Vai al contenuto

Service Port List

Lista di tutte le porte e dei relativi servizi

Name Port Description
r 0/tcp # Reserved
r 0/udp # Reserved
tcpmux 1/tcp # TCP Port Service Multiplexer One of original portmappers. SGI/IRIX is still using it, thus scans for it are probable attempts to locate IRIX targets. A "HELP" request to it returns Irix host's service listings.
tcpmux 1/udp # TCP Port Service Multiplexer One of original portmappers. SGI/IRIX is still using it, thus scans for it are probable attempts to locate IRIX targets. A "HELP" request to it returns Irix host's service listings.
compressnet 2/tcp # Management Utility
compressnet 2/udp # Management Utility
compressnet 3/tcp # Compression Process
compressnet 3/udp # Compression Process
rje 5/tcp # Remote Job Entry
rje 5/udp # Remote Job Entry
echo 7/tcp # Echo

Used to trouble-shoot remote TCP/IP stacks (telnet to remote echo port, then type ... all keystrokes will echo back if target stack is working thru app layer.

DOS Threat: Attackers use it to relay flooding data. If relayed to a network broadcast, entire subnet can flood. To a syslog-loghost, logs can flood. Returns it to whatever you forged as your source socket. Any data sent can flood, but looping data output ports (eg: chargen, time, daytime) create deadly streaming floods.

Disable on all hosts; enable only for brief trouble-shooting.
echo 7/udp # Echo

Used to trouble-shoot remote TCP/IP stacks (telnet to remote echo port, then type ... all keystrokes will echo back if target stack is working thru app layer.

DOS Threat: Attackers use it to relay flooding data. If relayed to a network broadcast, entire subnet can flood. To a syslog-loghost, logs can flood. Returns it to whatever you forged as your source socket. Any data sent can flood, but looping data output ports (eg: chargen, time, daytime) create deadly streaming floods.

Disable on all hosts; enable only for brief trouble-shooting.
discard 9/tcp # Discard

Port equiv to /dev/null. Reads pkts, then discards them. Allows knowledge the host is alive and processing pkts. Used while trouble-shooting local stack's transmit ability (telnet to discard on remote host, knowing all transmitted keystrokes will just be discarded ... no worry of corrupting host processes).

No threat, but block on hosts and perimeter network devices as general rule.
discard 9/udp # Discard

Port equiv to /dev/null. Reads pkts, then discards them. Allows knowledge the host is alive and processing pkts. Used while trouble-shooting local stack's transmit ability (telnet to discard on remote host, knowing all transmitted keystrokes will just be discarded ... no worry of corrupting host processes).

No threat, but block on hosts and perimeter network devices as general rule.
systat 11/tcp # Active Users

Provides very useful info to attackers (host's usernames, login times, origination hosts, etc.).

Disable this port on all hosts.
systat 11/udp # Active Users

Provides very useful info to attackers (host's usernames, login times, origination hosts, etc.).

Disable this port on all hosts.
daytime 13/tcp # Daytime

Returns the time of day in machine language; can return OS version. Provides host time, which can be useful in timing attacks. Also creates a DOS threat when its output is looped echo port (7).

Disable this port on all hosts.
daytime 13/udp # Daytime

Returns the time of day in machine language; can return OS version. Provides host time, which can be useful in timing attacks. Also creates a DOS threat when its output is looped echo port (7).

Disable this port on all hosts.
netstat 15/tcp # Now Unassigned (was netstat)

Netstat was similar to systat and is still active on some operating systems. Provides remote attackers info about the host and network (socket status, route tables, arp table, multicast group members, per- protocol stat's, interfaces status, etc.).

Disable this port on all hosts.
netstat 15/udp # Now Unassigned (was netstat)

Netstat was similar to systat and is still active on some operating systems. Provides remote attackers info about the host and network (socket status, route tables, arp table, multicast group members, per- protocol stat's, interfaces status, etc.).

Disable this port on all hosts.
qotd 17/tcp # Quote of the Day (QOTD)

Used to receive remote QOTDs. Used for social engineering attacks, where users receive fake instructions to verify passwords , etc.

Disable this port on all hosts.
qotd 17/udp # Quote of the Day (QOTD)

Used to receive remote QOTDs. Used for social engineering attacks, where users receive fake instructions to verify passwords , etc.

Disable this port on all hosts.
msp 18/tcp # Message Send Protocol
msp 18/udp # Message Send Protocol
chargen 19/tcp # Character Generator

Used to trouble-shoot TCP/IP stacks. Generates random characters at a high rate.

DOS Threat: Attackers will loop it to the echo port, creating a very effective host and subnet DOS.

Disable this port on all hosts, enable only for brief trouble-shooting tests.
chargen 19/udp # Character Generator

Used to trouble-shoot TCP/IP stacks. Generates random characters at a high rate.

DOS Threat: Attackers will loop it to the echo port, creating a very effective host and subnet DOS.

Disable this port on all hosts, enable only for brief trouble-shooting tests.
ftp-data 20/tcp # Default FTP Data Transfer Port

Is FTP service's default data transfer port; required inbound if internal users are allowed access to external FTP sites, yet open port poses a threat (hole for network mapping, etc). Modern firewalls solve this by keeping it closed until a valid FTP session exists, then only opening it between those hosts.

Control via a stateful-tracking firewall, do not simply open at perimeter.
ftp-data 20/udp # Default FTP Data Transfer Port

Is FTP service's default data transfer port; required inbound if internal users are allowed access to external FTP sites, yet open port poses a threat (hole for network mapping, etc). Modern firewalls solve this by keeping it closed until a valid FTP session exists, then only opening it between those hosts.

Control via a stateful-tracking firewall, do not simply open at perimeter.
ftp-control 21/tcp # FTP Control Port

Is FTP service control port. Firewall rules focus on this port, then open port 20 only when required for a data transfer.
Security Concerns with FTP:
- Cleartext, re-usable passwords
- Portal for user account grinding
- FTP Bounce, where attacker uses ftp's "port" command to redirect the FTP transfer to a port & IP other than default port 20 on the FTP server. Attacks can include "bouncing" internal network scans, email forging/flooding, etc.

CERT Advisories: CA-97.16, CA-99.13

Disable port on non-FTP servers.

Open at perimeter only with static route to internal FTP server(s).
ftp-control/ftp 21/udp # FTP Control Port

Is FTP service control port. Firewall rules focus on this port, then open port 20 only when required for a data transfer.
Security Concerns with FTP:
- Cleartext, re-usable passwords
- Portal for user account grinding
- FTP Bounce, where attacker uses ftp's "port" command to redirect the FTP transfer to a port & IP other than default port 20 on the FTP server. Attacks can include "bouncing" internal network scans, email forging/flooding, etc.

CERT Advisories: CA-97.16, CA-99.13

Disable port on non-FTP servers.

Open at perimeter only with static route to internal FTP server(s).
, ftp

file transfer [control]
ssh 22/tcp # SSH Remote Login Protocol
ssh/pcanywherestat 22/udp # SSH Remote Login Protocol
, pcAnywhere Status

Default udp status port for v2.0 thru v7.51, plus CE. Versions v8+ on use tcp 5631 & udp 5632.
telnet 23/tcp # Telnet

Standard for remote host admin.
Security Concerns of Telnet:
- Cleartext, re-usable passwords
- Portal for user account grinding

CERT Advisories: CA-89.03, CA-95.14

Replace with SSH on critical hosts.
telnet 23/udp # Telnet

Standard for remote host admin.
Security Concerns of Telnet:
- Cleartext, re-usable passwords
- Portal for user account grinding

CERT Advisories: CA-89.03, CA-95.14

Replace with SSH on critical hosts.
smtp/smtp 25/tcp # Simple Mail Transfer

Used by mail servers to receive inbound email.
Security Concerns: Email servers are complex engines, often run as root, and required open at most network perimeters. Thus are popular for attackers and new DOS or intrusion hacks always being found.

Disable on non-mail server hosts.

Open at perimeter only with static route to internal mail server.
, smtp

simple mail transfer
smtp 25/udp # smtp

simple mail transfer
nsw-fe 27/tcp # NSW User System FE
nsw-fe 27/udp # NSW User System FE
msg-icp 29/tcp # MSG ICP
msg-icp 29/udp # MSG ICP
msg-auth 31/tcp # MSG Authentication
msg-auth 31/udp # MSG Authentication
dsp 33/tcp # Display Support Protocol
dsp 33/udp # Display Support Protocol
printer-any/priv-print 35/tcp # Any Private Printer Server
, priv-print

any private printer server
printer-any/priv-print 35/udp # Any Private Printer Server
, priv-print

any private printer server
time 37/tcp # Time

Provides remote timing stat's of internal processing events.
Security Concerns: Gives remote attacker info on host's internal processing load. Can identify critical processing times, plus output can be looped to echo port (7) and create a DOS threat to the subnet.

Disable this port on all hosts.
time 37/udp # Time

Provides remote timing stat's of internal processing events.
Security Concerns: Gives remote attacker info on host's internal processing load. Can identify critical processing times, plus output can be looped to echo port (7) and create a DOS threat to the subnet.

Disable this port on all hosts.
rap 38/tcp # Route Access Protocol
rap 38/udp # Route Access Protocol
rlp 39/tcp # Resource Location Protocol
rlp/rlp 39/udp # Resource Location Protocol
, rlp

resource location, resource location protocol
graphics 41/tcp # Graphics
graphics 41/udp # Graphics
nameserver 42/tcp # Host Name Server

Obsolete nameserver (originally DARPA's trivial name server, replaced by DNS). Is currently used by Microsoft hosts for WINS server for NetBIOS name resolves. May also be still found on some older Unix systems.

Disable on all non-MS-WINS hosts.
nameserver/name 42/udp # Host Name Server

Obsolete nameserver (originally DARPA's trivial name server, replaced by DNS). Is currently used by Microsoft hosts for WINS server for NetBIOS name resolves. May also be still found on some older Unix systems.

Disable on all non-MS-WINS hosts.
, name

host name server
nicname 43/tcp # Whois

Is the whois service, used to provide domain-level info. Sites today rarely run whois servers, is mostly just used now by Internic. Somewhat similar in function to "finger" and can suffer from same data-driven attacks.

Disable this port on all hosts.
nicname/nicname 43/udp # Whois

Is the whois service, used to provide domain-level info. Sites today rarely run whois servers, is mostly just used now by Internic. Somewhat similar in function to "finger" and can suffer from same data-driven attacks.

Disable this port on all hosts.
, nicname

who is, nicname
mpm-flags 44/tcp # MPM FLAGS Protocol
mpm-flags 44/udp # MPM FLAGS Protocol
mpm 45/tcp # Message Processing Module [recv]
mpm 45/udp # Message Processing Module [recv]
mpm-snd 46/tcp # MPM [default send]
mpm-snd 46/udp # MPM [default send]
ni-ftp 47/tcp # NI FTP
ni-ftp 47/udp # NI FTP
auditd 48/tcp # Digital Audit Daemon
auditd 48/udp # Digital Audit Daemon
tacacs 49/tcp # Login Host Protocol (TACACS)

Auth protocol for older terminal server logins.
Security Concerns: Passwords are transmitted in cleartext

Previously known as bbn-login.

Disable this port on all hosts.
tacacs 49/udp # Login Host Protocol (TACACS)

Auth protocol for older terminal server logins.
Security Concerns: Passwords are transmitted in cleartext

Previously known as bbn-login.

Disable this port on all hosts.
re-mail-ck 50/tcp # Remote Mail Checking Protocol
re-mail-ck 50/udp # Remote Mail Checking Protocol
la-maint 51/tcp # IMP Logical Address Maintenance
la-maint 51/udp # IMP Logical Address Maintenance
xns-time 52/tcp # XNS Time Protocol
xns-time 52/udp # XNS Time Protocol
domain 53/tcp # Domain Name Server (DNS)

DNS servers offer different services on TCP and UDP. TCP is used for "zone transfers" of full name record databases, while UDP is used for individual lookups.
Security Concerns:
- Zone Transfers give away entire network maps; high value to attackers
- DNS (BIND) is a popular target, since DNS servers must exist, must be reachable, and exploits usually result DOS or root

Keep BIND version/patches current (refer to www.isca.org).

Use "split-DNS
domain/domain 53/udp # Domain Name Server (DNS)

DNS servers offer different services on TCP and UDP. TCP is used for "zone transfers" of full name record databases, while UDP is used for individual lookups.
Security Concerns:
- Zone Transfers give away entire network maps; high value to attackers
- DNS (BIND) is a popular target, since DNS servers must exist, must be reachable, and exploits usually result DOS or root

Keep BIND version/patches current (refer to www.isca.org).

Use "split-DNS, domain

domain name server
xns-ch 54/tcp # XNS Clearinghouse
xns-ch 54/udp # XNS Clearinghouse
isi-gl 55/tcp # ISI Graphics Language
isi-gl 55/udp # ISI Graphics Language
xns-auth 56/tcp # XNS Authentication
xns-auth 56/udp # XNS Authentication
terminal-any 57/tcp # Any Private Terminal Access
terminal-any/priv-term 57/udp # Any Private Terminal Access
, priv-term

any private terminal access
xns-mail 58/tcp # XNS Mail
xns-mail 58/udp # XNS Mail
dialout-any/priv-file 59/tcp # Any Private File Service
, priv-file

any private file service
dialout-any/priv-file 59/udp # Any Private File Service
, priv-file

any private file service
ni-mail 61/tcp # NI MAIL
ni-mail 61/udp # NI MAIL
acas 62/tcp # ACA Services
acas 62/udp # ACA Services
whois++ 63/tcp # whois++
whois++ 63/udp # whois++
covia 64/tcp # Communications Integrator (CI)
covia 64/udp # Communications Integrator (CI)
tacacs-ds 65/tcp # TACACS-Database Service
tacacs-ds 65/udp # TACACS-Database Service
sql--net/sql*net 66/tcp # Oracle SQL
NET

Used for Oracle DB access.
Security Concerns: Auth scheme can be either Oracle or Unix username & password combo, but both passed cleartext by default.

Oracle's security options:
- Can encrypt the re-usable password
- Can upgrade to one-time-passwords
- Can enable VPN for remote access

Block this port at network's perimeter; use only VPN-encrypted data transfers across perimeter.
, sqlnet

oracle sql
net
sql*net 66/udp # sqlnet

oracle sql
net
bootps 67/tcp # Bootstrap Protocol Server

Listening port on bootp & DHCP servers. Clients broadcast to it for boot or network parameters.
Security Concern: Can probe NIS domain name, plus a valued DOS target.
bootps/bootps 67/udp # Bootstrap Protocol Server

Listening port on bootp & DHCP servers. Clients broadcast to it for boot or network parameters.
Security Concern: Can probe NIS domain name, plus a valued DOS target.
, bootps

bootp/dhcp server, bootstrap protocol server
bootpc 68/tcp # Bootstrap Protocol Client

Listening port on bootp & DHCP clients. Servers respond to it with boot or network parameters.
bootpc/bootpc 68/udp # Bootstrap Protocol Client

Listening port on bootp & DHCP clients. Servers respond to it with boot or network parameters.
, bootpc

bootp/dhcp client, bootstrap protocol client
tftp 69/tcp # Trivial File Transfer

Non-auth ftp service, used primarily by diskless clients to pull boot files.
Security Concerns: Remote attackers can download server files without auth. Can extend to sensitive files (eg: passwd file) if server is poorly configured. Since file transfer is cleartext, all boot info passed to clients is vulnerable. For routers, this can include passwords.

Disable on host unless TFTP server.
tftp/tftp 69/udp # Trivial File Transfer

Non-auth ftp service, used primarily by diskless clients to pull boot files.
Security Concerns: Remote attackers can download server files without auth. Can extend to sensitive files (eg: passwd file) if server is poorly configured. Since file transfer is cleartext, all boot info passed to clients is vulnerable. For routers, this can include passwords.

Disable on host unless TFTP server.
, tftp

trivial file transfer, trivial file transfer protocol
gopher 70/tcp #
Older search engine server. Used little today, but still installed with MS's IIS.

Disable on host unless TFTP server.
gopher 70/udp #
Older search engine server. Used little today, but still installed with MS's IIS.

Disable on host unless TFTP server.
netrjs-1 71/tcp # Remote Job Service
netrjs-1 71/udp # Remote Job Service
netrjs-2 72/tcp # Remote Job Service
netrjs-2 72/udp # Remote Job Service
netrjs-3 73/tcp # Remote Job Service
netrjs-3 73/udp # Remote Job Service
netrjs-4 74/tcp # Remote Job Service
netrjs-4 74/udp # Remote Job Service
deos 76/tcp # Distributed External Object Store
deos 76/udp # Distributed External Object Store
rje-service-any 77/tcp # Any Private RJE Service
rje-service-any/priv-rje 77/udp # Any Private RJE Service
, priv-rje

any private rje service, netjrs
vettcp 78/tcp # vettcp
vettcp 78/udp # vettcp
finger 79/tcp # Finger


Security Concerns:
- Provides key host info to attacker
- Fingered host can be DOS'd if hit with a recursive finger script till its memory and swap space fill.
- Fingering clients can be DOS'd if they finger a maliciously configured host (returns data overload, causing client to beep continually, etc.).
- If fingering clients allow programmable keys, a maliciously configured host can return a finger response that maps a key to "rm -rf /
".

Disable on all host unless finger service is stubbed to only provide scripted data response (eg: system admin contact info, etc.).
finger 79/udp # Finger


Security Concerns:
- Provides key host info to attacker
- Fingered host can be DOS'd if hit with a recursive finger script till its memory and swap space fill.
- Fingering clients can be DOS'd if they finger a maliciously configured host (returns data overload, causing client to beep continually, etc.).
- If fingering clients allow programmable keys, a maliciously configured host can return a finger response that maps a key to "rm -rf /
".

Disable on all host unless finger service is stubbed to only provide scripted data response (eg: system admin contact info, etc.).
http 80/tcp # 'HTTP Standard web server port. '
http 80/udp # http

hypertext transfer protocol, world wide web http
SIPS 5061/tcp # SIP over TLS/SSL
/udp #
hosts2-ns 81/tcp # HOSTS2 Name Server
hosts2-ns 81/udp # HOSTS2 Name Server
xfer 82/tcp # XFER Utility
xfer 82/udp # XFER Utility
mit-ml-dev 83/tcp # MIT ML Device
mit-ml-dev 83/udp # MIT ML Device
ctf 84/tcp # Common Trace Facility
ctf 84/udp # Common Trace Facility
mit-ml-dev 85/tcp # MIT ML Device
mit-ml-dev 85/udp # MIT ML Device
mfcobol 86/tcp # Micro Focus Cobol
mfcobol 86/udp # Micro Focus Cobol
link/link 87/tcp # Any Private Terminal Link

Popular attack target. Consider any connection attempts to it as an attack signature.
, link

any private terminal link, ttylink
link 87/udp # Any Private Terminal Link

Popular attack target. Consider any connection attempts to it as an attack signature.
kerberos 88/tcp # Kerberos
kerberos/kerberos 88/udp # Kerberos
, kerberos

kerberos (v5), krb5
su-mit-tg 89/tcp # SU/MIT Telnet Gateway
su-mit-tg 89/udp # SU/MIT Telnet Gateway
dnsix/pointcast 90/tcp # DNSIX Securit Attribute Token Map
, PointCast
dnsix/pointcast 90/udp # DNSIX Securit Attribute Token Map
, PointCast
mit-dov 91/tcp # MIT Dover Spooler
mit-dov 91/udp # MIT Dover Spooler
npp 92/tcp # Network Printing Protocol
npp 92/udp # Network Printing Protocol
dcp 93/tcp # Device Control Protocol
dcp 93/udp # Device Control Protocol
objcall 94/tcp # Tivoli Object Dispatcher
objcall 94/udp # Tivoli Object Dispatcher
supdup 95/tcp # SUPDUP

Somewhat similar to telnet, designed for remote job entry. Is rarely used anymore, but remains a popular intruder target. Consider any connection attempts to it as an attack signature.
supdup/supdup 95/udp # SUPDUP

Somewhat similar to telnet, designed for remote job entry. Is rarely used anymore, but remains a popular intruder target. Consider any connection attempts to it as an attack signature.
, supdup

supdup
dixie 96/tcp # DIXIE Protocol Specification
dixie 96/udp # DIXIE Protocol Specification
swift-rvf 97/tcp # Swift Remote Virtural File Protocol
swift-rvf 97/udp # Swift Remote Virtural File Protocol
tacnews/linux-conf 98/tcp # TAC News
, Linux Console Manager
tacnews/tacnews 98/udp # TAC News
, tacnews

tac news
metagram 99/tcp # Metagram Relay
metagram 99/udp # Metagram Relay
newacct 100/tcp #
/udp #
hostname 101/tcp # NIC Host Name Server
hostname/hostname 101/udp # NIC Host Name Server
, hostname

nic host name server, hostnames nic host name server
iso-tsap/X.500 102/tcp # ISO-TSAP Class 0
, X.500 Directory Service

Used to distribute user names, user info, and public keys.
Security Concerns: Depending on vendor implementation, probes can reveal valuable user info for follow-on attacks. On poorly configured servers, attackers can replace public keys for data capture or DOS purpose.
iso-tsap/iso-tsap 102/udp # ISO-TSAP Class 0
, iso-tsap

tsap iso-tsap class 0, iso-tsap class 0
X.400/gppitnp 103/tcp # X.400 Mail Messaging

Both ports are used with X.400 Email std., but not widely used. No known vul's, but would similar to data-driven attacks common to smtp, plus poss. direct attacks such as with sendmail.

Always static route inbound mail to a protected, hardened email server.
, Genesis Point-to-Point Trans Net
gppitnp/gppitnp 103/udp # Genesis Point-to-Point Trans Net
, gppitnp

genesis point-to-point trans net
acr-nema 104/tcp # ACR-NEMA Digital Imag. & Comm. 300
acr-nema 104/udp # ACR-NEMA Digital Imag. & Comm. 300
csnet-ns/cso 105/tcp # Mailbox Name Nameserver
, CCSO name server protocol
csnet-ns/cso/cso 105/udp # Mailbox Name Nameserver
, CCSO name server protocol
, cso

ccso name server protocol, mailbox name nameserver
3com-tsmux/poppassd 106/tcp # 3COM-TSMUX
, POP poppassd
3com-tsmux 106/udp # 3COM-TSMUX
rtelnet 107/tcp # Remote Telnet Service
rtelnet/rtelnet 107/udp # Remote Telnet Service
, rtelnet

remote telnet service
snagas 108/tcp # SNA Gateway Access Server
snagas 108/udp # SNA Gateway Access Server
pop2 109/tcp # Post Office Protocol - Version 2

Older POP email protocol. Replaced by POP3 (110).
pop2/pop2 109/udp # Post Office Protocol - Version 2

Older POP email protocol. Replaced by POP3 (110).
, pop2

postoffice v.2, post office protocol - version 2
pop3 110/tcp # Post Office Protocol - Version 3

Most widely used client email protocol. Used by mail clients to collect mail off server.
Security Concerns:
- Re-usable cleartext password
- No auditing of connections & attempts, thus subject to grinding
- Some POP3 server versions have had buffer overflow problems

CERT Advisories: CA-97.09
pop3/pop3 110/udp # Post Office Protocol - Version 3

Most widely used client email protocol. Used by mail clients to collect mail off server.
Security Concerns:
- Re-usable cleartext password
- No auditing of connections & attempts, thus subject to grinding
- Some POP3 server versions have had buffer overflow problems

CERT Advisories: CA-97.09
, pop3

postoffice v.3, post office protocol - version 3
sunrpc 111/tcp # Sun's RPC Portmapper

Used to map non-registered rpc service ports on most Unix systems (Irix uses port 1).
Security Concerns:
- Provides rpc port map w/o auth
- Has no filtering or logging
- Attacker rpcinfo probes quickly find your Unix hosts
- Solaris hosts open a second port above 32770. Attackers will scan for and use it, knowing net devices won't watch & log this like 111 traffic.

Enhance your portmapper to get ACL filtering and logging:
- BSD: Install "portmap wrapper"
- System V & Solaris: Install Venema's "rpcbind replacement"

Both require libwrap.a from a compiled TCP Wrapper program.

Shut down portmapper on any hosts not requiring rpc's.

Ensure blocked at all net perimeters
sunrpc/sunrpc 111/udp # Sun's RPC Portmapper

Used to map non-registered rpc service ports on most Unix systems (Irix uses port 1).
Security Concerns:
- Provides rpc port map w/o auth
- Has no filtering or logging
- Attacker rpcinfo probes quickly find your Unix hosts
- Solaris hosts open a second port above 32770. Attackers will scan for and use it, knowing net devices won't watch & log this like 111 traffic.

Enhance your portmapper to get ACL filtering and logging:
- BSD: Install "portmap wrapper"
- System V & Solaris: Install Venema's "rpcbind replacement"

Both require libwrap.a from a compiled TCP Wrapper program.

Shut down portmapper on any hosts not requiring rpc's.

Ensure blocked at all net perimeters
, sunrpc

portmapper, rpcbind, sun remote procedure call
mcidas 112/tcp # McIDAS Data Transmission Protocol
mcidas 112/udp # McIDAS Data Transmission Protocol
ident/auth 113/tcp # Ident

Some versions vulnerable to root-level intrusion! Check!
, Authentication Service

Used by hosts to acquire info on users engaged in connections (eg: it sends socket info to remote hosts, who then passes back user info - generally data from the /etc/passwd file). Can be used to probe remote passwd file for usernames.

Allows you to see what account is running a particular service (eg: ident of a service can tell you if its run by root, etc.).
auth/auth 113/udp # Authentication Service

Used by hosts to acquire info on users engaged in connections (eg: it sends socket info to remote hosts, who then passes back user info - generally data from the /etc/passwd file). Can be used to probe remote passwd file for usernames.

Allows you to see what account is running a particular service (eg: ident of a service can tell you if its run by root, etc.).
, auth

authentication service, ident, tap, authentication service
audionews 114/tcp # Audio News Multicast
audionews 114/udp # Audio News Multicast
sftp 115/tcp # Simple File Transfer Protocol

Not
Secure FTP (ftps), which operates on ports 990 &989.
sftp 115/udp # Simple File Transfer Protocol

Not
Secure FTP (ftps), which operates on ports 990 &989.
ansanotify 116/tcp # ANSA REX Notify
ansanotify 116/udp # ANSA REX Notify
uucp-path 117/tcp # UUCP Path Service
uucp-path 117/udp # UUCP Path Service
sqlserv 118/tcp # SQL Services
sqlserv 118/udp # SQL Services
nntp 119/tcp # Network News Transfer Protocol

Usenet server feeds (uucp can be used for this too).

If used, config nntp server with ACL to control client access.

If config'd to allow non-admins to create new newsgroups, host is vulnerable to command meta-character attacks (eg: ";").

nntp messages are simple ascii -- susceptable to capture, modification, & forgery.

If an nntp server is not hosted at site, ensure it is blocked at firewall. If a server exists and firewall hole is required, proxy server in the DMZ and disable the automated group creation feature. Note that nntp servers can be established in a split-server mode similar to DNS.

For outbound nntp to external nntp servers (eg: Internet Usenet), primary threat is download and execution of malicious code.
nntp/nntp 119/udp # Network News Transfer Protocol

Usenet server feeds (uucp can be used for this too).

If used, config nntp server with ACL to control client access.

If config'd to allow non-admins to create new newsgroups, host is vulnerable to command meta-character attacks (eg: ";").

nntp messages are simple ascii -- susceptable to capture, modification, & forgery.

If an nntp server is not hosted at site, ensure it is blocked at firewall. If a server exists and firewall hole is required, proxy server in the DMZ and disable the automated group creation feature. Note that nntp servers can be established in a split-server mode similar to DNS.

For outbound nntp to external nntp servers (eg: Internet Usenet), primary threat is download and execution of malicious code.
, nntp

network news transfer protocol
cfdptkt 120/tcp # CFDPTKT
cfdptkt 120/udp # CFDPTKT
erpc 121/tcp # Encore Expedited Remote Pro.Call
erpc 121/udp # Encore Expedited Remote Pro.Call
smakynet 122/tcp # SMAKYNET
smakynet 122/udp # SMAKYNET
ntp 123/tcp # Network Time Protocol

Provides time synch between computers and network systems. Assists in database mgmt, auth schemes, and audit/logging accuracy.
Security Concerns: It provides both info and an avenue of attack for intruders. Info gathered can include: system uptime, time since reset, time server pkt, I/O, & memory statistics, and ntp peer list. Further, if a host is susceptible to time altering via ntp, an attacker can:
1) Run replay attacks, using captured OTP and Kerberos tickets before they expire.
2) Stop security-related cron jobs from running or cause them to run at incorrect times.
3) Make system and audit logs unreliable, since time is alterable.
ntp 123/udp # Network Time Protocol

Provides time synch between computers and network systems. Assists in database mgmt, auth schemes, and audit/logging accuracy.
Security Concerns: It provides both info and an avenue of attack for intruders. Info gathered can include: system uptime, time since reset, time server pkt, I/O, & memory statistics, and ntp peer list. Further, if a host is susceptible to time altering via ntp, an attacker can:
1) Run replay attacks, using captured OTP and Kerberos tickets before they expire.
2) Stop security-related cron jobs from running or cause them to run at incorrect times.
3) Make system and audit logs unreliable, since time is alterable.
ansatrader 124/tcp # ANSA REX Trader
ansatrader 124/udp # ANSA REX Trader
locus-map 125/tcp # Locus PC-Interface Net Map Server
locus-map 125/udp # Locus PC-Interface Net Map Server
nxedit/unitary 126/tcp # NXEdit
, Unisys Unitary Login
nxedit/unitary 126/udp # NXEdit
, Unisys Unitary Login
locus-con 127/tcp # Locus PC-Interface Conn Server
locus-con 127/udp # Locus PC-Interface Conn Server
gss-xlicen 128/tcp # GSS X License Verification
gss-xlicen 128/udp # GSS X License Verification
pwdgen 129/tcp # Password Generator Protocol
pwdgen 129/udp # Password Generator Protocol
cisco-fna 130/tcp # cisco FNATIVE
cisco-fna 130/udp # cisco FNATIVE
cisco-tna 131/tcp # cisco TNATIVE
cisco-tna 131/udp # cisco TNATIVE
cisco-sys 132/tcp # cisco SYSMAINT
cisco-sys 132/udp # cisco SYSMAINT
statsrv 133/tcp # Statistics Service
statsrv 133/udp # Statistics Service
ingres-net 134/tcp # INGRES-NET Service
ingres-net 134/udp # INGRES-NET Service
loc-srv/epmap 135/tcp # Location Service

A principle rqmt for NetBIOS services on MS hosts (Win9x/ME/NT/Win2000). TCP 135 is used for authentication, MS's DHCP Mgr, DNS admin, WINS Mgr, Exchange admin, MS RPCs, and most MS client/server apps.
Security Concerns: Key target in auth & DOS attacks. Block at all perimeters; NIC-filter on public-exposed MS hosts., DCE endpoint resolution
Common on Unix hosts for certain x-displays, remote perfmon, etc.
loc-srv/epmap/epmap 135/udp # Location Service

A principle rqmt for NetBIOS services on MS hosts (Win9x/ME/NT/Win2000). TCP 135 is used for authentication, MS's DHCP Mgr, DNS admin, WINS Mgr, Exchange admin, MS RPCs, and most MS client/server apps.
Security Concerns: Key target in auth & DOS attacks. Block at all perimeters; NIC-filter on public-exposed MS hosts., DCE endpoint resolution
Common on Unix hosts for certain x-displays, remote perfmon, etc.
, epmap

dce endpoint resolution, location service
profile 136/tcp # PROFILE Naming System
profile 136/udp # PROFILE Naming System
netbios-ns 137/tcp # netbios-ns

netbios name service
netbios-ns/netbios-ns 137/udp # NETBIOS Name Service

A principle rqmt for NetBIOS services on MS hosts (Win9x/ME/NT/Win2000). UDP 137 is used for browsing, logon sequence, pass-thru validations, printing support, trust support, WinNT Secure Channel, and WINS registration.
Security Concerns: Key target in auth & DOS attacks. Block at all perimeters; NIC-filter on public-exposed MS hosts., netbios-ns

netbios name service
netbios-dgm 138/tcp # NETBIOS Datagram Service

A principle rqmt for NetBIOS services on MS hosts (Win9x/ME/NT/Win2000). UDP 137 is used for browsing, directory replication, logon sequence, netlogon, pass-thru validation, printing support, trusts, and WinNT Secure Channel.
Security Concerns: Key target in auth & DOS attacks. Block at all perimeters; NIC-filter on public-exposed MS hosts.
netbios-dgm 138/udp # NETBIOS Datagram Service

A principle rqmt for NetBIOS services on MS hosts (Win9x/ME/NT/Win2000). UDP 137 is used for browsing, directory replication, logon sequence, netlogon, pass-thru validation, printing support, trusts, and WinNT Secure Channel.
Security Concerns: Key target in auth & DOS attacks. Block at all perimeters; NIC-filter on public-exposed MS hosts.
netbios-ssn/netbios-ssn 139/tcp #
A principle rqmt for NetBIOS services on MS hosts (Win9x/ME/NT/Win2000). TCP 139 is used for directory replication, event viewer, file sharing, logon sequence, pass-thru validation, performance monitoring, printing, registry editor, server manager, trusts, user manager, WinNT Diagnostics, and WinNT Secure Channel.
Security Concerns: Key target in auth & DOS attacks, plus sniffer capture of sensitive data transfers. Block at all perimeters; NIC-filter on public-exposed MS hosts., netbios-ssn

netbios session service
netbios-ssn 139/udp # netbios-ssn

netbios session service
emfis-data 140/tcp # EMFIS Data Service
emfis-data 140/udp # EMFIS Data Service
emfis-cntl 141/tcp # EMFIS Control Service
emfis-cntl 141/udp # EMFIS Control Service
bl-idm 142/tcp # Britton-Lee IDM
bl-idm 142/udp # Britton-Lee IDM
imap2 143/tcp # Internet Message Access Protocol v2

Widely used client email protocol. Used by mail clients to collect mail off server. A superset of POP3, with enhancements.
Security Concerns:
- Re-usable cleartext password
- No auditing of connections/attempts, thus subject to grinding
- Some IMAP server versions have buffer overflow problems

CERT Advisories: CA-98.09, CA-97.09.

