List of the Top 1000 Ports
If you need more detailed information about single ports, see:
https://www.speedguide.net/ports.php
A bigger, downloadable CSV version is on Github:
https://github.com/maraisr/ports-list
If you want to check your local ports, use:
https://github.com/ncrocfer/whatportis
| Port | Type | Keyword | Description | Trojan info |
| 0 | TCP | Reserved | REx | |
| 0 | UDP | Reserved | ||
| 1 | TCP | tcpmux | TCP Port Service Multiplexer | Breach, SocketsDeTroie, Socks Des Troie |
| 1 | UDP | tcpmux | TCP Port Service Multiplexer | Sockets des Troie, SocketsDeTroie |
| 2 | TCP | compressnet | Management Utility | Death |
| 2 | UDP | compressnet | Management Utility | |
| 3 | TCP | compressnet | Compression Process | |
| 3 | UDP | compressnet | Compression Process | |
| 5 | TCP | rje | Remote Job Entry | yoyo |
| 5 | UDP | rje | Remote Job Entry | |
| 7 | TCP | echo | Echo | |
| 7 | UDP | echo | Echo | |
| 9 | TCP | discard | Discard | |
| 9 | UDP | discard | Discard | |
| 9 | SCTP | discard | Discard | |
| 9 | DCCP | discard | Discard | |
| 11 | TCP | systat | Active Users | Skun |
| 11 | UDP | systat | Active Users | |
| 13 | TCP | daytime | Daytime | |
| 13 | UDP | daytime | Daytime | |
| 15 | TCP | Unassigned [was netstat] | B2 | |
| 16 | TCP | Skun | ||
| 17 | TCP | qotd | Quote of the Day | Skun |
| 17 | UDP | qotd | Quote of the Day | |
| 18 | TCP | msp | Message Send Protocol (historic) | Skun |
| 18 | UDP | msp | Message Send Protocol (historic) | |
| 19 | TCP | chargen | Character Generator | Skun |
| 19 | UDP | chargen | Character Generator | |
| 20 | TCP | ftp-data | File Transfer [Default Data] | Senna Spy, Amanda, Senna Spy FTP server |
| 20 | UDP | ftp-data | File Transfer [Default Data] | |
| 20 | SCTP | ftp-data | FTP | |
| 21 | TCP | ftp | File Transfer [Control] | Back Construction, Blade Runner, Cattivik FTP Server, CC Invader, Dark FTP, Dolly Trojan, Fore, FreddyK, Invisible FTP, Juggernaut 42, Larva, MotIv FTP, Net Administrator, Ramen, RTB 666, Senna Spy FTP server, The Flu, Traitor 21, WebEx, WinCrash, FTP service, ADM worm, BlueFire, Bmail, Doly Trojan, KWM, MscanWorm, NerTe, NokNok, Pinochet, Reverse Trojan, Voyager Alpha Force, BladeRunner |
| 21 | UDP | ftp | File Transfer [Control] | |
| 21 | SCTP | ftp | FTP | |
| 22 | TCP | ssh | The Secure Shell (SSH) Protocol | Adore sshd, Shaft, InCommand, Skun |
| 22 | UDP | ssh | The Secure Shell (SSH) Protocol | |
| 22 | SCTP | ssh | SSH | |
| 23 | TCP | telnet | Telnet | ADM worm, Fire HacKer, My Very Own trojan, RTB 666, Telnet Pro, Tiny Telnet Server – TTS, Truva Atl, Aphex’s Remote Packet Sniffer, AutoSpY, ButtMan, Pest |
| 23 | UDP | telnet | Telnet | |
| 24 | TCP | any private mail system | Back Orifice 2000 (BO2K) Control Port | |
| 24 | UDP | any private mail system | ||
| 25 | TCP | smtp | Simple Mail Transfer | Ajan, Antigen, Barok, BSE, Email Password Sender – EPS, EPS II, Gip, Gris, Happy99, Hpteam mail, Hybris, I love you, Kuang2, Magic Horse, MBT (Mail Bombing Trojan), Moscow Email trojan, Naebi, NewApt worm, ProMail trojan, Shtirlitz, Stealth, Stukach, Tapiras, Terminator, WinPC, WinSpy, Laocoon, Nimda |
| 25 | UDP | smtp | Simple Mail Transfer | |
| 27 | TCP | nsw-fe | NSW User System FE | Assasin |
| 27 | UDP | nsw-fe | NSW User System FE | |
| 28 | TCP | Amanda | ||
| 29 | TCP | msg-icp | MSG ICP | |
| 29 | UDP | msg-icp | MSG ICP | |
| 30 | TCP | Agent 40421 | ||
| 31 | TCP | msg-auth | MSG Authentication | Agent 31, Hackers Paradise, Masters Paradise, MastersParadise, Agent 40421, Skun |
| 31 | UDP | msg-auth | MSG Authentication | |
| 33 | TCP | dsp | Display Support Protocol | |
| 33 | UDP | dsp | Display Support Protocol | |
| 35 | TCP | any private printer server | ||
| 35 | UDP | any private printer server | ||
| 37 | TCP | time | Time | w32.sober.x@mm, w32.sober.o@mm, ADM worm |
| 37 | UDP | time | Time | |
| 38 | TCP | rap | Route Access Protocol | |
| 38 | UDP | rap | Route Access Protocol | |
| 39 | TCP | rlp | Resource Location Protocol | SubSARI |
| 39 | UDP | rlp | Resource Location Protocol | |
| 41 | TCP | graphics | Graphics | Deep Throat, Foreplay or Reduced Foreplay, DeepThroat |
| 41 | UDP | graphics | Graphics | |
| 42 | TCP | name | Host Name Server | |
| 42 | UDP | name | Host Name Server | |
| 43 | TCP | nicname | Who Is | |
| 43 | UDP | nicname | Who Is | |
| 44 | TCP | mpm-flags | MPM FLAGS Protocol | Arctic |
| 44 | UDP | mpm-flags | MPM FLAGS Protocol | |
| 45 | TCP | mpm | Message Processing Module [recv] | |
| 45 | UDP | mpm | Message Processing Module [recv] | |
| 46 | TCP | mpm-snd | MPM [default send] | |
| 46 | UDP | mpm-snd | MPM [default send] | |
| 47 | TCP | ni-ftp | NI FTP | |
| 47 | UDP | ni-ftp | NI FTP | |
| 48 | TCP | auditd | Digital Audit Daemon | DRAT |
| 48 | UDP | auditd | Digital Audit Daemon | |
| 49 | TCP | tacacs | Login Host Protocol (TACACS) | |
| 49 | UDP | tacacs | Login Host Protocol (TACACS) | |
| 50 | TCP | re-mail-ck | Remote Mail Checking Protocol | DRAT |
| 50 | UDP | re-mail-ck | Remote Mail Checking Protocol | |
| 51 | TCP | Fuck Lamers Backdoor | ||
| 51 | UDP | Reserved | ||
| 52 | TCP | xns-time | XNS Time Protocol | MuSka52, Skun |
| 52 | UDP | xns-time | XNS Time Protocol | |
| 53 | TCP | domain | Domain Name Server | ADM worm, Lion, w32.dasher.b, trojan.esteems.c, li0n, MscanWorm, MuSka52 |
| 53 | UDP | domain | Domain Name Server | |
| 54 | TCP | xns-ch | XNS Clearinghouse | MuSka52 |
| 54 | UDP | xns-ch | XNS Clearinghouse | |
| 55 | TCP | isi-gl | ISI Graphics Language | |
| 55 | UDP | isi-gl | ISI Graphics Language | |
| 56 | TCP | xns-auth | XNS Authentication | |
| 56 | UDP | xns-auth | XNS Authentication | |
| 57 | TCP | any private terminal access | ||
| 57 | UDP | any private terminal access | ||
| 58 | TCP | xns-mail | XNS Mail | DMSetup, DM Setup |
| 58 | UDP | xns-mail | XNS Mail | |
| 59 | TCP | any private file service | DMSetup | |
| 59 | UDP | any private file service | ||
| 61 | TCP | ni-mail | NI MAIL | |
| 61 | UDP | ni-mail | NI MAIL | |
| 62 | TCP | acas | ACA Services | |
| 62 | UDP | acas | ACA Services | |
| 63 | TCP | whoispp | whois++ | |
| 63 | UDP | whoispp | whois++ | |
| 64 | TCP | covia | Communications Integrator (CI) | |
| 64 | UDP | covia | Communications Integrator (CI) | |
| 65 | TCP | tacacs-ds | TACACS-Database Service | |
| 65 | UDP | tacacs-ds | TACACS-Database Service | |
| 66 | TCP | sql-net | Oracle SQL*NET | AL-Bareki |
| 66 | UDP | sql-net | Oracle SQL*NET | |
| 67 | TCP | bootps | Bootstrap Protocol Server | |
| 67 | UDP | bootps | Bootstrap Protocol Server | |
| 68 | TCP | bootpc | Bootstrap Protocol Client | Subseven |
| 68 | UDP | bootpc | Bootstrap Protocol Client | |
| 69 | TCP | tftp | Trivial File Transfer | BackGate, w32.cycle, W32.Mockbot.A.Worm, BackGate Kit, Nimda, Pasana, Storm, Storm worm, Theef |
| 69 | UDP | tftp | Trivial File Transfer | Pasana |
| 70 | TCP | gopher | Gopher | W32.Evala.Worm, ADM worm |
| 70 | UDP | gopher | Gopher | |
| 71 | TCP | netrjs-1 | Remote Job Service | |
| 71 | UDP | netrjs-1 | Remote Job Service | |
| 72 | TCP | netrjs-2 | Remote Job Service | |
| 72 | UDP | netrjs-2 | Remote Job Service | |
| 73 | TCP | netrjs-3 | Remote Job Service | |
| 73 | UDP | netrjs-3 | Remote Job Service | |
| 74 | TCP | netrjs-4 | Remote Job Service | |
| 74 | UDP | netrjs-4 | Remote Job Service | |
| 75 | TCP | any private dial out service | ||
| 75 | UDP | any private dial out service | ||
| 76 | TCP | deos | Distributed External Object Store | |
| 76 | UDP | deos | Distributed External Object Store | |
| 77 | TCP | any private RJE service | ||
| 77 | UDP | any private RJE service | ||
| 78 | TCP | vettcp | vettcp | |
| 78 | UDP | vettcp | vettcp | |
| 79 | TCP | finger | Finger | CDK, Firehotcker, ADM worm, Back Orifice 2000 (BO2K) Data Port |
| 79 | UDP | finger | Finger | |
| 80 | TCP | http | World Wide Web HTTP | 711 trojan (Seven Eleven), AckCmd, Back End, Back Orifice 2000 Plug-Ins, Cafeini, CGI Backdoor, Code Red, Executor, God Message, God Message 4 Creator, Hooker, IISworm, MTX, NCX, Nimda, Noob, Ramen, Reverse WWW Tunnel Backdoor, RingZero, RTB 666, Seeker, WAN Remote, Web Server CT, WebDownloader, BlueFire, Duddie, Intruzzo, Latinus, Lithium, MscanWorm, NerTe, Optix Lite, Optix Pro, Power, Remote Shell, Scalper, Screen Cutter, Slapper, God Message Creator |
| 80 | UDP | http | World Wide Web HTTP | Penrox |
| 80 | SCTP | http | HTTP | |
