupacabra, Logged! (TCP)
Port 20331:
Bla (TCP)
Port 20432:
Shaft (DDoS) (TCP/UDP)
Port 21544:
GirlFriend (TCP)
Port 21554:
GirlFriend, Schwindler, Schwindler 1.82, WinSp00fer,
Kidterror (TCP)
Port 22222:
Prosiak (TCP)
Port 23005:
Net Trash 1.0 (TCP/UDP)
Port 23023:
Logged (TCP)
Port 23432:
Asylum (TCP)
Port 23456:
Evil FTP, Ugly FTP, WhackJob (TCP/UDP)
Port 23476:
Donald Dick (TCP/UDP)
Port 23477:
Donald Dick (TCP)
Port 26000:
quake (TCP)
Port 26214:
Dark Reign 2 (TCP/UDP)
Port 26274:
Delta Source (UDP)
Port 26681:
Spy Voice (TCP)
Port 27015:
Half Life Server (UDP)
Port 27374:
BackDoor-G, SubSeven, Sub7(*) (TCP)
Port 27444:
Trin00 (DDoS) (UDP)
Port 27660:
QuakeIII (UDP)
Port 27665:
Trin00 (DDoS) (TCP)
Port 27910:
Quake2 (Client and Server) (UDP)
Port 28431:
Hack’a’Tack (UDP)
Port 28432:
Hack’a’Tack (UDP)
Port 28910:
Soldier of Fortune (TCP)
Heretic II Server (TCP)
Port 29104:
Host Control (TCP)
Port 29891:
The Unexplained (UDP)
Port 30001:
Terr0r32 (TCP)
Port 30029:
AOL Trojan (TCP)
Port 30100:
NetSphere 1.27a, NetSphere 1.31 (TCP)
Port 30101:
NetSphere 1.27a, NetSphere 1.31 (TCP)
Port 30102:
NetSphere 1.27a, NetSphere 1.31 (TCP)
Port 30103:
NetSphere 1.31 (TCP/UDP)
Port 30133:
NetSphere Final (TCP)
Port 30303:
Sockets de Troie, Socket 23 (TCP)
Port 30947:
Intruse (TCP)
Port 30999:
Kuang2 (TCP)
Port 31335:
Trin00 (DDoS) (UDP)
Port 31336:
BOWhack, ButtFunnel (TCP)
Port 31337:
BackFire, Baron Night, Back Orifice, BackOrificeLM.LEENTech,
BO client, BO2K(*), Bo Facil, Deep BO, Freak (TCP/UDP)
Port 31338:
Back Orifice, ButtFunnel, DeepBO, NetSpy DK (TCP/UDP)
Port 31339:
NetSpy DK (TCP)
Port 31554:
Schwindler (TCP)
Port 31666:
BOWhack, BOWackmole (TCP)
Port 31778:
Hack’a’Tack (TCP)
Port 31785:
Hack’a’Tack (TCP)
Port 31787:
Hack’a’Tack (TCP)
Port 31788:
Hack’a’Tack (UDP)
Port 31789:
Hack’a’Tack (UDP)
Port 31790:
Hack’a’Tack (UDP)
Port 31791:
Hack’a’Tack (UDP)
Port 31792:
Hack’a’Tack (TCP)
Port 32100:
Peanut Brittle, Project nEXT (TCP)
Port 32418:
Acid Battery (TCP)
Port 33333:
Blakharaz, Prosiak (TCP)
Port 33577:
PsychWard (TCP)
Port 33777:
PsychWard (TCP)
Port 33911:
Trojan Spirit 2001a (TCP)
Port 34324:
BigGluck, TN, Tiny Telnet Server (TCP)
Port 34555:
Trin00 (Windows) (DDoS) (UDP)
Port 35555:
Trin00 (Windows) (DDoS) (UDP)
Port 37651:
YAT (TCP)
Port 40412:
The Spy (TCP)
Port 40421:
Agent 40421, Masters Paradise, Master Paradise .96 (TCP)
Port 40422:
Masters Paradise 1.x (TCP)
Port 40423:
Masters Paradise, Masters Paradise .97 (TCP)
Port 40425:
Masters Paradise (TCP)
Port 40426:
Masters Paradise 3.x (TCP)
Port 41000:
Audiogalaxy Satellite (41000-50000) (TCP)
Port 41666:
Remote Boot (TCP/UDP)
Port 43210:
Schoolbus 1.6 / 2.0 (TCP)
Port 44444:
Prosiak (TCP)
Port 47262:
Delta Source (UDP)
Port 47624:
Operation FlashPoint, MSN Game Zone (TCP)
Starfleet Command, Battlecom (TCP/UDP)
Port 49301:
Online Keylogger (TCP)
Port 50505:
Sockets de Troie (TCP)
Port 50766:
Fore, Schwindler (TCP)
Port 51210:
Dialpad (TCP)
Port 51996:
CafeIni (TCP)
Port 53001:
Remote Windows Shutdown (TCP)
Port 53217:
Acid Battery 2000 (TCP)
Port 54283:
BackDoor-G, SubSeven, Sub7(*) (TCP)
Port 54320:
Back Orifice 2000, BO2K(*) (UDP)
Port 54321:
Schoolbus .69-1.11 + 1.6 + 2.0, Back Orifice 2000, BO2K(*)
(TCP/UDP)
Port 57341:
NetRaider (TCP)
Port 58339:
ButtFunnel (TCP)
Port 60000:
Deep Throat 2.0 / 3.0 (TCP)
Port 60068:
Xzip 6000068 (TCP)
Port 60411:
Connection (TCP)
Port 61348:
Bunker-Hill (TCP)
Port 61466:
Telecommando (TCP)
Port 61603:
Bunker-Hill (TCP)
Port 63485:
Bunker-Hill (TCP)
Port 65000:
Devil Trojan 1.03, Stacheldraht (DDoS) (TCP)
Port 65432:
The Traitor (TCP/UDP)
Port 65535:
RC (TCP)