IMAP v3 uses port 220.
imap2/imap 143/udp # Internet Message Access Protocol v2

Widely used client email protocol. Used by mail clients to collect mail off server. A superset of POP3, with enhancements.
Security Concerns:
- Re-usable cleartext password
- No auditing of connections/attempts, thus subject to grinding
- Some IMAP server versions have buffer overflow problems

CERT Advisories: CA-98.09, CA-97.09.

IMAP v3 uses port 220.
, imap

internet message access protocol, internet message access proto, interim mail access protocol v2
news/uma 144/tcp # NeWS

Obsolete windowing system; has known vulnerabilities. Should be no reason to be enabled on any host or network perimeter.
, Universal Management Architecture
news/uma 144/udp # NeWS

Obsolete windowing system; has known vulnerabilities. Should be no reason to be enabled on any host or network perimeter.
, Universal Management Architecture
uaac 145/tcp # UAAC Protocol
uaac 145/udp # UAAC Protocol
iso-tp0 146/tcp # ISO-IP0
iso-tp0 146/udp # ISO-IP0
iso-ip 147/tcp # ISO-IP
iso-ip 147/udp # ISO-IP
cronus/jargon 148/tcp # CRONUS-SUPPORT
, Jargon
cronus/jargon 148/udp # CRONUS-SUPPORT
, Jargon
aed-512 149/tcp # AED 512 Emulation Service
aed-512 149/udp # AED 512 Emulation Service
sql-net 150/tcp # SQL-NET
sql-net 150/udp # SQL-NET
hems 151/tcp # HEMS
hems 151/udp # HEMS
bftp 152/tcp # Background File Transfer Program
bftp/bftp 152/udp # Background File Transfer Program
, bftp

background file transfer program
sgmp 153/tcp # SGMP
sgmp 153/udp # SGMP
netsc-prod 154/tcp # NETSC
netsc-prod 154/udp # NETSC
netsc-dev 155/tcp # NETSC
netsc-dev 155/udp # NETSC
sqlsrv 156/tcp # SQL Service
sqlsrv 156/udp # SQL Service
knet-cmp 157/tcp # KNET/VM Command/Message Protocol
knet-cmp 157/udp # KNET/VM Command/Message Protocol
pcmail-srv 158/tcp # PCMail Server
pcmail-srv 158/udp # PCMail Server
nss-routing 159/tcp # NSS-Routing
nss-routing 159/udp # NSS-Routing
sgmp-traps 160/tcp # SGMP-Traps
sgmp-traps 160/udp # SGMP-Traps
/tcp #
snmp 161/udp # SNMP Agent

Used to connect with and configure or request data from a running snmp agent on a network host.
Security Concerns: Many!
- Default community strings: "public"
- Cleartext data exchanges (inluding auth with string)
- Not hard to trick agent into revealing its string & manager IP
- To access agent's data or reconfig it, only need string and source IP of snmp manager (then spoof manager)

Snmp v2 has better security, but is not incorporated into many products.

Snmp v3 is being fielded, thus will slowly take over.
/tcp #
snmptrap 162/udp # SNMPTrap

Used for agent alerts to snmp manager. Data is cleartext and sniffable. Manager is susceptible to forged alert floods.
cmip-man 163/tcp # CMIP/TCP Manager
cmip-man/cmip-man 163/udp # CMIP/TCP Manager
, cmip-man

cmip/tcp manager
cmip-agent 164/tcp # CMIP/TCP Agent
cmip-agent/smip-agent 164/udp # CMIP/TCP Agent
, smip-agent

cmip/tcp agent
xns-courier 165/tcp # Xerox
xns-courier 165/udp # Xerox
s-net 166/tcp # Sirius Systems
s-net 166/udp # Sirius Systems
namp 167/tcp # NAMP
namp 167/udp # NAMP
rsvd 168/tcp # RSVD
rsvd 168/udp # RSVD
send 169/tcp # SEND
send 169/udp # SEND
print-srv 170/tcp # Network PostScript
print-srv 170/udp # Network PostScript
multiplex 171/tcp # Network Innovations Multiplex
multiplex 171/udp # Network Innovations Multiplex
cl/1 172/tcp # Network Innovations CL/1
cl/1 172/udp # Network Innovations CL/1
xyplex-mux 173/tcp # Xyplex
xyplex-mux 173/udp # Xyplex
mailq 174/tcp # MAILQ
mailq/mailq 174/udp # MAILQ
, mailq

mailq
vmnet 175/tcp # VMNET
vmnet 175/udp # VMNET
genrad-mux 176/tcp # GENRAD-MUX
genrad-mux 176/udp # GENRAD-MUX
xdmcp 177/tcp # X Display Manager Control (X11 Logon)

Used by X-Display Manager for logins. Localhost's CDE needs xdmcp open, it accesses the xdmcp daemon via tcp connection call to itself.
Security Concerns: Vulnerable to sniffing, spoofing, and session hijacking. If needed open to support localhost CDE, wrap it!
xdmcp/xdmcp 177/udp # X Display Manager Control (X11 Logon)

Used by X-Display Manager for logins. Localhost's CDE needs xdmcp open, it accesses the xdmcp daemon via tcp connection call to itself.
Security Concerns: Vulnerable to sniffing, spoofing, and session hijacking. If needed open to support localhost CDE, wrap it!
, xdmcp

x display manager control protocol
nextstep 178/tcp # NextStep Window Server

Auth protocol used by the NEXTSTEP Windows Server, of which few remain in existence. It is unlikely to be required on the network and should be blocked.
nextstep/nextstep 178/udp # NextStep Window Server

Auth protocol used by the NEXTSTEP Windows Server, of which few remain in existence. It is unlikely to be required on the network and should be blocked.
, nextstep

nextstep window server, server
bgp 179/tcp # Border Gateway Protocol

One of the several route protocols in use.
bgp/bgp 179/udp # Border Gateway Protocol

One of the several route protocols in use.
, bgp

border gateway protocol
ris 180/tcp # Intergraph
ris 180/udp # Intergraph
unify 181/tcp # Unify
unify 181/udp # Unify
audit 182/tcp # Unisys Audit SITP
audit 182/udp # Unisys Audit SITP
ocbinder 183/tcp # OCBinder
ocbinder 183/udp # OCBinder
ocserver 184/tcp # OCServer
ocserver 184/udp # OCServer
remote-kis 185/tcp # Remote-KIS
remote-kis 185/udp # Remote-KIS
kis 186/tcp # KIS Protocol
kis 186/udp # KIS Protocol
aci 187/tcp # Application Communication Interface
aci 187/udp # Application Communication Interface
mumps 188/tcp # Plus Five's MUMPS
mumps 188/udp # Plus Five's MUMPS
qft 189/tcp # Queued File Transport
qft 189/udp # Queued File Transport
gacp 190/tcp # Gateway Access Control Protocol
gacp 190/udp # Gateway Access Control Protocol
prospero 191/tcp # Prospero Directory Service
prospero/prospero 191/udp # Prospero Directory Service
, prospero

prospero directory service
osu-nms 192/tcp # OSU Network Monitoring System
osu-nms 192/udp # OSU Network Monitoring System
srmp 193/tcp # Spider Remote Monitoring Protocol
srmp 193/udp # Spider Remote Monitoring Protocol
irc 194/tcp # Internet Relay Chat Protocol
irc/irc 194/udp # Internet Relay Chat Protocol
, irc

internet relay chat protocol
dn6-nlm-aud 195/tcp # DNSIX Network Level Module Audit
dn6-nlm-aud 195/udp # DNSIX Network Level Module Audit
dn6-smm-red 196/tcp # DNSIX Session Mgt Module Audit Redir
dn6-smm-red 196/udp # DNSIX Session Mgt Module Audit Redir
dls 197/tcp # Directory Location Service
dls 197/udp # Directory Location Service
dls-mon 198/tcp # Directory Location Service Monitor
dls-mon 198/udp # Directory Location Service Monitor
smux 199/tcp # SMUX (SNMP Unix Multiplexer)
smux/smux 199/udp # SMUX (SNMP Unix Multiplexer)
, smux

smux
src 200/tcp # IBM System Resource Controller
src 200/udp # IBM System Resource Controller
at-rtmp 201/tcp # AppleTalk Routing Maintenance
at-rtmp/at-rtmp 201/udp # AppleTalk Routing Maintenance
, at-rtmp

appletalk routing maintenance
at-nbp 202/tcp # AppleTalk Name Binding
at-nbp 202/udp # AppleTalk Name Binding
at-3 203/tcp # AppleTalk Unused
at-3 203/udp # AppleTalk Unused
at-echo 204/tcp # AppleTalk Echo
at-echo 204/udp # AppleTalk Echo
at-5 205/tcp # AppleTalk Unused
at-5 205/udp # AppleTalk Unused
at-zis 206/tcp # AppleTalk Zone Info
at-zis 206/udp # AppleTalk Zone Info
at-7 207/tcp # AppleTalk Unused
at-7 207/udp # AppleTalk Unused
at-8 208/tcp # AppleTalk Unused
at-8 208/udp # AppleTalk Unused
qmtp 209/tcp # Quick Mail Transfer Protocol
qmtp 209/udp # Quick Mail Transfer Protocol
wais/z39.50 210/tcp # Wide Area Info Service (WAIS)

Old, once popular as a database indexing and search tool. Being replaced by web structures and web-based search engines.
Security Concerns:
- Access control was only source IP based, thus vulnerable to spoofing
- Would allow unchecked files to be retrieved and run, opening dangers to malicious code being downloaded to client
, ANSI Z39.50
z39.50/z39.50 210/udp # ANSI Z39.50
, z39.50

wais, ansi z39.50, ansi z39.50
914c/g 211/tcp # Texas Instruments 914C/G-Terminal
914c/g 211/udp # Texas Instruments 914C/G-Terminal
anet 212/tcp # ATEXSSTR
anet 212/udp # ATEXSSTR
ipx 213/tcp # IPX
ipx 213/udp # IPX
vmpwscs 214/tcp # VM PWSCS
vmpwscs 214/udp # VM PWSCS
softpc 215/tcp # Insignia Solutions
softpc 215/udp # Insignia Solutions
CAIlic 216/tcp # Computer Associates Int'l License Server
CAIlic 216/udp # Computer Associates Int'l License Server
dbase 217/tcp # dBASE Unix
dbase 217/udp # dBASE Unix
mpp 218/tcp # Netix Message Posting Protocol
mpp 218/udp # Netix Message Posting Protocol
uarps 219/tcp # Unisys ARPs
uarps 219/udp # Unisys ARPs
imap3 220/tcp # Interactive Mail Access Protocol v3
imap3/imap3 220/udp # Interactive Mail Access Protocol v3
, imap3

protocol v3, interactive mail access protocol v3
fln-spx 221/tcp # Berkeley rlogind with SPX auth
fln-spx 221/udp # Berkeley rlogind with SPX auth
rsh-spx 222/tcp # Berkeley rshd with SPX auth
rsh-spx 222/udp # Berkeley rshd with SPX auth
cdc 223/tcp # Certificate Distribution Center
cdc 223/udp # Certificate Distribution Center
masqdialer 224/tcp # Masqdialer
masqdialer 224/udp # Masqdialer
#direct/direct 242/tcp # Now Unassigned (Was "Direct")
, direct

direct
#direct/direct 242/udp # Now Unassigned (Was "Direct")
, direct

direct
sur-meas 243/tcp # Survey Measurement
sur-meas 243/udp # Survey Measurement
#dayna/inbusiness 244/tcp # Now Unassigned (Was "Dayna")
, InBusiness
#dayna/inbusiness 244/udp # Now Unassigned (Was "Dayna")
, InBusiness
link 245/tcp # LINK
link 245/udp # LINK
dsp3270 246/tcp # Display Systems Protocol
dsp3270 246/udp # Display Systems Protocol
subntbcst_tftp 247/tcp # SUBNTBCST_TFTP
subntbcst_tftp 247/udp # SUBNTBCST_TFTP
bhfhs 248/tcp # bhfhs
bhfhs 248/udp # bhfhs
fw1-mgmt/rap 256/tcp # Firewall-1 Mgmt Console (CheckPoint)

FW-1's Mgmt Console port. Functions include:
- CA/DH key exchange for FWZ & SKIP VPN crypto schemes
- SecuRemote connection to pull net topology & crypto keys (v40, changed to tcp 254 in v4.1).
- Mgmt Console connection to managed firewalls & policies
- Fail-over FW-1 heartbeat cks (pkt tx every 50ms)

FW-1 Ports: tcp 256, tcp/udp 259, udp 500, tcp 900
, RAP
rap 256/udp # RAP
set 257/tcp # Secure Electronic Transaction
set 257/udp # Secure Electronic Transaction
yak-chat 258/tcp # Yak Winsock Personal Chat
yak-chat 258/udp # Yak Winsock Personal Chat
fw1-auth/esro-gen 259/tcp # Firewall-1 Auth (CheckPoint)

FW-1's user & client auth port. Remote clients telnet to this on perimeter firewall and auth to access internal resources (encryption an option). Services via this telnet include internal FTP, HTTP/HTTPS servers, plus relay to other internal hosts via add'l telnets/rlogins.

FW-1 Ports: tcp 256, tcp/udp 259, udp 500, tcp 900
, Efficient Short Remote Operations
fw1-rpc/esro-gen 259/udp # Firewall-1 RDP (CheckPoint)

FW-1's Reliable Datagram Protocol, used by FW-1's to agree on VPN crypto parameters. RDP provides out-of-band sessions, plus:
- Negotiation of session keys
- Agreement on session crypto algorithm (DES or FWZ-1)
- Decision on if MD5 data integrity will be used
- Ensures dropped UDP pkts are retransmitted

FW-1 Ports: tcp 256, tcp/udp 259, udp 500, tcp 900
, Efficient Short Remote Operations
openport 260/tcp # Openport
openport 260/udp # Openport
nsiiops 261/tcp # IIOP Name Service over TLS/SSL
nsiiops 261/udp # IIOP Name Service over TLS/SSL
arcisdms 262/tcp # Arcisdms
arcisdms 262/udp # Arcisdms
hdap 263/tcp # HDAP
hdap 263/udp # HDAP
bgmp 264/tcp # BGMP
bgmp 264/udp # BGMP
x-bone-ctl 265/tcp # X-Bone CTL
x-bone-ctl 265/udp # X-Bone CTL
http-mgmt 280/tcp # http-mgmt
http-mgmt 280/udp # http-mgmt
personal-link 281/tcp # Personal Link
personal-link 281/udp # Personal Link
cableport-ax 282/tcp # Cable Port A/X
cableport-ax 282/udp # Cable Port A/X
rescap 283/tcp # rescap
rescap 283/udp # rescap
corerjd 284/tcp # corerjd
corerjd 284/udp # corerjd
novastorbakcup 308/tcp # Novastor Backup
novastorbakcup 308/udp # Novastor Backup
entrusttime 309/tcp # EntrustTime
entrusttime 309/udp # EntrustTime
bhmds 310/tcp # bhmds
bhmds 310/udp # bhmds
asip-webadmin 311/tcp # AppleShare IP WebAdmin
asip-webadmin 311/udp # AppleShare IP WebAdmin
vslmp 312/tcp # VSLMP
vslmp 312/udp # VSLMP
magenta-logic 313/tcp # Magenta Logic
magenta-logic 313/udp # Magenta Logic
opalis-robot 314/tcp # Opalis Robot
opalis-robot 314/udp # Opalis Robot
dpsi 315/tcp # DPSI
dpsi 315/udp # DPSI
decauth 316/tcp # decAuth
decauth 316/udp # decAuth
zannet 317/tcp # Zannet
zannet 317/udp # Zannet
pkix-timestamp 318/tcp # PKIX TimeStamp
pkix-timestamp 318/udp # PKIX TimeStamp
ptp-event 319/tcp # PTP Event
ptp-event 319/udp # PTP Event
ptp-general 320/tcp # PTP General
ptp-general 320/udp # PTP General
pip 321/tcp # PIP
pip 321/udp # PIP
rtsps 322/tcp # RTSPS
rtsps 322/udp # RTSPS
texar 333/tcp # Texar Security Port
texar 333/udp # Texar Security Port
pdap 344/tcp # Prospero Data Access Protocol
pdap 344/udp # Prospero Data Access Protocol
pawserv 345/tcp # Perf Analysis Workbench
pawserv 345/udp # Perf Analysis Workbench
zserv 346/tcp # Zebra server
zserv 346/udp # Zebra server
fatserv 347/tcp # Fatmen Server
fatserv 347/udp # Fatmen Server
csi-sgwp 348/tcp # Cabletron Management Protocol
csi-sgwp 348/udp # Cabletron Management Protocol
mftp 349/tcp # mftp
mftp 349/udp # mftp
matip-type-a 350/tcp # MATIP Type A
matip-type-a 350/udp # MATIP Type A
matip-type-b/bhoetty 351/tcp # MATIP Type B
, bhoetty
matip-type-b/bhoetty/matip-type-b 351/udp # MATIP Type B
, bhoetty
, matip-type-b

unassigned but widespread use, matip type b or bhoetty, bhoetty, matip type b
bhoedap4/dtag-ste-sb 352/tcp # bhoedap4
, DTAG
bhoedap4/dtag-ste-sb/dtag-ste-sb 352/udp # bhoedap4
, DTAG
, dtag-ste-sb

dtag, unassigned but widespread use, dtag, or bhoedap4, bhoedap4
ndsauth 353/tcp # NDSAUTH
ndsauth 353/udp # NDSAUTH
bh611 354/tcp # bh611
bh611 354/udp # bh611
date-asn/datex-asn 355/tcp # DATEX-ASN
, datex-asn

datex-asn
date-asn/datex-asn 355/udp # DATEX-ASN
, datex-asn

datex-asn
cloanto-net-1 356/tcp # Cloanto Net 1
cloanto-net-1 356/udp # Cloanto Net 1
bhevent 357/tcp # bhevent
bhevent 357/udp # bhevent
shrinkwrap 358/tcp # Shrinkwrap
shrinkwrap 358/udp # Shrinkwrap
tenebris_nts 359/tcp # Tenebris Network Trace Service
tenebris_nts 359/udp # Tenebris Network Trace Service
scoi2odialog 360/tcp # scoi2odialog
scoi2odialog 360/udp # scoi2odialog
semantix 361/tcp # Semantix
semantix 361/udp # Semantix
srssend 362/tcp # SRS Send
srssend 362/udp # SRS Send
rsvp_tunnel 363/tcp # RSVP Tunnel
rsvp_tunnel 363/udp # RSVP Tunnel
aurora-cmgr 364/tcp # Aurora CMGR
aurora-cmgr 364/udp # Aurora CMGR
dtk 365/tcp # Deception Tool Kit

Deception Tool Kit (DTK), a honeypot kit available at http://all.net/dtk/. On this port DTK advertises itself as a honeypot. Concept is that it will be spotted in scans and attackers will realize the net has defenses and move on. To attackers "not in the know
dtk 365/udp # Deception Tool Kit

Deception Tool Kit (DTK), a honeypot kit available at http://all.net/dtk/. On this port DTK advertises itself as a honeypot. Concept is that it will be spotted in scans and attackers will realize the net has defenses and move on. To attackers "not in the know
odmr 366/tcp # ODMR
odmr 366/udp # ODMR
mortgageware 367/tcp # MortgageWare
mortgageware 367/udp # MortgageWare
qbikgdp 368/tcp # QbikGDP
qbikgdp 368/udp # QbikGDP
rpc2portmap 369/tcp # rpc2portmap
rpc2portmap 369/udp # rpc2portmap
codaauth2 370/tcp # codaauth2
codaauth2/backweb 370/udp # codaauth2
, BackWeb

UDP service similar to PointCast's TCP service.
clearcase 371/tcp # Clearcase
clearcase 371/udp # Clearcase
ulistproc 372/tcp # Unix Listserv
ulistproc 372/udp # Unix Listserv
legent-1 373/tcp # Legent Corporation
legent-1 373/udp # Legent Corporation
legent-2 374/tcp # Legent Corporation
legent-2 374/udp # Legent Corporation
hassle 375/tcp # Hassle
hassle 375/udp # Hassle
nip 376/tcp # Amiga Envoy Network Inquiry Proto
nip 376/udp # Amiga Envoy Network Inquiry Proto
tnETOS 377/tcp # NEC Corporation
tnETOS 377/udp # NEC Corporation
dsETOS 378/tcp # NEC Corporation
dsETOS 378/udp # NEC Corporation
is99c 379/tcp # TIA/EIA/IS-99 modem client
is99c 379/udp # TIA/EIA/IS-99 modem client
is99s 380/tcp # TIA/EIA/IS-99 modem server
is99s 380/udp # TIA/EIA/IS-99 modem server
hp-collector 381/tcp # HP Performance Data Collector
hp-collector 381/udp # HP Performance Data Collector
hp-managed-node 382/tcp # HP Performance Data Managed Node

Host port for centralized performance monitor access.
hp-managed-node 382/udp # HP Performance Data Managed Node

Host port for centralized performance monitor access.
hp-alarm-mgr 383/tcp # HP Performance Data Alarm Manager
hp-alarm-mgr 383/udp # HP Performance Data Alarm Manager
arns 384/tcp # A Remote Network Server System
arns 384/udp # A Remote Network Server System
ibm-app 385/tcp # IBM Application
ibm-app 385/udp # IBM Application
asa 386/tcp # ASA Message Router Object Def.
asa 386/udp # ASA Message Router Object Def.
aurp 387/tcp # Appletalk Update-Based Routing Pro.
aurp 387/udp # Appletalk Update-Based Routing Pro.
unidata-ldm 388/tcp # Unidata LDM Version 4
unidata-ldm 388/udp # Unidata LDM Version 4
ldap 389/tcp # Lightweight Directory Access Protocol

LDAP server's port, an adaptation of x.500 dir std. Through it, LDAP clients access central dir to retrieve, add, and modify info. Examples:
- Database for PKI systems
- Address book for mail & personnel progs
- Internet Directory Service that tracks users of collaborative apps (chat, video, audio, etc.). Would track who is on-line, their IP, and data about user.
Used by Win2000 Active Directory
SSL version at TCP 636
Security Concerns: Valuable source of user info used in attacks; excellent target for DOS attack.
ldap 389/udp # Lightweight Directory Access Protocol

LDAP server's port, an adaptation of x.500 dir std. Through it, LDAP clients access central dir to retrieve, add, and modify info. Examples:
- Database for PKI systems
- Address book for mail & personnel progs
- Internet Directory Service that tracks users of collaborative apps (chat, video, audio, etc.). Would track who is on-line, their IP, and data about user.
Used by Win2000 Active Directory
SSL version at TCP 636
Security Concerns: Valuable source of user info used in attacks; excellent target for DOS attack.
uis 390/tcp # UIS
uis 390/udp # UIS
synotics-relay 391/tcp # SynOptics SNMP Relay Port
synotics-relay 391/udp # SynOptics SNMP Relay Port
synotics-broker 392/tcp # SynOptics Port Broker Port
synotics-broker 392/udp # SynOptics Port Broker Port
dis 393/tcp # Data Interpretation System
dis 393/udp # Data Interpretation System
embl-ndt 394/tcp # EMBL Nucleic Data Transfer
embl-ndt 394/udp # EMBL Nucleic Data Transfer
netcp 395/tcp # NETscout Control Protocol
netcp 395/udp # NETscout Control Protocol
netware-ip 396/tcp # Novell Netware over IP
netware-ip 396/udp # Novell Netware over IP
mptn 397/tcp # Multi Protocol Trans. Net.
mptn 397/udp # Multi Protocol Trans. Net.
kryptolan 398/tcp # Kryptolan
kryptolan 398/udp # Kryptolan
iso-tsap-c2 399/tcp # ISO Transport Class-2 Non-Ctrl over TCP
iso-tsap-c2 399/udp # ISO Transport Class-2 Non-Ctrl over TCP
work-sol 400/tcp # Workstation Solutions
work-sol 400/udp # Workstation Solutions
ups 401/tcp # Uninterruptible Power Supply
ups 401/udp # Uninterruptible Power Supply
genie 402/tcp # Genie Protocol
genie 402/udp # Genie Protocol
decap 403/tcp # decap
decap 403/udp # decap
nced 404/tcp # nced
nced 404/udp # nced
ncld 405/tcp # ncld
ncld 405/udp # ncld
imsp 406/tcp # Interactive Mail Support Protocol
imsp 406/udp # Interactive Mail Support Protocol
timbuktu 407/tcp # Timbuktu
timbuktu 407/udp # Timbuktu
prm-sm 408/tcp # Prospero Resource Manager - Sys. Mgr
prm-sm 408/udp # Prospero Resource Manager - Sys. Mgr
prm-nm 409/tcp # Prospero Resource Manager - Node Mgr
prm-nm 409/udp # Prospero Resource Manager - Node Mgr
decladebug 410/tcp # DECLadebug Remote Debug Protocol
decladebug 410/udp # DECLadebug Remote Debug Protocol
rmt 411/tcp # Remote MT Protocol
rmt 411/udp # Remote MT Protocol
synoptics-trap 412/tcp # Trap Convention Port
synoptics-trap 412/udp # Trap Convention Port
smsp 413/tcp # SMSP
smsp 413/udp # SMSP
infoseek 414/tcp # InfoSeek
infoseek 414/udp # InfoSeek
bnet 415/tcp # BNet
bnet 415/udp # BNet
silverplatter 416/tcp # SilverPlatter
silverplatter 416/udp # SilverPlatter
onmux 417/tcp # Onmux
onmux 417/udp # Onmux
hyper-g 418/tcp # Hyper-G
hyper-g 418/udp # Hyper-G
ariel1 419/tcp # Ariel
ariel1 419/udp # Ariel
smpte 420/tcp # SMPTE
smpte 420/udp # SMPTE
wrapper-backdoor/ariel2 421/tcp # Intruder Backdoor vis TCP Wrappers

Primary web site for TCP Wrapper distro was compromised in Jan 99 and wrapper software was trojanized. Was caught almost immediately, but some downloads occurred. Installing it open a backdoor on tcp port 421. Hosts with open tcp port 421 and wrappers should be investigated.
, Ariel
ariel2 421/udp # Ariel
ariel3 422/tcp # Ariel
ariel3 422/udp # Ariel
opc-job-start 423/tcp # IBM Operations Planning and Control Start
opc-job-start 423/udp # IBM Operations Planning and Control Start
opc-job-track 424/tcp # IBM Operations Planning and Control Track
opc-job-track 424/udp # IBM Operations Planning and Control Track
icad-el 425/tcp # ICAD
icad-el 425/udp # ICAD
smartsdp 426/tcp # smartsdp
smartsdp 426/udp # smartsdp
svrloc 427/tcp # Server Location

Open on Win95 hosts (only open default port). Useful for finding Win95 hosts. No know "direct attack" vulnerabilities.
svrloc 427/udp # Server Location

Open on Win95 hosts (only open default port). Useful for finding Win95 hosts. No know "direct attack" vulnerabilities.
ocs_cmu 428/tcp # OCS_CMU
ocs_cmu 428/udp # OCS_CMU
ocs_amu 429/tcp # OCS_AMU
ocs_amu 429/udp # OCS_AMU
utmpsd 430/tcp # UTMPSD
utmpsd 430/udp # UTMPSD
utmpcd 431/tcp # UTMPCD
utmpcd 431/udp # UTMPCD
iasd 432/tcp # IASD
iasd 432/udp # IASD
nnsp 433/tcp # NNSP
nnsp/nnsp 433/udp # NNSP
, nnsp

nnsp
mobileip-agent 434/tcp # MobileIP-Agent
mobileip-agent 434/udp # MobileIP-Agent
mobilip-mn 435/tcp # MobilIP-MN
mobilip-mn 435/udp # MobilIP-MN
dna-cml 436/tcp # DNA-CML
dna-cml 436/udp # DNA-CML
comscm 437/tcp # comscm
comscm 437/udp # comscm
dsfgw 438/tcp # dsfgw
dsfgw 438/udp # dsfgw
dasp 439/tcp # dasp
dasp/dasp 439/udp # dasp
, dasp

dasp tommy@inlab.m.eunet.de
sgcp 440/tcp # sgcp
sgcp 440/udp # sgcp
decvms-sysmgt 441/tcp # decvms-sysmgt
decvms-sysmgt 441/udp # decvms-sysmgt
cvc_hostd 442/tcp # cvc_hostd
cvc_hostd 442/udp # cvc_hostd
https 443/tcp # HTTP over TLS/SSL
https 443/udp # https

http protocol over tls/ssl
snpp 444/tcp # Simple Network Paging Protocol
snpp 444/udp # Simple Network Paging Protocol
microsoft-ds 445/tcp # Microsoft Direct Host
microsoft-ds 445/udp # Microsoft Direct Host
ddm-rdb 446/tcp # DDM-RDB
ddm-rdb 446/udp # DDM-RDB
ddm-dfm 447/tcp # DDM-RFM
ddm-dfm 447/udp # DDM-RFM
ddm-ssl 448/tcp # DDM-SSL

Also known as "ddm-byte"
ddm-ssl 448/udp # DDM-SSL

Also known as "ddm-byte"
as-servermap 449/tcp # AS Server Mapper
as-servermap 449/udp # AS Server Mapper
tserver 450/tcp # TServer
tserver 450/udp # TServer
sfs-smp-net 451/tcp # Cray Network Semaphore server
sfs-smp-net 451/udp # Cray Network Semaphore server
sfs-config 452/tcp # Cray SFS config server
sfs-config 452/udp # Cray SFS config server
creativeserver 453/tcp # CreativeServer
creativeserver 453/udp # CreativeServer
contentserver 454/tcp # ContentServer
contentserver 454/udp # ContentServer
creativepartnr 455/tcp # CreativePartnr
creativepartnr 455/udp # CreativePartnr
macon-tcp 456/tcp # macon-tcp
macon-udp 456/udp # macon-udp
scohelp 457/tcp # scohelp
scohelp 457/udp # scohelp
appleqtc 458/tcp # apple quick time
appleqtc 458/udp # apple quick time
ampr-rcmd 459/tcp # ampr-rcmd
ampr-rcmd 459/udp # ampr-rcmd
skronk 460/tcp # skronk
skronk 460/udp # skronk
datasurfsrv 461/tcp # DataRampSrv
datasurfsrv 461/udp # DataRampSrv
datasurfsrvsec 462/tcp # DataRampSrvSec
datasurfsrvsec 462/udp # DataRampSrvSec
alpes 463/tcp # alpes
alpes 463/udp # alpes
kpasswd 464/tcp # kpasswd
kpasswd 464/udp # kpasswd
smtps 465/tcp # SMTP over TLS/SSL (was ssmtp)
smtps 465/udp # SMTP over TLS/SSL (was ssmtp)
digital-vrc 466/tcp # digital-vrc
digital-vrc 466/udp # digital-vrc
mylex-mapd 467/tcp # mylex-mapd
mylex-mapd 467/udp # mylex-mapd
photuris 468/tcp # proturis
photuris/photuris 468/udp # proturis
, photuris

proturis
rcp 469/tcp # Radio Control Protocol
rcp 469/udp # Radio Control Protocol
scx-proxy 470/tcp # scx-proxy
scx-proxy 470/udp # scx-proxy
mondex 471/tcp # Mondex
mondex 471/udp # Mondex
ljk-login 472/tcp # ljk-login
ljk-login 472/udp # ljk-login
hybrid-pop 473/tcp # hybrid-pop
hybrid-pop 473/udp # hybrid-pop
tn-tl-w1 474/tcp # tn-tl-w1
tn-tl-w1/tn-tl-w2 474/udp # tn-tl-w1
, tn-tl-w2

tn-tl-w2
tcpnethaspsrv 475/tcp # tcpnethaspsrv
tcpnethaspsrv 475/udp # tcpnethaspsrv
tn-tl-fd1 476/tcp # tn-tl-fd1
tn-tl-fd1 476/udp # tn-tl-fd1
ss7ns 477/tcp # ss7ns
ss7ns 477/udp # ss7ns
spsc 478/tcp # spsc
spsc 478/udp # spsc
iafserver 479/tcp # iafserver
iafserver 479/udp # iafserver
iafdbase 480/tcp # iafdbase
iafdbase 480/udp # iafdbase
ph 481/tcp # Ph service
ph 481/udp # Ph service
bgs-nsi 482/tcp # bgs-nsi
bgs-nsi 482/udp # bgs-nsi
ulpnet 483/tcp # ulpnet
ulpnet 483/udp # ulpnet
integra-sme 484/tcp # Integra Software Mgmt Environment
integra-sme 484/udp # Integra Software Mgmt Environment
powerburst 485/tcp # Air Soft Power Burst
powerburst 485/udp # Air Soft Power Burst
avian 486/tcp # avian
avian 486/udp # avian
saft 487/tcp # saft
saft 487/udp # saft
gss-http 488/tcp # gss-http
gss-http 488/udp # gss-http
nest-protocol 489/tcp # nest-protocol
nest-protocol 489/udp # nest-protocol
micom-pfs 490/tcp # micom-pfs
micom-pfs 490/udp # micom-pfs
go-login 491/tcp # go-login
go-login 491/udp # go-login
ticf-1 492/tcp # Transport Independent Convergence, FNA
ticf-1 492/udp # Transport Independent Convergence, FNA
ticf-2 493/tcp # Transport Independent Convergence, FNA
ticf-2 493/udp # Transport Independent Convergence, FNA
pov-ray 494/tcp # POV-Ray
pov-ray 494/udp # POV-Ray
intecourier 495/tcp # intecourier
intecourier 495/udp # intecourier
pim-rp-disc 496/tcp # PIM-RP-DISC
pim-rp-disc 496/udp # PIM-RP-DISC
dantz 497/tcp # dantz
dantz 497/udp # dantz
siam 498/tcp # siam
siam 498/udp # siam
iso-ill 499/tcp # ISO ILL Protocol
iso-ill 499/udp # ISO ILL Protocol
/tcp #
isakmp 500/udp # isakmp

Used in FW-1 VPN for key exchange & synch when using ISAKMP or IPSEC crypto between FW-1's.