| 81 | TCP | RemoConChubo, Beagle.S, Asylum | ||
| 82 | TCP | xfer | XFER Utility | |
| 82 | UDP | xfer | XFER Utility | |
| 83 | TCP | mit-ml-dev | MIT ML Device | |
| 83 | UDP | mit-ml-dev | MIT ML Device | |
| 84 | TCP | ctf | Common Trace Facility | |
| 84 | UDP | ctf | Common Trace Facility | |
| 85 | TCP | mit-ml-dev | MIT ML Device | |
| 85 | UDP | mit-ml-dev | MIT ML Device | |
| 86 | TCP | mfcobol | Micro Focus Cobol | |
| 86 | UDP | mfcobol | Micro Focus Cobol | |
| 87 | TCP | any private terminal link | ||
| 87 | UDP | any private terminal link | ||
| 88 | TCP | kerberos | Kerberos | pwsteal.likmet.a |
| 88 | UDP | kerberos | Kerberos | |
| 89 | TCP | su-mit-tg | SU/MIT Telnet Gateway | |
| 89 | UDP | su-mit-tg | SU/MIT Telnet Gateway | |
| 90 | TCP | dnsix | DNSIX Securit Attribute Token Map | Hidden Port 2.o |
| 90 | UDP | dnsix | DNSIX Securit Attribute Token Map | |
| 91 | TCP | mit-dov | MIT Dover Spooler | |
| 91 | UDP | mit-dov | MIT Dover Spooler | |
| 92 | TCP | npp | Network Printing Protocol | |
| 92 | UDP | npp | Network Printing Protocol | |
| 93 | TCP | dcp | Device Control Protocol | |
| 93 | UDP | dcp | Device Control Protocol | |
| 94 | TCP | objcall | Tivoli Object Dispatcher | |
| 94 | UDP | objcall | Tivoli Object Dispatcher | |
| 95 | TCP | supdup | SUPDUP | |
| 95 | UDP | supdup | SUPDUP | |
| 96 | TCP | dixie | DIXIE Protocol Specification | |
| 96 | UDP | dixie | DIXIE Protocol Specification | |
| 97 | TCP | swift-rvf | Swift Remote Virtural File Protocol | |
| 97 | UDP | swift-rvf | Swift Remote Virtural File Protocol | |
| 98 | TCP | tacnews | TAC News | |
| 98 | UDP | tacnews | TAC News | |
| 99 | TCP | metagram | Metagram Relay | Hidden Port, Mandragore, NCX |
| 99 | UDP | metagram | Metagram Relay | |
| 101 | TCP | hostname | NIC Host Name Server | Skun |
| 101 | UDP | hostname | NIC Host Name Server | |
| 102 | TCP | iso-tsap | ISO-TSAP Class 0 | Delf, Skun |
| 102 | UDP | iso-tsap | ISO-TSAP Class 0 | |
| 103 | TCP | gppitnp | Genesis Point-to-Point Trans Net | Skun |
| 103 | UDP | gppitnp | Genesis Point-to-Point Trans Net | |
| 104 | TCP | acr-nema | ACR-NEMA Digital Imag. & | Comm. 300 |
| 104 | UDP | acr-nema | ACR-NEMA Digital Imag. & | Comm. 300 |
| 105 | TCP | cso | CCSO name server protocol | NerTe |
| 105 | UDP | cso | CCSO name server protocol | |
| 106 | TCP | 3com-tsmux | 3COM-TSMUX | |
| 106 | UDP | 3com-tsmux | 3COM-TSMUX | |
| 107 | TCP | rtelnet | Remote Telnet Service | Skun |
| 107 | UDP | rtelnet | Remote Telnet Service | |
| 108 | TCP | snagas | SNA Gateway Access Server | |
| 108 | UDP | snagas | SNA Gateway Access Server | |
| 109 | TCP | pop2 | Post Office Protocol – Version 2 | ADM worm |
| 109 | UDP | pop2 | Post Office Protocol – Version 2 | |
| 110 | TCP | pop3 | Post Office Protocol – Version 3 | ProMail trojan, ADM worm |
| 110 | UDP | pop3 | Post Office Protocol – Version 3 | |
| 111 | TCP | sunrpc | SUN Remote Procedure Call | ADM worm, MscanWorm |
| 111 | UDP | sunrpc | SUN Remote Procedure Call | |
| 112 | TCP | mcidas | McIDAS Data Transmission Protocol | |
| 112 | UDP | mcidas | McIDAS Data Transmission Protocol | |
| 113 | TCP | ident | Invisible Identd Deamon, Kazimas, W32.korgo.a, W32.linkbot.m, ADM worm, Alicia, Cyn, DataSpy Network X, Dosh, Gibbon, Taskman, Invisible Identd Daemon | |
| 113 | UDP | auth | Authentication Service | |
| 114 | UDP | unassigned | ||
| 115 | TCP | sftp | Simple File Transfer Protocol | |
| 115 | UDP | sftp | Simple File Transfer Protocol | |
| 116 | TCP | ansanotify | ANSA REX Notify | |
| 116 | UDP | ansanotify | ANSA REX Notify | |
| 117 | TCP | uucp-path | UUCP Path Service | |
| 117 | UDP | uucp-path | UUCP Path Service | |
| 118 | TCP | sqlserv | SQL Services | |
| 118 | UDP | sqlserv | SQL Services | |
| 119 | TCP | nntp | Network News Transfer Protocol | Happy99, Happy 99 |
| 119 | UDP | nntp | Network News Transfer Protocol | |
| 120 | TCP | cfdptkt | CFDPTKT | Skun |
| 120 | UDP | cfdptkt | CFDPTKT | |
| 121 | TCP | erpc | Encore Expedited Remote Pro.Call | Attack Bot, God Message, JammerKillah, Jammer Killah |
| 121 | UDP | erpc | Encore Expedited Remote Pro.Call | |
| 122 | TCP | smakynet | SMAKYNET | |
| 122 | UDP | smakynet | SMAKYNET | |
| 123 | TCP | ntp | Network Time Protocol | Net Controller |
| 123 | UDP | ntp | Network Time Protocol | |
| 124 | TCP | ansatrader | ANSA REX Trader | |
| 124 | UDP | ansatrader | ANSA REX Trader | |
| 125 | TCP | locus-map | Locus PC-Interface Net Map Ser | |
| 125 | UDP | locus-map | Locus PC-Interface Net Map Ser | |
| 126 | TCP | nxedit | NXEdit | |
| 126 | UDP | nxedit | NXEdit | |
| 127 | TCP | locus-con | Locus PC-Interface Conn Server | |
| 127 | UDP | locus-con | Locus PC-Interface Conn Server | |
| 128 | TCP | gss-xlicen | GSS X License Verification | |
| 128 | UDP | gss-xlicen | GSS X License Verification | |
| 129 | TCP | pwdgen | Password Generator Protocol | |
| 129 | UDP | pwdgen | Password Generator Protocol | |
| 130 | TCP | cisco-fna | cisco FNATIVE | |
| 130 | UDP | cisco-fna | cisco FNATIVE | |
| 131 | TCP | cisco-tna | cisco TNATIVE | |
| 131 | UDP | cisco-tna | cisco TNATIVE | |
| 132 | TCP | cisco-sys | cisco SYSMAINT | |
| 132 | UDP | cisco-sys | cisco SYSMAINT | |
| 133 | TCP | statsrv | Statistics Service | Faranz, port 146 – Infector, Farnaz |
| 133 | UDP | statsrv | Statistics Service | |
| 134 | TCP | ingres-net | INGRES-NET Service | |
| 134 | UDP | ingres-net | INGRES-NET Service | |
| 135 | TCP | epmap | DCE endpoint resolution | W32.Blaster.Worm, W32/Lovsan.worm |
| 135 | UDP | epmap | DCE endpoint resolution | |
| 136 | TCP | profile | PROFILE Naming System | |
| 136 | UDP | profile | PROFILE Naming System | |
| 137 | TCP | netbios-ns | NETBIOS Name Service | Chode, Nimda, Qaz |
| 137 | UDP | netbios-ns | NETBIOS Name Service | Msinit, Qaz, OpaSoft, Bugbear, Opaserv |
| 138 | TCP | netbios-dgm | NETBIOS Datagram Service | Chode, Nimda |
| 138 | UDP | netbios-dgm | NETBIOS Datagram Service | |
| 139 | TCP | netbios-ssn | NETBIOS Session Service | Chode, God Message worm, Msinit, Netlog, Network, Qaz, Sadmind, SMB Relay, Fire HacKer, Nimda, Opaserv |
| 139 | UDP | netbios-ssn | NETBIOS Session Service | |
| 140 | TCP | emfis-data | EMFIS Data Service | |
| 140 | UDP | emfis-data | EMFIS Data Service | |
| 141 | TCP | emfis-cntl | EMFIS Control Service | |
| 141 | UDP | emfis-cntl | EMFIS Control Service | |
| 142 | TCP | bl-idm | Britton-Lee IDM | NetTaxi |
| 142 | UDP | bl-idm | Britton-Lee IDM | |
| 143 | TCP | imap | Internet Message Access Protocol | ADM worm |
| 143 | UDP | imap | Internet Message Access Protocol | |
| 144 | TCP | uma | Universal Management Architecture | |
| 144 | UDP | uma | Universal Management Architecture | |
| 145 | TCP | uaac | UAAC Protocol | |
| 145 | UDP | uaac | UAAC Protocol | |
| 146 | TCP | iso-tp0 | ISO-IP0 | Infector |
| 146 | UDP | iso-tp0 | ISO-IP0 | Infector |
| 147 | TCP | iso-ip | ISO-IP | |
| 147 | UDP | iso-ip | ISO-IP | |
| 148 | TCP | jargon | Jargon | |
| 148 | UDP | jargon | Jargon | |
| 149 | TCP | aed-512 | AED 512 Emulation Service | |
| 149 | UDP | aed-512 | AED 512 Emulation Service | |
| 150 | TCP | sql-net | SQL-NET | |
| 150 | UDP | sql-net | SQL-NET | |
| 151 | TCP | hems | HEMS | |
| 151 | UDP | hems | HEMS | |
| 152 | TCP | bftp | Background File Transfer Program | |
| 152 | UDP | bftp | Background File Transfer Program | |
| 153 | TCP | sgmp | SGMP | |
| 153 | UDP | sgmp | SGMP | |
| 154 | TCP | netsc-prod | NETSC | |
| 154 | UDP | netsc-prod | NETSC | |
| 155 | TCP | netsc-dev | NETSC | |
| 155 | UDP | netsc-dev | NETSC | |
| 156 | TCP | sqlsrv | SQL Service | |
| 156 | UDP | sqlsrv | SQL Service | |
| 157 | TCP | knet-cmp | KNET/VM Command/Message Protocol | |
| 157 | UDP | knet-cmp | KNET/VM Command/Message Protocol | |
| 158 | TCP | pcmail-srv | PCMail Server | |
| 158 | UDP | pcmail-srv | PCMail Server | |
| 159 | TCP | nss-routing | NSS-Routing | |
| 159 | UDP | nss-routing | NSS-Routing | |
| 160 | TCP | sgmp-traps | SGMP-TRAPS | |
| 160 | UDP | sgmp-traps | SGMP-TRAPS | |
| 161 | TCP | snmp | SNMP | |
| 161 | UDP | snmp | SNMP | |
| 162 | TCP | snmptrap | SNMPTRAP | |
| 162 | UDP | snmptrap | SNMPTRAP | |
| 163 | TCP | cmip-man | CMIP/TCP Manager | |
| 163 | UDP | cmip-man | CMIP/TCP Manager | |
| 164 | TCP | cmip-agent | CMIP/TCP Agent | |
| 164 | UDP | cmip-agent | CMIP/TCP Agent | |
| 165 | TCP | xns-courier | Xerox | |
| 165 | UDP | xns-courier | Xerox | |
| 166 | TCP | s-net | Sirius Systems | NokNok |
| 166 | UDP | s-net | Sirius Systems | |
| 167 | TCP | namp | NAMP | |
| 167 | UDP | namp | NAMP | |
| 168 | TCP | rsvd | RSVD | |
| 168 | UDP | rsvd | RSVD | |
| 169 | TCP | send | SEND | |
| 169 | UDP | send | SEND | |
| 170 | TCP | print-srv | Network PostScript | A-trojan |
| 170 | UDP | print-srv | Network PostScript | |
| 171 | TCP | multiplex | Network Innovations Multiplex | ATrojan, A-trojan |
| 171 | UDP | multiplex | Network Innovations Multiplex | |
| 172 | TCP | cl-1 | Network Innovations CL/1 | |
| 172 | UDP | cl-1 | Network Innovations CL/1 | |
| 173 | TCP | xyplex-mux | Xyplex | |
| 173 | UDP | xyplex-mux | Xyplex | |
| 174 | TCP | mailq | MAILQ | |
| 174 | UDP | mailq | MAILQ | |
| 175 | TCP | vmnet | VMNET | |
| 175 | UDP | vmnet | VMNET | |
| 176 | TCP | genrad-mux | GENRAD-MUX | |
| 176 | UDP | genrad-mux | GENRAD-MUX | |
| 177 | TCP | xdmcp | X Display Manager Control Protocol | |
| 177 | UDP | xdmcp | X Display Manager Control Protocol | |
| 178 | TCP | nextstep | NextStep Window Server | |
| 178 | UDP | nextstep | NextStep Window Server | |
| 179 | TCP | bgp | Border Gateway Protocol | |
| 179 | UDP | bgp | Border Gateway Protocol | |
| 179 | SCTP | bgp | BGP | |
| 180 | TCP | ris | Intergraph | |
| 180 | UDP | ris | Intergraph | |
| 181 | TCP | unify | Unify | |
| 181 | UDP | unify | Unify | |
| 182 | TCP | audit | Unisys Audit SITP | |
| 182 | UDP | audit | Unisys Audit SITP | |
| 183 | TCP | ocbinder | OCBinder | |
| 183 | UDP | ocbinder | OCBinder | |
| 184 | TCP | ocserver | OCServer | |
| 184 | UDP | ocserver | OCServer | |
| 185 | TCP | remote-kis | Remote-KIS | |
| 185 | UDP | remote-kis | Remote-KIS | |
| 186 | TCP | kis | KIS Protocol | |
| 186 | UDP | kis | KIS Protocol | |
| 187 | TCP | aci | Application Communication Interface | |
| 187 | UDP | aci | Application Communication Interface | |
| 188 | TCP | mumps | Plus Five’s MUMPS | |
| 188 | UDP | mumps | Plus Five’s MUMPS | |
| 189 | TCP | qft | Queued File Transport | |
| 189 | UDP | qft | Queued File Transport | |
| 190 | TCP | gacp | Gateway Access Control Protocol | |
| 190 | UDP | gacp | Gateway Access Control Protocol | |
| 191 | TCP | prospero | Prospero Directory Service | |
| 191 | UDP | prospero | Prospero Directory Service | |
| 192 | TCP | osu-nms | OSU Network Monitoring System | |
| 192 | UDP | osu-nms | OSU Network Monitoring System | |
| 193 | TCP | srmp | Spider Remote Monitoring Protocol | |
| 193 | UDP | srmp | Spider Remote Monitoring Protocol | |
| 194 | TCP | irc | Internet Relay Chat Protocol | |
| 194 | UDP | irc | Internet Relay Chat Protocol | |
| 195 | TCP | dn6-nlm-aud | DNSIX Network Level Module Audit | |
| 195 | UDP | dn6-nlm-aud | DNSIX Network Level Module Audit | |
| 196 | TCP | dn6-smm-red | DNSIX Session Mgt Module Audit Redir | |
| 196 | UDP | dn6-smm-red | DNSIX Session Mgt Module Audit Redir | |
| 197 | TCP | dls | Directory Location Service | |
| 197 | UDP | dls | Directory Location Service | |
| 198 | TCP | dls-mon | Directory Location Service Monitor | |
| 198 | UDP | dls-mon | Directory Location Service Monitor | |
| 199 | TCP | smux | SMUX | |
| 199 | UDP | smux | SMUX | |
| 200 | TCP | src | IBM System Resource Controller | CyberSpy |
| 200 | UDP | src | IBM System Resource Controller | |
| 201 | TCP | at-rtmp | AppleTalk Routing Maintenance | One Windows Trojan |
| 201 | UDP | at-rtmp | AppleTalk Routing Maintenance | |
| 202 | TCP | at-nbp | AppleTalk Name Binding | One Windows Trojan, Skun |
| 202 | UDP | at-nbp | AppleTalk Name Binding | |
| 203 | TCP | at-3 | AppleTalk Unused | |
| 203 | UDP | at-3 | AppleTalk Unused | |
| 204 | TCP | at-echo | AppleTalk Echo | |
| 204 | UDP | at-echo | AppleTalk Echo | |
| 205 | TCP | at-5 | AppleTalk Unused | |
| 205 | UDP | at-5 | AppleTalk Unused | |
| 206 | TCP | at-zis | AppleTalk Zone Information | |
| 206 | UDP | at-zis | AppleTalk Zone Information | |
| 207 | TCP | at-7 | AppleTalk Unused | |
| 207 | UDP | at-7 | AppleTalk Unused | |
| 208 | TCP | at-8 | AppleTalk Unused | |
| 208 | UDP | at-8 | AppleTalk Unused | |
| 209 | TCP | qmtp | The Quick Mail Transfer Protocol | |
| 209 | UDP | qmtp | The Quick Mail Transfer Protocol | |
| 210 | TCP | z39-50 | ANSI Z39.50 | |
| 210 | UDP | z39-50 | ANSI Z39.50 | |
| 211 | TCP | 914c-g | Texas Instruments 914C/G Terminal | One Windows Trojan |
| 211 | UDP | 914c-g | Texas Instruments 914C/G Terminal | |
| 212 | TCP | anet | ATEXSSTR | One Windows Trojan |
| 212 | UDP | anet | ATEXSSTR | |
| 213 | TCP | ipx | IPX | |
| 213 | UDP | ipx | IPX | |
| 214 | TCP | vmpwscs | VM PWSCS | |
| 214 | UDP | vmpwscs | VM PWSCS | |
| 215 | TCP | softpc | Insignia Solutions | |
| 215 | UDP | softpc | Insignia Solutions | |
| 216 | TCP | CAIlic | Computer Associates Int’l License Server | |
| 216 | UDP | CAIlic | Computer Associates Int’l License Server | |
| 217 | TCP | dbase | dBASE Unix | |
| 217 | UDP | dbase | dBASE Unix | |
| 218 | TCP | mpp | Netix Message Posting Protocol | |
| 218 | UDP | mpp | Netix Message Posting Protocol | |
| 219 | TCP | uarps | Unisys ARPs | |
| 219 | UDP | uarps | Unisys ARPs | |
| 220 | TCP | imap3 | Interactive Mail Access Protocol v3 | |
| 220 | UDP | imap3 | Interactive Mail Access Protocol v3 | |
| 221 | TCP | fln-spx | Berkeley rlogind with SPX auth | Snape |
| 221 | UDP | fln-spx | Berkeley rlogind with SPX auth | |
| 222 | TCP | rsh-spx | Berkeley rshd with SPX auth | NeuroticKat, Snape |
| 222 | UDP | rsh-spx | Berkeley rshd with SPX auth | |
| 223 | TCP | cdc | Certificate Distribution Center | |
| 223 | UDP | cdc | Certificate Distribution Center | |
| 224 | TCP | masqdialer | masqdialer | |
| 224 | UDP | masqdialer | masqdialer | |
| 230 | TCP | Skun | ||
| 231 | TCP | Skun | ||
| 232 | TCP | Skun | ||
| 242 | TCP | direct | Direct | |
| 242 | UDP | direct | Direct | |
| 243 | TCP | sur-meas | Survey Measurement | |
| 243 | UDP | sur-meas | Survey Measurement | |
| 244 | TCP | inbusiness | inbusiness | |
| 244 | UDP | inbusiness | inbusiness | |
| 245 | TCP | link | LINK | |
| 245 | UDP | link | LINK | |
| 246 | TCP | dsp3270 | Display Systems Protocol | |
| 246 | UDP | dsp3270 | Display Systems Protocol | |
| 247 | TCP | subntbcst-tftp | SUBNTBCST_TFTP | |
| 247 | UDP | subntbcst-tftp | SUBNTBCST_TFTP | |
| 248 | TCP | bhfhs | bhfhs | |
| 248 | UDP | bhfhs | bhfhs | |
| 256 | TCP | rap | RAP | |
| 256 | UDP | rap | RAP | |
| 257 | TCP | set | Secure Electronic Transaction | |
| 257 | UDP | set | Secure Electronic Transaction | |
| 259 | TCP | esro-gen | Efficient Short Remote Operations | |
| 259 | UDP | esro-gen | Efficient Short Remote Operations | |
| 260 | TCP | openport | Openport | |
| 260 | UDP | openport | Openport | |
| 261 | TCP | nsiiops | IIOP Name Service over TLS/SSL | |
| 261 | UDP | nsiiops | IIOP Name Service over TLS/SSL | |
| 262 | TCP | arcisdms | Arcisdms | |
| 262 | UDP | arcisdms | Arcisdms | |
| 263 | TCP | hdap | HDAP | |
| 263 | UDP | hdap | HDAP | |
| 264 | TCP | bgmp | BGMP | |
| 264 | UDP | bgmp | BGMP | |
| 265 | TCP | x-bone-ctl | X-Bone CTL | |
| 265 | UDP | x-bone-ctl | X-Bone CTL | |
| 266 | TCP | sst | SCSI on ST | |
| 266 | UDP | sst | SCSI on ST | |
| 267 | TCP | td-service | Tobit David Service Layer | |
| 267 | UDP | td-service | Tobit David Service Layer | |
| 268 | TCP | td-replica | Tobit David Replica | |
| 268 | UDP | td-replica | Tobit David Replica | |
| 269 | TCP | manet | MANET Protocols | |
| 269 | UDP | manet | MANET Protocols | |
| 270 | TCP | Reserved | ||
| 270 | UDP | gist | Q-mode encapsulation for GIST messages | |
| 271 | TCP | pt-tls | IETF Network Endpoint Assessment (NEA) Posture Transport Protocol over TLS (PT-TLS) | |
| 271 | UDP | Reserved | ||
| 280 | TCP | http-mgmt | http-mgmt | |
| 280 | UDP | http-mgmt | http-mgmt | |
| 281 | TCP | personal-link | Personal Link | |
| 281 | UDP | personal-link | Personal Link | |
| 282 | TCP | cableport-ax | Cable Port A/X | |
| 282 | UDP | cableport-ax | Cable Port A/X | |
| 283 | TCP | rescap | rescap | |
| 283 | UDP | rescap | rescap | |
| 284 | TCP | corerjd | corerjd | |
| 284 | UDP | corerjd | corerjd | |
| 285 | TCP | WCTrojan, Delf | ||
| 286 | TCP | fxp | FXP Communication | WCTrojan |
| 286 | UDP | fxp | FXP Communication | |
| 287 | TCP | k-block | K-BLOCK | |
| 287 | UDP | k-block | K-BLOCK | |
| 299 | TCP | One Windows Trojan | ||
| 308 | TCP | novastorbakcup | Novastor Backup | |