FW-1 Ports: tcp 256, tcp/udp 259, udp 500, tcp 900
stmf 501/tcp # STMF
stmf 501/udp # STMF
asa-appl-proto 502/tcp # ASA Application Protocol
asa-appl-proto 502/udp # ASA Application Protocol
intrinsa 503/tcp # Intrinsa
intrinsa 503/udp # Intrinsa
citadel 504/tcp # citadel
citadel 504/udp # citadel
mailbox-lm 505/tcp # Mailbox License Manager
mailbox-lm 505/udp # Mailbox License Manager
ohimsrv 506/tcp # ohimsrv
ohimsrv 506/udp # ohimsrv
crs 507/tcp # crs
crs 507/udp # crs
xvttp 508/tcp # xvttp
xvttp 508/udp # xvttp
snare 509/tcp # snare
snare 509/udp # snare
fcp 510/tcp # FirstClass Protocol
fcp 510/udp # FirstClass Protocol
mynet/passgo 511/tcp # mynet-as
, PassGo
mynet/passgo 511/udp # mynet-as
, PassGo
nt-printer-client/exec 512/tcp # NT v4 Printer Client Source Ports

NT v4 client uses random source port in 512-1023 range. Older NT v3x was limited to 721-731 port range, which restricted to ten the number of consecutive print jobs a client could initiate.
, Remote Execution

Allows remote execution of commands without logon.
Security Concerns:
- Susceptable to trust attacks
- Usernames & passwords are cleartext and reusable
- Returns "Login incorrect" on incorrect usernames; allows username guessing.
- Returns "Password incorrect" on incorrect password for valid username; allows scripted dictionary grinding.

As with all BSD "r" commands, client uses a random source port below 1023; causes rule headaches.
biff/comsat 512/udp # Mail System Notify

Email arrival notifier. Susceptable to notification flooding, where remote attacker causes DOS of user screen by flooding it with mail notices.
512 udp ComSat
ComSat
, comsat

biff the dog, used by mail system to notify users, comsat
login 513/tcp # Remote Login

Remote term service that operates via telnet process, but with automatic auth performed based on trust. If no trust, will prompt for username/password logon similar to telnet.
Security Concerns:
- Susceptable to trust attacks
- Usernames & passwords are cleartext and reusable

As with all BSD "r" commands, client uses a random source port below 1023; causes rule headaches.

CERT Advisories: CA-97.06
who 513/udp # Remote Logon Database Lookup

Gathers active user info from local and net hosts.
Security Concerns:
- Excellent source of user info
- Guides user-session attacks
- Vul to being fed malicious data and crashing
- Vul to buffer overflow allowing remote execution of arbitrary commands with root privilege
shell 514/tcp # Remote Shell

Provides shell connections from remote hosts.
Security Concerns:
- Susceptable to trust attacks
- Usernames & passwords are cleartext and reusable
- Returns "Login incorrect" on incorrect usernames; allows username guessing.
- Returns "Password incorrect" on incorrect password for valid username; allows scripted dictionary grinding.

As with all BSD "r" commands, client uses a random source port below 1023; causes rule headaches.
syslog 514/udp # Remote Syslog Writes

Accepts syslog entries from remote hosts. Localhost syslog daemon processes and logs them, thus allowing for centralization of system logs onto a hardened loghost.
Security Concerns:
- Vul to malicious log flooding
- Vul to injection of false, misleading entries to cover other activity

Newer Linux & Solaris v2.6+ will not accept syslog entries by default. Requires syslog.conf edit to enable.

CERT Advisories: CA-95.13
printer 515/tcp # lp & lpr spooler

Service port accepting remote print jobs.
Security Concerns:
- Susceptable to trust attacks
- Usernames & passwords are cleartext and reusable
- Vul to assortment of printer service attacks (version dependent)

As with all BSD "r" commands, client uses a random source port below 1023; causes rule headaches.
printer/printer 515/udp # lp & lpr spooler

Service port accepting remote print jobs.
Security Concerns:
- Susceptable to trust attacks
- Usernames & passwords are cleartext and reusable
- Vul to assortment of printer service attacks (version dependent)

As with all BSD "r" commands, client uses a random source port below 1023; causes rule headaches.
, printer

spooler, spooler (lpd)
videotex 516/tcp # videotex
videotex 516/udp # videotex
/tcp #
talk 517/udp # Like tenex link, but remote

Older talk program. Uses udp 517 to establish session and negotiate random-high tcp port for the data tx.
Security Concerns:
- Usernames & passwords are cleartext and reusable
- Vul to buffer overflow

CERT Advisories: CA-97.04
ntalk 518/tcp # ntalk

(talkd)
ntalk/ntalk 518/udp # New Talk

Similar to talk, but more advanced in memory use and ability to work between CPU types. Like talk, it uses udp port to establish session and negotiate a random-high tcp port for the data tx.
Security Concerns:
- Usernames & passwords are cleartext and reusable
- Vul to buffer overflow
, ntalk

(talkd)
utime 519/tcp # unixtime
utime 519/udp # unixtime
efs 520/tcp # Extended file name server
router 520/udp # Route Info Protocol (RIP)

Used between routing hosts to advertise route table.
Security Concerns:
- Vul to malicious route updates, which provides several attack possibilities:
-- DOS network w/ bad updates
-- Route traffic to you for exploit
-- Route your attack pkts around network defenses
ripng 521/tcp # ripng
ripng/ripng 521/udp # ripng
, ripng

ripng
ulp 522/tcp # User Locator Service

Used by collaborative apps to track/locate active users (eg: NetMeeting).
Security Concerns: Provides valuable user info for user-level attacks. Do not allow across untrusted nets without encryption.
ulp 522/udp # User Locator Service

Used by collaborative apps to track/locate active users (eg: NetMeeting).
Security Concerns: Provides valuable user info for user-level attacks. Do not allow across untrusted nets without encryption.
ibm-db2 523/tcp # IBM-DB2
ibm-db2 523/udp # IBM-DB2
ncp 524/tcp # NCP
ncp 524/udp # NCP
timed 525/tcp # Time Server
timed 525/udp # Time Server
tempo 526/tcp # NewDate
tempo 526/udp # NewDate
stx 527/tcp # Stock IXChange
stx 527/udp # Stock IXChange
custix 528/tcp # Customer IXChange
custix 528/udp # Customer IXChange
irc-serv 529/tcp # IRC-SERV
irc-serv 529/udp # IRC-SERV
courier 530/tcp # rpc
courier/courier 530/udp # rpc
, courier

rpc
conference 531/tcp # Chat
conference 531/udp # Chat
netnews 532/tcp # ReadNews
netnews 532/udp # ReadNews
netwall 533/tcp # For emergency broadcasts
netwall/netwall 533/udp # For emergency broadcasts
, netwall

-for emergency broadcasts, for emergency broadcasts
mm-admin 534/tcp # MegaMedia Admin
mm-admin 534/udp # MegaMedia Admin
iiop 535/tcp # iiop
iiop 535/udp # iiop
opalis-rdv 536/tcp # opalis-rdv
opalis-rdv 536/udp # opalis-rdv
nmsp 537/tcp # Networked Media Streaming Protocol
nmsp 537/udp # Networked Media Streaming Protocol
gdomap 538/tcp # gdomap
gdomap 538/udp # gdomap
apertus-ldp 539/tcp # Apertus Tech Load Determination
apertus-ldp 539/udp # Apertus Tech Load Determination
uucp 540/tcp # Unix to Unix Copy

Original Unix copy service, becoming obsolete. Is still used to some remote sites where periodic connection & download of spooled data files is the normal comm.
Security Concern: Usernames & passwords are cleartext and reusable.
uucp/uucp 540/udp # Unix to Unix Copy

Original Unix copy service, becoming obsolete. Is still used to some remote sites where periodic connection & download of spooled data files is the normal comm.
Security Concern: Usernames & passwords are cleartext and reusable.
, uucp

uucpd
uucp-rlogin 541/tcp # uucp-rlogin
uucp-rlogin/uucp-rlogin 541/udp # uucp-rlogin
, uucp-rlogin

uucp-rlogin
commerce 542/tcp # commerce
commerce 542/udp # commerce
klogin 543/tcp # klogin
klogin/klogin 543/udp # klogin
, klogin

kerberos (v4/v5)
kshell 544/tcp # krcmd
kshell/kshell 544/udp # krcmd
, kshell

krcmd, kerberos (v4/v5), krcmd kerberos (v4/v5)
appleqtcsrvr 545/tcp # appleqtcsrvr
appleqtcsrvr/appleqtcsrvr 545/udp # appleqtcsrvr
, appleqtcsrvr

appleqtcsrvr
dhcpv6-client 546/tcp # DHCPv6 Client
dhcpv6-client 546/udp # DHCPv6 Client
dhcpv6-server 547/tcp # DHCPv6 Server
dhcpv6-server 547/udp # DHCPv6 Server
afpovertcp 548/tcp # AFP over TCP
afpovertcp/afpovertcp 548/udp # AFP over TCP
, afpovertcp

appleshareip protocol, afp over tcp, afp over udp
idfp 549/tcp # IDFP
idfp 549/udp # IDFP
new-rwho 550/tcp # new-who
new-rwho/new-rwho 550/udp # new-who
, new-rwho

new-who, experimental
cybercash 551/tcp # cybercash
cybercash 551/udp # cybercash
deviceshare 552/tcp # deviceshare
deviceshare 552/udp # deviceshare
pirp 553/tcp # pirp
pirp 553/udp # pirp
rtsp 554/tcp # Real Time Stream Control Protocol
rtsp 554/udp # Real Time Stream Control Protocol
dsf 555/tcp # dsf
dsf 555/udp # dsf
remotefs 556/tcp # rfs server
remotefs 556/udp # rfs server
openvms-sysipc 557/tcp # openvms-sysipc
openvms-sysipc 557/udp # openvms-sysipc
sdnskmp 558/tcp # SDNSKMP
sdnskmp 558/udp # SDNSKMP
teedtap 559/tcp # TEEDTAP
teedtap 559/udp # TEEDTAP
rmonitor 560/tcp # rmonitord
rmonitor/rmonitor 560/udp # rmonitord
, rmonitor

experimental, rmonitord
monitor 561/tcp # monitor
monitor/monitor 561/udp # monitor
, monitor

experimental
chshell 562/tcp # chcmd
chshell 562/udp # chcmd
nntps 563/tcp # NNTP over TLS/SSL

Was formerly snntp, snews
nntps 563/udp # NNTP over TLS/SSL

Was formerly snntp, snews
9pfs 564/tcp # Plan 9 file service
9pfs 564/udp # Plan 9 file service
whoami 565/tcp # whoami
whoami 565/udp # whoami
streettalk 566/tcp # streettalk
streettalk 566/udp # streettalk
banyan-rpc 567/tcp # banyan-rpc
banyan-rpc 567/udp # banyan-rpc
ms-shuttle 568/tcp # microsoft shuttle
ms-shuttle 568/udp # microsoft shuttle
ms-rome 569/tcp # microsoft rome
ms-rome 569/udp # microsoft rome
meter 570/tcp # demon
meter 570/udp # demon
meter 571/tcp # udemon
meter 571/udp # udemon
sonar 572/tcp # sonar
sonar 572/udp # sonar
banyan-vip 573/tcp # banyan-vip
banyan-vip 573/udp # banyan-vip
ftp-agent 574/tcp # FTP Software Agent System
ftp-agent 574/udp # FTP Software Agent System
vemmi 575/tcp # VEMMI
vemmi 575/udp # VEMMI
ipcd 576/tcp # ipcd
ipcd 576/udp # ipcd
vnas 577/tcp # vnas
vnas 577/udp # vnas
ipdd 578/tcp # ipdd
ipdd 578/udp # ipdd
decbsrv 579/tcp # decbsrv
decbsrv 579/udp # decbsrv
sntp-heartbeat 580/tcp # SNTP HEARTBEAT
sntp-heartbeat 580/udp # SNTP HEARTBEAT
bdp 581/tcp # Bundle Discovery Protocol
bdp 581/udp # Bundle Discovery Protocol
scc-security 582/tcp # SCC Security
scc-security 582/udp # SCC Security
philips-vc 583/tcp # Philips Video-Conferencing
philips-vc 583/udp # Philips Video-Conferencing
keyserver 584/tcp # Key Server
keyserver 584/udp # Key Server
imap4-ssl 585/tcp # IMAP4+SSL
imap4-ssl/imap4-ssl 585/udp # IMAP4+SSL
, imap4-ssl

use 993 instead), imap4+ssl (use 993 instead)
password-chg 586/tcp # Password Change
password-chg 586/udp # Password Change
submission 587/tcp # Submission
submission 587/udp # Submission
cal 588/tcp # CAL
cal 588/udp # CAL
eyelink 589/tcp # EyeLink
eyelink 589/udp # EyeLink
tns-cml 590/tcp # TNS CML
tns-cml 590/udp # TNS CML
http-alt 591/tcp # FileMaker, Inc. - HTTP Alternative
http-alt 591/udp # FileMaker, Inc. - HTTP Alternative
eudora-set 592/tcp # Eudora Set
eudora-set 592/udp # Eudora Set
http-rpc-epmap 593/tcp # HTTP RPC Ep Map

Enabled on NT servers running SNA RPC.
http-rpc-epmap 593/udp # HTTP RPC Ep Map

Enabled on NT servers running SNA RPC.
tpip 594/tcp # TPIP
tpip 594/udp # TPIP
cab-protocol 595/tcp # CAB Protocol
cab-protocol 595/udp # CAB Protocol
smsd 596/tcp # SMSD
smsd 596/udp # SMSD
ptcnameservice 597/tcp # PTC Name Service
ptcnameservice 597/udp # PTC Name Service
sco-websrvmg3/sco-websrvrmg3 598/tcp # SCO Web Server Manager 3
, sco-websrvrmg3

sco web server manager 3
sco-websrvmg3/sco-websrvrmg3 598/udp # SCO Web Server Manager 3
, sco-websrvrmg3

sco web server manager 3
acp 599/tcp # Aeolon Core Protocol
acp 599/udp # Aeolon Core Protocol
ipcserver 600/tcp # Sun IPC server
ipcserver/ipcserver 600/udp # Sun IPC server
, ipcserver

sun ipc server
urm 606/tcp # Cray Unified Resource Manager
urm 606/udp # Cray Unified Resource Manager
nqs 607/tcp # nqs
nqs 607/udp # nqs
sift-uft 608/tcp # Sender-Initiated/Unsolicited File Tx
sift-uft 608/udp # Sender-Initiated/Unsolicited File Tx
npmp-trap 609/tcp # npmp-trap
npmp-trap 609/udp # npmp-trap
npmp-local 610/tcp # npmp-local
npmp-local 610/udp # npmp-local
npmp-gui 611/tcp # npmp-gui
npmp-gui 611/udp # npmp-gui
hmmp-ind 612/tcp # HMMP Indication
hmmp-ind 612/udp # HMMP Indication
hmmp-op 613/tcp # HMMP Operation
hmmp-op 613/udp # HMMP Operation
sshell 614/tcp # SSLshell
sshell 614/udp # SSLshell
sco-inetmgr 615/tcp # SCO Internet Configuration Manager
sco-inetmgr 615/udp # SCO Internet Configuration Manager
sco-sysmgr 616/tcp # SCO System Administration Server
sco-sysmgr 616/udp # SCO System Administration Server
sco-dtmgr 617/tcp # SCO Desktop Administration Server
sco-dtmgr 617/udp # SCO Desktop Administration Server
dei-icda 618/tcp # DEI-ICDA
dei-icda 618/udp # DEI-ICDA
digital-evm 619/tcp # Digital EVM
digital-evm 619/udp # Digital EVM
sco-websrvrmgr 620/tcp # SCO WebServer Manager
sco-websrvrmgr 620/udp # SCO WebServer Manager
escp-ip 621/tcp # ESCP
escp-ip 621/udp # ESCP
collaborator 622/tcp # Collaborator
collaborator 622/udp # Collaborator
aux_bus_shunt 623/tcp # Aux Bus Shunt
aux_bus_shunt 623/udp # Aux Bus Shunt
cryptoadmin 624/tcp # Crypto Admin
cryptoadmin 624/udp # Crypto Admin
dec_dlm 625/tcp # DEC DLM
dec_dlm 625/udp # DEC DLM
asia 626/tcp # ASIA
asia 626/udp # ASIA
passgo-tivoli 627/tcp # PassGo Tivoli
passgo-tivoli 627/udp # PassGo Tivoli
qmqp 628/tcp # QMQP
qmqp/qmqp 628/udp # QMQP
, qmqp

qmqp
3com-amp3 629/tcp # 3Com AMP3
3com-amp3 629/udp # 3Com AMP3
rda 630/tcp # RDA
rda 630/udp # RDA
ipp 631/tcp # Internet Printing Protocol
ipp 631/udp # Internet Printing Protocol
bmpp 632/tcp # bmpp
bmpp 632/udp # bmpp
servstat 633/tcp # Service Status update (Sterling Software)
servstat 633/udp # Service Status update (Sterling Software)
ginad 634/tcp # ginad
ginad 634/udp # ginad
linux-mountd/rlzdbase 635/tcp # Linux mountd port

Linux mountd rpc port, supports NFS-type services.
Security Concerns: Popular attack target on Linux hosts, sue to buffer overflow vul on some Linux versions.
, RLZ DBase
linux-mountd/rlzdbase/rlzdbase 635/udp # Linux mountd port

Linux mountd rpc port, supports NFS-type services.
Security Concerns: Popular attack target on Linux hosts, sue to buffer overflow vul on some Linux versions.
, RLZ DBase
, rlzdbase

nfs mount service, rlz dbase
ldaps 636/tcp # LDAP using TLS/SSL (was sldap)
ldaps 636/udp # LDAP using TLS/SSL (was sldap)
lanserver 637/tcp # lanserver
lanserver 637/udp # lanserver
mcns-sec 638/tcp # mcns-sec
mcns-sec 638/udp # mcns-sec
msdp 639/tcp # MSDP
msdp 639/udp # MSDP
entrust-sps 640/tcp # Entrust-SPS
entrust-sps/entrust-sps 640/udp # Entrust-SPS
, entrust-sps

entrust-sps, pc-nfs dos authentication
repcmd 641/tcp # RepCmd
repcmd 641/udp # RepCmd
esro-emsdp 642/tcp # ESRO-EMSDP v1.3
esro-emsdp 642/udp # ESRO-EMSDP v1.3
sanity 643/tcp # SANity
sanity 643/udp # SANity
dwr 644/tcp # dwr
dwr 644/udp # dwr
pssc 645/tcp # PCCS
pssc 645/udp # PCCS
ldp 646/tcp #
ldp 646/udp #
rrp 648/tcp # Registry Registrar Protocol (RRP)
rrp 648/udp # Registry Registrar Protocol (RRP)
aminet 649/tcp # Aminet
aminet 649/udp # Aminet
obex 650/tcp # OBEX
obex/obex 650/udp # OBEX
, obex

bw-nfs dos authentication, obex
ieee-mms 651/tcp # IEEE MMS
ieee-mms 651/udp # IEEE MMS
udir-dtcp/udlr-dtcp 652/tcp # UDLR_DTCP
, udlr-dtcp

udlr_dtcp
udir-dtcp/udlr-dtcp 652/udp # UDLR_DTCP
, udlr-dtcp

udlr_dtcp
repscmd 653/tcp # RepCmd
repscmd 653/udp # RepCmd
aodv 654/tcp # AODV
aodv 654/udp # AODV
tinc 655/tcp # TINC
tinc 655/udp # TINC
spmp 656/tcp # SPMP
spmp 656/udp # SPMP
rmc 657/tcp # RMC
rmc 657/udp # RMC
tenfold 658/tcp # TenFold
tenfold 658/udp # TenFold
url-rendezvous 659/tcp # URL Rendezvous
url-rendezvous 659/udp # URL Rendezvous
mac-srvr-admin 660/tcp # MacOS
mac-srvr-admin 660/udp # MacOS
hap 661/tcp # HAP
hap 661/udp # HAP
pftp 662/tcp # PFTP
pftp 662/udp # PFTP
purenoise 663/tcp # PureNoise
purenoise 663/udp # PureNoise
secure-aux-bus 664/tcp # Secure Aux Bus
secure-aux-bus 664/udp # Secure Aux Bus
sun-dr 665/tcp # Sun DR
sun-dr 665/udp # Sun DR
mdqs/doom 666/tcp # MDQS
, doom Id Software

Might get shot!! <Grin Seriously, root-level exploit exists thru Doom on some Unix hosts (Linux confirmed).
mdqs/doom 666/udp # MDQS
, doom Id Software

Might get shot!! <Grin Seriously, root-level exploit exists thru Doom on some Unix hosts (Linux confirmed).
disclose 667/tcp # Campaign Contribution Disclosures
disclose 667/udp # Campaign Contribution Disclosures
mecomm 668/tcp # MeComm
mecomm 668/udp # MeComm
meregister 669/tcp # MeRegister
meregister 669/udp # MeRegister
vacdsm-sws 670/tcp # VACDSM-SWS
vacdsm-sws 670/udp # VACDSM-SWS
vacdsm-app 671/tcp # VACDSM-APP
vacdsm-app 671/udp # VACDSM-APP
vpps-qua 672/tcp # VPPS-QUA
vpps-qua 672/udp # VPPS-QUA
cimplex 673/tcp # CIMPLEX
cimplex 673/udp # CIMPLEX
acap 674/tcp # ACAP
acap 674/udp # ACAP
dctp 675/tcp # DCTP
dctp 675/udp # DCTP
vpps-via 676/tcp # VPPS Via
vpps-via 676/udp # VPPS Via
vpp 677/tcp # Virtual Presence Protocol
vpp 677/udp # Virtual Presence Protocol
ggf-ncp 678/tcp # GNU Generation Foundation NCP
ggf-ncp/ggf-ncp 678/udp # GNU Generation Foundation NCP
, ggf-ncp

gnu generation foundation ncp
mrm 679/tcp # MRM
mrm 679/udp # MRM
entrust-aaas 680/tcp # Entrust-aaas
entrust-aaas 680/udp # Entrust-aaas
entrust-aams 681/tcp # Entrust-aams
entrust-aams 681/udp # Entrust-aams
xfr 682/tcp # XFR
xfr 682/udp # XFR
corba-iiop 683/tcp # CORBA IIOP
corba-iiop 683/udp # CORBA IIOP
corba-iiop-ssl 684/tcp # CORBA IIOP SSL
corba-iiop-ssl 684/udp # CORBA IIOP SSL
mdc-portmapper 685/tcp # MDC Port Mapper
mdc-portmapper 685/udp # MDC Port Mapper
hcp-wismar 686/tcp # Hardware Control Protocol Wismar
hcp-wismar 686/udp # Hardware Control Protocol Wismar
asipregistry 687/tcp # asipregistry
asipregistry 687/udp # asipregistry
realm-rusd 688/tcp # REALM-RUSD
realm-rusd 688/udp # REALM-RUSD
nmap 689/tcp # NMAP
nmap 689/udp # NMAP
vatp 690/tcp # VATP
vatp 690/udp # VATP
msexch-routing 691/tcp # MS Exchange Routing
msexch-routing 691/udp # MS Exchange Routing
hyperwave-isp 692/tcp # Hyperwave-ISP
hyperwave-isp 692/udp # Hyperwave-ISP
connedp/connendp 693/tcp # connendp
, connendp

connendp
connedp/connendp 693/udp # connendp
, connendp

connendp
ha-cluster 694/tcp # ha-cluster
ha-cluster 694/udp # ha-cluster
elcsd 704/tcp # errlog copy/server daemon
elcsd 704/udp # errlog copy/server daemon
agentx 705/tcp # AgentX
agentx 705/udp # AgentX
borland-dsj 707/tcp # Borland DSJ
borland-dsj 707/udp # Borland DSJ
entrust-kmsh 709/tcp # Entrust Key Mgmt Service Handler
entrust-kmsh 709/udp # Entrust Key Mgmt Service Handler
entrust-ash 710/tcp # Entrust Admin Service Handler
entrust-ash 710/udp # Entrust Admin Service Handler
cisco-tdp 711/tcp # Cisco TDP
cisco-tdp 711/udp # Cisco TDP
nt 721/tcp # Windows NT v3.5x Printer Ports

Print jobs from NT v3.5x hosts are sourced from tcp 721-731, sequentially. Changed under NT v4.0, the lpd client now uses random source port between 512 and 1023. Was changed to provide higher consecutive print volume.
/udp #
netviewdm1 729/tcp # IBM NetView DM/6000 Server/Client
netviewdm1 729/udp # IBM NetView DM/6000 Server/Client
netviewdm2 730/tcp # IBM NetView DM/6000 send/tcp
netviewdm2 730/udp # IBM NetView DM/6000 send/tcp
netviewdm3 731/tcp # IBM NetView DM/6000 receive/tcp
netviewdm3 731/udp # IBM NetView DM/6000 receive/tcp
netgw 741/tcp # netGW
netgw 741/udp # netGW
netrcs 742/tcp # Network based Rev. Cont. Sys.
netrcs 742/udp # Network based Rev. Cont. Sys.
flexlm 744/tcp # Flexible License Manager
flexlm 744/udp # Flexible License Manager
fujitsu-dev 747/tcp # Fujitsu Device Control
fujitsu-dev 747/udp # Fujitsu Device Control
ris-cm 748/tcp # Russell Info Sci Calendar Manager
ris-cm 748/udp # Russell Info Sci Calendar Manager
kerberos-adm 749/tcp # kerberos administration
kerberos-adm/kerberos-adm 749/udp # kerberos administration
, kerberos-adm

kerberos administration, kerberos 5 admin/changepw
rfile 750/tcp # rfile
rfile/loadav/kerberos-iv 750/udp # rfile
, loadav
, Kerberos Version IV
pump 751/tcp # Pump
pump/pump 751/udp # Pump
, pump

kerberos `kadmin' (v4), kerberos authentication, kerberos admin server udp
qrh 752/tcp # qrh
qrh 752/udp # qrh
rrh 753/tcp # rrh
rrh 753/udp # rrh
tell 754/tcp # send
tell/tell 754/udp # send
, tell

send
nlogin 758/tcp # nlogin
nlogin 758/udp # nlogin
con 759/tcp # con
con 759/udp # con
ns 760/tcp # ns
ns/ns 760/udp # ns
, ns


rxe 761/tcp # rxe
rxe/rxe 761/udp # rxe
, rxe


quotad 762/tcp # quotad
quotad 762/udp # quotad
cycleserv 763/tcp # cycleserv
cycleserv 763/udp # cycleserv
omserv 764/tcp # omserv
omserv 764/udp # omserv
webster 765/tcp # webster
webster/webster 765/udp # webster
, webster


phonebook 767/tcp # phone
phonebook 767/udp # phone
vid 769/tcp # vid
vid 769/udp # vid
cadlock 770/tcp # cadlock
cadlock 770/udp # cadlock
rtip 771/tcp # rtip
rtip 771/udp # rtip
cycleserv2 772/tcp # cycleserv2
cycleserv2 772/udp # cycleserv2
submit 773/tcp # submit
submit/notify 773/udp # submit
, Notify
rpasswd 774/tcp # rpasswd
acmaint_dbd 774/udp # acmaint_dbd
entomb/sms_db 775/tcp # entomb
, Microsoft NT SMS Database
acmaint_transd/sms_db 775/udp # acmaint_transd
, Microsoft NT SMS Database
wpages 776/tcp # wpages
wpages 776/udp # wpages
multiling-http/sms_update 777/tcp # Multiling HTTP
, Microsoft NT SMS Update
multiling-http/sms_update 777/udp # Multiling HTTP
, Microsoft NT SMS Update
wpgs 780/tcp # wpgs
wpgs 780/udp # wpgs
concert 786/tcp # Concert
concert 786/udp # Concert
qsc 787/tcp # QSC
qsc 787/udp # QSC
off-explorer/mdbs_daemon 800/tcp # Office Explorer
Security Concerns: Allows remote viewing of a user's web cache. Traversal bug also allows viewing of files outside cache using "GET......" style commands.
, mdbs_daemon
mdbs_daemon 800/udp # mdbs_daemon
device 801/tcp # device
device 801/udp # device
fcp-tcp 810/tcp # FCP
fcp-udp 810/udp # FCP Datagram
itm-mcell-s 828/tcp # itm-mcell-s
itm-mcell-s 828/udp # itm-mcell-s
pkix-3-ca-ra 829/tcp # PKIX-3 CA/RA
pkix-3-ca-ra 829/udp # PKIX-3 CA/RA
rsync 873/tcp # rsync
rsync/rsync 873/udp # rsync
, rsync

rsync
iclcnet-locate 886/tcp # ICL coNETion locate server
iclcnet-locate 886/udp # ICL coNETion locate server
iclcnet_svinfo 887/tcp # ICL coNETion server info
iclcnet_svinfo 887/udp # ICL coNETion server info
accessbuilder/cddbp 888/tcp # AccessBuilder
, CD Database Protocol
accessbuilder/accessbuilder 888/udp # AccessBuilder
, accessbuilder

accessbuilder
fw-1_http/omginitialrefs 900/tcp # Firewall-1 Web Access Port (CheckPoint)

FW-1's remote user access/auth port via browser (http). Is alternative to telnet to FW's tcp 259. Via browser connection, user can auth and use all permitted web resources of the internal network.