| 308 | UDP | novastorbakcup | Novastor Backup | |
| 309 | TCP | entrusttime | EntrustTime | |
| 309 | UDP | entrusttime | EntrustTime | |
| 310 | TCP | bhmds | bhmds | |
| 310 | UDP | bhmds | bhmds | |
| 311 | TCP | asip-webadmin | AppleShare IP WebAdmin | |
| 311 | UDP | asip-webadmin | AppleShare IP WebAdmin | |
| 312 | TCP | vslmp | VSLMP | |
| 312 | UDP | vslmp | VSLMP | |
| 313 | TCP | magenta-logic | Magenta Logic | |
| 313 | UDP | magenta-logic | Magenta Logic | |
| 314 | TCP | opalis-robot | Opalis Robot | |
| 314 | UDP | opalis-robot | Opalis Robot | |
| 315 | TCP | dpsi | DPSI | |
| 315 | UDP | dpsi | DPSI | |
| 316 | TCP | decauth | decAuth | |
| 316 | UDP | decauth | decAuth | |
| 317 | TCP | zannet | Zannet | |
| 317 | UDP | zannet | Zannet | |
| 318 | TCP | pkix-timestamp | PKIX TimeStamp | |
| 318 | UDP | pkix-timestamp | PKIX TimeStamp | |
| 319 | TCP | ptp-event | PTP Event | |
| 319 | UDP | ptp-event | PTP Event | |
| 320 | TCP | ptp-general | PTP General | |
| 320 | UDP | ptp-general | PTP General | |
| 321 | TCP | pip | PIP | |
| 321 | UDP | pip | PIP | |
| 322 | TCP | rtsps | RTSPS | |
| 322 | UDP | rtsps | RTSPS | |
| 323 | TCP | rpki-rtr | Resource PKI to Router Protocol | |
| 323 | UDP | Reserved | ||
| 324 | TCP | rpki-rtr-tls | Resource PKI to Router Protocol over TLS | |
| 324 | UDP | Reserved | ||
| 333 | TCP | texar | Texar Security Port | |
| 333 | UDP | texar | Texar Security Port | |
| 334 | TCP | Backage | ||
| 335 | TCP | Nautical | ||
| 344 | TCP | pdap | Prospero Data Access Protocol | |
| 344 | UDP | pdap | Prospero Data Access Protocol | |
| 345 | TCP | pawserv | Perf Analysis Workbench | |
| 345 | UDP | pawserv | Perf Analysis Workbench | |
| 346 | TCP | zserv | Zebra server | |
| 346 | UDP | zserv | Zebra server | |
| 347 | TCP | fatserv | Fatmen Server | |
| 347 | UDP | fatserv | Fatmen Server | |
| 348 | TCP | csi-sgwp | Cabletron Management Protocol | |
| 348 | UDP | csi-sgwp | Cabletron Management Protocol | |
| 349 | TCP | mftp | mftp | |
| 349 | UDP | mftp | mftp | |
| 350 | TCP | matip-type-a | MATIP Type A | |
| 350 | UDP | matip-type-a | MATIP Type A | |
| 351 | TCP | matip-type-b | MATIP Type B | |
| 351 | UDP | matip-type-b | MATIP Type B | |
| 352 | TCP | dtag-ste-sb | DTAG | |
| 352 | UDP | dtag-ste-sb | DTAG | |
| 353 | TCP | ndsauth | NDSAUTH | |
| 353 | UDP | ndsauth | NDSAUTH | |
| 354 | TCP | bh611 | bh611 | |
| 354 | UDP | bh611 | bh611 | |
| 355 | TCP | datex-asn | DATEX-ASN | |
| 355 | UDP | datex-asn | DATEX-ASN | |
| 356 | TCP | cloanto-net-1 | Cloanto Net 1 | |
| 356 | UDP | cloanto-net-1 | Cloanto Net 1 | |
| 357 | TCP | bhevent | bhevent | |
| 357 | UDP | bhevent | bhevent | |
| 358 | TCP | shrinkwrap | Shrinkwrap | |
| 358 | UDP | shrinkwrap | Shrinkwrap | |
| 359 | TCP | nsrmp | Network Security Risk Management Protocol | |
| 359 | UDP | nsrmp | Network Security Risk Management Protocol | |
| 360 | TCP | scoi2odialog | scoi2odialog | |
| 360 | UDP | scoi2odialog | scoi2odialog | |
| 361 | TCP | semantix | Semantix | |
| 361 | UDP | semantix | Semantix | |
| 362 | TCP | srssend | SRS Send | |
| 362 | UDP | srssend | SRS Send | |
| 363 | TCP | rsvp-tunnel | RSVP Tunnel | |
| 363 | UDP | rsvp-tunnel | RSVP Tunnel | |
| 364 | TCP | aurora-cmgr | Aurora CMGR | |
| 364 | UDP | aurora-cmgr | Aurora CMGR | |
| 365 | TCP | dtk | DTK | |
| 365 | UDP | dtk | DTK | |
| 366 | TCP | odmr | ODMR | |
| 366 | UDP | odmr | ODMR | |
| 367 | TCP | mortgageware | MortgageWare | |
| 367 | UDP | mortgageware | MortgageWare | |
| 368 | TCP | qbikgdp | QbikGDP | |
| 368 | UDP | qbikgdp | QbikGDP | |
| 369 | TCP | rpc2portmap | rpc2portmap | |
| 369 | UDP | rpc2portmap | rpc2portmap | |
| 370 | TCP | codaauth2 | codaauth2 | NeuroticKat |
| 370 | UDP | codaauth2 | codaauth2 | |
| 371 | TCP | clearcase | Clearcase | |
| 371 | UDP | clearcase | Clearcase | |
| 372 | TCP | ulistproc | ListProcessor | |
| 372 | UDP | ulistproc | ListProcessor | |
| 373 | TCP | legent-1 | Legent Corporation | |
| 373 | UDP | legent-1 | Legent Corporation | |
| 374 | TCP | legent-2 | Legent Corporation | |
| 374 | UDP | legent-2 | Legent Corporation | |
| 375 | TCP | hassle | Hassle | |
| 375 | UDP | hassle | Hassle | |
| 376 | TCP | nip | Amiga Envoy Network Inquiry Proto | |
| 376 | UDP | nip | Amiga Envoy Network Inquiry Proto | |
| 377 | TCP | tnETOS | NEC Corporation | |
| 377 | UDP | tnETOS | NEC Corporation | |
| 378 | TCP | dsETOS | NEC Corporation | |
| 378 | UDP | dsETOS | NEC Corporation | |
| 379 | TCP | is99c | TIA/EIA/IS-99 modem client | |
| 379 | UDP | is99c | TIA/EIA/IS-99 modem client | |
| 380 | TCP | is99s | TIA/EIA/IS-99 modem server | |
| 380 | UDP | is99s | TIA/EIA/IS-99 modem server | |
| 381 | TCP | hp-collector | hp performance data collector | |
| 381 | UDP | hp-collector | hp performance data collector | |
| 382 | TCP | hp-managed-node | hp performance data managed node | |
| 382 | UDP | hp-managed-node | hp performance data managed node | |
| 383 | TCP | hp-alarm-mgr | hp performance data alarm manager | |
| 383 | UDP | hp-alarm-mgr | hp performance data alarm manager | |
| 384 | TCP | arns | A Remote Network Server System | |
| 384 | UDP | arns | A Remote Network Server System | |
| 385 | TCP | ibm-app | IBM Application | |
| 385 | UDP | ibm-app | IBM Application | |
| 386 | TCP | asa | ASA Message Router Object Def. | |
| 386 | UDP | asa | ASA Message Router Object Def. | |
| 387 | TCP | aurp | Appletalk Update-Based Routing Pro. | |
| 387 | UDP | aurp | Appletalk Update-Based Routing Pro. | |
| 388 | TCP | unidata-ldm | Unidata LDM | |
| 388 | UDP | unidata-ldm | Unidata LDM | |
| 389 | TCP | ldap | Lightweight Directory Access Protocol | |
| 389 | UDP | ldap | Lightweight Directory Access Protocol | |
| 390 | TCP | uis | UIS | |
| 390 | UDP | uis | UIS | |
| 391 | TCP | synotics-relay | SynOptics SNMP Relay Port | |
| 391 | UDP | synotics-relay | SynOptics SNMP Relay Port | |
| 392 | TCP | synotics-broker | SynOptics Port Broker Port | |
| 392 | UDP | synotics-broker | SynOptics Port Broker Port | |
| 393 | TCP | meta5 | Meta5 | |
| 393 | UDP | meta5 | Meta5 | |
| 394 | TCP | embl-ndt | EMBL Nucleic Data Transfer | |
| 394 | UDP | embl-ndt | EMBL Nucleic Data Transfer | |
| 395 | TCP | netcp | NetScout Control Protocol | |
| 395 | UDP | netcp | NetScout Control Protocol | |
| 396 | TCP | netware-ip | Novell Netware over IP | |
| 396 | UDP | netware-ip | Novell Netware over IP | |
| 397 | TCP | mptn | Multi Protocol Trans. Net. | |
| 397 | UDP | mptn | Multi Protocol Trans. Net. | |
| 398 | TCP | kryptolan | Kryptolan | |
| 398 | UDP | kryptolan | Kryptolan | |
| 399 | TCP | iso-tsap-c2 | ISO Transport Class 2 Non-Control over TCP | |
| 399 | UDP | iso-tsap-c2 | ISO Transport Class 2 Non-Control over UDP | |
| 400 | TCP | osb-sd | Oracle Secure Backup | Argentino |
| 400 | UDP | osb-sd | Oracle Secure Backup | |
| 401 | TCP | ups | Uninterruptible Power Supply | One Windows Trojan |
| 401 | UDP | ups | Uninterruptible Power Supply | |
| 402 | TCP | genie | Genie Protocol | One Windows Trojan |
| 402 | UDP | genie | Genie Protocol | |
| 403 | TCP | decap | decap | |
| 403 | UDP | decap | decap | |
| 404 | TCP | nced | nced | |
| 404 | UDP | nced | nced | |
| 405 | TCP | ncld | ncld | |
| 405 | UDP | ncld | ncld | |
| 406 | TCP | imsp | Interactive Mail Support Protocol | |
| 406 | UDP | imsp | Interactive Mail Support Protocol | |
| 407 | TCP | timbuktu | Timbuktu | |
| 407 | UDP | timbuktu | Timbuktu | |
| 408 | TCP | prm-sm | Prospero Resource Manager Sys. Man. | |
| 408 | UDP | prm-sm | Prospero Resource Manager Sys. Man. | |
| 409 | TCP | prm-nm | Prospero Resource Manager Node Man. | |
| 409 | UDP | prm-nm | Prospero Resource Manager Node Man. | |
| 410 | TCP | decladebug | DECLadebug Remote Debug Protocol | |
| 410 | UDP | decladebug | DECLadebug Remote Debug Protocol | |
| 411 | TCP | rmt | Remote MT Protocol | Backage |
| 411 | UDP | rmt | Remote MT Protocol | |
| 412 | TCP | synoptics-trap | Trap Convention Port | |
| 412 | UDP | synoptics-trap | Trap Convention Port | |
| 413 | TCP | smsp | Storage Management Services Protocol | Coma |
| 413 | UDP | smsp | Storage Management Services Protocol | |
| 414 | TCP | infoseek | InfoSeek | |
| 414 | UDP | infoseek | InfoSeek | |
| 415 | TCP | bnet | BNet | |
| 415 | UDP | bnet | BNet | |
| 416 | TCP | silverplatter | Silverplatter | |
| 416 | UDP | silverplatter | Silverplatter | |
| 417 | TCP | onmux | Onmux | |
| 417 | UDP | onmux | Onmux | |
| 418 | TCP | hyper-g | Hyper-G | |
| 418 | UDP | hyper-g | Hyper-G | |
| 419 | TCP | ariel1 | Ariel 1 | |
| 419 | UDP | ariel1 | Ariel 1 | |
| 420 | TCP | smpte | SMPTE | Breach, Incognito, W32.kibuv.b |
| 420 | UDP | smpte | SMPTE | |
| 421 | TCP | ariel2 | Ariel 2 | TCP Wrappers trojan |
| 421 | UDP | ariel2 | Ariel 2 | |
| 422 | TCP | ariel3 | Ariel 3 | |
| 422 | UDP | ariel3 | Ariel 3 | |
| 423 | TCP | opc-job-start | IBM Operations Planning and Control Start | |
| 423 | UDP | opc-job-start | IBM Operations Planning and Control Start | |
| 424 | TCP | opc-job-track | IBM Operations Planning and Control Track | |
| 424 | UDP | opc-job-track | IBM Operations Planning and Control Track | |
| 425 | TCP | icad-el | ICAD | |
| 425 | UDP | icad-el | ICAD | |
| 426 | TCP | smartsdp | smartsdp | |
| 426 | UDP | smartsdp | smartsdp | |
| 427 | TCP | svrloc | Server Location | |
| 427 | UDP | svrloc | Server Location | |
| 428 | TCP | ocs-cmu | OCS_CMU | |
| 428 | UDP | ocs-cmu | OCS_CMU | |
| 429 | TCP | ocs-amu | OCS_AMU | |
| 429 | UDP | ocs-amu | OCS_AMU | |
| 430 | TCP | utmpsd | UTMPSD | |
| 430 | UDP | utmpsd | UTMPSD | |
| 431 | TCP | utmpcd | UTMPCD | |
| 431 | UDP | utmpcd | UTMPCD | |
| 432 | TCP | iasd | IASD | |
| 432 | UDP | iasd | IASD | |
| 433 | TCP | nnsp | NNSP | |
| 433 | UDP | nnsp | NNSP | |
| 434 | TCP | mobileip-agent | MobileIP-Agent | |
| 434 | UDP | mobileip-agent | MobileIP-Agent | |
| 435 | TCP | mobilip-mn | MobilIP-MN | |
| 435 | UDP | mobilip-mn | MobilIP-MN | |
| 436 | TCP | dna-cml | DNA-CML | |
| 436 | UDP | dna-cml | DNA-CML | |
| 437 | TCP | comscm | comscm | |
| 437 | UDP | comscm | comscm | |
| 438 | TCP | dsfgw | dsfgw | |
| 438 | UDP | dsfgw | dsfgw | |
| 439 | TCP | dasp | dasp | |
| 439 | UDP | dasp | dasp | |
| 440 | TCP | sgcp | sgcp | |
| 440 | UDP | sgcp | sgcp | |
| 441 | TCP | decvms-sysmgt | decvms-sysmgt | |
| 441 | UDP | decvms-sysmgt | decvms-sysmgt | |
| 442 | TCP | cvc-hostd | cvc_hostd | |
| 442 | UDP | cvc-hostd | cvc_hostd | |
| 443 | TCP | https | http protocol over TLS/SSL | W32.spybot.nps, Slapper |
| 443 | UDP | https | http protocol over TLS/SSL | |
| 443 | SCTP | https | HTTPS | |
| 444 | TCP | snpp | Simple Network Paging Protocol | |
| 444 | UDP | snpp | Simple Network Paging Protocol | |
| 445 | TCP | microsoft-ds | Microsoft-DS | Lioten, Randon, WORM_DELODER.A, W32/Deloder.A, W32.HLLW.Deloder, Sasser, w32.secefa.a, W32.ifbo.a, W32.spybot.ofn, W32.spybot.nps, W32.mytob.e, W32.spybot.khc, W32.mytob@mm, Trojan.Netdepix.b, Backdoor.rtkit.b, 32.Scane, W32.korgo.a, W32.hllw.lioten, Nimda |
| 445 | UDP | microsoft-ds | Microsoft-DS | |
| 446 | TCP | ddm-rdb | DDM-Remote Relational Database Access | |
| 446 | UDP | ddm-rdb | DDM-Remote Relational Database Access | |
| 447 | TCP | ddm-dfm | DDM-Distributed File Management | |
| 447 | UDP | ddm-dfm | DDM-Distributed File Management | |
| 448 | TCP | ddm-ssl | DDM-Remote DB Access Using Secure Sockets | |
| 448 | UDP | ddm-ssl | DDM-Remote DB Access Using Secure Sockets | |
| 449 | TCP | as-servermap | AS Server Mapper | |
| 449 | UDP | as-servermap | AS Server Mapper | |
| 450 | TCP | tserver | Computer Supported Telecomunication Applications | |
| 450 | UDP | tserver | Computer Supported Telecomunication Applications | |
| 451 | TCP | sfs-smp-net | Cray Network Semaphore server | |
| 451 | UDP | sfs-smp-net | Cray Network Semaphore server | |
| 452 | TCP | sfs-config | Cray SFS config server | |
| 452 | UDP | sfs-config | Cray SFS config server | |
| 453 | TCP | creativeserver | CreativeServer | |
| 453 | UDP | creativeserver | CreativeServer | |
| 454 | TCP | contentserver | ContentServer | |
| 454 | UDP | contentserver | ContentServer | |
| 455 | TCP | creativepartnr | CreativePartnr | Fatal Connections |
| 455 | UDP | creativepartnr | CreativePartnr | |
| 456 | TCP | macon-tcp | macon-tcp | Hackers Paradise, Hacker’s Paradise |
| 456 | UDP | macon-udp | macon-udp | |
| 457 | TCP | scohelp | scohelp | |
| 457 | UDP | scohelp | scohelp | |
| 458 | TCP | appleqtc | apple quick time | |
| 458 | UDP | appleqtc | apple quick time | |
| 459 | TCP | ampr-rcmd | ampr-rcmd | |
| 459 | UDP | ampr-rcmd | ampr-rcmd | |
| 460 | TCP | skronk | skronk | |
| 460 | UDP | skronk | skronk | |
| 461 | TCP | datasurfsrv | DataRampSrv | |
| 461 | UDP | datasurfsrv | DataRampSrv | |
| 462 | TCP | datasurfsrvsec | DataRampSrvSec | |
| 462 | UDP | datasurfsrvsec | DataRampSrvSec | |
| 463 | TCP | alpes | alpes | |
| 463 | UDP | alpes | alpes | |
| 464 | TCP | kpasswd | kpasswd | |
| 464 | UDP | kpasswd | kpasswd | |
| 465 | TCP | urd | URL Rendesvous Directory for SSM | |
| 465 | UDP | igmpv3lite | IGMP over UDP for SSM | |
| 466 | TCP | digital-vrc | digital-vrc | |
| 466 | UDP | digital-vrc | digital-vrc | |
| 467 | TCP | mylex-mapd | mylex-mapd | |
| 467 | UDP | mylex-mapd | mylex-mapd | |
| 468 | TCP | photuris | proturis | |
| 468 | UDP | photuris | proturis | |
| 469 | TCP | rcp | Radio Control Protocol | |
| 469 | UDP | rcp | Radio Control Protocol | |
| 470 | TCP | scx-proxy | scx-proxy | |
| 470 | UDP | scx-proxy | scx-proxy | |
| 471 | TCP | mondex | Mondex | |
| 471 | UDP | mondex | Mondex | |
| 472 | TCP | ljk-login | ljk-login | |
| 472 | UDP | ljk-login | ljk-login | |
| 473 | TCP | hybrid-pop | hybrid-pop | |
| 473 | UDP | hybrid-pop | hybrid-pop | |
| 474 | TCP | tn-tl-w1 | tn-tl-w1 | |
| 474 | UDP | tn-tl-w2 | tn-tl-w2 | |
| 475 | TCP | tcpnethaspsrv | tcpnethaspsrv | |
| 475 | UDP | tcpnethaspsrv | tcpnethaspsrv | |
| 476 | TCP | tn-tl-fd1 | tn-tl-fd1 | |
| 476 | UDP | tn-tl-fd1 | tn-tl-fd1 | |
| 477 | TCP | ss7ns | ss7ns | |
| 477 | UDP | ss7ns | ss7ns | |
| 478 | TCP | spsc | spsc | |
| 478 | UDP | spsc | spsc | |
| 479 | TCP | iafserver | iafserver | |
| 479 | UDP | iafserver | iafserver | |
| 480 | TCP | iafdbase | iafdbase | |
| 480 | UDP | iafdbase | iafdbase | |
| 481 | TCP | ph | Ph service | |
| 481 | UDP | ph | Ph service | |
| 482 | TCP | bgs-nsi | bgs-nsi | |
| 482 | UDP | bgs-nsi | bgs-nsi | |
| 483 | TCP | ulpnet | ulpnet | |
| 483 | UDP | ulpnet | ulpnet | |
| 484 | TCP | integra-sme | Integra Software Management Environment | |
| 484 | UDP | integra-sme | Integra Software Management Environment | |
| 485 | TCP | powerburst | Air Soft Power Burst | |
| 485 | UDP | powerburst | Air Soft Power Burst | |
| 486 | TCP | avian | avian | |
| 486 | UDP | avian | avian | |
| 487 | TCP | saft | saft Simple Asynchronous File Transfer | |
| 487 | UDP | saft | saft Simple Asynchronous File Transfer | |
| 488 | TCP | gss-http | gss-http | |
| 488 | UDP | gss-http | gss-http | |
| 489 | TCP | nest-protocol | nest-protocol | |
| 489 | UDP | nest-protocol | nest-protocol | |
| 490 | TCP | micom-pfs | micom-pfs | |
| 490 | UDP | micom-pfs | micom-pfs | |
| 491 | TCP | go-login | go-login | |
| 491 | UDP | go-login | go-login | |
| 492 | TCP | ticf-1 | Transport Independent Convergence for FNA | |
| 492 | UDP | ticf-1 | Transport Independent Convergence for FNA | |
| 493 | TCP | ticf-2 | Transport Independent Convergence for FNA | |
| 493 | UDP | ticf-2 | Transport Independent Convergence for FNA | |
| 494 | TCP | pov-ray | POV-Ray | |
| 494 | UDP | pov-ray | POV-Ray | |
| 495 | TCP | intecourier | intecourier | |
| 495 | UDP | intecourier | intecourier | |
| 496 | TCP | pim-rp-disc | PIM-RP-DISC | |
| 496 | UDP | pim-rp-disc | PIM-RP-DISC | |
| 497 | TCP | retrospect | Retrospect backup and restore service | |
| 497 | UDP | retrospect | Retrospect backup and restore service | |
| 498 | TCP | siam | siam | |
| 498 | UDP | siam | siam | |
| 499 | TCP | iso-ill | ISO ILL Protocol | |
| 499 | UDP | iso-ill | ISO ILL Protocol | |
| 500 | TCP | isakmp | isakmp | |
| 500 | UDP | isakmp | isakmp | |
| 501 | TCP | stmf | STMF | |
| 501 | UDP | stmf | STMF | |
| 502 | TCP | mbap | Modbus Application Protocol | |
| 502 | UDP | mbap | Modbus Application Protocol | |
| 503 | TCP | intrinsa | Intrinsa | |
| 503 | UDP | intrinsa | Intrinsa | |
| 504 | TCP | citadel | citadel | |
| 504 | UDP | citadel | citadel | |
| 505 | TCP | mailbox-lm | mailbox-lm | |
| 505 | UDP | mailbox-lm | mailbox-lm | |
| 506 | TCP | ohimsrv | ohimsrv | |
| 506 | UDP | ohimsrv | ohimsrv | |
| 507 | TCP | crs | crs | |
| 507 | UDP | crs | crs | |
| 508 | TCP | xvttp | xvttp | |
| 508 | UDP | xvttp | xvttp | |
| 509 | TCP | snare | snare | |
| 509 | UDP | snare | snare | |