FW-1 Ports: tcp 256, tcp/udp 259, udp 500, tcp 900
, OMG Initial Refs
omginitialrefs 900/udp # OMG Initial Refs
smpnamers 901/tcp # SMPNAMERES
smpnamers/smpnameres 901/udp # SMPNAMERES
, smpnameres

smpnameres
ideaform-chat/ideafarm-chat 902/tcp # IdeaFarm-Chat
, ideafarm-chat

ideafarm-chat
ideaform-chat/ideafarm-chat 902/udp # IdeaFarm-Chat
, ideafarm-chat

ideafarm-chat
ideaform-catch/ideafarm-catch 903/tcp # IdeaFarm-Catch
, ideafarm-catch

ideafarm-catch
ideaform-catch/ideafarm-catch 903/udp # IdeaFarm-Catch
, ideafarm-catch

ideafarm-catch
xact-backup 911/tcp # xact-backup
xact-backup 911/udp # xact-backup
ftps-data 989/tcp # Secure FTP Data Port (TLS/SSL)
ftps-data 989/udp # Secure FTP Data Port (TLS/SSL)
ftps 990/tcp # Secure FTP Control Port (TLS/SSL)
ftps 990/udp # Secure FTP Control Port (TLS/SSL)
nas 991/tcp # Netnews Administration System
nas 991/udp # Netnews Administration System
telnets 992/tcp # telnet protocol over TLS/SSL
telnets 992/udp # telnet protocol over TLS/SSL
imaps 993/tcp # imap4 protocol over TLS/SSL
imaps/imaps 993/udp # imap4 protocol over TLS/SSL
, imaps

imap4 protocol over tls/ssl
ircs 994/tcp # irc protocol over TLS/SSL
ircs 994/udp # irc protocol over TLS/SSL
pop3s 995/tcp # Secured POP3 (TLS/SSL) [was spop3]

SSL-encrypted POP3 service for encrypted mail transfer. Also used by mail servers such as NT's Exchange Server for user auth.
pop3s/pop3s 995/udp # Secured POP3 (TLS/SSL) [was spop3]

SSL-encrypted POP3 service for encrypted mail transfer. Also used by mail servers such as NT's Exchange Server for user auth.
, pop3s

pop3 protocol over tls/ssl (was spop3)
vsinet 996/tcp # vsinet
vsinet/vsinet 996/udp # vsinet
, vsinet

vsinet
maitrd 997/tcp # maitrd
maitrd 997/udp # maitrd
busboy 998/tcp # busboy
puparp 998/udp # puparp
garcon/puprouter 999/tcp # garcon
, puprouter
applix/puprouter 999/udp # Applix ac
, puprouter
cadlock2 1000/tcp # Cadlock-2
cadlock2/ock 1000/udp # Cadlock-2
, ock
surf 1010/tcp # Surf
surf 1010/udp # Surf
--Buffer-- 1023/tcp # Unused Buffer Ports
--Buffer-- 1023/udp # Unused Buffer Ports
blackjack/listener 1025/tcp # Network Blackjack
, System V R3 listener; used by uucp
blackjack/listener/blackjack 1025/udp # Network Blackjack
, System V R3 listener; used by uucp
, blackjack

network blackjack
iad1 1030/tcp # BBN IAD
iad1 1030/udp # BBN IAD
iad2/inetinfo 1031/tcp # BBN IAD
, NT's Inetinfo
iad2 1031/udp # BBN IAD
iad3 1032/tcp # BBN IAD
iad3 1032/udp # BBN IAD
neod1 1047/tcp # Sun's NEO Object Request Broker
neod1 1047/udp # Sun's NEO Object Request Broker
neod2 1048/tcp # Sun's NEO Object Request Broker
neod2 1048/udp # Sun's NEO Object Request Broker
backdoor-port 1049/tcp # Reported Backdoor

Reported to have appeared on Linux hosts as a hacked backdoor, along with tcp 65534 (both open on same host). Little else known.
/udp #
nim 1058/tcp # nim
nim 1058/udp # nim
nimreg 1059/tcp # nimreg
nimreg 1059/udp # nimreg
instl_boots 1067/tcp # Instal Bootstrap Protocol Server
instl_boots 1067/udp # Instal Bootstrap Protocol Server
instl_bootc 1068/tcp # Instal Bootstrap Protocol Client
instl_bootc 1068/udp # Instal Bootstrap Protocol Client
socks 1080/tcp # SOCKS

SOCKS port, used to support outbound tcp services (FTP, HTTP, etc.). Vulnerable similar to FTP Bounce, in that attacker can connect to this port and "bounce" out to another internal host. Done to either reach a protected internal host or mask true source of attack.

Listen for connection attempts to this port -- good sign of port scans, SOCKS-probes, or bounce attacks.

Also a means to access restricted resources. Example: Bouncing off a MILNET gateway SOCKS port allows attacker to access web sites, etc. that were restricted only to .mil domain hosts.
socks 1080/udp # SOCKS

SOCKS port, used to support outbound tcp services (FTP, HTTP, etc.). Vulnerable similar to FTP Bounce, in that attacker can connect to this port and "bounce" out to another internal host. Done to either reach a protected internal host or mask true source of attack.

Listen for connection attempts to this port -- good sign of port scans, SOCKS-probes, or bounce attacks.

Also a means to access restricted resources. Example: Bouncing off a MILNET gateway SOCKS port allows attacker to access web sites, etc. that were restricted only to .mil domain hosts.
ansoft-lm-1 1083/tcp # Anasoft License Manager
ansoft-lm-1 1083/udp # Anasoft License Manager
ansoft-lm-2 1084/tcp # Anasoft License Manager
ansoft-lm-2 1084/udp # Anasoft License Manager
webobjects 1085/tcp # Web Objects
webobjects 1085/udp # Web Objects
sunclustermgr 1097/tcp # Sun Cluster Manager
sunclustermgr 1097/udp # Sun Cluster Manager
rmiactivation 1098/tcp # RMI Activation
rmiactivation 1098/udp # RMI Activation
rmiregistry 1099/tcp # RMI Registry
rmiregistry 1099/udp # RMI Registry
kpop 1109/tcp # Pop with Kerberos
/udp #
nfsd-status 1110/tcp # NFSD cluster status info
nfsd-keepalive 1110/udp # NFSD client status info
lmsocialserver 1111/tcp # LM Social Server
lmsocialserver 1111/udp # LM Social Server
mini-sql 1114/tcp # Mini SQL
mini-sql 1114/udp # Mini SQL
murray 1123/tcp # Murray
murray 1123/udp # Murray
nfa 1155/tcp # Network File Access
nfa 1155/udp # Network File Access
health-polling 1161/tcp # Health Polling
health-polling 1161/udp # Health Polling
health-trap 1162/tcp # Health Trap
health-trap 1162/udp # Health Trap
/tcp #
phone 1167/udp # Internet Phone
mc-client 1180/tcp # Millicent Client Proxy
mc-client 1180/udp # Millicent Client Proxy
scol 1200/tcp # SCOL
scol 1200/udp # SCOL
caiccipc 1202/tcp # caiccipc
caiccipc 1202/udp # caiccipc
lupa 1212/tcp # lupa
lupa 1212/udp # lupa
scanstat-1 1215/tcp # scanSTAT 1.0
scanstat-1 1215/udp # scanSTAT 1.0
nerv 1222/tcp # SNI R&D network
nerv 1222/udp # SNI R&D network
search-agent 1234/tcp # Infoseek Search Agent
search-agent 1234/udp # Infoseek Search Agent
vosiac 1235/tcp # Vosiac

Audio/video protocol based on Video Datagram Protocol (VDP). Also uses udp 61801-61821.
/udp #
nmsd 1239/tcp # NMSD
nmsd 1239/udp # NMSD
subsevel-infection 1243/tcp # SubSevel Infection Port

One of the known SubSeven tcp control ports. Others include tcp 6711, 6712, 6713, 6776. Default is tcp 27374.
/udp #
hermes 1248/tcp # hermes
hermes 1248/udp # hermes
h323hostcallsc 1300/tcp # H.323 Host Call Secure
h323hostcallsc 1300/udp # H.323 Host Call Secure
husky 1310/tcp # Husky
husky 1310/udp # Husky
rxmon 1311/tcp # RxMon
rxmon 1311/udp # RxMon
sti-envision 1312/tcp # STI Envision
sti-envision 1312/udp # STI Envision
bmc_patroldb/dynamo-db 1313/tcp # BMC_Patrol Database
, Dynamo Database

Test Dynamo app's database port. Used on Dynamo server for testing (provides "some" db for the Dynamo app to test functionality with upon initial install. Used when a live db is unavailable or undesirable for test.
bmc_patroldb/bmc-patroldb 1313/udp # BMC_Patrol Database
, bmc-patroldb

bmc_patroldb
pdps 1314/tcp # Photoscript Distributed Print System
pdps 1314/udp # Photoscript Distributed Print System
panja-axbnet 1320/tcp # Panja-AXBNET
panja-axbnet 1320/udp # Panja-AXBNET
pip 1321/tcp #
pip 1321/udp #
digital-notary 1335/tcp # Digital Notary Protocol
digital-notary 1335/udp # Digital Notary Protocol
VMOTelnet 1342/tcp # VMODEM telnet redirect
VMOTelnet 1342/udp # VMODEM telnet redirect
vpjp 1345/tcp # VPJP
vpjp 1345/udp # VPJP
alta-ana-lm 1346/tcp # Alta Analytics License Manager
alta-ana-lm 1346/udp # Alta Analytics License Manager
bbn-mmc 1347/tcp # Multimedia conferencing
bbn-mmc 1347/udp # Multimedia conferencing
bbn-mmx 1348/tcp # Multimedia conferencing
bbn-mmx 1348/udp # Multimedia conferencing
sbook 1349/tcp # Registration Network Protocol
sbook 1349/udp # Registration Network Protocol
editbench 1350/tcp # Registration Network Protocol
editbench 1350/udp # Registration Network Protocol
equationbuilder 1351/tcp # Digital Tool Works (MIT)
equationbuilder 1351/udp # Digital Tool Works (MIT)
lotusnote 1352/tcp # Lotus Notes

Lotus Notes provides a range of services on tcp 1352, including email (others include replication to DRA-mirrored systems, app client/server calls, etc). Vulnerable to much of same attacks poss. on tcp 25, including data disclosure, modification, and forgery, plus DOS flooding.
lotusnote 1352/udp # Lotus Notes

Lotus Notes provides a range of services on tcp 1352, including email (others include replication to DRA-mirrored systems, app client/server calls, etc). Vulnerable to much of same attacks poss. on tcp 25, including data disclosure, modification, and forgery, plus DOS flooding.
relief 1353/tcp # Relief Consulting
relief 1353/udp # Relief Consulting
rightbrain 1354/tcp # RightBrain Software
rightbrain 1354/udp # RightBrain Software
cuillamartin 1356/tcp # CuillaMartin Company
cuillamartin 1356/udp # CuillaMartin Company
pegboard 1357/tcp # Electronic PegBoard
pegboard 1357/udp # Electronic PegBoard
connlcli 1358/tcp # CONNLCLI
connlcli 1358/udp # CONNLCLI
ftsrv 1359/tcp # FTSRV
ftsrv 1359/udp # FTSRV
mimer 1360/tcp # MIMER
mimer 1360/udp # MIMER
linx 1361/tcp # LinX
linx 1361/udp # LinX
timeflies 1362/tcp # TimeFlies
timeflies 1362/udp # TimeFlies
ndm-requester 1363/tcp # Network DataMover Requester
ndm-requester 1363/udp # Network DataMover Requester
ndm-server 1364/tcp # Network DataMover Server
ndm-server 1364/udp # Network DataMover Server
adapt-sna 1365/tcp # Network Software Associates
adapt-sna 1365/udp # Network Software Associates
netware-csp 1366/tcp # Novell NetWare Comm Service Platform
netware-csp 1366/udp # Novell NetWare Comm Service Platform
dcs 1367/tcp # DCS
dcs 1367/udp # DCS
screencast 1368/tcp # ScreenCast
screencast 1368/udp # ScreenCast
gv-us 1369/tcp # GlobalView to Unix Shell
gv-us 1369/udp # GlobalView to Unix Shell
us-gv 1370/tcp # Unix Shell to GlobalView
us-gv 1370/udp # Unix Shell to GlobalView
fc-cli 1371/tcp # Fujitsu Config Protocol
fc-cli 1371/udp # Fujitsu Config Protocol
fc-ser 1372/tcp # Fujitsu Config Protocol
fc-ser 1372/udp # Fujitsu Config Protocol
chromagrafx 1373/tcp # Chromagrafx
chromagrafx 1373/udp # Chromagrafx
molly 1374/tcp # EPI Software Systems
molly 1374/udp # EPI Software Systems
bytex 1375/tcp # Bytex
bytex 1375/udp # Bytex
ibm-pps 1376/tcp # IBM Person to Person Software
ibm-pps 1376/udp # IBM Person to Person Software
cichlid 1377/tcp # Cichlid License Manager
cichlid 1377/udp # Cichlid License Manager
elan 1378/tcp # Elan License Manager
elan 1378/udp # Elan License Manager
dbreporter 1379/tcp # Integrity Solutions
dbreporter 1379/udp # Integrity Solutions
telesis-licman 1380/tcp # Telesis Network License Manager
telesis-licman 1380/udp # Telesis Network License Manager
apple-licman 1381/tcp # Apple Network License Manager
apple-licman 1381/udp # Apple Network License Manager
udt_os 1382/tcp # udt_os
udt_os 1382/udp # udt_os
gwha 1383/tcp # GW Hannaway Network License Manager
gwha 1383/udp # GW Hannaway Network License Manager
os-licman 1384/tcp # Objective Solutions License Manager
os-licman 1384/udp # Objective Solutions License Manager
atex_elmd 1385/tcp # Atex Publishing License Manager
atex_elmd 1385/udp # Atex Publishing License Manager
checksum 1386/tcp # CheckSum License Manager
checksum 1386/udp # CheckSum License Manager
cadsi-lm 1387/tcp # CAD Software Inc LM
cadsi-lm 1387/udp # CAD Software Inc LM
objective-dbc 1388/tcp # Objective Solutions DataBase Cache
objective-dbc 1388/udp # Objective Solutions DataBase Cache
iclpv-dm 1389/tcp # Document Manager
iclpv-dm 1389/udp # Document Manager
iclpv-sc 1390/tcp # Storage Controller
iclpv-sc 1390/udp # Storage Controller
iclpv-sas 1391/tcp # Storage Access Server
iclpv-sas 1391/udp # Storage Access Server
iclpv-pm 1392/tcp # Print Manager
iclpv-pm 1392/udp # Print Manager
iclpv-nls 1393/tcp # Network Log Server
iclpv-nls 1393/udp # Network Log Server
iclpv-nlc 1394/tcp # Network Log Client
iclpv-nlc 1394/udp # Network Log Client
iclpv-wsm 1395/tcp # PC Workstation Manager software
iclpv-wsm 1395/udp # PC Workstation Manager software
dvl-activemail 1396/tcp # DVL Active Mail
dvl-activemail 1396/udp # DVL Active Mail
audio-activmail 1397/tcp # Audio Active Mail
audio-activmail 1397/udp # Audio Active Mail
video-activmail 1398/tcp # Video Active Mail
video-activmail 1398/udp # Video Active Mail
cadkey-licman 1399/tcp # Cadkey License Manager
cadkey-licman 1399/udp # Cadkey License Manager
cadkey-tablet 1400/tcp # Cadkey Tablet Daemon
cadkey-tablet 1400/udp # Cadkey Tablet Daemon
goldleaf-licman 1401/tcp # Goldleaf License Manager
goldleaf-licman 1401/udp # Goldleaf License Manager
prm-sm-np 1402/tcp # Prospero Resource Manager
prm-sm-np 1402/udp # Prospero Resource Manager
prm-nm-np 1403/tcp # Prospero Resource Manager
prm-nm-np 1403/udp # Prospero Resource Manager
igi-lm 1404/tcp # Infinite Graphics License Manager
igi-lm 1404/udp # Infinite Graphics License Manager
ibm-res 1405/tcp # IBM Remote Execution Starter
ibm-res 1405/udp # IBM Remote Execution Starter
netlabs-lm 1406/tcp # NetLabs License Manager
netlabs-lm 1406/udp # NetLabs License Manager
dbsa-lm 1407/tcp # DBSA License Manager
dbsa-lm 1407/udp # DBSA License Manager
sophia-lm 1408/tcp # Sophia License Manager
sophia-lm 1408/udp # Sophia License Manager
here-lm 1409/tcp # Here License Manager
here-lm 1409/udp # Here License Manager
hiq 1410/tcp # HiQ License Manager
hiq 1410/udp # HiQ License Manager
af 1411/tcp # AudioFile
af 1411/udp # AudioFile
innosys 1412/tcp # InnoSys
innosys 1412/udp # InnoSys
innosys-acl 1413/tcp # Innosys-ACL
innosys-acl 1413/udp # Innosys-ACL
ibm-mqseries 1414/tcp # IBM MQSeries
ibm-mqseries 1414/udp # IBM MQSeries
dbstar 1415/tcp # DBStar
dbstar 1415/udp # DBStar
novell-lu6.2 1416/tcp # Novell LU6.2
novell-lu6.2 1416/udp # Novell LU6.2
timbuktu-srv1 1417/tcp # Timbuktu Service 1 Port
timbuktu-srv1 1417/udp # Timbuktu Service 1 Port
timbuktu-srv2 1418/tcp # Timbuktu Service 2 Port
timbuktu-srv2 1418/udp # Timbuktu Service 2 Port
timbuktu-srv3 1419/tcp # Timbuktu Service 3 Port
timbuktu-srv3 1419/udp # Timbuktu Service 3 Port
timbuktu-srv4 1420/tcp # Timbuktu Service 4 Port
timbuktu-srv4 1420/udp # Timbuktu Service 4 Port
gandalf-lm 1421/tcp # Gandalf License Manager
gandalf-lm 1421/udp # Gandalf License Manager
autodesk-lm 1422/tcp # Autodesk License Manager
autodesk-lm 1422/udp # Autodesk License Manager
essbase 1423/tcp # Essbase Arbor Software
essbase 1423/udp # Essbase Arbor Software
hybrid 1424/tcp # Hybrid Encryption Protocol
hybrid 1424/udp # Hybrid Encryption Protocol
zion-lm 1425/tcp # Zion Software License Manager
zion-lm 1425/udp # Zion Software License Manager
sais 1426/tcp # Satellite-data Acquisition System 1
sais 1426/udp # Satellite-data Acquisition System 1
mloadd 1427/tcp # mloadd monitoring tool
mloadd 1427/udp # mloadd monitoring tool
informatik-lm 1428/tcp # Informatik License Manager
informatik-lm 1428/udp # Informatik License Manager
nms 1429/tcp # Hypercom NMS
nms 1429/udp # Hypercom NMS
tpdu 1430/tcp # Hypercom TPDU
tpdu 1430/udp # Hypercom TPDU
rgtp 1431/tcp # Reverse Gossip Transport
rgtp 1431/udp # Reverse Gossip Transport
blueberry-lm 1432/tcp # Blueberry Software License Manager
blueberry-lm 1432/udp # Blueberry Software License Manager
ms-sql-s 1433/tcp # Microsoft SQL Server

Also known as "TDS" for "Tabular Data Stream" DB-library, used by Microsoft's SQL server.
ms-sql-s 1433/udp # Microsoft SQL Server

Also known as "TDS" for "Tabular Data Stream" DB-library, used by Microsoft's SQL server.
ms-sql-m 1434/tcp # Microsoft SQL Monitor
ms-sql-m 1434/udp # Microsoft SQL Monitor
ibm-cics 1435/tcp # IBM CICS
ibm-cics 1435/udp # IBM CICS
saism 1436/tcp # Satellite-data Acquisition System 2
saism 1436/udp # Satellite-data Acquisition System 2
tabula 1437/tcp # Tabula
tabula 1437/udp # Tabula
eicon-server 1438/tcp # Eicon Security Agent/Server
eicon-server 1438/udp # Eicon Security Agent/Server
eicon-x25 1439/tcp # Eicon X25/SNA Gateway
eicon-x25 1439/udp # Eicon X25/SNA Gateway
eicon-slp 1440/tcp # Eicon Service Location Protocol
eicon-slp 1440/udp # Eicon Service Location Protocol
cadis-1 1441/tcp # Cadis License Management
cadis-1 1441/udp # Cadis License Management
cadis-2 1442/tcp # Cadis License Management
cadis-2 1442/udp # Cadis License Management
ies-lm 1443/tcp # Integrated Engineering Software
ies-lm 1443/udp # Integrated Engineering Software
marcam-lm 1444/tcp # Marcam License Management
marcam-lm 1444/udp # Marcam License Management
proxima-lm 1445/tcp # Proxima License Manager
proxima-lm 1445/udp # Proxima License Manager
ora-lm 1446/tcp # Optical Research Associates LM
ora-lm 1446/udp # Optical Research Associates LM
apri-lm 1447/tcp # Applied Parallel Research LM
apri-lm 1447/udp # Applied Parallel Research LM
oc-lm 1448/tcp # OpenConnect License Manager
oc-lm 1448/udp # OpenConnect License Manager
peport 1449/tcp # PEport
peport 1449/udp # PEport
dwf 1450/tcp # Tandem Distrib Workbench Facility
dwf 1450/udp # Tandem Distrib Workbench Facility
infoman 1451/tcp # IBM Info Management
infoman 1451/udp # IBM Info Management
gtegsc-lm 1452/tcp # GTE Government Systems LM
gtegsc-lm 1452/udp # GTE Government Systems LM
genie-lm 1453/tcp # Genie License Manager
genie-lm 1453/udp # Genie License Manager
interhdl_elmd 1454/tcp # interHDL License Manager
interhdl_elmd 1454/udp # interHDL License Manager
esl-lm 1455/tcp # ESL License Manager
esl-lm 1455/udp # ESL License Manager
dca 1456/tcp # DCA
dca 1456/udp # DCA
valisys-lm 1457/tcp # Valisys License Manager
valisys-lm 1457/udp # Valisys License Manager
nrcabq-lm 1458/tcp # Nichols Research Corp.
nrcabq-lm 1458/udp # Nichols Research Corp.
proshare1 1459/tcp # Proshare Notebook Application
proshare1 1459/udp # Proshare Notebook Application
proshare2 1460/tcp # Proshare Notebook Application
proshare2 1460/udp # Proshare Notebook Application
ibm_wrless_lan 1461/tcp # IBM Wireless LAN
ibm_wrless_lan 1461/udp # IBM Wireless LAN
world-lm 1462/tcp # World License Manager
world-lm 1462/udp # World License Manager
nucleus 1463/tcp # Nucleus
nucleus 1463/udp # Nucleus
msl_lmd 1464/tcp # MSL License Manager
msl_lmd 1464/udp # MSL License Manager
pipes 1465/tcp # Pipes Platform
pipes/pipes 1465/udp # Pipes Platform
, pipes

pipes platform mfarlin@peerlogic.com
oceansoft-lm 1466/tcp # Ocean Software License Manager
oceansoft-lm 1466/udp # Ocean Software License Manager
csdmbase 1467/tcp # CSDMBASE
csdmbase 1467/udp # CSDMBASE
csdm 1468/tcp # CSDM
csdm 1468/udp # CSDM
aal-lm 1469/tcp # Active Analysis Limited LM
aal-lm 1469/udp # Active Analysis Limited LM
uaiact 1470/tcp # Universal Analytics
uaiact 1470/udp # Universal Analytics
csdmbase 1471/tcp # csdmbase
csdmbase 1471/udp # csdmbase
csdm 1472/tcp # csdm
csdm 1472/udp # csdm
openmath 1473/tcp # OpenMath
openmath 1473/udp # OpenMath
telefinder 1474/tcp # Telefinder
telefinder 1474/udp # Telefinder
taligent-lm 1475/tcp # Taligent License Manager
taligent-lm 1475/udp # Taligent License Manager
clvm-cfg 1476/tcp # clvm-cfg
clvm-cfg 1476/udp # clvm-cfg
ms-sna-server 1477/tcp # ms-sna-server
ms-sna-server 1477/udp # ms-sna-server
ms-sna-base 1478/tcp # ms-sna-base
ms-sna-base 1478/udp # ms-sna-base
dberegister 1479/tcp # dberegister
dberegister 1479/udp # dberegister
pacerforum 1480/tcp # PacerForum
pacerforum 1480/udp # PacerForum
airs 1481/tcp # AIRS
airs 1481/udp # AIRS
miteksys-lm 1482/tcp # Miteksys License Manager
miteksys-lm 1482/udp # Miteksys License Manager
afs 1483/tcp # AFS License Manager
afs 1483/udp # AFS License Manager
confluent 1484/tcp # Confluent License Manager
confluent 1484/udp # Confluent License Manager
lansource 1485/tcp # LANSource
lansource 1485/udp # LANSource
nms_topo_serv 1486/tcp # nms_topo_serv
nms_topo_serv 1486/udp # nms_topo_serv
localinfosrvr 1487/tcp # LocalInfoSrvr
localinfosrvr 1487/udp # LocalInfoSrvr
docstor 1488/tcp # DocStor
docstor 1488/udp # DocStor
dmdocbroker 1489/tcp # dmdocbroker
dmdocbroker 1489/udp # dmdocbroker
vocaltec/insitu-conf 1490/tcp # VocalTec Internet Phone

Video-Teleconferencing. Also uses tcp 6670 & 25793, tcp/udp 22555.
, insitu-conf
insitu-conf 1490/udp # insitu-conf
anynetgateway 1491/tcp # Anynet Gateway
anynetgateway 1491/udp # Anynet Gateway
stone-design-1 1492/tcp # Stone Design 1
stone-design-1 1492/udp # Stone Design 1
netmap_lm 1493/tcp # Netmap License Manager
netmap_lm 1493/udp # Netmap License Manager
ica/winframe 1494/tcp # ICA
, WinFrame remote LAN service
Used on MS hosts for ICA Citrix Client
ica 1494/udp # ICA
cvc 1495/tcp # CVC
cvc 1495/udp # CVC
liberty-lm 1496/tcp # Liberty License Manager
liberty-lm 1496/udp # Liberty License Manager
rfx-lm 1497/tcp # RFX License Manager
rfx-lm 1497/udp # RFX License Manager
watcom-sql/sybase-sqlany 1498/tcp # Watcom SQL
, Sybase SQL Any
watcom-sql/sybase-sqlany 1498/udp # Watcom SQL
, Sybase SQL Any
fhc 1499/tcp # Federico Heinz Consultora
fhc 1499/udp # Federico Heinz Consultora
vlsi-lm 1500/tcp # VLSI License Manager
vlsi-lm 1500/udp # VLSI License Manager
saiscm 1501/tcp # Satellite-data Acquisition System 3
saiscm 1501/udp # Satellite-data Acquisition System 3
shivadiscovery 1502/tcp # Shiva
shivadiscovery 1502/udp # Shiva
imtc-mcs/netmeeting 1503/tcp # Databeam T-120

Used by multimedia collaborative apps such as NetMeeting to establish and control a collaborative session.
, Microsoft NetMeeting
imtc-mcs 1503/udp # Databeam T-120

Used by multimedia collaborative apps such as NetMeeting to establish and control a collaborative session.
evb-elm 1504/tcp # EVB Software Engineering License Mgr
evb-elm 1504/udp # EVB Software Engineering License Mgr
funkproxy 1505/tcp # Funk Software, Inc.
funkproxy 1505/udp # Funk Software, Inc.
utcd 1506/tcp # Universal Time daemon (utcd)
utcd 1506/udp # Universal Time daemon (utcd)
symplex 1507/tcp # symplex
symplex 1507/udp # symplex
diagmond 1508/tcp # Diagnostic Monitor
diagmond 1508/udp # Diagnostic Monitor
robcad-lm 1509/tcp # Robcad License Manager
robcad-lm 1509/udp # Robcad License Manager
mvx-lm 1510/tcp # Midland Valley Exploration LM
mvx-lm 1510/udp # Midland Valley Exploration LM
3l-l1 1511/tcp # 3l-l1
3l-l1 1511/udp # 3l-l1
wins 1512/tcp # Windows Internet Name Service (WINS)

Was reserved by Microsoft for WINS, however WINS actually uses old ARPAnet Naming Service port (tcp 42).
wins 1512/udp # Windows Internet Name Service (WINS)

Was reserved by Microsoft for WINS, however WINS actually uses old ARPAnet Naming Service port (tcp 42).
fujitsu-dtc 1513/tcp # Fujitsu Systems Bus. of America, Inc
fujitsu-dtc 1513/udp # Fujitsu Systems Bus. of America, Inc
fujitsu-dtcns 1514/tcp # Fujitsu Systems Business of America, Inc
fujitsu-dtcns 1514/udp # Fujitsu Systems Business of America, Inc
ifor-protocol 1515/tcp # ifor-protocol
ifor-protocol 1515/udp # ifor-protocol
vpad 1516/tcp # Virtual Places Audio data
vpad 1516/udp # Virtual Places Audio data
vpac 1517/tcp # Virtual Places Audio control
vpac 1517/udp # Virtual Places Audio control
vpvd 1518/tcp # Virtual Places Video data
vpvd 1518/udp # Virtual Places Video data
vpvc 1519/tcp # Virtual Places Video control
vpvc 1519/udp # Virtual Places Video control
atm-zip-office 1520/tcp # ATM Zip Office
atm-zip-office 1520/udp # ATM Zip Office
ncube-lm/sqlnet 1521/tcp # nCube License Manager
, SQLnet
ncube-lm/sqlnet 1521/udp # nCube License Manager
, SQLnet
ricardo-lm 1522/tcp # Ricardo North America LM
ricardo-lm 1522/udp # Ricardo North America LM
sqlnet2/cichild-lm 1523/tcp # SQLnet2

Oracle connection thru firewall.
, cichild
cichild-lm 1523/udp # cichild
ingreslock 1524/tcp # ingres

Popular tcp port for backdoor (eg: Trinoo relay slave). Watch for connection attempts to it at perimeter and within network.
ingreslock 1524/udp # ingres

Popular tcp port for backdoor (eg: Trinoo relay slave). Watch for connection attempts to it at perimeter and within network.
orasrv/prospero-np 1525/tcp # Oracle
, Prospero Directory Service non-priv
archie/orasrv/prospero-np/orasrv 1525/udp #
Old search engine for anomymous ftp archieves; replaced by web and its search engines. Unlikely to still find in use.
, Oracle
, Prospero Directory Service non-priv
, orasrv

prospero directory service non-priv, oracle
pdap-np/sqlnet 1526/tcp # Prospero Data Access Prot non-priv
, SQLnet
pdap-np/sqlnet 1526/udp # Prospero Data Access Prot non-priv
, SQLnet
tlisrv 1527/tcp # Oracle
tlisrv 1527/udp # Oracle
mciautoreg 1528/tcp # micautoreg
mciautoreg 1528/udp # micautoreg
coauthor 1529/tcp # Oracle
coauthor/coauthor 1529/udp # Oracle
, coauthor

oracle
rap-service 1530/tcp # rap-service
rap-service 1530/udp # rap-service
rap-listen 1531/tcp # rap-listen
rap-listen 1531/udp # rap-listen
miroconnect 1532/tcp # miroconnect
miroconnect 1532/udp # miroconnect
virtual-places 1533/tcp # Virtual Places Software
virtual-places 1533/udp # Virtual Places Software
micromuse-lm 1534/tcp # Micromuse License Manager
micromuse-lm 1534/udp # Micromuse License Manager
ampr-info 1535/tcp # ampr-info
ampr-info 1535/udp # ampr-info
ampr-inter 1536/tcp # ampr-inter
ampr-inter 1536/udp # ampr-inter
sdsc-lm 1537/tcp # isi-lm
sdsc-lm 1537/udp # isi-lm
3ds-lm 1538/tcp # 3ds-lm
3ds-lm 1538/udp # 3ds-lm
intellistor-lm 1539/tcp # Intellistor License Manager
intellistor-lm 1539/udp # Intellistor License Manager
rds 1540/tcp # rds
rds 1540/udp # rds
rds2 1541/tcp # rds2
rds2 1541/udp # rds2
gridgen-elmd 1542/tcp # gridgen-elmd
gridgen-elmd 1542/udp # gridgen-elmd
simba-cs 1543/tcp # simba-cs
simba-cs 1543/udp # simba-cs
aspeclmd 1544/tcp # aspeclmd
aspeclmd 1544/udp # aspeclmd
vistium-share 1545/tcp # vistium-share
vistium-share 1545/udp # vistium-share
abbaccuray 1546/tcp # abbaccuray
abbaccuray 1546/udp # abbaccuray
laplink 1547/tcp # laplink
laplink 1547/udp # laplink
axon-lm 1548/tcp # Axon License Manager
axon-lm 1548/udp # Axon License Manager
shivahose 1549/tcp # Shiva Hose
shivasound 1549/udp # Shiva Sound
3m-image-lm 1550/tcp # Image Storage LM, 3M Inc
3m-image-lm 1550/udp # Image Storage LM, 3M Inc
hecmtl-db 1551/tcp # HECMTL-DB
hecmtl-db 1551/udp # HECMTL-DB
pciarray 1552/tcp # pciarray
pciarray 1552/udp # pciarray
sna-cs 1553/tcp # sna-cs
sna-cs 1553/udp # sna-cs
caci-lm 1554/tcp # CACI Products Company LM
caci-lm 1554/udp # CACI Products Company LM
livelan 1555/tcp # livelan
livelan 1555/udp # livelan
ashwin 1556/tcp # AshWin CI Tecnologies
ashwin 1556/udp # AshWin CI Tecnologies
arbortext-lm 1557/tcp # ArborText License Manager
arbortext-lm 1557/udp # ArborText License Manager
xingmpeg 1558/tcp # xingmpeg
xingmpeg/streamworks/xing 1558/udp # xingmpeg
, StreamWorks

Used for tx of high quality video (Xing)
, Xing Stream Works

Used for streaming video.
web2host 1559/tcp # web2host
web2host 1559/udp # web2host
asci-val 1560/tcp # asci-val
asci-val 1560/udp # asci-val
facilityview 1561/tcp # facilityview
facilityview 1561/udp # facilityview
pconnectmgr 1562/tcp # pconnectmgr
pconnectmgr 1562/udp # pconnectmgr
cadabra-lm 1563/tcp # Cadabra License Manager
cadabra-lm 1563/udp # Cadabra License Manager
pay-per-view 1564/tcp # Pay-Per-View
pay-per-view 1564/udp # Pay-Per-View
winddlb 1565/tcp # WinDD
winddlb 1565/udp # WinDD
corelvideo 1566/tcp # CORELVIDEO
corelvideo 1566/udp # CORELVIDEO
jlicelmd 1567/tcp # jlicelmd
jlicelmd 1567/udp # jlicelmd
tsspmap 1568/tcp # tsspmap
tsspmap 1568/udp # tsspmap
ets 1569/tcp # ets
ets 1569/udp # ets
orbixd 1570/tcp # orbixd
orbixd 1570/udp # orbixd
rdb-dbs-disp 1571/tcp # Oracle Remote Data Base
rdb-dbs-disp 1571/udp # Oracle Remote Data Base
chip-lm 1572/tcp # Chipcom License Manager
chip-lm 1572/udp # Chipcom License Manager
itscomm-ns 1573/tcp # itscomm-ns
itscomm-ns 1573/udp # itscomm-ns
mvel-lm 1574/tcp # mvel-lm
mvel-lm 1574/udp # mvel-lm
oraclenames 1575/tcp # oraclenames
oraclenames 1575/udp # oraclenames
moldflow-lm 1576/tcp # moldflow-lm
moldflow-lm 1576/udp # moldflow-lm
hypercube-lm 1577/tcp # hypercube-lm
hypercube-lm 1577/udp # hypercube-lm
jacobus-lm 1578/tcp # Jacobus License Manager
jacobus-lm 1578/udp # Jacobus License Manager
ioc-sea-lm 1579/tcp # ioc-sea-lm
ioc-sea-lm 1579/udp # ioc-sea-lm
tn-tl-r1 1580/tcp # tn-tl-r1
tn-t1-r2/tn-tl-r2 1580/udp # tc-t1-r2
, tn-tl-r2

tn-tl-r2
mil-2045-47001/vmf-msg-port 1581/tcp # MIL-2045-47001
, vmf-msg-port
mil-2045-47001/vmf-msg-port 1581/udp # MIL-2045-47001
, vmf-msg-port
msims 1582/tcp # MSIMS
msims 1582/udp # MSIMS
simbaexpress 1583/tcp # simbaexpress
simbaexpress 1583/udp # simbaexpress
tn-tl-fd2 1584/tcp # tn-tl-fd2
tn-tl-fd2 1584/udp # tn-tl-fd2
intv 1585/tcp # intv
intv 1585/udp # intv
ibm-abtact 1586/tcp # ibm-abtact
ibm-abtact 1586/udp # ibm-abtact
pra_elmd 1587/tcp # pra_elmd
pra_elmd 1587/udp # pra_elmd
triquest-lm 1588/tcp # triquest-lm
triquest-lm 1588/udp # triquest-lm
vqp 1589/tcp # VQP
vqp 1589/udp # VQP
gemini-lm 1590/tcp # gemini-lm
gemini-lm 1590/udp # gemini-lm
ncpm-pm 1591/tcp # ncpm-pm
ncpm-pm 1591/udp # ncpm-pm
commonspace 1592/tcp # commonspace
commonspace 1592/udp # commonspace
mainsoft-lm 1593/tcp # mainsoft-lm
mainsoft-lm 1593/udp # mainsoft-lm
sixtrak 1594/tcp # sixtrak
sixtrak 1594/udp # sixtrak
radio 1595/tcp # radio
radio 1595/udp # radio
radio-sm 1596/tcp # radio-sm
radio-bc 1596/udp # radio-bc
orbplus-iiop 1597/tcp # orbplus-iiop
orbplus-iiop 1597/udp # orbplus-iiop
picknfs 1598/tcp # picknfs
picknfs 1598/udp # picknfs
simbaservices 1599/tcp # simbaservices
simbaservices 1599/udp # simbaservices
issd 1600/tcp # issd
issd 1600/udp # issd
aas 1601/tcp # aas
aas 1601/udp # aas
inspect 1602/tcp # inspect
inspect 1602/udp # inspect
picodbc 1603/tcp # pickodbc
picodbc 1603/udp # pickodbc
icabrowser 1604/tcp # icabrowser
icabrowser 1604/udp # icabrowser
slp 1605/tcp # Salutation Mgr (Salutation Protocol)
slp 1605/udp # Salutation Mgr (Salutation Protocol)
slm-api 1606/tcp # Salutation Manager (SLM-API)
slm-api 1606/udp # Salutation Manager (SLM-API)
stt 1607/tcp # stt
stt 1607/udp # stt
smart-lm 1608/tcp # Smart Corp. License Manager
smart-lm 1608/udp # Smart Corp. License Manager
isysg-lm 1609/tcp # isysg-lm
isysg-lm 1609/udp # isysg-lm
taurus-wh 1610/tcp # taurus-wh
taurus-wh 1610/udp # taurus-wh
ill 1611/tcp # Inter Library Loan
ill 1611/udp # Inter Library Loan
netbill-trans 1612/tcp # NetBill Transaction Server
netbill-trans 1612/udp # NetBill Transaction Server
netbill-keyrep 1613/tcp # NetBill Key Repository
netbill-keyrep 1613/udp # NetBill Key Repository
netbill-cred 1614/tcp # NetBill Credential Server
netbill-cred 1614/udp # NetBill Credential Server
netbill-auth 1615/tcp # NetBill Authorization Server
netbill-auth 1615/udp # NetBill Authorization Server
netbill-prod 1616/tcp # NetBill Product Server
netbill-prod 1616/udp # NetBill Product Server
nimrod-agent 1617/tcp # Nimrod Inter-Agent Communication
nimrod-agent 1617/udp # Nimrod Inter-Agent Communication
skytelnet 1618/tcp # skytelnet
skytelnet 1618/udp # skytelnet
xs-openstorage 1619/tcp # xs-openstorage
xs-openstorage 1619/udp # xs-openstorage
faxportwinport 1620/tcp # Faxportwinport
faxportwinport 1620/udp # Faxportwinport
softdataphone 1621/tcp # Softdataphone
softdataphone 1621/udp # Softdataphone
ontime 1622/tcp # OnTime Calendar Services
ontime 1622/udp # OnTime Calendar Services
jaleosnd 1623/tcp # jaleosnd
jaleosnd 1623/udp # jaleosnd
udp-sr-port 1624/tcp # udp-sr-port
udp-sr-port 1624/udp # udp-sr-port
svs-omagent 1625/tcp # svs-omagent
svs-omagent 1625/udp # svs-omagent
shockwave 1626/tcp # Shockwave
shockwave 1626/udp # Shockwave
t128-gateway 1627/tcp # T.128 Gateway
t128-gateway 1627/udp # T.128 Gateway
longtalk-norm/lontalk-norm 1628/tcp # LongTalk normal
, lontalk-norm

lontalk normal
longtalk-norm/lontalk-norm 1628/udp # LongTalk normal
, lontalk-norm

lontalk normal
longtalk-urgnt/lontalk-urgnt 1629/tcp # LongTalk urgent
, lontalk-urgnt

lontalk urgent
longtalk-urgnt/lontalk-urgnt 1629/udp # LongTalk urgent
, lontalk-urgnt

lontalk urgent
oraclenet8cman 1630/tcp # Oracle Net8 Cman
oraclenet8cman 1630/udp # Oracle Net8 Cman
visitview 1631/tcp # Visit View
visitview 1631/udp # Visit View
pammratc 1632/tcp # PAMMRATC
pammratc 1632/udp # PAMMRATC
pammrpc 1633/tcp # PAMMRPC
pammrpc 1633/udp # PAMMRPC
loaprobe 1634/tcp # EDB Server 1
loaprobe 1634/udp # EDB Server 1
edb-server1 1635/tcp # EDB Server 1
edb-server1 1635/udp # EDB Server 1
cncp 1636/tcp # CableNet Control Protocol
cncp 1636/udp # CableNet Control Protocol
cnap 1637/tcp # CableNet Admin Protocol
cnap 1637/udp # CableNet Admin Protocol
cnip 1638/tcp # CableNet Info Protocol
cnip 1638/udp # CableNet Info Protocol
cert-initiator 1639/tcp # cert-initiator
cert-initiator 1639/udp # cert-initiator
cert-responder 1640/tcp # cert-responder
cert-responder 1640/udp # cert-responder
invision 1641/tcp # InVision
invision 1641/udp # InVision
isis-am 1642/tcp # isis-am
isis-am 1642/udp # isis-am
isis-ambc 1643/tcp # isis-ambc
isis-ambc 1643/udp # isis-ambc
saiseh/saiseh 1644/tcp # Satellite-Data Acquisition System 4
, saiseh

satellite-data acquisition system 4
saiseh 1644/udp # Satellite-Data Acquisition System 4
datametrics/radius 1645/tcp # datametrics
, Radius Authentication Services
datametrics/radius/datametrics 1645/udp # datametrics
, Radius Authentication Services
, datametrics

radius authentication, datametrics
sa-msg-port 1646/tcp # sa-msg-port
sa-msg-port/sa-msg-port 1646/udp # sa-msg-port
, sa-msg-port

sa-msg-port, radius accounting
rsap 1647/tcp # rsap
rsap 1647/udp # rsap
concurrent-lm 1648/tcp # concurrent-lm
concurrent-lm 1648/udp # concurrent-lm
inspect/kermit 1649/tcp # inspect
, kermit
inspect/kermit 1649/udp # inspect
, kermit
nkd 1650/tcp # nkd
nkd 1650/udp # nkd
shiva_confsrvr 1651/tcp # shiva_confsrvr
shiva_confsrvr 1651/udp # shiva_confsrvr
xnmp 1652/tcp # xnmp
xnmp 1652/udp # xnmp
alphatech-lm 1653/tcp # alphatech-lm
alphatech-lm 1653/udp # alphatech-lm
stargatealerts 1654/tcp # stargatealerts
stargatealerts 1654/udp # stargatealerts
dec-mbadmin 1655/tcp # dec-mbadmin
dec-mbadmin 1655/udp # dec-mbadmin
dec-mbadmin-h 1656/tcp # dec-mbadmin-h
dec-mbadmin-h 1656/udp # dec-mbadmin-h
fujitsu-mmpdc 1657/tcp # fujitsu-mmpdc
fujitsu-mmpdc 1657/udp # fujitsu-mmpdc
sixnetudr 1658/tcp # sixnetudr
sixnetudr 1658/udp # sixnetudr
sg-lm 1659/tcp # Silicon Grail License Manager
sg-lm 1659/udp # Silicon Grail License Manager
skip-mc-gikreq 1660/tcp # skip-mc-gikreq
skip-mc-gikreq 1660/udp # skip-mc-gikreq
netview-aix-1 1661/tcp # netview-aix-1
netview-aix-1 1661/udp # netview-aix-1
netview-aix-2 1662/tcp # netview-aix-2
netview-aix-2 1662/udp # netview-aix-2
netview-aix-3 1663/tcp # netview-aix-3
netview-aix-3 1663/udp # netview-aix-3
netview-aix-4 1664/tcp # netview-aix-4
netview-aix-4 1664/udp # netview-aix-4
netview-aix-5 1665/tcp # netview-aix-5
netview-aix-5 1665/udp # netview-aix-5
netview-aix-6 1666/tcp # netview-aix-6
maze/netview-aix-6 1666/udp # maze
, netview-aix-6
netview-aix-7 1667/tcp # netview-aix-7
netview-aix-7 1667/udp # netview-aix-7
netview-aix-8 1668/tcp # netview-aix-8
netview-aix-8 1668/udp # netview-aix-8
netview-aix-9 1669/tcp # netview-aix-9
netview-aix-9 1669/udp # netview-aix-9
netview-aix-10 1670/tcp # netview-aix-10
netview-aix-10 1670/udp # netview-aix-10
netview-aix-11 1671/tcp # netview-aix-11
netview-aix-11 1671/udp # netview-aix-11
netview-aix-12 1672/tcp # netview-aix-12
netview-aix-12 1672/udp # netview-aix-12
proshare-mc-1 1673/tcp # Intel Proshare Multicast
proshare-mc-1 1673/udp # Intel Proshare Multicast
proshare-mc-2 1674/tcp # Intel Proshare Multicast
proshare-mc-2 1674/udp # Intel Proshare Multicast
pdp 1675/tcp # Pacific Data Products
pdp 1675/udp # Pacific Data Products
netcomm1 1676/tcp # netcomm1
netcomm1/netcomm2 1676/udp # netcomm1
, netcomm2

netcomm2
groupwise 1677/tcp # groupwise
groupwise 1677/udp # groupwise
prolink 1678/tcp # prolink
prolink 1678/udp # prolink
darcorp-lm 1679/tcp # darcorp-lm
darcorp-lm 1679/udp # darcorp-lm
microcom-sbp 1680/tcp # microcom-sbp
microcom-sbp 1680/udp # microcom-sbp
sd-elmd 1681/tcp # sd-elmd
sd-elmd 1681/udp # sd-elmd
lanyon-lantern 1682/tcp # lanyon-lantern
lanyon-lantern 1682/udp # lanyon-lantern
ncpm-hip 1683/tcp # ncpm-hip
ncpm-hip 1683/udp # ncpm-hip
snaresecure 1684/tcp # SnareSecure
snaresecure 1684/udp # SnareSecure
n2nremote 1685/tcp # n2nremote
n2nremote 1685/udp # n2nremote
cvmon 1686/tcp # cvmon
cvmon 1686/udp # cvmon
nsjtp-ctrl 1687/tcp # nsjtp-ctrl
nsjtp-ctrl 1687/udp # nsjtp-ctrl
nsjtp-data 1688/tcp # nsjtp-data
nsjtp-data 1688/udp # nsjtp-data
firefox 1689/tcp # firefox
firefox 1689/udp # firefox
ng-umds 1690/tcp # ng-umds
ng-umds 1690/udp # ng-umds
empire-empuma 1691/tcp # empire-empuma
empire-empuma 1691/udp # empire-empuma
sstsys-lm 1692/tcp # sstsys-lm
sstsys-lm 1692/udp # sstsys-lm
rrirtr 1693/tcp # rrirtr
rrirtr 1693/udp # rrirtr
rrimwm 1694/tcp # rrimwm
rrimwm 1694/udp # rrimwm
rrilwm 1695/tcp # rrilwm
rrilwm 1695/udp # rrilwm
rrifmm 1696/tcp # rrifmm
rrifmm 1696/udp # rrifmm
rrisat 1697/tcp # rrisat
rrisat 1697/udp # rrisat
rsvp-encap-1 1698/tcp # RSVP-ENCAPSULATION-1
rsvp-encap-1 1698/udp # RSVP-ENCAPSULATION-1
rsvp-encap-2 1699/tcp # RSVP-ENCAPSULATION-2
rsvp-encap-2 1699/udp # RSVP-ENCAPSULATION-2
mps-raft 1700/tcp # mps-raft
mps-raft 1700/udp # mps-raft
l2f/l2tp 1701/tcp # l2f
, Layer Two Tunneling Protocol (L2TP)

L2TP is MS's VPN protocol, replacing PPTP.
l2f/l2tp/ipsec 1701/udp # l2f
, Layer Two Tunneling Protocol (L2TP)

L2TP is MS's VPN protocol, replacing PPTP.
, IPSEC Setup

VPN negotiation port for IPSEC setup (eg: MS's L2TP VPN).
deskshare 1702/tcp # Deskshare
deskshare 1702/udp # Deskshare
hb-engine 1703/tcp # HB Engine
hb-engine 1703/udp # HB Engine
bcs-broker 1704/tcp # BCS Broker
bcs-broker 1704/udp # BCS Broker
slingshot 1705/tcp # Slingshot
slingshot 1705/udp # Slingshot
jetform 1706/tcp # Jetform
jetform 1706/udp # Jetform
vdmplay 1707/tcp # VDMPlay
vdmplay 1707/udp # VDMPlay
gat-lmd 1708/tcp # gat-lmd
gat-lmd 1708/udp # gat-lmd
centra 1709/tcp # Centra
centra 1709/udp # Centra
impera 1710/tcp # Impera
impera 1710/udp # Impera
pptconference 1711/tcp # PPT Conference
pptconference 1711/udp # PPT Conference
registrar 1712/tcp # Resource Monitoring Service
registrar 1712/udp # Resource Monitoring Service
conferencetalk 1713/tcp # ConferenceTalk
conferencetalk 1713/udp # ConferenceTalk
sesi-lm 1714/tcp # SESI License Manager
sesi-lm 1714/udp # SESI License Manager
houdini-lm 1715/tcp # Houdini License Manager
houdini-lm 1715/udp # Houdini License Manager
xmsg 1716/tcp # XMSG
xmsg 1716/udp # XMSG
fj-hdnet 1717/tcp # fj-hdnet
convoy/fj-hdnet 1717/udp # Convoy Clustering (WLBS)
Used in NT/Win2000 clustering.
, fj-hdnet
h323gatedisc 1718/tcp # H.323 Gatedisc
h323gatedisc 1718/udp # H.323 Gatedisc
h323gatestat 1719/tcp # H.323 Gatestat
h323gatestat 1719/udp # H.323 Gatestat
h323hostcall/livelan 1720/tcp # H.323 Hostcall

H.323 call setup protocol used by multimedia collaborative apps such as NetMeeting to establish and control a collaborative session. Session data transfer will use H.323 udp streaming (AKA: RealTime Protocol [RTP]).
, LiveLan (H.323 compliant)
h323hostcall 1720/udp # H.323 Hostcall

H.323 call setup protocol used by multimedia collaborative apps such as NetMeeting to establish and control a collaborative session. Session data transfer will use H.323 udp streaming (AKA: RealTime Protocol [RTP]).
caicci 1721/tcp # caicci
caicci 1721/udp # caicci
hks-lm 1722/tcp # HKS License Manager
hks-lm 1722/udp # HKS License Manager
pptpc 1723/tcp # PPTP Control Channel

NT's Point-to-Point-Tunneling Protocol, used for VPNs. Noted to be weak, due to non-changing random seed for RC4 streaming algorithm (used user's password for random seed, which does not change for each session). Captured streams could be xor'd against each other to recover the seed (user password). MS has replaced it with L2TP using tcp 1701.
pptpc/pptp 1723/udp # PPTP Control Channel

NT's Point-to-Point-Tunneling Protocol, used for VPNs. Noted to be weak, due to non-changing random seed for RC4 streaming algorithm (used user's password for random seed, which does not change for each session). Captured streams could be xor'd against each other to recover the seed (user password). MS has replaced it with L2TP using tcp 1701.
, pptp

pptp
csbphonemaster 1724/tcp # csbphonemaster
csbphonemaster 1724/udp # csbphonemaster
iden-ralp/pptp 1725/tcp # iden-ralp
, PPTP Data Port

See comments on pptpc (1723)
iden-ralp 1725/udp # iden-ralp
iberiagames 1726/tcp # IBERIAGAMES
iberiagames 1726/udp # IBERIAGAMES
winddx 1727/tcp # winddx
winddx 1727/udp # winddx
telindus 1728/tcp # TELINDUS
telindus 1728/udp # TELINDUS
citynl 1729/tcp # CityNL License Management
citynl 1729/udp # CityNL License Management
roketz 1730/tcp # roketz
roketz 1730/udp # roketz
msiccp 1731/tcp # MS ICCP (Audio Call Control Protocol)

Used to establish and maintain datastream sessions for multimedia collaborative apps such as NetMeeting. Concern is in its random-high selection for datastream udp ports for each session, complicating packet filtering decisions.
msiccp 1731/udp # MS ICCP (Audio Call Control Protocol)

Used to establish and maintain datastream sessions for multimedia collaborative apps such as NetMeeting. Concern is in its random-high selection for datastream udp ports for each session, complicating packet filtering decisions.
proxim 1732/tcp # proxim
proxim 1732/udp # proxim
siipat 1733/tcp # SIMS - SIIPAT Protocol for Alarms
siipat 1733/udp # SIMS - SIIPAT Protocol for Alarms
cambertx-lm 1734/tcp # Camber Corporation License Manager
cambertx-lm 1734/udp # Camber Corporation License Manager
privatechat 1735/tcp # PrivateChat
privatechat 1735/udp # PrivateChat
street-stream 1736/tcp # Street-Stream
street-stream 1736/udp # Street-Stream
ultimad 1737/tcp # UltiMad
ultimad 1737/udp # UltiMad
gamegen1 1738/tcp # GameGen1
gamegen1 1738/udp # GameGen1
webaccess 1739/tcp # webaccess
webaccess 1739/udp # webaccess
encore 1740/tcp # Encore
encore 1740/udp # Encore
cisco-net-mgmt 1741/tcp # Cisco Network Mgmt
cisco-net-mgmt 1741/udp # Cisco Network Mgmt
3Com-nsd 1742/tcp # 3Com-nsd
3Com-nsd 1742/udp # 3Com-nsd
cinegrfx-lm 1743/tcp # Cinema Graphics License Manager
cinegrfx-lm 1743/udp # Cinema Graphics License Manager
ncpm-ft 1744/tcp # ncpm-ft
ncpm-ft 1744/udp # ncpm-ft
remote-winsock 1745/tcp # Remote-WINSOCK

Used as a Winsock control channel between internal clients and site proxy. Example is MS-Proxy, where it establishes Winsock client and proxy connection, exchanges LAT info, etc.
remote-winsock 1745/udp # Remote-WINSOCK

Used as a Winsock control channel between internal clients and site proxy. Example is MS-Proxy, where it establishes Winsock client and proxy connection, exchanges LAT info, etc.
ftrapid-1 1746/tcp # ftrapid-1
ftrapid-1 1746/udp # ftrapid-1
ftrapid-2 1747/tcp # ftrapid-2
ftrapid-2 1747/udp # ftrapid-2
oracle-em1 1748/tcp # oracle-em1
oracle-em1 1748/udp # oracle-em1
aspen-services 1749/tcp # aspen-services
aspen-services 1749/udp # aspen-services
sslp 1750/tcp # Simple Socket Library's PortMaster
sslp 1750/udp # Simple Socket Library's PortMaster
swiftnet 1751/tcp # SwiftNet
swiftnet 1751/udp # SwiftNet
lofr-lm 1752/tcp # Leap of Faith Research License Manager
lofr-lm 1752/udp # Leap of Faith Research License Manager
translogic-lm 1753/tcp # Translogic License Manager
translogic-lm 1753/udp # Translogic License Manager
oracle-em2 1754/tcp # oracle-em2
oracle-em2 1754/udp # oracle-em2
ms-streaming 1755/tcp # Microsoft NetShow Command Port

Server control port. Two conflicting reports on port server sets up as data stream back to client:
- On udp 1755 to the client
- On random udp between 1024-5000
ms-streaming 1755/udp # Microsoft NetShow Command Port

Server control port. Two conflicting reports on port server sets up as data stream back to client:
- On udp 1755 to the client
- On random udp between 1024-5000
capfast-lmd 1756/tcp # capfast-lmd
capfast-lmd 1756/udp # capfast-lmd
cnhrp 1757/tcp # cnhrp
cnhrp 1757/udp # cnhrp
tftp-mcast 1758/tcp # tftp-mcast
tftp-mcast 1758/udp # tftp-mcast
spss-lm 1759/tcp # SPSS License Manager
spss-lm 1759/udp # SPSS License Manager
www-ldap-gw 1760/tcp # www-ldap-gw
www-ldap-gw 1760/udp # www-ldap-gw
cft-0 1761/tcp # cft-0
cft-0 1761/udp # cft-0
cft-1 1762/tcp # cft-1
cft-1 1762/udp # cft-1
cft-2 1763/tcp # cft-2
cft-2 1763/udp # cft-2
cft-3 1764/tcp # cft-3
cft-3 1764/udp # cft-3
cft-4 1765/tcp # cft-4
cft-4 1765/udp # cft-4
cft-5 1766/tcp # cft-5
cft-5 1766/udp # cft-5
cft-6 1767/tcp # cft-6
cft-6 1767/udp # cft-6
cft-7 1768/tcp # cft-7
cft-7 1768/udp # cft-7
bmc-net-adm 1769/tcp # bmc-net-adm
bmc-net-adm 1769/udp # bmc-net-adm
bmc-net-svc 1770/tcp # bmc-net-svc
bmc-net-svc 1770/udp # bmc-net-svc
vaultbase 1771/tcp # vaultbase
vaultbase 1771/udp # vaultbase
essweb-gw 1772/tcp # EssWeb Gateway
essweb-gw 1772/udp # EssWeb Gateway
kmscontrol 1773/tcp # KMSControl
kmscontrol 1773/udp # KMSControl
global-dtserv 1774/tcp # global-dtserv
global-dtserv 1774/udp # global-dtserv
femis 1776/tcp # Fed Emergency Mgmt Info System
femis 1776/udp # Fed Emergency Mgmt Info System
powerguardian 1777/tcp # PowerGuardian
powerguardian 1777/udp # PowerGuardian
prodigy-internet/prodigy-intrnet 1778/tcp # prodigy-internet
, prodigy-intrnet

prodigy-internet
prodigy-internet/prodigy-intrnet 1778/udp # prodigy-internet
, prodigy-intrnet

prodigy-internet
pharmasoft 1779/tcp # pharmasoft
pharmasoft 1779/udp # pharmasoft
dpkeyserv 1780/tcp # DP Key Server
dpkeyserv 1780/udp # DP Key Server
answersoft-lm 1781/tcp # AnswerSoft License Manager
answersoft-lm 1781/udp # AnswerSoft License Manager
hp-hcip 1782/tcp # hp-hcip
hp-hcip 1782/udp # hp-hcip
fjris 1783/tcp # Fujitsu Remote Install Service
fjris 1783/udp # Fujitsu Remote Install Service
finle-lm 1784/tcp # Finle License Manager
finle-lm 1784/udp # Finle License Manager
windlm 1785/tcp # Wind River Systems License Manager
windlm 1785/udp # Wind River Systems License Manager
funk-logger 1786/tcp # funk-logger
funk-logger 1786/udp # funk-logger
funk-license 1787/tcp # funk-license
funk-license 1787/udp # funk-license
psmond 1788/tcp # psmond
psmond 1788/udp # psmond
hello 1789/tcp # hello
hello 1789/udp # hello
nmsp 1790/tcp # Narrative Media Streaming Protocol
nmsp 1790/udp # Narrative Media Streaming Protocol
ea1 1791/tcp # EA1
ea1 1791/udp # EA1
ibm-dt-2 1792/tcp # ibm-dt-2
ibm-dt-2 1792/udp # ibm-dt-2
rsc-robot 1793/tcp # rsc-robot
rsc-robot 1793/udp # rsc-robot
cera-bcm 1794/tcp # cera-bcm
cera-bcm 1794/udp # cera-bcm
dpi-proxy 1795/tcp # dpi-proxy
dpi-proxy 1795/udp # dpi-proxy
vocaltec-admin 1796/tcp # Vocaltec Server Administration
vocaltec-admin 1796/udp # Vocaltec Server Administration
uma 1797/tcp # UMA
uma 1797/udp # UMA
etp 1798/tcp # Event Transfer Protocol
etp 1798/udp # Event Transfer Protocol
netrisk 1799/tcp # NETRISK
netrisk 1799/udp # NETRISK
ansys-lm 1800/tcp # ANSYS-License manager
ansys-lm 1800/udp # ANSYS-License manager
msmq 1801/tcp # Microsoft Message Que
msmq 1801/udp # Microsoft Message Que
concomp1 1802/tcp # ConComp1
concomp1 1802/udp # ConComp1
hp-hcip-gwy 1803/tcp # HP-HCIP-GWY
hp-hcip-gwy 1803/udp # HP-HCIP-GWY
enl 1804/tcp # ENL
enl 1804/udp # ENL
enl-name 1805/tcp # ENL-Name
enl-name 1805/udp # ENL-Name
musiconline 1806/tcp # Musiconline
musiconline 1806/udp # Musiconline
fhsp 1807/tcp # Fujitsu Hot Standby Protocol
fhsp 1807/udp # Fujitsu Hot Standby Protocol
oracle-vp2 1808/tcp # Oracle-VP2
oracle-vp2 1808/udp # Oracle-VP2
oracle-vp1 1809/tcp # Oracle-VP1
oracle-vp1 1809/udp # Oracle-VP1
jerand-lm 1810/tcp # Jerand License Manager
jerand-lm 1810/udp # Jerand License Manager
scientia-sdb 1811/tcp # Scientia-SDB
scientia-sdb 1811/udp # Scientia-SDB
radius 1812/tcp # RADIUS
radius/radius 1812/udp # RADIUS
, radius

radius, radius authentication protocol (iana sanctioned), radius authentication protocol (rfc 2138)
radius-acct 1813/tcp # RADIUS Accounting
radius-acct/radius-acct 1813/udp # RADIUS Accounting
, radius-acct

radius accounting protocol (rfc 2139), radius accounting, radius accounting protocol (iana sanctioned)
tdp-suite 1814/tcp # TDP Suite
tdp-suite 1814/udp # TDP Suite
mmpft 1815/tcp # MMPFT
mmpft 1815/udp # MMPFT
harp 1816/tcp # HARP
harp 1816/udp # HARP
rkb-oscs 1817/tcp # RKB-OSCS
rkb-oscs 1817/udp # RKB-OSCS
etftp 1818/tcp # Enhanced TFTP
etftp 1818/udp # Enhanced TFTP
plato-lm 1819/tcp # Plato License Manager
plato-lm 1819/udp # Plato License Manager
mcagent 1820/tcp # MC Agent
mcagent 1820/udp # MC Agent
donnyworld 1821/tcp # DonnyWorld
donnyworld 1821/udp # DonnyWorld
es-elmd 1822/tcp # es-elmd
es-elmd 1822/udp # es-elmd
unisys-lm 1823/tcp # Unisys Natural Language LM
unisys-lm 1823/udp # Unisys Natural Language LM
metrics-pas 1824/tcp # metrics-pas
metrics-pas 1824/udp # metrics-pas
direcpc-video/ardusmu1 1825/tcp # DirecPC Video
, ARDUS Multicast
direcpc-video/ardusmu1 1825/udp # DirecPC Video
, ARDUS Multicast
ardt 1826/tcp # ARDT
ardt 1826/udp # ARDT
asi 1827/tcp # ASI
asi/asi 1827/udp # ASI
, asi

asi
itm-mcell-u 1828/tcp # itm-mcell-u
itm-mcell-u 1828/udp # itm-mcell-u
optika-emedia 1829/tcp # Opika eMedia
optika-emedia 1829/udp # Opika eMedia
net8-cman 1830/tcp # Oracle Net8 Cman Admin
net8-cman 1830/udp # Oracle Net8 Cman Admin
myrtle 1831/tcp # Myrtle
myrtle 1831/udp # Myrtle
tht-treasure 1832/tcp # ThoughtTreasure
tht-treasure 1832/udp # ThoughtTreasure
udpradio 1833/tcp # udpradio