| 510 | TCP | fcp | FirstClass Protocol | t0rnkit sshd backdoor |
| 510 | UDP | fcp | FirstClass Protocol | |
| 511 | TCP | passgo | PassGo | T0rn Rootkit |
| 511 | UDP | passgo | PassGo | |
| 512 | TCP | exec | remote process execution | authentication performed using passwords and UNIX login names |
| 512 | UDP | comsat | ||
| 513 | TCP | login | remote login a la telnet | automatic authentication performed based on priviledged port numbers and distributed data bases which identify ‘authentication domains’ |
| 513 | UDP | who | maintains data bases showing who’s logged in to machines on a local net and the load average of the machine | |
| 514 | TCP | shell | cmd like exec, but automatic authentication is performed as for login server | RPC Backdoor, ADM worm |
| 514 | UDP | syslog | ||
| 515 | TCP | printer | spooler | lpdw0rm, Ramen, MscanWorm |
| 515 | UDP | printer | spooler | |
| 516 | TCP | videotex | videotex | |
| 516 | UDP | videotex | videotex | |
| 517 | TCP | talk | like tenex link, but across machine – unfortunately, doesn’t use link protocol (this is actually just a rendezvous port from which a tcp connection is established) | |
| 517 | UDP | talk | like tenex link, but across machine – unfortunately, doesn’t use link protocol (this is actually just a rendezvous port from which a tcp connection is established) | |
| 518 | TCP | ntalk | ||
| 518 | UDP | ntalk | ||
| 519 | TCP | utime | unixtime | |
| 519 | UDP | utime | unixtime | |
| 520 | TCP | efs | extended file name server | |
| 520 | UDP | router | local routing process (on site) | uses variant of Xerox NS routing information protocol – RIP |
| 521 | TCP | ripng | ripng | |
| 521 | UDP | ripng | ripng | |
| 522 | TCP | ulp | ULP | |
| 522 | UDP | ulp | ULP | |
| 523 | TCP | ibm-db2 | IBM-DB2 | |
| 523 | UDP | ibm-db2 | IBM-DB2 | |
| 524 | TCP | ncp | NCP | |
| 524 | UDP | ncp | NCP | |
| 525 | TCP | timed | timeserver | |
| 525 | UDP | timed | timeserver | |
| 526 | TCP | tempo | newdate | |
| 526 | UDP | tempo | newdate | |
| 527 | TCP | stx | Stock IXChange | |
| 527 | UDP | stx | Stock IXChange | |
| 528 | TCP | custix | Customer IXChange | |
| 528 | UDP | custix | Customer IXChange | |
| 529 | TCP | irc-serv | IRC-SERV | |
| 529 | UDP | irc-serv | IRC-SERV | |
| 530 | TCP | courier | rpc | W32.kibuv.worm |
| 530 | UDP | courier | rpc | |
| 531 | TCP | conference | chat | Net666, Rasmin |
| 531 | UDP | conference | chat | |
| 532 | TCP | netnews | readnews | |
| 532 | UDP | netnews | readnews | |
| 533 | TCP | netwall | for emergency broadcasts | |
| 533 | UDP | netwall | for emergency broadcasts | |
| 534 | TCP | windream | windream Admin | |
| 534 | UDP | windream | windream Admin | |
| 535 | TCP | iiop | iiop | |
| 535 | UDP | iiop | iiop | |
| 536 | TCP | opalis-rdv | opalis-rdv | |
| 536 | UDP | opalis-rdv | opalis-rdv | |
| 537 | TCP | nmsp | Networked Media Streaming Protocol | |
| 537 | UDP | nmsp | Networked Media Streaming Protocol | |
| 538 | TCP | gdomap | gdomap | |
| 538 | UDP | gdomap | gdomap | |
| 539 | TCP | apertus-ldp | Apertus Technologies Load Determination | |
| 539 | UDP | apertus-ldp | Apertus Technologies Load Determination | |
| 540 | TCP | uucp | uucpd | |
| 540 | UDP | uucp | uucpd | |
| 541 | TCP | uucp-rlogin | uucp-rlogin | |
| 541 | UDP | uucp-rlogin | uucp-rlogin | |
| 542 | TCP | commerce | commerce | |
| 542 | UDP | commerce | commerce | |
| 543 | TCP | klogin | ||
| 543 | UDP | klogin | ||
| 544 | TCP | kshell | krcmd | |
| 544 | UDP | kshell | krcmd | |
| 545 | TCP | appleqtcsrvr | appleqtcsrvr | |
| 545 | UDP | appleqtcsrvr | appleqtcsrvr | |
| 546 | TCP | dhcpv6-client | DHCPv6 Client | |
| 546 | UDP | dhcpv6-client | DHCPv6 Client | |
| 547 | TCP | dhcpv6-server | DHCPv6 Server | |
| 547 | UDP | dhcpv6-server | DHCPv6 Server | |
| 548 | TCP | afpovertcp | AFP over TCP | |
| 548 | UDP | afpovertcp | AFP over TCP | |
| 549 | TCP | idfp | IDFP | |
| 549 | UDP | idfp | IDFP | |
| 550 | TCP | new-rwho | new-who | |
| 550 | UDP | new-rwho | new-who | |
| 551 | TCP | cybercash | cybercash | |
| 551 | UDP | cybercash | cybercash | |
| 552 | TCP | devshr-nts | DeviceShare | |
| 552 | UDP | devshr-nts | DeviceShare | |
| 553 | TCP | pirp | pirp | |
| 553 | UDP | pirp | pirp | |
| 554 | TCP | rtsp | Real Time Streaming Protocol (RTSP) | |
| 554 | UDP | rtsp | Real Time Streaming Protocol (RTSP) | |
| 555 | TCP | dsf | 711 trojan (Seven Eleven), Phase-0, Phase Zero, Net Administrator, Ini-Killer, Stealth Spy, Id2001, PhaseZero, StealthSpy | |
| 555 | UDP | dsf | ||
| 556 | TCP | remotefs | rfs server | |
| 556 | UDP | remotefs | rfs server | |
| 557 | TCP | openvms-sysipc | openvms-sysipc | |
| 557 | UDP | openvms-sysipc | openvms-sysipc | |
| 558 | TCP | sdnskmp | SDNSKMP | |
| 558 | UDP | sdnskmp | SDNSKMP | |
| 559 | TCP | teedtap | TEEDTAP | Backdoor.solufina, Backdoor.domwis |
| 559 | UDP | teedtap | TEEDTAP | |
| 560 | TCP | rmonitor | rmonitord | |
| 560 | UDP | rmonitor | rmonitord | |
| 561 | TCP | monitor | ||
| 561 | UDP | monitor | ||
| 562 | TCP | chshell | chcmd | |
| 562 | UDP | chshell | chcmd | |
| 563 | TCP | nntps | nntp protocol over TLS/SSL (was snntp) | |
| 563 | UDP | nntps | nntp protocol over TLS/SSL (was snntp) | |
| 564 | TCP | 9pfs | plan 9 file service | Oracle |
| 564 | UDP | 9pfs | plan 9 file service | |
| 565 | TCP | whoami | whoami | |
| 565 | UDP | whoami | whoami | |
| 566 | TCP | streettalk | streettalk | |
| 566 | UDP | streettalk | streettalk | |
| 567 | TCP | banyan-rpc | banyan-rpc | |
| 567 | UDP | banyan-rpc | banyan-rpc | |
| 568 | TCP | ms-shuttle | microsoft shuttle | |
| 568 | UDP | ms-shuttle | microsoft shuttle | |
| 569 | TCP | ms-rome | microsoft rome | |
| 569 | UDP | ms-rome | microsoft rome | |
| 570 | TCP | meter | demon | |
| 570 | UDP | meter | demon | |
| 571 | TCP | meter | udemon | |
| 571 | UDP | meter | udemon | |
| 572 | TCP | sonar | sonar | |
| 572 | UDP | sonar | sonar | |
| 573 | TCP | banyan-vip | banyan-vip | |
| 573 | UDP | banyan-vip | banyan-vip | |
| 574 | TCP | ftp-agent | FTP Software Agent System | |
| 574 | UDP | ftp-agent | FTP Software Agent System | |
| 575 | TCP | vemmi | VEMMI | |
| 575 | UDP | vemmi | VEMMI | |
| 576 | TCP | ipcd | ipcd | |
| 576 | UDP | ipcd | ipcd | |
| 577 | TCP | vnas | vnas | |
| 577 | UDP | vnas | vnas | |
| 578 | TCP | ipdd | ipdd | |
| 578 | UDP | ipdd | ipdd | |
| 579 | TCP | decbsrv | decbsrv | |
| 579 | UDP | decbsrv | decbsrv | |
| 580 | TCP | sntp-heartbeat | SNTP HEARTBEAT | |
| 580 | UDP | sntp-heartbeat | SNTP HEARTBEAT | |
| 581 | TCP | bdp | Bundle Discovery Protocol | |
| 581 | UDP | bdp | Bundle Discovery Protocol | |
| 582 | TCP | scc-security | SCC Security | |
| 582 | UDP | scc-security | SCC Security | |
| 583 | TCP | philips-vc | Philips Video-Conferencing | |
| 583 | UDP | philips-vc | Philips Video-Conferencing | |
| 584 | TCP | keyserver | Key Server | |
| 584 | UDP | keyserver | Key Server | |
| 585 | UDP | De-registered | ||
| 586 | TCP | password-chg | Password Change | |
| 586 | UDP | password-chg | Password Change | |
| 587 | TCP | submission | Message Submission | Sober worm Variants |
| 587 | UDP | submission | Message Submission | |
| 588 | TCP | cal | CAL | |
| 588 | UDP | cal | CAL | |
| 589 | TCP | eyelink | EyeLink | Assasin |
| 589 | UDP | eyelink | EyeLink | |
| 590 | TCP | tns-cml | TNS CML | |
| 590 | UDP | tns-cml | TNS CML | |
| 591 | TCP | http-alt | FileMaker, Inc. – HTTP Alternate (see Port 80) | |
| 591 | UDP | http-alt | FileMaker, Inc. – HTTP Alternate (see Port 80) | |
| 592 | TCP | eudora-set | Eudora Set | |
| 592 | UDP | eudora-set | Eudora Set | |
| 593 | TCP | http-rpc-epmap | HTTP RPC Ep Map | |
| 593 | UDP | http-rpc-epmap | HTTP RPC Ep Map | |
| 594 | TCP | tpip | TPIP | |
| 594 | UDP | tpip | TPIP | |
| 595 | TCP | cab-protocol | CAB Protocol | |
| 595 | UDP | cab-protocol | CAB Protocol | |
| 596 | TCP | smsd | SMSD | |
| 596 | UDP | smsd | SMSD | |
| 597 | TCP | ptcnameservice | PTC Name Service | |
| 597 | UDP | ptcnameservice | PTC Name Service | |
| 598 | TCP | sco-websrvrmg3 | SCO Web Server Manager 3 | |
| 598 | UDP | sco-websrvrmg3 | SCO Web Server Manager 3 | |
| 599 | TCP | acp | Aeolon Core Protocol | |
| 599 | UDP | acp | Aeolon Core Protocol | |
| 600 | TCP | ipcserver | Sun IPC server | Sadmind, SweetHeart |
| 600 | UDP | ipcserver | Sun IPC server | |
| 601 | TCP | syslog-conn | Reliable Syslog Service | |