udpradio
udpradio/udpradio 1833/udp # UDP Radio
, udpradio

udpradio
ardusuni 1834/tcp # ARDUS Unicast
ardusuni 1834/udp # ARDUS Unicast
ste-smsc 1836/tcp # ste-smsc
ste-smsc 1836/udp # ste-smsc
csoft1 1837/tcp # csoft1
csoft1 1837/udp # csoft1
talnet 1838/tcp # TALNET
talnet 1838/udp # TALNET
netopia-vo1 1839/tcp # netopia-vo1
netopia-vo1 1839/udp # netopia-vo1
netopia-vo2 1840/tcp # netopia-vo2
netopia-vo2 1840/udp # netopia-vo2
netopia-vo3 1841/tcp # netopia-vo3
netopia-vo3 1841/udp # netopia-vo3
netopia-vo4 1842/tcp # netopia-vo4
netopia-vo4 1842/udp # netopia-vo4
netopia-vo5 1843/tcp # netopia-vo5
netopia-vo5 1843/udp # netopia-vo5
direcpc-dll 1844/tcp # DirectPC-DLL
direcpc-dll 1844/udp # DirectPC-DLL
gsi 1850/tcp # GSI
gsi 1850/udp # GSI
ctcd 1851/tcp # ctcd
ctcd 1851/udp # ctcd
sunscalar-svc 1860/tcp # SunSCALAR Services
sunscalar-svc 1860/udp # SunSCALAR Services
lecroy-vicp 1861/tcp # LeCroy VICP
lecroy-vicp 1861/udp # LeCroy VICP
techra-server 1862/tcp # Techra Server
techra-server 1862/udp # Techra Server
msnp 1863/tcp # MSNP
msnp 1863/udp # MSNP
paradym-31port 1864/tcp # Paradym 31 Port
paradym-31port 1864/udp # Paradym 31 Port
entp 1865/tcp # ENTP
entp 1865/udp # ENTP
sunscalar-dns 1870/tcp # SunSCALAR DNS Service
sunscalar-dns 1870/udp # SunSCALAR DNS Service
canocentral0 1871/tcp # Cano Central 0
canocentral0 1871/udp # Cano Central 0
canocentral1 1872/tcp # Cano Central 1
canocentral1 1872/udp # Cano Central 1
fjmpjps 1873/tcp # fjmpjps
fjmpjps 1873/udp # fjmpjps
fjswapsnp 1874/tcp # fjswapsnp
fjswapsnp 1874/udp # fjswapsnp
ibm-mqseries2 1881/tcp # IBM MQSeries
ibm-mqseries2 1881/udp # IBM MQSeries
vista-4gl 1895/tcp # Vista 4GL
vista-4gl 1895/udp # Vista 4GL
mc2studios 1896/tcp # MC2Studios
mc2studios 1896/udp # MC2Studios
ssdp 1900/tcp # SSDP
ssdp 1900/udp # SSDP
fjicl-tep-a 1901/tcp # Fujitsu ICL Terminal Emulator Program A
fjicl-tep-a 1901/udp # Fujitsu ICL Terminal Emulator Program A
fjicl-tep-b 1902/tcp # Fujitsu ICL Terminal Emulator Program B
fjicl-tep-b 1902/udp # Fujitsu ICL Terminal Emulator Program B
linkname 1903/tcp # Local Link Name Resolution
linkname 1903/udp # Local Link Name Resolution
fjicl-tep-c 1904/tcp # Fujitsu ICL Terminal Emulator Program C
fjicl-tep-c 1904/udp # Fujitsu ICL Terminal Emulator Program C
sugp 1905/tcp # Secure UP.Link Gateway Protocol
sugp 1905/udp # Secure UP.Link Gateway Protocol
tpmd 1906/tcp # TPortMapperReq
tpmd 1906/udp # TPortMapperReq
intrastar 1907/tcp # IntraSTAR
intrastar 1907/udp # IntraSTAR
dawn 1908/tcp # Dawn
dawn 1908/udp # Dawn
global-wlink 1909/tcp # Global World Link
global-wlink 1909/udp # Global World Link
ultrabac 1910/tcp # ultrabac
ultrabac 1910/udp # ultrabac
mtp 1911/tcp # Starlight Net Multimedia Tx Protocol
mtp 1911/udp # Starlight Net Multimedia Tx Protocol
rhp-iibp 1912/tcp # rhp-iibp
rhp-iibp 1912/udp # rhp-iibp
armadp 1913/tcp # Armadp
armadp 1913/udp # Armadp
elm-momentum 1914/tcp # Elm-Momentum
elm-momentum 1914/udp # Elm-Momentum
facelink 1915/tcp # FACELINK
facelink 1915/udp # FACELINK
persona 1916/tcp # Persoft Persona
persona 1916/udp # Persoft Persona
noagent 1917/tcp # NoAgent
noagent 1917/udp # NoAgent
can-nds 1918/tcp # Candle Directory Service - NDS
can-nds 1918/udp # Candle Directory Service - NDS
can-dch 1919/tcp # Candle Directory Service - DCH
can-dch 1919/udp # Candle Directory Service - DCH
can-ferret 1920/tcp # Candle Directory Service - FERRET
can-ferret 1920/udp # Candle Directory Service - FERRET
noadmin 1921/tcp # NoAdmin
noadmin 1921/udp # NoAdmin
tapestry 1922/tcp # Tapestry
tapestry 1922/udp # Tapestry
spice 1923/tcp # SPICE
spice 1923/udp # SPICE
xiip 1924/tcp # XIIP
xiip 1924/udp # XIIP
driveappserver 1930/tcp # Drive App Server
driveappserver 1930/udp # Drive App Server
amdsched 1931/tcp # AMD Scheduler
amdsched 1931/udp # AMD Scheduler
close-combat 1944/tcp # Close Combat
close-combat 1944/udp # Close Combat
dialogic-elmd 1945/tcp # dialogic-elmd
dialogic-elmd 1945/udp # dialogic-elmd
tekpls 1946/tcp # tekpls
tekpls 1946/udp # tekpls
hlserver 1947/tcp # HL Server
hlserver 1947/udp # HL Server
eye2eye 1948/tcp # eye2eye
eye2eye 1948/udp # eye2eye
ismaeasdaqlive 1949/tcp # ISMA Easdaq Live
ismaeasdaqlive 1949/udp # ISMA Easdaq Live
ismaeasdaqtest 1950/tcp # ISMA Easdaq Test
ismaeasdaqtest 1950/udp # ISMA Easdaq Test
bcs-lmserver 1951/tcp # bcs-lmserver
bcs-lmserver 1951/udp # bcs-lmserver
mpnjsc 1952/tcp # mpnjsc
mpnjsc 1952/udp # mpnjsc
rapidbase 1953/tcp # Rapid Base
rapidbase 1953/udp # Rapid Base
bts-appserver 1961/tcp # BTS App Server
bts-appserver 1961/udp # BTS App Server
solid-e-engine 1964/tcp # Solid E Engine
solid-e-engine 1964/udp # Solid E Engine
tivoli-npm 1965/tcp # Tivoli NPM
tivoli-npm 1965/udp # Tivoli NPM
slush 1966/tcp # Slush
slush 1966/udp # Slush
sns-quote 1967/tcp # SNS Quote
sns-quote 1967/udp # SNS Quote
nfr-flightjacket 1968/tcp # NFR FlightJacket (New Control Port)

Used for mgmt of NFR FlightJacket Intrusion Detection Systems.

NFR Ports: tcp 1968, 2008, 2009
/udp #
intersys-cache 1972/tcp # Cache
intersys-cache 1972/udp # Cache
dlsrap 1973/tcp # Data Link Switching Remote Access Protocol
dlsrap 1973/udp # Data Link Switching Remote Access Protocol
drp 1974/tcp # DRP
drp 1974/udp # DRP
banner/tcoflashagent 1975/tcp # Banner Ad Download

Several progs use this port to download banner ads, plus pull some data back up to server (such as what ads were clicked on, etc.). The client piece supporting this is advert.dll. Two progs using this are NetVampire and Go!Zilla.
, TCO Flash Agent
banner/tcoflashagent 1975/udp # Banner Ad Download

Several progs use this port to download banner ads, plus pull some data back up to server (such as what ads were clicked on, etc.). The client piece supporting this is advert.dll. Two progs using this are NetVampire and Go!Zilla.
, TCO Flash Agent
tcoregagent 1976/tcp # TCO Reg Agent
tcoregagent 1976/udp # TCO Reg Agent
tcoaddressbook 1977/tcp # TCO Address Book
tcoaddressbook 1977/udp # TCO Address Book
unisql 1978/tcp # UniSQL
unisql 1978/udp # UniSQL
unisql-java 1979/tcp # UniSQL Java
unisql-java 1979/udp # UniSQL Java
shockwave-trojan 1981/tcp # Backdoor, planted via Shockwave Trojan
Note: This is a backdoor port planted via infected Shockwave software.
shockwave-trojan 1981/udp # Backdoor, planted via Shockwave Trojan
Note: This is a backdoor port planted via infected Shockwave software.
bb 1984/tcp # BB
bb 1984/udp # BB
hsrp/foliocorp 1985/tcp # Hot Standby Router Protocol
, Folio Remote Server
hsrp/foliocorp 1985/udp # Hot Standby Router Protocol
, Folio Remote Server
licensedaemon 1986/tcp # Cisco License Manager
licensedaemon 1986/udp # Cisco License Manager
tr-rsrb-p1 1987/tcp # Cisco RSRB Priority 1 port
tr-rsrb-p1 1987/udp # Cisco RSRB Priority 1 port
tr-rsrb-p2 1988/tcp # Cisco RSRB Priority 2 port
tr-rsrb-p2 1988/udp # Cisco RSRB Priority 2 port
tr-rsrb-p3/mshnet 1989/tcp # Cisco RSRB Priority 3 port
, MHSnet system
tr-rsrb-p3/mshnet 1989/udp # Cisco RSRB Priority 3 port
, MHSnet system
stun-p1 1990/tcp # Cisco STUN Priority 1 port
stun-p1 1990/udp # Cisco STUN Priority 1 port
stun-p2 1991/tcp # Cisco STUN Priority 2 port
stun-p2 1991/udp # Cisco STUN Priority 2 port
stun-p3/ipsendmsg 1992/tcp # Cisco STUN Priority 3 port
, IPsendmsg
stun-p3/ipsendmsg 1992/udp # Cisco STUN Priority 3 port
, IPsendmsg
snmp-tcp-port 1993/tcp # Cisco SNMP TCP port
snmp-tcp-port 1993/udp # Cisco SNMP TCP port
stun-port 1994/tcp # Cisco serial tunnel port
stun-port 1994/udp # Cisco serial tunnel port
perf-port 1995/tcp # Cisco perf port
perf-port 1995/udp # Cisco perf port
tr-rsrb-port 1996/tcp # Cisco Remote SRB port
tr-rsrb-port 1996/udp # Cisco Remote SRB port
gdp-port 1997/tcp # Cisco Gateway Discovery Protocol
gdp-port 1997/udp # Cisco Gateway Discovery Protocol
x25-svc-port 1998/tcp # Cisco X.25 service (XOT)
x25-svc-port 1998/udp # Cisco X.25 service (XOT)
tcp-id-port 1999/tcp # Cisco identification port
tcp-id-port 1999/udp # Cisco identification port
callbook/openwin/MikroT Router OS Bandwidth Test Server 2000/tcp # Callbook
, Sun Openwin

Similar to X11, used for remote OpenWindows connections. Vulnerable to spoofing and session hijacking.
,
callbook/openwin 2000/udp # Callbook
, Sun Openwin

Similar to X11, used for remote OpenWindows connections. Vulnerable to spoofing and session hijacking.
glimpse/wizard 2001/tcp # Glimpse Server Search Engine
, Curry
wizard/dc/wizard 2001/udp # Curry
, DC
, wizard

curry
globe 2002/tcp # Globe
globe 2002/udp # Globe
mailbox 2004/tcp # Mailbox
emce 2004/udp # CCWS MM Conf
berknet 2005/tcp # Berknet
oracle 2005/udp # Oracle
invokator 2006/tcp # Invokator
raid-cc 2006/udp # RAID-CC
dectalk 2007/tcp # DecTalk
raid-am 2007/udp # RAID-AM
nfr-flightjacket 2008/tcp # NFR FlightJacket (Old Control Port)

Open on NFR FlightJacket IDS agent, for control comms from manager.

NFR Ports: tcp 1968, 2008, 2009
conf/terminaldb 2008/udp # conf
, terminaldb
nfr-flightjacket/news 2009/tcp # NFR FlightJacket (Old Control Port)

Open on NFR FlightJacket IDS Manager, to receive comms from agents.

NFR Ports: tcp 1968, 2008, 2009
, news
whosockami 2009/udp # whosockami
search 2010/tcp # search
pipe_server 2010/udp # pipe_server
raid-cc 2011/tcp # RAID-CC
servserv 2011/udp # servserv
ttyinfo 2012/tcp # ttyinfo
raid-ac 2012/udp # RAID-AC
raid-am 2013/tcp # RAID-AM
raid-cd 2013/udp # RAID-CD
troff 2014/tcp # troff
raid-sf 2014/udp # RAID-SF
cypress 2015/tcp # cypress
raid-cs 2015/udp # RAID-CS
bootserver 2016/tcp # bootserver
bootserver 2016/udp # bootserver
cypress-stat 2017/tcp # cypress-stat
bootclient 2017/udp # bootclient
terminaldb 2018/tcp # terminaldb
rellpack 2018/udp # rellpack
whosockami 2019/tcp # whosockami
about 2019/udp # about
xinupageserver 2020/tcp # xinupageserver
xinupageserver 2020/udp # xinupageserver
servexec 2021/tcp # servexec
xinuexpansion1 2021/udp # xinuexpansion1
down 2022/tcp # down
xinuexpansion2 2022/udp # xinuexpansion2
xinuexpansion3 2023/tcp # xinuexpansion3
xinuexpansion3 2023/udp # xinuexpansion3
xinuexpansion4 2024/tcp # xinuexpansion4
xinuexpansion4 2024/udp # xinuexpansion4
ellpack 2025/tcp # ell pack
xribs 2025/udp # xribs
scrabble 2026/tcp # scrabble
scrabble 2026/udp # scrabble
shadowserver 2027/tcp # shadow server
shadowserver 2027/udp # shadow server
submitserver 2028/tcp # submit server
submitserver 2028/udp # submit server
device2 2030/tcp # device2
device2 2030/udp # device2
blackboard 2032/tcp # blackboard
blackboard 2032/udp # blackboard
glogger 2033/tcp # glogger
glogger 2033/udp # glogger
scoremgr 2034/tcp # score manager
scoremgr 2034/udp # score manager
imsldoc 2035/tcp # imsldoc
imsldoc 2035/udp # imsldoc
objectmanager 2038/tcp # object manager
objectmanager 2038/udp # object manager
lam 2040/tcp # lab
lam 2040/udp # lab
interbase 2041/tcp # interbase
interbase 2041/udp # interbase
isis 2042/tcp # isis
isis 2042/udp # isis
isis-bcast 2043/tcp # isis-bcast
isis-bcast 2043/udp # isis-bcast
rimsl 2044/tcp # rimsl
rimsl 2044/udp # rimsl
cdfunc 2045/tcp # cdfunc
cdfunc 2045/udp # cdfunc
sdfunc 2046/tcp # sdfunc
sdfunc 2046/udp # sdfunc
dls 2047/tcp # dls
dls 2047/udp # dls
dls-monitor 2048/tcp # dls-monitor
dls-monitor 2048/udp # dls-monitor
shilp/nfs 2049/tcp # shilp
, NFS - Sun Microsystems

Default port for rpc NFS.
- NFS relies on client host to have already auth'd user (and it assumes there are no rogue hosts or users on network)
- NFS doesn't recheck the client's auth on every request (thus attacker with forged or captured file handle can access exports, even after access perms to original client are terminated [because NFS has no method to cancel a file handle]).
- Intruder bypass the portmapper and directly access tcp 2049, or highport 4045.

CERT Advisory: 95.15.
shilp/nfs/shilp 2049/udp # shilp
, NFS - Sun Microsystems

Default port for rpc NFS.
- NFS relies on client host to have already auth'd user (and it assumes there are no rogue hosts or users on network)
- NFS doesn't recheck the client's auth on every request (thus attacker with forged or captured file handle can access exports, even after access perms to original client are terminated [because NFS has no method to cancel a file handle]).
- Intruder bypass the portmapper and directly access tcp 2049, or highport 4045.

CERT Advisory: 95.15.
, shilp

networked file system, nfs server daemon (clts), nfs server daemon, network file system - sun microsystems, sun nfs, nfs server
knetd 2053/tcp # Kerberos de-multiplexer
/udp #
rc5des/distrib-netassholes 2064/tcp # RC5 & DES Cracker; Distributed

Port for controlling distributed rc5des password cracking clients. The rc5des prog is a distributed password cracking client package, designed to brute force RC5 and DES encrypted strings using multiple cracking hosts. If port is found open on a host, confirm cracking software presence by locating files: rc5desg.exe, buff-in.rc5, boff-out.rc5
, distrib-netassholes

a group of lamers working on a silly closed-source client for solving the rsa cryptographic challenge. this is the keyblock proxy port.
rc5des 2064/udp # RC5 & DES Cracker; Distributed

Port for controlling distributed rc5des password cracking clients. The rc5des prog is a distributed password cracking client package, designed to brute force RC5 and DES encrypted strings using multiple cracking hosts. If port is found open on a host, confirm cracking software presence by locating files: rc5desg.exe, buff-in.rc5, boff-out.rc5
dlsrpn 2065/tcp # Data Link Switch Read Port Number
dlsrpn 2065/udp # Data Link Switch Read Port Number
dlswpn 2067/tcp # Data Link Switch Write Port Number
dlswpn 2067/udp # Data Link Switch Write Port Number
lrp 2090/tcp # Load Report Protocol
lrp 2090/udp # Load Report Protocol
prp 2091/tcp # PRP
prp 2091/udp # PRP
descent3 2092/tcp # Descent 3
descent3 2092/udp # Descent 3
nbx-cc 2093/tcp # NBX CC
nbx-cc 2093/udp # NBX CC
nbx-au 2094/tcp # NBX AU
nbx-au 2094/udp # NBX AU
nbx-ser 2095/tcp # NBX SER
nbx-ser 2095/udp # NBX SER
nbx-dir 2096/tcp # NBX DIR
nbx-dir 2096/udp # NBX DIR
jetformpreview 2097/tcp # Jet Form Preview
jetformpreview 2097/udp # Jet Form Preview
dialog-port 2098/tcp # Dialog Port
dialog-port 2098/udp # Dialog Port
h2250-annex-g 2099/tcp # H.225.0 Annex G
h2250-annex-g 2099/udp # H.225.0 Annex G
amiganetfs 2100/tcp # amiganetfs
amiganetfs 2100/udp # amiganetfs
rtcm-sc104 2101/tcp # rtcm-sc104
rtcm-sc104 2101/udp # rtcm-sc104
zephyr-srv 2102/tcp # Zephyr server
zephyr-srv 2102/udp # Zephyr server
zephyr-clt 2103/tcp # Zephyr serv-hm connection
zephyr-clt 2103/udp # Zephyr serv-hm connection
zephyr-hm 2104/tcp # Zephyr hostmanager
zephyr-hm 2104/udp # Zephyr hostmanager
eklogin/minipay 2105/tcp # Kerberos encrypted rlogon
, MiniPay
minipay/minipay 2105/udp # MiniPay
, minipay

kerberos (v4) encrypted rlogin, minipay
mzap 2106/tcp # MZAP
mzap/mzap 2106/udp # MZAP
, mzap

kerberos (v4) encrypted rshell, mzap
bintec-admin 2107/tcp # BinTec Admin
bintec-admin 2107/udp # BinTec Admin
ergolight 2108/tcp # Ergolight
ergolight/comcam 2108/udp # Ergolight
, comcam

comcam, kerberos (v4) remote initialization
x-bone-api 2165/tcp # X-Bone API
x-bone-api 2165/udp # X-Bone API
mc-gt-srv 2180/tcp # Millicent Vendor Gateway Server
mc-gt-srv 2180/udp # Millicent Vendor Gateway Server
eforward 2181/tcp # eforward
eforward 2181/udp # eforward
ici 2200/tcp # ICI
ici 2200/udp # ICI
ats 2201/tcp # Advanced Training System Program
ats 2201/udp # Advanced Training System Program
imtc-map 2202/tcp # Int. Multimedia Teleconf. Cosortium
imtc-map 2202/udp # Int. Multimedia Teleconf. Cosortium
kali 2213/tcp # Kali
kali 2213/udp # Kali
ganymede 2220/tcp # Ganymede
ganymede 2220/udp # Ganymede
rockwell-csp1/unreg-ab1 2221/tcp # Rockwell CSP1
, Allen-Bradley unregistered port
rockwell-csp1/unreg-ab1 2221/udp # Rockwell CSP1
, Allen-Bradley unregistered port
rockwell-csp2/unreg-ab2/DirectAdmin 2222/tcp # Rockwell CSP2
, Allen-Bradley unregistered port
, Direct Admin - http://www.directadmin.com
rockwell-csp2/unreg-ab2 2222/udp # Rockwell CSP2
, Allen-Bradley unregistered port
rockwell-csp3/inreg-ab3 2223/tcp # Rockwell CSP3
, Allen-Bradley unregistered port
rockwell-csp3/inreg-ab3 2223/udp # Rockwell CSP3
, Allen-Bradley unregistered port
ivs-video 2232/tcp # IVS Video default
ivs-video 2232/udp # IVS Video default
infocrypt 2233/tcp # INFOCRYPT
infocrypt 2233/udp # INFOCRYPT
directplay 2234/tcp # DirectPlay
directplay 2234/udp # DirectPlay
sercomm-wlink 2235/tcp # Sercomm-WLink
sercomm-wlink 2235/udp # Sercomm-WLink
nani 2236/tcp # Nani
nani 2236/udp # Nani
optech-port1-lm 2237/tcp # Optech Port1 License Manager
optech-port1-lm 2237/udp # Optech Port1 License Manager
aviva-sna 2238/tcp # AVIVA SNA SERVER
aviva-sna 2238/udp # AVIVA SNA SERVER
imagequery 2239/tcp # Image Query
imagequery 2239/udp # Image Query
recipe 2240/tcp # Recipe
recipe 2240/udp # Recipe
ivsd 2241/tcp # IVS Daemon
ivsd 2241/udp # IVS Daemon
foliocorp 2242/tcp # Folio Remote Server
foliocorp 2242/udp # Folio Remote Server
magicom 2243/tcp # Magicom Protocol
magicom 2243/udp # Magicom Protocol
nmsserver/ctaccess 2244/tcp # NMS Server
, Natural MicroSystem CTAccess Server, www.nmscommunications.com
nmsserver 2244/udp # NMS Server
hao 2245/tcp # HaO
hao 2245/udp # HaO
xmquery 2279/tcp # xmquery
xmquery 2279/udp # xmquery
lnvpoller 2280/tcp # LNVPOLLER
lnvpoller 2280/udp # LNVPOLLER
lnvconsole 2281/tcp # LNVCONSOLE
lnvconsole 2281/udp # LNVCONSOLE
lnvalarm 2282/tcp # LNVALARM
lnvalarm 2282/udp # LNVALARM
lnvstatus 2283/tcp # LNVSTATUS
lnvstatus 2283/udp # LNVSTATUS
lnvmaps 2284/tcp # LNVMAPS
lnvmaps 2284/udp # LNVMAPS
lnvmailmon 2285/tcp # LNVMAILMON
lnvmailmon 2285/udp # LNVMAILMON
nas-metering 2286/tcp # NAS-Metering
nas-metering 2286/udp # NAS-Metering
dna 2287/tcp # DNA
dna 2287/udp # DNA
netml 2288/tcp # NETML
netml 2288/udp # NETML
konshus-lm 2294/tcp # Konsus License Manager (FLEX)
konshus-lm 2294/udp # Konsus License Manager (FLEX)
advant-lm 2295/tcp # Advant License Manager
advant-lm 2295/udp # Advant License Manager
theta-lm 2296/tcp # Theta License Manager (Rainbow)
theta-lm 2296/udp # Theta License Manager (Rainbow)
d2k-datamover1 2297/tcp # D2K DataMover1
d2k-datamover1 2297/udp # D2K DataMover1
d2k-datamover2 2298/tcp # D2K DataMover2
d2k-datamover2 2298/udp # D2K DataMover2
pc-telecommute 2299/tcp # PC Telecommute
pc-telecommute 2299/udp # PC Telecommute
cvmmon 2300/tcp # CVMMON
cvmmon 2300/udp # CVMMON
cpq-wbem 2301/tcp # Compaq HTTP
cpq-wbem 2301/udp # Compaq HTTP
binderysupport 2302/tcp # Bindery Support
binderysupport 2302/udp # Bindery Support
proxy-gateway 2303/tcp # Proxy Gateway
proxy-gateway 2303/udp # Proxy Gateway
attachmate-uts 2304/tcp # Attachmate UTS
attachmate-uts 2304/udp # Attachmate UTS
mt-scaleserver 2305/tcp # MT ScaleServer
mt-scaleserver 2305/udp # MT ScaleServer
tappi-boxnet 2306/tcp # TAPPI BoxNet
tappi-boxnet 2306/udp # TAPPI BoxNet
pehelp 2307/tcp # pehelp
pehelp 2307/udp # pehelp
sdhelp 2308/tcp # sdhelp
sdhelp 2308/udp # sdhelp
sdserver 2309/tcp # SD Server
sdserver 2309/udp # SD Server
sdclient 2310/tcp # SD Client
sdclient 2310/udp # SD Client
messageserver/messageservice 2311/tcp # Message Service
, messageservice

message service
messageserver/messageservice 2311/udp # Message Service
, messageservice

message service
iapp 2313/tcp # IAPP
iapp 2313/udp # IAPP
cr-websystems 2314/tcp # CR WebSystems
cr-websystems 2314/udp # CR WebSystems
precise-sft 2315/tcp # Precise Sft.
precise-sft 2315/udp # Precise Sft.
sent-lm 2316/tcp # SENT License Manager
sent-lm 2316/udp # SENT License Manager
attachmate-g32 2317/tcp # Attachmate G32
attachmate-g32 2317/udp # Attachmate G32
cadencecontrol 2318/tcp # Cadence Control
cadencecontrol 2318/udp # Cadence Control
infolibria 2319/tcp # InfoLibria
infolibria 2319/udp # InfoLibria
siebel-ns 2320/tcp # Siebel NS
siebel-ns 2320/udp # Siebel NS
rdlap 2321/tcp # RDLAP
rdlap/rdlap 2321/udp # RDLAP
, rdlap

rdlap
ofsd 2322/tcp # ofsd
ofsd 2322/udp # ofsd
3d-nfsd 2323/tcp # 3d-nfsd
3d-nfsd 2323/udp # 3d-nfsd
cosmocall 2324/tcp # Cosmocall
cosmocall 2324/udp # Cosmocall
designspace-lm 2325/tcp # Design Space License Manager
designspace-lm 2325/udp # Design Space License Manager
idcp 2326/tcp # IDCP
idcp 2326/udp # IDCP
xingcsm 2327/tcp # xingsm
xingcsm/netscape 2327/udp # xingsm
, Netscape Audio-Conferencing
Note: Also see tcp 6498 & 6502
netrix-sftm 2328/tcp # Netrix SFTM
netrix-sftm 2328/udp # Netrix SFTM
nvd 2329/tcp # NVD
nvd 2329/udp # NVD
tscchat 2330/tcp # TSCCHAT
tscchat 2330/udp # TSCCHAT
agentview 2331/tcp # AGENTVIEW
agentview 2331/udp # AGENTVIEW
rcc-host 2332/tcp # RCC Host
rcc-host 2332/udp # RCC Host
snapp 2333/tcp # SNAPP
snapp 2333/udp # SNAPP
ace-client 2334/tcp # ACE Client Auth
ace-client 2334/udp # ACE Client Auth
ace-proxy 2335/tcp # ACE Proxy
ace-proxy 2335/udp # ACE Proxy
appleugcontrol 2336/tcp # Apple UG Control
appleugcontrol 2336/udp # Apple UG Control
ideesr/ideesrv 2337/tcp # ideesrv
, ideesrv

ideesrv
ideesr/ideesrv 2337/udp # ideesrv
, ideesrv

ideesrv
norton-lambert 2338/tcp # Norton Lambert
norton-lambert 2338/udp # Norton Lambert
3com-webview 2339/tcp # 3com Webview
3com-webview 2339/udp # 3com Webview
wrs_registry 2340/tcp # WRS Registry
wrs_registry 2340/udp # WRS Registry
xiostatus 2341/tcp # CIO Status
xiostatus 2341/udp # CIO Status
manage-exec 2342/tcp # Seagate Manage Exec
manage-exec 2342/udp # Seagate Manage Exec
nati-logos 2343/tcp # nati logos
nati-logos 2343/udp # nati logos
fcmsys 2344/tcp # fcmsys
fcmsys 2344/udp # fcmsys
dbm 2345/tcp # dbm
dbm 2345/udp # dbm
redstorm_join 2346/tcp # Game Connection Port
redstorm_join 2346/udp # Game Connection Port
redstorm_find 2347/tcp # Game Announcement and Location
redstorm_find 2347/udp # Game Announcement and Location
redstorm_info 2348/tcp # Info to query for game status
redstorm_info 2348/udp # Info to query for game status
redstorm_diag 2349/tcp # Diagnostics Port
redstorm_diag/redstorm_diag 2349/udp # Diagnostics Port
, redstorm_diag

disgnostics port
psbserver 2350/tcp # psbserver
psbserver 2350/udp # psbserver
psrserver 2351/tcp # psrserver
psrserver 2351/udp # psrserver
pslserver 2352/tcp # pslserver
pslserver 2352/udp # pslserver
pspserver 2353/tcp # pspserver
pspserver 2353/udp # pspserver
psprserver 2354/tcp # psprserver
psprserver 2354/udp # psprserver
psdbserver 2355/tcp # psdbserver
psdbserver 2355/udp # psdbserver
gxtelmd 2356/tcp # GXT License Management
gxtelmd 2356/udp # GXT License Management
unihub-server 2357/tcp # UniHub Server
unihub-server 2357/udp # UniHub Server
futrix 2358/tcp # Futrix
futrix 2358/udp # Futrix
flukeserver 2359/tcp # FlukeServer
flukeserver 2359/udp # FlukeServer
nexstorindltd 2360/tcp # NexstorIndLtd
nexstorindltd 2360/udp # NexstorIndLtd
tl1 2361/tcp # TL1
tl1 2361/udp # TL1
digiman 2362/tcp # Digiman
digiman 2362/udp # Digiman
mediacntrlnfsd 2363/tcp # Media Central NFSD
mediacntrlnfsd 2363/udp # Media Central NFSD
oi-2000 2364/tcp # OI-2000
oi-2000 2364/udp # OI-2000
dbref 2365/tcp # dbref
dbref 2365/udp # dbref
qip-login 2366/tcp # qup-login
qip-login 2366/udp # qup-login
service-ctrl 2367/tcp # Service Control
service-ctrl 2367/udp # Service Control
opentable 2368/tcp # OpenTable
opentable 2368/udp # OpenTable
acs2000-dsp 2369/tcp # ACS2000 DSP
acs2000-dsp 2369/udp # ACS2000 DSP
l3-hbmon 2370/tcp # L3-HBMon
l3-hbmon 2370/udp # L3-HBMon
compaq-https 2381/tcp # Compaq HTTPS
compaq-https 2381/udp # Compaq HTTPS
ms-olap3 2382/tcp # MS OLAP 3
ms-olap3 2382/udp # MS OLAP 3
ms-olap4 2383/tcp # MS OLAP 4
ms-olap4 2383/udp # MS OLAP 4
ovsessionmgr 2389/tcp # OpenView Session Manager
ovsessionmgr 2389/udp # OpenView Session Manager
rsmtp 2390/tcp # RSMTP
rsmtp 2390/udp # RSMTP
3com-net-mgmt 2391/tcp # 3COM Net Management
3com-net-mgmt 2391/udp # 3COM Net Management
tacticalauth 2392/tcp # Tactical Auth
tacticalauth 2392/udp # Tactical Auth
ms-olap1 2393/tcp # MS OLAP 1
ms-olap1 2393/udp # MS OLAP 1
ms-olap2 2394/tcp # MS OLAP 2
ms-olap2/ms-olap2 2394/udp # MS OLAP 2
, ms-olap2

ma olap 2
lan900_remote 2395/tcp # LAN900 Remote
lan900_remote 2395/udp # LAN900 Remote
wusage 2396/tcp # Wusage
wusage 2396/udp # Wusage
ncl 2397/tcp # NCL
ncl 2397/udp # NCL
orbiter 2398/tcp # Orbiter
orbiter 2398/udp # Orbiter
fmpro-fdal 2399/tcp # FileMaker, Inc. - Data Access Layer
fmpro-fdal 2399/udp # FileMaker, Inc. - Data Access Layer
opequus-server 2400/tcp # OpEquus Server
opequus-server 2400/udp # OpEquus Server
cvspserver 2401/tcp # cvspserver
cvspserver 2401/udp # cvspserver
taskmaster2000 2402/tcp # TaskMaster 2000 Server
taskmaster2000 2402/udp # TaskMaster 2000 Server
taskmaster2000 2403/tcp # TaskMaster 2000 Web
taskmaster2000 2403/udp # TaskMaster 2000 Web
iec870-5-104 2404/tcp # IEC870-5-104
iec870-5-104 2404/udp # IEC870-5-104
trc-netpoll 2405/tcp # TRC Netpoll
trc-netpoll 2405/udp # TRC Netpoll
jediserver 2406/tcp # JediServer
jediserver 2406/udp # JediServer
orion 2407/tcp # Orion
orion 2407/udp # Orion
optimanet 2408/tcp # OptimaNet
optimanet 2408/udp # OptimaNet
sns-protocol 2409/tcp # SNS Protocol
sns-protocol 2409/udp # SNS Protocol
vrts-registry 2410/tcp # VRTS Registry
vrts-registry 2410/udp # VRTS Registry
netwave-ap-mgmt 2411/tcp # Netwave AP Management
netwave-ap-mgmt 2411/udp # Netwave AP Management
cdn 2412/tcp # CDN
cdn 2412/udp # CDN
orion-rmi-reg 2413/tcp # orion-rmi-reg
orion-rmi-reg 2413/udp # orion-rmi-reg
interlinua/interlingua 2414/tcp # Interlingua
, interlingua

interlingua
interlinua/interlingua 2414/udp # Interlingua
, interlingua

interlingua
comtest 2415/tcp # COMTEST
comtest 2415/udp # COMTEST
rmtserver 2416/tcp # RMT Server
rmtserver 2416/udp # RMT Server
composit-server 2417/tcp # Composit Server
composit-server 2417/udp # Composit Server
cas 2418/tcp # cas
cas 2418/udp # cas
attachmate-s2s 2419/tcp # Attachmate S2S
attachmate-s2s 2419/udp # Attachmate S2S
dslremote-mgmt 2420/tcp # DSL Remote Management
dslremote-mgmt 2420/udp # DSL Remote Management
g-talk 2421/tcp # G-Talk
g-talk 2421/udp # G-Talk
crmsbits 2422/tcp # CRMSBITS
crmsbits 2422/udp # CRMSBITS
rnrp 2423/tcp # RNRP
rnrp 2423/udp # RNRP
kofax-svr 2424/tcp # LPFAX-SVR
kofax-svr 2424/udp # LPFAX-SVR
fjitsuappmgr 2425/tcp # Fujitsu App Manager
fjitsuappmgr 2425/udp # Fujitsu App Manager
applianttcp 2426/tcp # Applicant TCP
appliantudp 2426/udp # Applicant UDP
stgcp/mgcp-gateway 2427/tcp # Simple Telephony Gateway Control Protocol
, Media Gateway Control Protocol Gateway
stgcp/mgcp-gateway 2427/udp # Simple Telephony Gateway Control Protocol
, Media Gateway Control Protocol Gateway
ott 2428/tcp # One-way Trip Timer
ott 2428/udp # One-way Trip Timer
ft-role 2429/tcp # FT-ROLE
ft-role 2429/udp # FT-ROLE
venus 2430/tcp # venus
venus 2430/udp # venus
venus-se 2431/tcp # venus-se
venus-se 2431/udp # venus-se
codasrv 2432/tcp # codasrv
codasrv 2432/udp # codasrv
codasrv-se 2433/tcp # cosasrv-se
codasrv-se 2433/udp # cosasrv-se
pxc-epmap 2434/tcp # pxc-epmap
pxc-epmap 2434/udp # pxc-epmap
optilogic 2435/tcp # OptiLogic
optilogic 2435/udp # OptiLogic
topx 2436/tcp # TOP/X
topx 2436/udp # TOP/X
unicontrol 2437/tcp # UniControl
unicontrol 2437/udp # UniControl
msp 2438/tcp # MSP
msp 2438/udp # MSP
sybasedbsynch 2439/tcp # SybaseDBSynch
sybasedbsynch 2439/udp # SybaseDBSynch
spearway 2440/tcp # Spearway Lockers
spearway/spearway 2440/udp # Spearway Lockers
, spearway

spearway lockser
pvsw-inet 2441/tcp # pvsw-inet
pvsw-inet 2441/udp # pvsw-inet
netangel 2442/tcp # Netangel
netangel 2442/udp # Netangel
powerclientcsf 2443/tcp # PowerClient Central Storage Facility
powerclientcsf 2443/udp # PowerClient Central Storage Facility
btpp2sectrans 2444/tcp # BT PP2 Sectrans
btpp2sectrans 2444/udp # BT PP2 Sectrans
dtn1 2445/tcp # DTN1
dtn1 2445/udp # DTN1
bues_service 2446/tcp # bues_service
bues_service 2446/udp # bues_service
ovwdb 2447/tcp # OpenView NNM daemon
ovwdb 2447/udp # OpenView NNM daemon
hpppssvr 2448/tcp # hpppssvr
hpppssvr 2448/udp # hpppssvr
ratl 2449/tcp # RATL
ratl 2449/udp # RATL
netadmin 2450/tcp # netadmin
netadmin 2450/udp # netadmin
netchat 2451/tcp # netchat
netchat 2451/udp # netchat
snifferclient 2452/tcp # SnifferClient
snifferclient 2452/udp # SnifferClient
madge-om 2453/tcp # madge-om
madge-om 2453/udp # madge-om
indx-dds 2454/tcp # IndX-DDS
indx-dds 2454/udp # IndX-DDS
wago-io-system 2455/tcp # WAGO-IO-SYSTEM
wago-io-system 2455/udp # WAGO-IO-SYSTEM
altav-remmgt 2456/tcp # altav-remmgt
altav-remmgt 2456/udp # altav-remmgt
rapido-ip 2457/tcp # Rapico_IP
rapido-ip 2457/udp # Rapico_IP
griffin 2458/tcp # griffin
griffin 2458/udp # griffin
community 2459/tcp # Community
community 2459/udp # Community
ms-theater 2460/tcp # ms-theater
ms-theater 2460/udp # ms-theater
qadmifoper 2461/tcp # qadmifoper
qadmifoper 2461/udp # qadmifoper
qadmifevent 2462/tcp # qadmifevent
qadmifevent 2462/udp # qadmifevent
symbios-raid 2463/tcp # Symbios Raid
symbios-raid 2463/udp # Symbios Raid
direcpc-si 2464/tcp # DirecPC SI
direcpc-si 2464/udp # DirecPC SI
lbm 2465/tcp # Load Balance Management
lbm 2465/udp # Load Balance Management
lbf 2466/tcp # Load Balance Forwarding
lbf 2466/udp # Load Balance Forwarding
high-criteria 2467/tcp # High Criteria
high-criteria 2467/udp # High Criteria
qip_msgd/qip-msgd 2468/tcp # qip_msgd
, qip-msgd

qip_msgd
qip_msgd/qip-msgd 2468/udp # qip_msgd
, qip-msgd

qip_msgd
mti-tcs-comm 2469/tcp # MTI-TCS-COMM
mti-tcs-comm 2469/udp # MTI-TCS-COMM
taskman_port/taskman-port 2470/tcp # taskman port
, taskman-port

taskman port
taskman_port/taskman-port 2470/udp # taskman port
, taskman-port

taskman port
seaodbc 2471/tcp # SeaODBC
seaodbc 2471/udp # SeaODBC
c3 2472/tcp # C3
c3 2472/udp # C3
aker-cdp 2473/tcp # Aker-cdp
aker-cdp 2473/udp # Aker-cdp
vitalanalysis 2474/tcp # Vital Analysis
vitalanalysis 2474/udp # Vital Analysis
ace-server 2475/tcp # ACE Server
ace-server 2475/udp # ACE Server
ace-svr-prop 2476/tcp # ACE Server Propagation
ace-svr-prop 2476/udp # ACE Server Propagation
ssm-cvs 2477/tcp # SecurSight Certificate Valifation Service
ssm-cvs 2477/udp # SecurSight Certificate Valifation Service
ssm-cssps 2478/tcp # SecurSight Authentication Server (SSL)
ssm-cssps/ssm-cssps 2478/udp # SecurSight Authentication Server (SSL)
, ssm-cssps

secursight authentication server (ssl)
ssm-els 2479/tcp # SecurSight Event Logging Server (SSL)
ssm-els 2479/udp # SecurSight Event Logging Server (SSL)
lingwood 2480/tcp # Lingwood's Detail
lingwood 2480/udp # Lingwood's Detail
giop 2481/tcp # Oracle GIOP
giop 2481/udp # Oracle GIOP
giop-ssl 2482/tcp # Oracle GIOP SSL
giop-ssl 2482/udp # Oracle GIOP SSL
ttc 2483/tcp # Oracle TTC
ttc/ttc 2483/udp # Oracle TTC
, ttc

oracel ttc
ttc-ssl 2484/tcp # Oracle TTC SSL
ttc-ssl 2484/udp # Oracle TTC SSL
netobjects1 2485/tcp # NetObjects1
netobjects1 2485/udp # NetObjects1
netobjects2 2486/tcp # NetObjects2
netobjects2 2486/udp # NetObjects2
pns 2487/tcp # Policy Notice Service
pns 2487/udp # Policy Notice Service
moy-corp 2488/tcp # Moy Corporation
moy-corp 2488/udp # Moy Corporation
tsilb 2489/tcp # TSILB
tsilb 2489/udp # TSILB
qip_qdhcp/qip-qdhcp 2490/tcp # qip_qdhcp
, qip-qdhcp

qip_qdhcp
qip_qdhcp/qip-qdhcp 2490/udp # qip_qdhcp
, qip-qdhcp

qip_qdhcp
conclave-cpp 2491/tcp # Conclave CPP
conclave-cpp 2491/udp # Conclave CPP
groove 2492/tcp # GROOVE
groove 2492/udp # GROOVE
talarian-mqs 2493/tcp # Talarian MQS
talarian-mqs 2493/udp # Talarian MQS
bmc-ar 2494/tcp # BMC AR
bmc-ar 2494/udp # BMC AR
fast-rem-serv 2495/tcp # Fast Remote Services
fast-rem-serv 2495/udp # Fast Remote Services
dirgis 2496/tcp # DIRGIS
dirgis 2496/udp # DIRGIS
quaddb 2497/tcp # Quad DB
quaddb 2497/udp # Quad DB
odn-castraq 2498/tcp # ODN-CasTraq
odn-castraq 2498/udp # ODN-CasTraq
unicontrol 2499/tcp # UniControl
unicontrol 2499/udp # UniControl
rtsserv 2500/tcp # Resource Tracking System Server
rtsserv 2500/udp # Resource Tracking System Server
rtsclient 2501/tcp # Resource Tracking System Client
rtsclient 2501/udp # Resource Tracking System Client
kentrox-prot 2502/tcp # Kentrox Protocol
kentrox-prot 2502/udp # Kentrox Protocol
nms-dpnss 2503/tcp # NMS-DPNSS
nms-dpnss 2503/udp # NMS-DPNSS
wlbs 2504/tcp # SLBS
wlbs/wlbs 2504/udp # WLBS
Used in NT/Win2000 clustering.
, SLBS
torque-traffic 2505/tcp # torque-traffic
torque-traffic 2505/udp # torque-traffic
jbroker 2506/tcp # jbroker
jbroker 2506/udp # jbroker
spock 2507/tcp # spock
spock 2507/udp # spock
jdatastore 2508/tcp # JDataStore
jdatastore 2508/udp # JDataStore
fjmpss 2509/tcp # fjmpss
fjmpss 2509/udp # fjmpss
fjappmgrbulk 2510/tcp # fjappmgrbulk
fjappmgrbulk 2510/udp # fjappmgrbulk
metastorm 2511/tcp # Metastorm
metastorm 2511/udp # Metastorm
citrixima 2512/tcp # Citrix IMA
citrixima 2512/udp # Citrix IMA
citrixadmin 2513/tcp # Citrix Admin
citrixadmin 2513/udp # Citrix Admin
facsys-ntp 2514/tcp # Facsys NTP
facsys-ntp 2514/udp # Facsys NTP
facsys-router 2515/tcp # Facsys Router
facsys-router 2515/udp # Facsys Router
maincontrol 2516/tcp # Main Control
maincontrol 2516/udp # Main Control
call-sig-trans 2517/tcp # Call Signalling Transport
call-sig-trans 2517/udp # Call Signalling Transport
willy 2518/tcp # Willy
willy 2518/udp # Willy
globmsgsvc 2519/tcp # globmsgsvc
globmsgsvc 2519/udp # globmsgsvc
pvsw 2520/tcp # pvsw
pvsw 2520/udp # pvsw
adaptexmgr/adaptecmgr 2521/tcp # Adaptec Manager
, adaptecmgr

adaptec manager
adaptexmgr/adaptecmgr 2521/udp # Adaptec Manager
, adaptecmgr

adaptec manager
windb 2522/tcp # WinDb
windb 2522/udp # WinDb
qke-11c-v3/qke-llc-v3 2523/tcp # Qke LLC V.3
, qke-llc-v3

qke llc v.3
qke-11c-v3/qke-llc-v3 2523/udp # Qke LLC V.3
, qke-llc-v3

qke llc v.3
optiwave-1m/optiwave-lm 2524/tcp # Optiwave License Manager
, optiwave-lm

optiwave license management
optiwave-1m/optiwave-lm 2524/udp # Optiwave License Manager
, optiwave-lm

optiwave license management
ms-v-worlds 2525/tcp # MS V-Worlds
ms-v-worlds 2525/udp # MS V-Worlds
ema-sent-lm 2526/tcp # EMA License Manager
ema-sent-lm 2526/udp # EMA License Manager
iqserver 2527/tcp # IQ Server
iqserver 2527/udp # IQ Server
ncr_ccl 2528/tcp # NCR CCL
ncr_ccl 2528/udp # NCR CCL
utsftp 2529/tcp # UTS FTP
utsftp 2529/udp # UTS FTP
vrcommerce 2530/tcp # VR Commerce
vrcommerce 2530/udp # VR Commerce
ito-e-gui 2531/tcp # ITO-E GUI
ito-e-gui 2531/udp # ITO-E GUI
ovtopmd 2532/tcp # OVTOPMD
ovtopmd 2532/udp # OVTOPMD
snifferserver 2533/tcp # SnifferServer
snifferserver 2533/udp # SnifferServer
combox-web-acc 2534/tcp # Combox Web Access
combox-web-acc 2534/udp # Combox Web Access
mdhcp/madcap 2535/tcp # MDHCP
, madcap

madcap
mdhcp/madcap 2535/udp # MDHCP
, madcap

madcap
btpp2audctr1 2536/tcp # btpp2audctrl
btpp2audctr1 2536/udp # btpp2audctrl
upgrade 2537/tcp # Upgrade Protocol
upgrade 2537/udp # Upgrade Protocol
vnwk-prapi 2538/tcp # vnwk-prapi
vnwk-prapi 2538/udp # vnwk-prapi
vsiadmin 2539/tcp # VSI Admin
vsiadmin 2539/udp # VSI Admin
lonworks 2540/tcp # LonWorks
lonworks 2540/udp # LonWorks
lonworks2 2541/tcp # LonWorks2
lonworks2 2541/udp # LonWorks2
davinci 2542/tcp # DaVinci
davinci 2542/udp # DaVinci
reftek 2543/tcp # REFTEK
reftek 2543/udp # REFTEK
novell-zen/novell-zen 2544/tcp # Novell ZEN
, novell-zen

novell zen
novell-zen 2544/udp # Novell ZEN
sis-emt 2545/tcp # sis-emt
sis-emt 2545/udp # sis-emt
vytalvaultbrtp 2546/tcp # vytalvaultbrtp
vytalvaultbrtp 2546/udp # vytalvaultbrtp
vytalvaultvsmp 2547/tcp # vytalvaultvsmp
vytalvaultvsmp 2547/udp # vytalvaultvsmp
vytalvaultpipe 2548/tcp # vytalvaultpipe
vytalvaultpipe 2548/udp # vytalvaultpipe
ipass 2549/tcp # IPASS
ipass 2549/udp # IPASS
ads 2550/tcp # ADS
ads 2550/udp # ADS
isg-uda-server 2551/tcp # ISG UDA Server
isg-uda-server 2551/udp # ISG UDA Server
call-logging 2552/tcp # Call Logging
call-logging 2552/udp # Call Logging
efidiningport 2553/tcp # efidiningport
efidiningport 2553/udp # efidiningport
vcnet-link-v10 2554/tcp # Vcnet-Link v10
vcnet-link-v10 2554/udp # Vcnet-Link v10
compaq-wcp 2555/tcp # Compaq WCP
compaq-wcp 2555/udp # Compaq WCP
nicetec-nmsvc 2556/tcp # nicetec-nmsvc
nicetec-nmsvc 2556/udp # nicetec-nmsvc
nicetec-mgmt 2557/tcp # nicetec-mgmt
nicetec-mgmt 2557/udp # nicetec-mgmt
pclemultimedia 2558/tcp # PCLE Multi Media
pclemultimedia 2558/udp # PCLE Multi Media
lstp 2559/tcp # LSTP
lstp 2559/udp # LSTP
labrat 2560/tcp # labrat
labrat 2560/udp # labrat
mosaixcc 2561/tcp # MosaixCC
mosaixcc 2561/udp # MosaixCC
delibo 2562/tcp # Delibo
delibo 2562/udp # Delibo
cti-redwood 2563/tcp # CTI Redwood
cti-redwood 2563/udp # CTI Redwood
hp-3000-telnet/hp-3000-telnet 2564/tcp # HP 3000 NS/VT block mode telnet
, hp-3000-telnet

hp 3000 ns/vt block mode telnet
hp-3000-telnet 2564/udp # HP 3000 NS/VT block mode telnet
coord-svr 2565/tcp # Coordinator Server
coord-svr 2565/udp # Coordinator Server
pcs-pcw 2566/tcp # pcs-pcw
pcs-pcw 2566/udp # pcs-pcw
clp 2567/tcp # Cisco Line Protocol
clp 2567/udp # Cisco Line Protocol
spamtrap 2568/tcp # SPAM Trap
spamtrap 2568/udp # SPAM Trap
sonuscallsig 2569/tcp # Sonus Call Signal
sonuscallsig 2569/udp # Sonus Call Signal
hs-port 2570/tcp # HS Port
hs-port 2570/udp # HS Port
cecsvc 2571/tcp # CECSVC
cecsvc 2571/udp # CECSVC
ibp 2572/tcp # IBP
ibp 2572/udp # IBP
trustestablish 2573/tcp # Trust Establish
trustestablish 2573/udp # Trust Establish
blockade-bpsp 2574/tcp # Blockade BPSP
blockade-bpsp 2574/udp # Blockade BPSP
hl7 2575/tcp # HL7
hl7 2575/udp # HL7
tclprodebugger 2576/tcp # TCL Pro Debugger
tclprodebugger 2576/udp # TCL Pro Debugger
scipticslsrvr 2577/tcp # Scriptics Lsrvr
scipticslsrvr 2577/udp # Scriptics Lsrvr
rvs-isdn-dcp 2578/tcp # RVS ISDN DCP
rvs-isdn-dcp 2578/udp # RVS ISDN DCP
mpfoncl 2579/tcp # mpfoncl
mpfoncl 2579/udp # mpfoncl
tributary 2580/tcp # Tributary
tributary 2580/udp # Tributary
argis-te 2581/tcp # ARGIS TE
argis-te 2581/udp # ARGIS TE
argis-ds 2582/tcp # ARGIS DS
argis-ds 2582/udp # ARGIS DS
mon 2583/tcp # MON
mon 2583/udp # MON
cyaserv 2584/tcp # cyaserv
cyaserv 2584/udp # cyaserv
netx-server 2585/tcp # NETX Server
netx-server 2585/udp # NETX Server
netx-agent 2586/tcp # NETX Agent
netx-agent 2586/udp # NETX Agent
masc 2587/tcp # MASC
masc 2587/udp # MASC
privilege 2588/tcp # Privilege
privilege 2588/udp # Privilege
quartus-tcl 2589/tcp # Quartus TCL
quartus-tcl 2589/udp # Quartus TCL
idotdist 2590/tcp # idotdist
idotdist 2590/udp # idotdist
maytagshuffle 2591/tcp # Maytag Shuffle
maytagshuffle 2591/udp # Maytag Shuffle
netrek 2592/tcp # netrek
netrek 2592/udp # netrek
mns-mail 2593/tcp # MNS Mail Notice Service
mns-mail 2593/udp # MNS Mail Notice Service
dts 2594/tcp # Data Base Server
dts 2594/udp # Data Base Server
worldfusion1 2595/tcp # World Fusion 1
worldfusion1 2595/udp # World Fusion 1
worldfusion2 2596/tcp # World Fusion 2
worldfusion2 2596/udp # World Fusion 2
homesteadglory 2597/tcp # Homestead Glory
homesteadglory 2597/udp # Homestead Glory
citrixmaclient/citriximaclient 2598/tcp # Citrix MA Client
, citriximaclient

citrix ma client
citrixmaclient/citriximaclient 2598/udp # Citrix MA Client
, citriximaclient

citrix ma client
meridiandata 2599/tcp # Meridian Data
meridiandata 2599/udp # Meridian Data
hpstgmgr 2600/tcp # HPSTGMGR
hpstgmgr/hpstgmgr 2600/udp # HPSTGMGR
, hpstgmgr

hpstgmgr
discp-client 2601/tcp # discp client
discp-client/discp-client 2601/udp # discp client
, discp-client

discp client
discp-server 2602/tcp # discp server
discp-server/discp-server 2602/udp # discp server
, discp-server

discp server
servicemeter 2603/tcp # Service Meter
servicemeter/servicemeter 2603/udp # Service Meter
, servicemeter

service meter
nsc-ccs 2604/tcp # NSC CCS
nsc-ccs/nsc-ccs 2604/udp # NSC CCS
, nsc-ccs

nsc ccs
nsc-posa 2605/tcp # NSC POSA
nsc-posa/nsc-posa 2605/udp # NSC POSA
, nsc-posa

nsc posa
netmon 2606/tcp # Dell Netmon
netmon 2606/udp # Dell Netmon
connection 2607/tcp # Dell Connection
connection 2607/udp # Dell Connection
wag-service 2608/tcp # Wag Service
wag-service 2608/udp # Wag Service
system-monitor 2609/tcp # System Monitor
system-monitor 2609/udp # System Monitor
versa-tek 2610/tcp # VersaTek
versa-tek 2610/udp # VersaTek
linonhead/lionhead 2611/tcp # LIONHEAD
, lionhead

lionhead
linonhead/lionhead 2611/udp # LIONHEAD
, lionhead

lionhead
qpasa-agent 2612/tcp # Qpasa Agent
qpasa-agent 2612/udp # Qpasa Agent
smntubootstrap 2613/tcp # SMNTUBootstrap
smntubootstrap 2613/udp # SMNTUBootstrap
neveroffline 2614/tcp # Never Offline
neveroffline 2614/udp # Never Offline
firepower 2615/tcp # Firepower
firepower 2615/udp # Firepower
appswitch-emp 2616/tcp # appswitch-emp
appswitch-emp 2616/udp # appswitch-emp
cmadmin 2617/tcp # Clinical Context Managers
cmadmin 2617/udp # Clinical Context Managers
priority-e-com 2618/tcp # Priority E-Com
priority-e-com 2618/udp # Priority E-Com
bruce 2619/tcp # bruce
bruce 2619/udp # bruce
lpsrecommender 2620/tcp # LPSEecommender
lpsrecommender 2620/udp # LPSEecommender
miles-apart 2621/tcp # Miles Apart Jukebox Server
miles-apart 2621/udp # Miles Apart Jukebox Server
metricadbc 2622/tcp # MetricaDBC
metricadbc 2622/udp # MetricaDBC
lmdp 2623/tcp # LMDP
lmdp 2623/udp # LMDP
aria 2624/tcp # Aria
aria 2624/udp # Aria
blwnkl-port 2625/tcp # Blwnkl Port
blwnkl-port 2625/udp # Blwnkl Port
gbjd816 2626/tcp # gbj816
gbjd816 2626/udp # gbj816
moshebeeri 2627/tcp # Moshe Beeri
moshebeeri/moshebeeri 2627/udp # Moshe Beeri
, moshebeeri

moshe beeri
dict 2628/tcp # DICT
dict 2628/udp # DICT
sitaraserver 2629/tcp # Sitara Server
sitaraserver 2629/udp # Sitara Server
sitaramgmt 2630/tcp # Sitra Management
sitaramgmt 2630/udp # Sitra Management
sitaradir 2631/tcp # Sitra Dir
sitaradir 2631/udp # Sitra Dir
irdg-post 2632/tcp # Irdg Post
irdg-post 2632/udp # Irdg Post
interintelli 2633/tcp # InterIntelli
interintelli 2633/udp # InterIntelli
pk-electronics 2634/tcp # PK Electronics
pk-electronics 2634/udp # PK Electronics
backburner 2635/tcp # Back Burner
backburner 2635/udp # Back Burner
solve 2636/tcp # Solve
solve 2636/udp # Solve
imdocsvc 2637/tcp # Import Document Service
imdocsvc 2637/udp # Import Document Service
sybaseanywhere 2638/tcp # Sybase Anywhere
sybaseanywhere 2638/udp # Sybase Anywhere
aminet 2639/tcp # AMInet
aminet 2639/udp # AMInet
sai_sentlm 2640/tcp # Sabbagh Associates License Manager
sai_sentlm 2640/udp # Sabbagh Associates License Manager
hdl-srv 2641/tcp # HDL Server
hdl-srv 2641/udp # HDL Server
tragic 2642/tcp # Tragic
tragic 2642/udp # Tragic
gte-samp 2643/tcp # GTE-SAMP
gte-samp 2643/udp # GTE-SAMP
travsoft-ipx-t 2644/tcp # Travsoft IPX Tunnel
travsoft-ipx-t 2644/udp # Travsoft IPX Tunnel
novell-ipx-cmd 2645/tcp # Novell IPX CMD
novell-ipx-cmd 2645/udp # Novell IPX CMD
and-lm 2646/tcp # AND License Manager
and-lm/and-lm 2646/udp # AND License Manager
, and-lm

and license manager
syncserver 2647/tcp # SyncServer
syncserver 2647/udp # SyncServer
upsnotifyprot 2648/tcp # Upsnotifyprot
upsnotifyprot 2648/udp # Upsnotifyprot
vpsipport 2649/tcp # VPSIPPORT
vpsipport 2649/udp # VPSIPPORT
eristwoguns 2650/tcp # eristwoguns
eristwoguns 2650/udp # eristwoguns
ebinsite 2651/tcp # EBInSite
ebinsite 2651/udp # EBInSite
interpathpanel 2652/tcp # InterPathPanel
interpathpanel 2652/udp # InterPathPanel
sonus 2653/tcp # Sonus
sonus 2653/udp # Sonus
corel_vncadmin 2654/tcp # Corel VNC Admin
corel_vncadmin 2654/udp # Corel VNC Admin
unglue 2655/tcp # Unix Nt Glue
unglue 2655/udp # Unix Nt Glue
kana 2656/tcp # Kana
kana 2656/udp # Kana
sns-dispatcher 2657/tcp # SNS Dispatcher
sns-dispatcher 2657/udp # SNS Dispatcher
sns-admin 2658/tcp # SNS Admin
sns-admin 2658/udp # SNS Admin
sns-query 2659/tcp # SNS Query
sns-query 2659/udp # SNS Query
gcmonitor 2660/tcp # GC Monitor
gcmonitor 2660/udp # GC Monitor
olhost 2661/tcp # OLHOST
olhost 2661/udp # OLHOST
bintec-capi 2662/tcp # BinTec-CAPI
bintec-capi 2662/udp # BinTec-CAPI
bintec-tapi 2663/tcp # BinTec-TAPI
bintec-tapi 2663/udp # BinTec-TAPI
command-mq-gm 2664/tcp # Command MQ GM
command-mq-gm 2664/udp # Command MQ GM
command-mq-pm 2665/tcp # Command MQ PM
command-mq-pm 2665/udp # Command MQ PM
extensis 2666/tcp # Extensis
extensis 2666/udp # Extensis
alarm-clock-s 2667/tcp # Alarm Clock Server
alarm-clock-s 2667/udp # Alarm Clock Server
alarm-clock-c 2668/tcp # Alarm Clock Client
alarm-clock-c 2668/udp # Alarm Clock Client
toad 2669/tcp # TOAD
toad 2669/udp # TOAD
tve-announce 2670/tcp # TVE Announce
tve-announce 2670/udp # TVE Announce
newlixreg 2671/tcp # newlixreg
newlixreg 2671/udp # newlixreg
nhserver 2672/tcp # nhserver
nhserver 2672/udp # nhserver
firstcall42 2673/tcp # First Call 42
firstcall42 2673/udp # First Call 42
ewnn 2674/tcp # ewnn
ewnn 2674/udp # ewnn
ttc-etap 2675/tcp # TTC ETAP
ttc-etap 2675/udp # TTC ETAP
simslink 2676/tcp # SIMSLink
simslink 2676/udp # SIMSLink
gadgetgate1way 2677/tcp # Gadget Gate 1 Way
gadgetgate1way 2677/udp # Gadget Gate 1 Way
gadgetgate2way 2678/tcp # Gadget Gate 2 Way
gadgetgate2way 2678/udp # Gadget Gate 2 Way
syncserverssl 2679/tcp # Sync Server SSL
syncserverssl 2679/udp # Sync Server SSL
pxc-sapxom 2680/tcp # pxc-sapxom
pxc-sapxom 2680/udp # pxc-sapxom
mpnjsomb 2681/tcp # mpnjsomb
mpnjsomb 2681/udp # mpnjsomb
srsp 2682/tcp # SRSP
srsp 2682/udp # SRSP
ncdloadbalance 2683/tcp # NCDLoadBalance
ncdloadbalance 2683/udp # NCDLoadBalance
mpnjsosv 2684/tcp # mpnjsosv
mpnjsosv 2684/udp # mpnjsosv
mpnjsoc1/mpnjsocl 2685/tcp # mpnjsoc1
, mpnjsocl

mpnjsocl
mpnjsoc1/mpnjsocl 2685/udp # mpnjsoc1
, mpnjsocl

mpnjsocl
mpnjsomg 2686/tcp # mpnjsomg
mpnjsomg 2686/udp # mpnjsomg
pq-lic-mgmt 2687/tcp # pq-lic-mgmt
pq-lic-mgmt 2687/udp # pq-lic-mgmt
md-cg-http 2688/tcp # md-cf-http
md-cg-http 2688/udp # md-cf-http
fastlynx 2689/tcp # FastLynx
fastlynx 2689/udp # FastLynx
hp-nnm-data 2690/tcp # HP NNM Embedded Database
hp-nnm-data 2690/udp # HP NNM Embedded Database
itinternet 2691/tcp # IT Internet
itinternet 2691/udp # IT Internet
admins-lms 2692/tcp # Admins LMS
admins-lms 2692/udp # Admins LMS
berarc-http/belarc-http 2693/tcp # belarc-http
, belarc-http

belarc-http
berarc-http/belarc-http 2693/udp # belarc-http
, belarc-http

belarc-http
pwrsevent 2694/tcp # pwrsevent
pwrsevent 2694/udp # pwrsevent
vspread 2695/tcp # VSPREAD
vspread 2695/udp # VSPREAD
unifyadmin 2696/tcp # Unify Admin
unifyadmin 2696/udp # Unify Admin
oce-snmp-trap 2697/tcp # Oce SNMP Trap Port
oce-snmp-trap 2697/udp # Oce SNMP Trap Port
mck-ivpip 2698/tcp # MCK-IVPIP
mck-ivpip 2698/udp # MCK-IVPIP
csoft-plusclnt 2699/tcp # Csoft Plus Client
csoft-plusclnt 2699/udp # Csoft Plus Client
tqdata 2700/tcp # tqdata
tqdata 2700/udp # tqdata
sms-rcinfo 2701/tcp # SMS RCINFO
sms-rcinfo 2701/udp # SMS RCINFO
sms-xfer 2702/tcp # SMS XFER
sms-xfer 2702/udp # SMS XFER
sms-chat 2703/tcp # SMS CHAT
sms-chat 2703/udp # SMS CHAT
sms-remctrl 2704/tcp # SMS REMCTRL
sms-remctrl 2704/udp # SMS REMCTRL
sds-admin 2705/tcp # SDS Admin
sds-admin 2705/udp # SDS Admin
ncdmirroring 2706/tcp # NCD Mirroring
ncdmirroring 2706/udp # NCD Mirroring
emcsymapiport 2707/tcp # EMCSYMAPIPORT
emcsymapiport 2707/udp # EMCSYMAPIPORT
banyan-net 2708/tcp # Banyan-Net
banyan-net 2708/udp # Banyan-Net
supermon 2709/tcp # Supermon
supermon 2709/udp # Supermon
sso-service 2710/tcp # SSO Service
sso-service 2710/udp # SSO Service
sso-control 2711/tcp # SSO Control
sso-control 2711/udp # SSO Control
aocp 2712/tcp # Axapta Object Comm Protocol
aocp 2712/udp # Axapta Object Comm Protocol
raven1 2713/tcp # Raven-1
raven1 2713/udp # Raven-1
raven2/raven2 2714/tcp # Raven-2
, raven2

raven2
raven2 2714/udp # Raven-2
hpstgmgr2 2715/tcp # HPSTGMGR-2
hpstgmgr2 2715/udp # HPSTGMGR-2
inova-ip-disco 2716/tcp # Inova IP Disco
inova-ip-disco 2716/udp # Inova IP Disco
pn-requester 2717/tcp # PN REQUESTER
pn-requester 2717/udp # PN REQUESTER
pn-requester2 2718/tcp # PN REQUESTER 2
pn-requester2 2718/udp # PN REQUESTER 2
scan-change 2719/tcp # Scan & Change
scan-change 2719/udp # Scan & Change
wkars 2720/tcp # wkars
wkars 2720/udp # wkars
smart-diagnose 2721/tcp # Smart Diagnose
smart-diagnose 2721/udp # Smart Diagnose
proactivesrvr 2722/tcp # Proactive Server
proactivesrvr 2722/udp # Proactive Server
watchdognt 2723/tcp # WatchDog NT
watchdognt 2723/udp # WatchDog NT
qotps 2724/tcp # qotps
qotps 2724/udp # qotps
msolap-ptp2 2725/tcp # MSOLAP PTP2
msolap-ptp2 2725/udp # MSOLAP PTP2
tams 2726/tcp # TAMS
tams 2726/udp # TAMS
mgcp-callagent 2727/tcp # Media Gateway Control Protocol Call Agent
mgcp-callagent 2727/udp # Media Gateway Control Protocol Call Agent
sqdr 2728/tcp # SQDR
sqdr 2728/udp # SQDR
tcim-control 2729/tcp # TCIM Control
tcim-control 2729/udp # TCIM Control
nec-raidplus 2730/tcp # NEC RaidPlus
nec-raidplus 2730/udp # NEC RaidPlus
netdragon-msngr 2731/tcp # NetDragon Messanger
netdragon-msngr 2731/udp # NetDragon Messanger
g5m 2732/tcp # G5M
g5m 2732/udp # G5M
signet-ctf 2733/tcp # Signet CTF
signet-ctf 2733/udp # Signet CTF
ccs-software 2734/tcp # CCS Software
ccs-software 2734/udp # CCS Software
monitorconsole 2735/tcp # Monitor Console
monitorconsole 2735/udp # Monitor Console
radwiz-nms-srv 2736/tcp # RADWIZ NMS SRV
radwiz-nms-srv 2736/udp # RADWIZ NMS SRV
srp-feedback 2737/tcp # SRP Feedback
srp-feedback 2737/udp # SRP Feedback
ndl-tcp-ois-gw 2738/tcp # NDL TCP-OSI Gateway
ndl-tcp-ois-gw 2738/udp # NDL TCP-OSI Gateway
tn-timing 2739/tcp # TN Timing
tn-timing 2739/udp # TN Timing
alarm 2740/tcp # Alarm
alarm 2740/udp # Alarm
tsb 2741/tcp # TSB
tsb 2741/udp # TSB
tsb2 2742/tcp # TSB2
tsb2 2742/udp # TSB2
murx 2743/tcp # murx
murx 2743/udp # murx
honyaku 2744/tcp # honyaku
honyaku 2744/udp # honyaku
urbisnet 2745/tcp # URBISNET
urbisnet 2745/udp # URBISNET
cpudpencap 2746/tcp # CPUDPENCAP
cpudpencap 2746/udp # CPUDPENCAP
fjippol-swrly 2747/tcp # fjippol-swrly
fjippol-swrly 2747/udp # fjippol-swrly
fjippol-polsrv/fjippol-polsvr 2748/tcp # fjippol-polsrv
, fjippol-polsvr


fjippol-polsrv/fjippol-polsvr 2748/udp # fjippol-polsrv
, fjippol-polsvr


fjippol-cnsl 2749/tcp # fjippol-cnsl
fjippol-cnsl 2749/udp # fjippol-cnsl
fjippol-port1 2750/tcp # fjippol-port1
fjippol-port1 2750/udp # fjippol-port1
fjippol-port2 2751/tcp # fjippol-port2
fjippol-port2 2751/udp # fjippol-port2
rsisysaccess 2752/tcp # RSISYS ACCESS
rsisysaccess 2752/udp # RSISYS ACCESS
de-spot 2753/tcp # de-spot
de-spot 2753/udp # de-spot
apollo-cc 2754/tcp # APOLLO CC
apollo-cc 2754/udp # APOLLO CC
expresspay 2755/tcp # Express Pay
expresspay 2755/udp # Express Pay
simplement-tie 2756/tcp # simplement-tie
simplement-tie 2756/udp # simplement-tie
cnrp 2757/tcp # CNRP
cnrp 2757/udp # CNRP
apollo-status 2758/tcp # APOLLO Status
apollo-status 2758/udp # APOLLO Status
apollo-GMS 2759/tcp # APOLLO GMS
apollo-GMS 2759/udp # APOLLO GMS
sabams 2760/tcp # Saba MS
sabams 2760/udp # Saba MS
dicom-iscl 2761/tcp # DICOM ISCL
dicom-iscl 2761/udp # DICOM ISCL
dicom-tls 2762/tcp # DICOM TLS
dicom-tls 2762/udp # DICOM TLS
desktop-dna 2763/tcp # Desktop DNA
desktop-dna 2763/udp # Desktop DNA
data-insurance 2764/tcp # Data Insurance
data-insurance 2764/udp # Data Insurance
gip-audup/qip-audup 2765/tcp # qip-audup
, qip-audup

qip-audup
gip-audup/qip-audup 2765/udp # qip-audup
, qip-audup

qip-audup
listen/compaq-scp 2766/tcp # listen

Similar to port 1025/listener, but with higher security concerns.
, Compaq SCP
listen/compaq-scp/compaq-scp 2766/udp # listen