| 601 | UDP | syslog-conn | Reliable Syslog Service | |
| 602 | TCP | xmlrpc-beep | XML-RPC over BEEP | |
| 602 | UDP | xmlrpc-beep | XML-RPC over BEEP | |
| 603 | TCP | idxp | IDXP | |
| 603 | UDP | idxp | IDXP | |
| 604 | TCP | tunnel | TUNNEL | |
| 604 | UDP | tunnel | TUNNEL | |
| 605 | TCP | soap-beep | SOAP over BEEP | Secret Service |
| 605 | UDP | soap-beep | SOAP over BEEP | |
| 606 | TCP | urm | Cray Unified Resource Manager | |
| 606 | UDP | urm | Cray Unified Resource Manager | |
| 607 | TCP | nqs | nqs | |
| 607 | UDP | nqs | nqs | |
| 608 | TCP | sift-uft | Sender-Initiated/Unsolicited File Transfer | |
| 608 | UDP | sift-uft | Sender-Initiated/Unsolicited File Transfer | |
| 609 | TCP | npmp-trap | npmp-trap | |
| 609 | UDP | npmp-trap | npmp-trap | |
| 610 | TCP | npmp-local | npmp-local | |
| 610 | UDP | npmp-local | npmp-local | |
| 611 | TCP | npmp-gui | npmp-gui | |
| 611 | UDP | npmp-gui | npmp-gui | |
| 612 | TCP | hmmp-ind | HMMP Indication | |
| 612 | UDP | hmmp-ind | HMMP Indication | |
| 613 | TCP | hmmp-op | HMMP Operation | |
| 613 | UDP | hmmp-op | HMMP Operation | |
| 614 | TCP | sshell | SSLshell | |
| 614 | UDP | sshell | SSLshell | |
| 615 | TCP | sco-inetmgr | Internet Configuration Manager | |
| 615 | UDP | sco-inetmgr | Internet Configuration Manager | |
| 616 | TCP | sco-sysmgr | SCO System Administration Server | |
| 616 | UDP | sco-sysmgr | SCO System Administration Server | |
| 617 | TCP | sco-dtmgr | SCO Desktop Administration Server | |
| 617 | UDP | sco-dtmgr | SCO Desktop Administration Server | |
| 618 | TCP | dei-icda | DEI-ICDA | |
| 618 | UDP | dei-icda | DEI-ICDA | |
| 619 | TCP | compaq-evm | Compaq EVM | |
| 619 | UDP | compaq-evm | Compaq EVM | |
| 620 | TCP | sco-websrvrmgr | SCO WebServer Manager | |
| 620 | UDP | sco-websrvrmgr | SCO WebServer Manager | |
| 621 | TCP | escp-ip | ESCP | |
| 621 | UDP | escp-ip | ESCP | |
| 622 | TCP | collaborator | Collaborator | |
| 622 | UDP | collaborator | Collaborator | |
| 623 | TCP | oob-ws-http | DMTF out-of-band web services management protocol | Rtb666, RTB 666 |
| 623 | UDP | asf-rmcp | ASF Remote Management and Control Protocol | |
| 624 | TCP | cryptoadmin | Crypto Admin | |
| 624 | UDP | cryptoadmin | Crypto Admin | |
| 625 | TCP | dec-dlm | DEC DLM | |
| 625 | UDP | dec-dlm | DEC DLM | |
| 626 | TCP | asia | ASIA | |
| 626 | UDP | asia | ASIA | |
| 627 | TCP | passgo-tivoli | PassGo Tivoli | |
| 627 | UDP | passgo-tivoli | PassGo Tivoli | |
| 628 | TCP | qmqp | QMQP | |
| 628 | UDP | qmqp | QMQP | |
| 629 | TCP | 3com-amp3 | 3Com AMP3 | |
| 629 | UDP | 3com-amp3 | 3Com AMP3 | |
| 630 | TCP | rda | RDA | |
| 630 | UDP | rda | RDA | |
| 631 | TCP | ipp | IPP (Internet Printing Protocol) | |
| 631 | UDP | ipp | IPP (Internet Printing Protocol) | |
| 632 | TCP | bmpp | bmpp | |
| 632 | UDP | bmpp | bmpp | |
| 633 | TCP | servstat | Service Status update (Sterling Software) | |
| 633 | UDP | servstat | Service Status update (Sterling Software) | |
| 634 | TCP | ginad | ginad | |
| 634 | UDP | ginad | ginad | |
| 635 | TCP | rlzdbase | RLZ DBase | ADM worm |
| 635 | UDP | rlzdbase | RLZ DBase | |
| 636 | TCP | ldaps | ldap protocol over TLS/SSL (was sldap) | |
| 636 | UDP | ldaps | ldap protocol over TLS/SSL (was sldap) | |
| 637 | TCP | lanserver | lanserver | |
| 637 | UDP | lanserver | lanserver | |
| 638 | TCP | mcns-sec | mcns-sec | |
| 638 | UDP | mcns-sec | mcns-sec | |
| 639 | TCP | msdp | MSDP | |
| 639 | UDP | msdp | MSDP | |
| 640 | TCP | entrust-sps | entrust-sps | |
| 640 | UDP | entrust-sps | entrust-sps | |
| 641 | TCP | repcmd | repcmd | |
| 641 | UDP | repcmd | repcmd | |
| 642 | TCP | esro-emsdp | ESRO-EMSDP V1.3 | |
| 642 | UDP | esro-emsdp | ESRO-EMSDP V1.3 | |
| 643 | TCP | sanity | SANity | |
| 643 | UDP | sanity | SANity | |
| 644 | TCP | dwr | dwr | |
| 644 | UDP | dwr | dwr | |
| 645 | TCP | pssc | PSSC | |
| 645 | UDP | pssc | PSSC | |
| 646 | TCP | ldp | LDP | |
| 646 | UDP | ldp | LDP | |
| 647 | TCP | dhcp-failover | DHCP Failover | |
| 647 | UDP | dhcp-failover | DHCP Failover | |
| 648 | TCP | rrp | Registry Registrar Protocol (RRP) | |
| 648 | UDP | rrp | Registry Registrar Protocol (RRP) | |
| 649 | TCP | cadview-3d | Cadview-3d – streaming 3d models over the internet | |
| 649 | UDP | cadview-3d | Cadview-3d – streaming 3d models over the internet | |
| 650 | TCP | obex | OBEX | Assasin |
| 650 | UDP | obex | OBEX | |
| 651 | TCP | ieee-mms | IEEE MMS | |
| 651 | UDP | ieee-mms | IEEE MMS | |
| 652 | TCP | hello-port | HELLO_PORT | |
| 652 | UDP | hello-port | HELLO_PORT | |
| 653 | TCP | repscmd | RepCmd | |
| 653 | UDP | repscmd | RepCmd | |
| 654 | TCP | aodv | AODV | |
| 654 | UDP | aodv | AODV | |
| 655 | TCP | tinc | TINC | |
| 655 | UDP | tinc | TINC | |
| 656 | TCP | spmp | SPMP | |
| 656 | UDP | spmp | SPMP | |
| 657 | TCP | rmc | RMC | |
| 657 | UDP | rmc | RMC | |
| 658 | TCP | tenfold | TenFold | |
| 658 | UDP | tenfold | TenFold | |
| 659 | UDP | Removed | ||
| 660 | TCP | mac-srvr-admin | MacOS Server Admin | Zaratustra |
| 660 | UDP | mac-srvr-admin | MacOS Server Admin | |
| 661 | TCP | hap | HAP | NokNok |
| 661 | UDP | hap | HAP | |
| 662 | TCP | pftp | PFTP | |
| 662 | UDP | pftp | PFTP | |
| 663 | TCP | purenoise | PureNoise | |
| 663 | UDP | purenoise | PureNoise | |
| 664 | TCP | oob-ws-https | DMTF out-of-band secure web services management protocol | |
| 664 | UDP | asf-secure-rmcp | ASF Secure Remote Management and Control Protocol | |
| 665 | TCP | sun-dr | Sun DR | |
| 665 | UDP | sun-dr | Sun DR | |
| 666 | TCP | mdqs | Attack FTP, lpdw0rm, Shadow Phyre, ServU, Satans Back Door – SBD, NokNok, Cain & Abel, Back Construction, BLA trojan, th3r1pp3rz (= Therippers), BackConstruction, Reverse Trojan, Unicorn, yoyo | |
| 666 | UDP | mdqs | Bla, Noknok, N0kN0k Trojan | |
| 667 | TCP | disclose | campaign contribution disclosures – SDR Technologies | SniperNet, NokNok |
| 667 | UDP | disclose | campaign contribution disclosures – SDR Technologies | |
| 668 | TCP | mecomm | MeComm | th3r1pp3rz (= Therippers), Unicorn |
| 668 | UDP | mecomm | MeComm | |
| 669 | TCP | meregister | MeRegister | DP trojan, SniperNet |
| 669 | UDP | meregister | MeRegister | |
| 670 | TCP | vacdsm-sws | VACDSM-SWS | |
| 670 | UDP | vacdsm-sws | VACDSM-SWS | |
| 671 | TCP | vacdsm-app | VACDSM-APP | |
| 671 | UDP | vacdsm-app | VACDSM-APP | |
| 672 | TCP | vpps-qua | VPPS-QUA | |
| 672 | UDP | vpps-qua | VPPS-QUA | |
| 673 | TCP | cimplex | CIMPLEX | |
| 673 | UDP | cimplex | CIMPLEX | |
| 674 | TCP | acap | ACAP | |
| 674 | UDP | acap | ACAP | |
| 675 | TCP | dctp | DCTP | |
| 675 | UDP | dctp | DCTP | |
| 676 | TCP | vpps-via | VPPS Via | |
| 676 | UDP | vpps-via | VPPS Via | |
| 677 | TCP | vpp | Virtual Presence Protocol | |
| 677 | UDP | vpp | Virtual Presence Protocol | |
| 678 | TCP | ggf-ncp | GNU Generation Foundation NCP | |
| 678 | UDP | ggf-ncp | GNU Generation Foundation NCP | |
| 679 | TCP | mrm | MRM | |
| 679 | UDP | mrm | MRM | |
| 680 | TCP | entrust-aaas | entrust-aaas | Rtb666, RTB 666 |
| 680 | UDP | entrust-aaas | entrust-aaas | |
| 681 | TCP | entrust-aams | entrust-aams | |
| 681 | UDP | entrust-aams | entrust-aams | |
| 682 | TCP | xfr | XFR | |
| 682 | UDP | xfr | XFR | |
| 683 | TCP | corba-iiop | CORBA IIOP | |
| 683 | UDP | corba-iiop | CORBA IIOP | |
| 684 | TCP | corba-iiop-ssl | CORBA IIOP SSL | |
| 684 | UDP | corba-iiop-ssl | CORBA IIOP SSL | |
| 685 | TCP | mdc-portmapper | MDC Port Mapper | |
| 685 | UDP | mdc-portmapper | MDC Port Mapper | |
| 686 | TCP | hcp-wismar | Hardware Control Protocol Wismar | |
| 686 | UDP | hcp-wismar | Hardware Control Protocol Wismar | |
| 687 | TCP | asipregistry | asipregistry | |
| 687 | UDP | asipregistry | asipregistry | |
| 688 | TCP | realm-rusd | ApplianceWare managment protocol | |
| 688 | UDP | realm-rusd | ApplianceWare managment protocol | |
| 689 | TCP | nmap | NMAP | |
| 689 | UDP | nmap | NMAP | |
| 690 | TCP | vatp | Velazquez Application Transfer Protocol | |
| 690 | UDP | vatp | Velazquez Application Transfer Protocol | |
| 691 | TCP | msexch-routing | MS Exchange Routing | |
| 691 | UDP | msexch-routing | MS Exchange Routing | |
| 692 | TCP | hyperwave-isp | Hyperwave-ISP | GayOL |
| 692 | UDP | hyperwave-isp | Hyperwave-ISP | |
| 693 | TCP | connendp | almanid Connection Endpoint | |
| 693 | UDP | connendp | almanid Connection Endpoint | |
| 694 | TCP | ha-cluster | ha-cluster | |
| 694 | UDP | ha-cluster | ha-cluster | |
| 695 | TCP | ieee-mms-ssl | IEEE-MMS-SSL | |
| 695 | UDP | ieee-mms-ssl | IEEE-MMS-SSL | |
| 696 | TCP | rushd | RUSHD | |
| 696 | UDP | rushd | RUSHD | |
| 697 | TCP | uuidgen | UUIDGEN | |
| 697 | UDP | uuidgen | UUIDGEN | |
| 698 | TCP | olsr | OLSR | |
| 698 | UDP | olsr | OLSR | |
| 699 | TCP | accessnetwork | Access Network | |
| 699 | UDP | accessnetwork | Access Network | |
| 700 | TCP | epp | Extensible Provisioning Protocol | REx |
| 700 | UDP | epp | Extensible Provisioning Protocol | |
| 701 | TCP | lmp | Link Management Protocol (LMP) | |
| 701 | UDP | lmp | Link Management Protocol (LMP) | |
| 702 | TCP | iris-beep | IRIS over BEEP | |
| 702 | UDP | iris-beep | IRIS over BEEP | |
| 704 | TCP | elcsd | errlog copy/server daemon | |
| 704 | UDP | elcsd | errlog copy/server daemon | |
| 705 | TCP | agentx | AgentX | |
| 705 | UDP | agentx | AgentX | |
| 706 | TCP | silc | SILC | |
| 706 | UDP | silc | SILC | |
| 707 | TCP | borland-dsj | Borland DSJ | |
| 707 | UDP | borland-dsj | Borland DSJ | |
| 709 | TCP | entrust-kmsh | Entrust Key Management Service Handler | |
| 709 | UDP | entrust-kmsh | Entrust Key Management Service Handler | |
| 710 | TCP | entrust-ash | Entrust Administration Service Handler | |
| 710 | UDP | entrust-ash | Entrust Administration Service Handler | |
| 711 | TCP | cisco-tdp | Cisco TDP | |
| 711 | UDP | cisco-tdp | Cisco TDP | |
| 712 | TCP | tbrpf | TBRPF | |
| 712 | UDP | tbrpf | TBRPF | |
| 713 | TCP | iris-xpc | IRIS over XPC | |
| 713 | UDP | iris-xpc | IRIS over XPC | |
| 714 | TCP | iris-xpcs | IRIS over XPCS | |
| 714 | UDP | iris-xpcs | IRIS over XPCS | |
| 715 | TCP | iris-lwz | IRIS-LWZ | |
| 715 | UDP | iris-lwz | IRIS-LWZ | |
| 716 | UDP | pana | PANA Messages | |
| 729 | TCP | netviewdm1 | IBM NetView DM/6000 Server/Client | |
| 729 | UDP | netviewdm1 | IBM NetView DM/6000 Server/Client | |
| 730 | TCP | netviewdm2 | IBM NetView DM/6000 send/tcp | TCP |
| 730 | UDP | netviewdm2 | IBM NetView DM/6000 send/tcp | TCP |
| 731 | TCP | netviewdm3 | IBM NetView DM/6000 receive/tcp | TCP |
| 731 | UDP | netviewdm3 | IBM NetView DM/6000 receive/tcp | TCP |
| 741 | TCP | netgw | netGW | |
| 741 | UDP | netgw | netGW | |
| 742 | TCP | netrcs | Network based Rev. Cont. Sys. | |
| 742 | UDP | netrcs | Network based Rev. Cont. Sys. | |
| 744 | TCP | flexlm | Flexible License Manager | |
| 744 | UDP | flexlm | Flexible License Manager | |
| 747 | TCP | fujitsu-dev | Fujitsu Device Control | |
| 747 | UDP | fujitsu-dev | Fujitsu Device Control | |
| 748 | TCP | ris-cm | Russell Info Sci Calendar Manager | |
| 748 | UDP | ris-cm | Russell Info Sci Calendar Manager | |
| 749 | TCP | kerberos-adm | kerberos administration | |
| 749 | UDP | kerberos-adm | kerberos administration | |
| 750 | TCP | rfile | ||
| 750 | UDP | loadav | ||
| 751 | TCP | pump | ||
| 751 | UDP | pump | ||
| 752 | TCP | qrh | ||
| 752 | UDP | qrh | ||
| 753 | TCP | rrh | ||
| 753 | UDP | rrh | ||
| 754 | TCP | tell | send | |
| 754 | UDP | tell | send | |
| 758 | TCP | nlogin | ||
| 758 | UDP | nlogin | ||
| 759 | TCP | con | ||
| 759 | UDP | con | ||
| 760 | TCP | ns | ||
| 760 | UDP | ns | ||
| 761 | TCP | rxe | ||
| 761 | UDP | rxe | ||
| 762 | TCP | quotad | ||
| 762 | UDP | quotad | ||
| 763 | TCP | cycleserv | ||
| 763 | UDP | cycleserv | ||
| 764 | TCP | omserv | ||
| 764 | UDP | omserv | ||
| 765 | TCP | webster | ||
| 765 | UDP | webster | ||
| 767 | TCP | phonebook | phone | |
| 767 | UDP | phonebook | phone | |
| 769 | TCP | vid | ||
| 769 | UDP | vid | ||
| 770 | TCP | cadlock | ||
| 770 | UDP | cadlock | ||
| 771 | TCP | rtip | ||
| 771 | UDP | rtip | ||
| 772 | TCP | cycleserv2 | ||
| 772 | UDP | cycleserv2 | ||
| 773 | TCP | submit | ||
| 773 | UDP | notify | ||
| 774 | TCP | rpasswd | ||
| 774 | UDP | acmaint-dbd | ||
| 775 | TCP | entomb | ||
| 775 | UDP | acmaint-transd | ||
| 776 | TCP | wpages | ||
| 776 | UDP | wpages | ||
| 777 | TCP | multiling-http | Multiling HTTP | AimSpy, Undetected, Tiny, BackDoor.Netcrack.B |
| 777 | UDP | multiling-http | Multiling HTTP | |
| 778 | TCP | BackDoor.Netcrack.B | ||
| 780 | TCP | wpgs | ||
| 780 | UDP | wpgs | ||
| 785 | TCP | NetworkTerrorist | ||
| 798 | TCP | Oracle | ||
| 800 | TCP | mdbs-daemon | NeuroticKitten | |
| 800 | UDP | mdbs-daemon | ||
| 801 | TCP | device | ||
| 801 | UDP | device | ||
| 802 | TCP | mbap-s | Modbus Application Protocol Secure | |
| 802 | UDP | mbap-s | Modbus Application Protocol Secure | |
| 808 | TCP | WinHole | ||
| 810 | TCP | fcp-udp | FCP | |
| 810 | UDP | fcp-udp | FCP Datagram | |
| 828 | TCP | itm-mcell-s | itm-mcell-s | |
| 828 | UDP | itm-mcell-s | itm-mcell-s | |
| 829 | TCP | pkix-3-ca-ra | PKIX-3 CA/RA | |
| 829 | UDP | pkix-3-ca-ra | PKIX-3 CA/RA | |
| 830 | TCP | netconf-ssh | NETCONF over SSH | |
| 830 | UDP | netconf-ssh | NETCONF over SSH | |
| 831 | TCP | netconf-beep | NETCONF over BEEP | NeuroticKat |
| 831 | UDP | netconf-beep | NETCONF over BEEP | |
| 832 | TCP | netconfsoaphttp | NETCONF for SOAP over HTTPS | |
| 832 | UDP | netconfsoaphttp | NETCONF for SOAP over HTTPS | |
| 833 | TCP | netconfsoapbeep | NETCONF for SOAP over BEEP | |
| 833 | UDP | netconfsoapbeep | NETCONF for SOAP over BEEP | |
| 847 | TCP | dhcp-failover2 | dhcp-failover 2 | |
| 847 | UDP | dhcp-failover2 | dhcp-failover 2 | |
| 848 | TCP | gdoi | GDOI | |
| 848 | UDP | gdoi | GDOI | |
| 860 | TCP | iscsi | iSCSI | |
| 860 | UDP | iscsi | iSCSI | |
| 861 | TCP | owamp-control | OWAMP-Control | |
| 861 | UDP | owamp-control | OWAMP-Control | |
| 862 | TCP | twamp-control | Two-way Active Measurement Protocol (TWAMP) Control | |
| 862 | UDP | twamp-control | Two-way Active Measurement Protocol (TWAMP) Control | |
| 873 | TCP | rsync | rsync | |
| 873 | UDP | rsync | rsync | |
| 886 | TCP | iclcnet-locate | ICL coNETion locate server | |
| 886 | UDP | iclcnet-locate | ICL coNETion locate server | |
| 887 | TCP | iclcnet-svinfo | ICL coNETion server info | |
| 887 | UDP | iclcnet-svinfo | ICL coNETion server info | |
| 888 | TCP | accessbuilder | AccessBuilder | |
| 888 | UDP | accessbuilder | AccessBuilder | |
| 900 | TCP | omginitialrefs | OMG Initial Refs | |
| 900 | UDP | omginitialrefs | OMG Initial Refs | |
| 901 | TCP | smpnameres | SMPNAMERES | NetDevil, Backdoor.Devil, Net-Devil, Pest |
| 901 | UDP | smpnameres | SMPNAMERES | |
| 902 | TCP | ideafarm-door | self documenting Telnet Door | Backdoor.Devil, Net-Devil, Pest |
| 902 | UDP | ideafarm-door | self documenting Door: send 0x00 for info | |
| 903 | TCP | ideafarm-panic | self documenting Telnet Panic Door | Net-Devil |
| 903 | UDP | ideafarm-panic | self documenting Panic Door: send 0x00 for info | |
| 910 | TCP | kink | Kerberized Internet Negotiation of Keys (KINK) | |
| 910 | UDP | kink | Kerberized Internet Negotiation of Keys (KINK) | |
| 911 | TCP | xact-backup | xact-backup | Dark Shadow, Dark Shadow |
| 911 | UDP | xact-backup | xact-backup | |
| 912 | TCP | apex-mesh | APEX relay-relay service | |
| 912 | UDP | apex-mesh | APEX relay-relay service | |
| 913 | TCP | apex-edge | APEX endpoint-relay service | |
| 913 | UDP | apex-edge | APEX endpoint-relay service | |
| 956 | TCP | Crat Pro | ||
| 989 | TCP | ftps-data | ftp protocol, data, over TLS/SSL | |
| 989 | UDP | ftps-data | ftp protocol, data, over TLS/SSL | |
| 990 | TCP | ftps | ftp protocol, control, over TLS/SSL | |
| 990 | UDP | ftps | ftp protocol, control, over TLS/SSL | |
| 991 | TCP | nas | Netnews Administration System | Snape |
| 991 | UDP | nas | Netnews Administration System | |
| 992 | TCP | telnets | telnet protocol over TLS/SSL | Snape |
| 992 | UDP | telnets | telnet protocol over TLS/SSL | |
| 993 | TCP | imaps | imap4 protocol over TLS/SSL | |
| 993 | UDP | imaps | imap4 protocol over TLS/SSL | |
| 994 | TCP | Reserved | ||
| 994 | UDP | Reserved | ||
| 995 | TCP | pop3s | pop3 protocol over TLS/SSL (was spop3) | |
| 995 | UDP | pop3s | pop3 protocol over TLS/SSL (was spop3) | |
| 996 | TCP | vsinet | vsinet | |
| 996 | UDP | vsinet | vsinet | |
| 997 | TCP | maitrd | ||
| 997 | UDP | maitrd | ||
| 998 | TCP | busboy | ||
| 998 | UDP | puparp | ||
| 999 | TCP | garcon | Deep Throat, Foreplay or Reduced Foreplay, WinSatan, Chat power, DeepThroat | |
| 999 | UDP | applix | Applix ac | |
| 1000 | TCP | cadlock2 | Connecter, Der Späher / Der Spaeher, Direct Connection, DerSpaeher, GOTHIC Intruder, Theef, Insane Network |