Similar to port 1025/listener, but with higher security concerns.
, Compaq SCP
, compaq-scp

compaq scp
uadtc 2767/tcp # UADTC
uadtc 2767/udp # UADTC
uacs 2768/tcp # UACS
uacs 2768/udp # UACS
singlept-mvs 2769/tcp # Single Point MVS
singlept-mvs 2769/udp # Single Point MVS
veronica 2770/tcp # Veronica
veronica 2770/udp # Veronica
vergencecm 2771/tcp # Vergence CM
vergencecm 2771/udp # Vergence CM
auris 2772/tcp # auris
auris 2772/udp # auris
pcbakcup1 2773/tcp # PC Backup 1
pcbakcup1 2773/udp # PC Backup 1
pcbakcup2 2774/tcp # PC Backup 2
pcbakcup2 2774/udp # PC Backup 2
smpp 2775/tcp # SMPP
smpp 2775/udp # SMPP
ridgeway1 2776/tcp # Ridgeway Systems & Software
ridgeway1 2776/udp # Ridgeway Systems & Software
ridgeway2 2777/tcp # Ridgeway Systems & Software
ridgeway2 2777/udp # Ridgeway Systems & Software
gwen-sonya 2778/tcp # Gwen-Sonya
gwen-sonya 2778/udp # Gwen-Sonya
lbc-sync 2779/tcp # LBC Sync
lbc-sync 2779/udp # LBC Sync
lbc-control 2780/tcp # LBC Control
lbc-control 2780/udp # LBC Control
whosells 2781/tcp # whosells
whosells 2781/udp # whosells
everydayrc 2782/tcp # everydayrc
everydayrc 2782/udp # everydayrc
aises 2783/tcp # AISES
aises 2783/udp # AISES
www-dev 2784/tcp # world wide web - development
www-dev 2784/udp # world wide web - development
aic-np 2785/tcp # aic-np
aic-np 2785/udp # aic-np
aic-oncrpc 2786/tcp # aic-oncrpc - Destiny MCD database
aic-oncrpc 2786/udp # aic-oncrpc - Destiny MCD database
piccolo 2787/tcp # piccolo - Cornerstone Software
piccolo 2787/udp # piccolo - Cornerstone Software
fryeserv 2788/tcp # NetWare NLM - Seagate Software
fryeserv 2788/udp # NetWare NLM - Seagate Software
media-agent 2789/tcp # Media Agent
media-agent 2789/udp # Media Agent
plgproxy 2790/tcp # PLG Proxy
plgproxy 2790/udp # PLG Proxy
mtport-regist 2791/tcp # MT Port Registrator
mtport-regist 2791/udp # MT Port Registrator
f5-globalsite 2792/tcp # f5-globalsite
f5-globalsite 2792/udp # f5-globalsite
initlsmsad 2793/tcp # initlsmsad
initlsmsad 2793/udp # initlsmsad
aaftp 2794/tcp # aaftp
aaftp 2794/udp # aaftp
livestats 2795/tcp # LiveStats
livestats 2795/udp # LiveStats
ac-tech 2796/tcp # ac-tech
ac-tech 2796/udp # ac-tech
esp-encap 2797/tcp # esp-encap
esp-encap 2797/udp # esp-encap
tmesis-upshot 2798/tcp # TMESIS-UPShot tcp/udp
tmesis-upshot 2798/udp # TMESIS-UPShot tcp/udp
icon-discover 2799/tcp # ICON Discover
icon-discover 2799/udp # ICON Discover
acc-raid 2800/tcp # ACC RAID
acc-raid 2800/udp # ACC RAID
igcp 2801/tcp # IGCP
igcp 2801/udp # IGCP
veritas-tcp1 2802/tcp # Veritas TCP1
veritas-udp1 2802/udp # Veritas UDP1
btprjctrl 2803/tcp # btprjctrl
btprjctrl 2803/udp # btprjctrl
telexis-vtu 2804/tcp # Telexis VTU
telexis-vtu 2804/udp # Telexis VTU
wta-wsp-s 2805/tcp # WTA WSP-S
wta-wsp-s 2805/udp # WTA WSP-S
cspuni 2806/tcp # cspuni
cspuni 2806/udp # cspuni
cspmulti 2807/tcp # cspmulti
cspmulti 2807/udp # cspmulti
j-lan-p 2808/tcp # J-LAN-P
j-lan-p 2808/udp # J-LAN-P
corbaloc 2809/tcp # CORBA LOC
corbaloc 2809/udp # CORBA LOC
netsteward 2810/tcp # Active Net Steward
netsteward 2810/udp # Active Net Steward
gsiftp 2811/tcp # GSI FTP
gsiftp 2811/udp # GSI FTP
atmtcp 2812/tcp # atmtcp
atmtcp 2812/udp # atmtcp
llm-pass 2813/tcp # llm-pass
llm-pass 2813/udp # llm-pass
llm-csv 2814/tcp # llm-csv
llm-csv 2814/udp # llm-csv
lbc-measure 2815/tcp # LBC Measurement
lbc-measure 2815/udp # LBC Measurement
lbc-watchdog 2816/tcp # LBC Watchdog
lbc-watchdog 2816/udp # LBC Watchdog
nmsigport 2817/tcp # NMSig Port
nmsigport 2817/udp # NMSig Port
rmlnk 2818/tcp # rmlnk
rmlnk 2818/udp # rmlnk
fc-faultnotify 2819/tcp # FC Fault Notification
fc-faultnotify 2819/udp # FC Fault Notification
univision 2820/tcp # UniVision
univision 2820/udp # UniVision
vml-dms 2821/tcp # vml-dms
vml-dms 2821/udp # vml-dms
ka0wuc 2822/tcp # ka0wuc
ka0wuc 2822/udp # ka0wuc
cqg-netlan 2823/tcp # CQG Net/LAN
cqg-netlan 2823/udp # CQG Net/LAN
slc-systemlog 2826/tcp # slc systemlog
slc-systemlog 2826/udp # slc systemlog
slc-strlrloops/slc-ctrlrloops 2827/tcp # slc ctrlrloops
, slc-ctrlrloops

slc ctrlrloops
slc-strlrloops/slc-ctrlrloops 2827/udp # slc ctrlrloops
, slc-ctrlrloops

slc ctrlrloops
itm-lm 2828/tcp # ITM License Manager
itm-lm 2828/udp # ITM License Manager
silkp1 2829/tcp # sildp1
silkp1 2829/udp # sildp1
silkp2 2830/tcp # sildp2
silkp2 2830/udp # sildp2
silkp3 2831/tcp # sildp3
silkp3 2831/udp # sildp3
silkp4 2832/tcp # sildp4
silkp4 2832/udp # sildp4
glishd 2833/tcp # glishd
glishd 2833/udp # glishd
evtp 2834/tcp # EVTP
evtp 2834/udp # EVTP
evtp-data 2835/tcp # EVTP-Data
evtp-data 2835/udp # EVTP-Data
catalyst 2836/tcp # catalyst
catalyst 2836/udp # catalyst
repliweb 2837/tcp # Repliweb
repliweb 2837/udp # Repliweb
starbot 2838/tcp # Starbot
starbot 2838/udp # Starbot
nmsigport 2839/tcp # NMSigPort
nmsigport 2839/udp # NMSigPort
13-exprt/l3-exprt 2840/tcp # 13-exprt
, l3-exprt

l3-exprt
13-exprt/l3-exprt 2840/udp # 13-exprt
, l3-exprt

l3-exprt
13-ranger/l3-ranger 2841/tcp # 13-ranger
, l3-ranger

l3-ranger
13-ranger/l3-ranger 2841/udp # 13-ranger
, l3-ranger

l3-ranger
13-hawk/l3-hawk 2842/tcp # 13-hawk
, l3-hawk

l3-hawk
13-hawk/l3-hawk 2842/udp # 13-hawk
, l3-hawk

l3-hawk
pdnet 2843/tcp # PDnet
pdnet 2843/udp # PDnet
bpcp-poll 2844/tcp # BPCP POLL
bpcp-poll 2844/udp # BPCP POLL
bpcp-trap 2845/tcp # BPCP TRAP
bpcp-trap 2845/udp # BPCP TRAP
aimpp-hello 2846/tcp # AIMPP Hello
aimpp-hello 2846/udp # AIMPP Hello
aimpp-port-req 2847/tcp # AIMPP Port Req
aimpp-port-req 2847/udp # AIMPP Port Req
amt-blc-port 2848/tcp # AMT-BLC-PORT
amt-blc-port 2848/udp # AMT-BLC-PORT
fxp 2849/tcp # FXP
fxp 2849/udp # FXP
metaconsole 2850/tcp # MetaConsole
metaconsole 2850/udp # MetaConsole
webemshttp 2851/tcp # webemshttp
webemshttp 2851/udp # webemshttp
bears-01 2852/tcp # bears-01
bears-01 2852/udp # bears-01
ispipes 2853/tcp # ISPipes
ispipes 2853/udp # ISPipes
infomover 2854/tcp # InfoMover
infomover 2854/udp # InfoMover
cesdinv 2856/tcp # cesdinv
cesdinv 2856/udp # cesdinv
simctlp 2857/tcp # SimCtIP
simctlp 2857/udp # SimCtIP
ecnp 2858/tcp # ECNP
ecnp 2858/udp # ECNP
activememory 2859/tcp # Active Memory
activememory 2859/udp # Active Memory
dialpad-voice1 2860/tcp # Dialpad Voice 1
dialpad-voice1 2860/udp # Dialpad Voice 1
dialpad-voice2 2861/tcp # Dialpad Voice 2
dialpad-voice2 2861/udp # Dialpad Voice 2
ttg-protocol 2862/tcp # TTG Protocol
ttg-protocol 2862/udp # TTG Protocol
sonardata 2863/tcp # Sonar Data
sonardata 2863/udp # Sonar Data
astromed-main 2864/tcp # main 5001 cmd
astromed-main 2864/udp # main 5001 cmd
pit-vpn 2865/tcp # pit-vpn
pit-vpn 2865/udp # pit-vpn
lwlistener 2866/tcp # lwlistener
lwlistener 2866/udp # lwlistener
esps-portal 2867/tcp # esps-portal
esps-portal 2867/udp # esps-portal
npep-messaging 2868/tcp # NPEP Messaging
npep-messaging 2868/udp # NPEP Messaging
icslap 2869/tcp # ICSLAP
icslap 2869/udp # ICSLAP
daishi 2870/tcp # daishi
daishi 2870/udp # daishi
msi-selectplay 2871/tcp # MSI Select Play
msi-selectplay 2871/udp # MSI Select Play
contract 2872/tcp # CONTRACT
contract 2872/udp # CONTRACT
paspar2-zoomin 2873/tcp # PASPAR2 ZoomIn
paspar2-zoomin 2873/udp # PASPAR2 ZoomIn
dxmessagebase1 2874/tcp # dxmessagebase1
dxmessagebase1 2874/udp # dxmessagebase1
dxmessagebase2 2875/tcp # dxmessagebase2
dxmessagebase2 2875/udp # dxmessagebase2
sps-tunnel 2876/tcp # SPS Tunnel
sps-tunnel 2876/udp # SPS Tunnel
bluelance 2877/tcp # BLUELANCE
bluelance 2877/udp # BLUELANCE
aap 2878/tcp # AAP
aap 2878/udp # AAP
ucentric-ds 2879/tcp # ucentric-ds
ucentric-ds 2879/udp # ucentric-ds
synapse 2880/tcp # synapse
synapse 2880/udp # synapse
ndsp 2881/tcp # NDSP
ndsp 2881/udp # NDSP
ndtp 2882/tcp # NDTP
ndtp 2882/udp # NDTP
ndnp 2883/tcp # NDNP
ndnp 2883/udp # NDNP
flashmsg 2884/tcp # Flash Msg
flashmsg 2884/udp # Flash Msg
topflow 2885/tcp # TopFlow
topflow 2885/udp # TopFlow
responselogic 2886/tcp # RESPONSELOGIC
responselogic 2886/udp # RESPONSELOGIC
aironetddp 2887/tcp # aironet
aironetddp 2887/udp # aironet
spcsdlobby 2888/tcp # SPCSDLOBBY
spcsdlobby 2888/udp # SPCSDLOBBY
rsom 2889/tcp # RSOM
rsom 2889/udp # RSOM
cspclmulti 2890/tcp # CSPCLMULTI
cspclmulti 2890/udp # CSPCLMULTI
cinegrfx-elmd 2891/tcp # CINEGRFX-ELMD License Manager
cinegrfx-elmd 2891/udp # CINEGRFX-ELMD License Manager
snifferdata 2892/tcp # SNIFFERDATA
snifferdata 2892/udp # SNIFFERDATA
vseconnector 2893/tcp # VSECONNECTOR
vseconnector 2893/udp # VSECONNECTOR
abacus-remote 2894/tcp # ABACUS-REMOTE
abacus-remote 2894/udp # ABACUS-REMOTE
natuslink 2895/tcp # NATUS LINK
natuslink 2895/udp # NATUS LINK
ecovisiong6-1 2896/tcp # ECOVISIONG6-1
ecovisiong6-1 2896/udp # ECOVISIONG6-1
citrix-rtmp 2897/tcp # Citrix RTMP
citrix-rtmp 2897/udp # Citrix RTMP
appliance-cfg 2898/tcp # APPLIANCE-CFG
appliance-cfg 2898/udp # APPLIANCE-CFG
powergemplus 2899/tcp # POWERGEMPLUS
powergemplus 2899/udp # POWERGEMPLUS
quicksuite 2900/tcp # QUICKSUITE
quicksuite 2900/udp # QUICKSUITE
allstorcns 2901/tcp # ALLSTORNCNS
allstorcns 2901/udp # ALLSTORNCNS
netaspi 2902/tcp # NET ASPI
netaspi 2902/udp # NET ASPI
suitcase 2903/tcp # SUITCASE
suitcase 2903/udp # SUITCASE
m2ua 2904/tcp # M2UA
m2ua 2904/udp # M2UA
m3ua 2905/tcp # M3UA
m3ua 2905/udp # M3UA
caller9 2906/tcp # CALLER9
caller9 2906/udp # CALLER9
webmethods-b2b 2907/tcp # Web Methods Business-to-Business
webmethods-b2b 2907/udp # Web Methods Business-to-Business
mao 2908/tcp # mao
mao 2908/udp # mao
funk-dialout 2909/tcp # Funk Dialout
funk-dialout 2909/udp # Funk Dialout
tdaccess 2910/tcp # TDAccess
tdaccess 2910/udp # TDAccess
blockade 2911/tcp # Blockade
blockade 2911/udp # Blockade
epiconl/epicon 2912/tcp # Epicon
, epicon

epicon
epiconl/epicon 2912/udp # Epicon
, epicon

epicon
boosterware 2913/tcp # Booster Ware
boosterware 2913/udp # Booster Ware
gamelobby 2914/tcp # Game Lobby
gamelobby 2914/udp # Game Lobby
tksocket 2915/tcp # TK Socket
tksocket 2915/udp # TK Socket
elvin_server 2916/tcp # Elvin Server
elvin_server 2916/udp # Elvin Server
elvin_client 2917/tcp # Elvin Client
elvin_client 2917/udp # Elvin Client
kastenchasepad 2918/tcp # Kasten Chase Pad
kastenchasepad 2918/udp # Kasten Chase Pad
roboer 2919/tcp # ROBOER
roboer 2919/udp # ROBOER
roboeda 2920/tcp # ROBOEDA
roboeda 2920/udp # ROBOEDA
cesdcdman 2921/tcp # CESD Contents Delivery Management
cesdcdman 2921/udp # CESD Contents Delivery Management
cesdcdtrn 2922/tcp # CESD Contents Delivery Data Transfer
cesdcdtrn 2922/udp # CESD Contents Delivery Data Transfer
wta-wsp-wtp-s 2923/tcp # WTA-WSP-WTP-S
wta-wsp-wtp-s 2923/udp # WTA-WSP-WTP-S
precise-vip 2924/tcp # PRECISE-VIP
precise-vip 2924/udp # PRECISE-VIP
frp 2925/tcp # Firewall Redundancy Protocol
frp 2925/udp # Firewall Redundancy Protocol
mobile-file-dl 2926/tcp # MOBILE-FILE-DL
mobile-file-dl 2926/udp # MOBILE-FILE-DL
unimobilectrl 2927/tcp # UNIMOBILECTRL
unimobilectrl 2927/udp # UNIMOBILECTRL
redstone-cpss 2928/tcp # REDSTONE-CPSS
redstone-cpss/redstone-cpss 2928/udp # REDSTONE-CPSS
, redstone-cpss

redsonte-cpss
panja-webadmin 2929/tcp # Panja Web Admin
panja-webadmin 2929/udp # Panja Web Admin
panja-weblinx 2930/tcp # Panja Web Linx
panja-weblinx 2930/udp # Panja Web Linx
circle-x 2931/tcp # Circle-X
circle-x 2931/udp # Circle-X
incp 2932/tcp # INCP
incp 2932/udp # INCP
4-tieropmgw 2933/tcp # 4-Tief OPM CW
4-tieropmgw 2933/udp # 4-Tief OPM CW
4-tieropmcli 2934/tcp # 4-Tier OPM CLI
4-tieropmcli 2934/udp # 4-Tier OPM CLI
qtp 2935/tcp # QTP
qtp 2935/udp # QTP
otpatch 2936/tcp # OTPatch
otpatch 2936/udp # OTPatch
pnaconsult-lm 2937/tcp # PNA Consult License Manager
pnaconsult-lm 2937/udp # PNA Consult License Manager
sm-pas-1 2938/tcp # SM-PAS-1
sm-pas-1 2938/udp # SM-PAS-1
sm-pas-2 2939/tcp # SM-PAS-2
sm-pas-2 2939/udp # SM-PAS-2
sm-pas-3 2940/tcp # SM-PAS-3
sm-pas-3 2940/udp # SM-PAS-3
sm-pas-4 2941/tcp # SM-PAS-4
sm-pas-4 2941/udp # SM-PAS-4
sm-pas-5 2942/tcp # SM-PAS-5
sm-pas-5 2942/udp # SM-PAS-5
ttnrepository 2943/tcp # TTN Repository
ttnrepository 2943/udp # TTN Repository
megaco-h248 2944/tcp # Megaco H248
megaco-h248 2944/udp # Megaco H248
h248-binary 2945/tcp # H248 Binary
h248-binary 2945/udp # H248 Binary
fjsvmpor 2946/tcp # FJSVmpor
fjsvmpor 2946/udp # FJSVmpor
gpsd 2947/tcp # GPSD
gpsd 2947/udp # GPSD
wap-push 2948/tcp # WAP PUSH
wap-push 2948/udp # WAP PUSH
wap-pushsecure 2949/tcp # WAP PUSH SECURE
wap-pushsecure 2949/udp # WAP PUSH SECURE
esip 2950/tcp # ESIP
esip 2950/udp # ESIP
ottp 2951/tcp # OTTP
ottp 2951/udp # OTTP
mpfwsas 2952/tcp # MPFWSAS
mpfwsas 2952/udp # MPFWSAS
ovalarmsrv 2953/tcp # OV Alarm Server
ovalarmsrv 2953/udp # OV Alarm Server
ovalarmsrv-cmd 2954/tcp # OV Alarm Server - Command
ovalarmsrv-cmd 2954/udp # OV Alarm Server - Command
csnotify 2955/tcp # CS Notify
csnotify 2955/udp # CS Notify
ovrimosdbman 2956/tcp # OVRIMOSDBMAN
ovrimosdbman 2956/udp # OVRIMOSDBMAN
jmact5 2957/tcp # JMACT5
jmact5 2957/udp # JMACT5
jmact6 2958/tcp # JMACT6
jmact6 2958/udp # JMACT6
rmopagt 2959/tcp # RMOPAGT
rmopagt 2959/udp # RMOPAGT
boldsoft-lm 2961/tcp # BoldSoft License Manager
boldsoft-lm 2961/udp # BoldSoft License Manager
iph-policy-cli 2962/tcp # IPH-Policy-CLI
iph-policy-cli 2962/udp # IPH-Policy-CLI
iph-policy-adm 2963/tcp # IPH-Policy-Admin
iph-policy-adm 2963/udp # IPH-Policy-Admin
bullant-srap 2964/tcp # Bullant SRP
bullant-srap 2964/udp # Bullant SRP
bullant-rap 2965/tcp # Bullant RAP
bullant-rap 2965/udp # Bullant RAP
idp-infotriev/idp-infotrieve 2966/tcp # IDP-INFOTRIEVE
, idp-infotrieve

idp-infotrieve
idp-infotriev/idp-infotrieve 2966/udp # IDP-INFOTRIEVE
, idp-infotrieve

idp-infotrieve
ssc-agent 2967/tcp # SSC Agent
ssc-agent 2967/udp # SSC Agent
enpp 2968/tcp # ENPP
enpp 2968/udp # ENPP
ESSP 2969/tcp # ESSP
ESSP 2969/udp # ESSP
index-net 2970/tcp # INDEX-NET
index-net 2970/udp # INDEX-NET
netclip 2971/tcp # Net Clip
netclip 2971/udp # Net Clip
pmsm-webrctl 2972/tcp # PMSM Webrctl
pmsm-webrctl 2972/udp # PMSM Webrctl
svnetworks 2973/tcp # SV Networks
svnetworks 2973/udp # SV Networks
signal 2974/tcp # Signal
signal 2974/udp # Signal
fjmpcm 2975/tcp # Fujitsu Configuration Mgmt Service
fjmpcm 2975/udp # Fujitsu Configuration Mgmt Service
cns-srv-port 2976/tcp # CNS Server Port
cns-srv-port 2976/udp # CNS Server Port
ttc-etap-ns 2977/tcp # TTCs Enterprise Test Access Protocol - NS
ttc-etap-ns 2977/udp # TTCs Enterprise Test Access Protocol - NS
ttc-etap-ds 2978/tcp # TTCs Enterprise Test Access Protocol - DS
ttc-etap-ds 2978/udp # TTCs Enterprise Test Access Protocol - DS
h263-video 2979/tcp # H.263 Video Streaming
h263-video 2979/udp # H.263 Video Streaming
wimd 2980/tcp # Instant Messaging Service
wimd 2980/udp # Instant Messaging Service
mylxamport 2981/tcp # MYLXAMPORT
mylxamport 2981/udp # MYLXAMPORT
iwb-whiteboard 2982/tcp # IWB Whiteboard
iwb-whiteboard 2982/udp # IWB Whiteboard
netplan 2983/tcp # NetPlan
netplan 2983/udp # NetPlan
hpidsadmin 2984/tcp # HP IDS Admin
hpidsadmin 2984/udp # HP IDS Admin
hpidsagent 2985/tcp # HP IDS Agent
hpidsagent/hpidsagnet 2985/udp # HP IDS Agent
, hpidsagnet

hpidsagent
stonefalls 2986/tcp # StoneFalls
stonefalls 2986/udp # StoneFalls
identify 2987/tcp # Identify
identify 2987/udp # Identify
classify 2988/tcp # Classify
classify 2988/udp # Classify
zarkov 2989/tcp # Zarkov
zarkov 2989/udp # Zarkov
boscap 2990/tcp # BOSCAP
boscap 2990/udp # BOSCAP
wkstn-mon 2991/tcp # WKSTN-MON
wkstn-mon 2991/udp # WKSTN-MON
itb301 2992/tcp # ITB301
itb301 2992/udp # ITB301
veritas-vis1 2993/tcp # Veritas Vis1
veritas-vis1 2993/udp # Veritas Vis1
veritas-vis2 2994/tcp # Veritas Vis2
veritas-vis2 2994/udp # Veritas Vis2
idrs 2995/tcp # IDRS
idrs 2995/udp # IDRS
vsixml 2996/tcp # vsixml
vsixml 2996/udp # vsixml
rebol 2997/tcp # REBOL
rebol 2997/udp # REBOL
realsecure 2998/tcp # Real Secure
realsecure 2998/udp # Real Secure
remoteware-un 2999/tcp # RemoteWare Unassigned
remoteware-un 2999/udp # RemoteWare Unassigned
ntop/remoteware-cl/hbci 3000/tcp # ntop

Web port for ntop, which grabs/stores/analyzes network transfer info and protocol stat's. Defaults to port 3000 with no auth, can be configured to only allow connects from specific IPs. Is also its own web server.
, RemoteWare Client
, HBCI
remoteware-cl/hbci/hbci 3000/udp # RemoteWare Client
, HBCI
, hbci

remoteware client, hbci
nessus-server/redwood-broker 3001/tcp # Nessus Server
, Redwood Broker
redwood-broker 3001/udp # Redwood Broker
exlm-agent/remoteware-srv 3002/tcp # EXLM Agent
, RemoteWare Server
exlm-agent/remoteware-srv 3002/udp # EXLM Agent
, RemoteWare Server
cgms 3003/tcp # CGMS
cgms 3003/udp # CGMS
csoftragent 3004/tcp # Csoft Agent
csoftragent 3004/udp # Csoft Agent
geniuslm 3005/tcp # Genius License Manager
geniuslm/geniuslm 3005/udp # Genius License Manager
, geniuslm

genius license manager
ii-admin 3006/tcp # Instant Internet Admin
ii-admin 3006/udp # Instant Internet Admin
lotusmtap 3007/tcp # LotusMail Tracking Agent Protocol
lotusmtap 3007/udp # LotusMail Tracking Agent Protocol
midnight-tech 3008/tcp # Midnight Technologies
midnight-tech 3008/udp # Midnight Technologies
pxc-ntfy 3009/tcp # PXC-NTFY
pxc-ntfy 3009/udp # PXC-NTFY
gw 3010/tcp # Telerate Workstation
ping-pong 3010/udp # Telerate Workstation
trusted-web 3011/tcp # Trusted Web
trusted-web 3011/udp # Trusted Web
twsdss 3012/tcp # Trusted Web Client
twsdss 3012/udp # Trusted Web Client
gilatskysurfer 3013/tcp # Gilat Sky Surfer
gilatskysurfer 3013/udp # Gilat Sky Surfer
broker_service 3014/tcp # Broker Service
broker_service 3014/udp # Broker Service
nati-dstp 3015/tcp # NATI DSTP
nati-dstp 3015/udp # NATI DSTP
notify_srvr 3016/tcp # Notify Server
notify_srvr 3016/udp # Notify Server
event_listener 3017/tcp # Event Listener
event_listener 3017/udp # Event Listener
srvc_registry 3018/tcp # Service Registry
srvc_registry 3018/udp # Service Registry
resource_mgr 3019/tcp # Resource Manager
resource_mgr 3019/udp # Resource Manager
cifs 3020/tcp # CIFS
cifs 3020/udp # CIFS
agriserver 3021/tcp # AGRI Server
agriserver 3021/udp # AGRI Server
csregagent 3022/tcp # CSREGAGENT
csregagent 3022/udp # CSREGAGENT
magicnotes 3023/tcp # magicnotes
magicnotes 3023/udp # magicnotes
nds_sso 3024/tcp # NDS_SSO
nds_sso 3024/udp # NDS_SSO
arepa-raft 3025/tcp # Arepa Raft
arepa-raft 3025/udp # Arepa Raft
agri-gateway 3026/tcp # AGRI Gateway
agri-gateway 3026/udp # AGRI Gateway
liebdevmgmt_c 3027/tcp # LiebDevMgmt_C
liebdevmgmt_c 3027/udp # LiebDevMgmt_C
liebdevmgmt_dm 3028/tcp # liebdevmgmt_dm
liebdevmgmt_dm 3028/udp # liebdevmgmt_dm
liebdevmgmt_a 3029/tcp # liebdevmgmt_a
liebdevmgmt_a 3029/udp # liebdevmgmt_a
arepa-cas 3030/tcp # Arepa Cas
arepa-cas 3030/udp # Arepa Cas
agentvu 3031/tcp # Agent VU
agentvu 3031/udp # Agent VU
redwood-chat 3032/tcp # Redwood Chat
redwood-chat 3032/udp # Redwood Chat
pdb 3033/tcp # PDB
pdb 3033/udp # PDB
osmosis-aeea 3034/tcp # Osmosis AEEA
osmosis-aeea 3034/udp # Osmosis AEEA
fjsv-gssagt 3035/tcp # FJSV gssagt
fjsv-gssagt 3035/udp # FJSV gssagt
hagel-dump 3036/tcp # Hagel Dump
hagel-dump 3036/udp # Hagel Dump
hp-san-mgmt 3037/tcp # HP SAN Mgmt
hp-san-mgmt 3037/udp # HP SAN Mgmt
santak-ups 3038/tcp # Santak UPS
santak-ups 3038/udp # Santak UPS
cogitate 3039/tcp # Cogitate, Inc.
cogitate 3039/udp # Cogitate, Inc.
tomato-springs 3040/tcp # Tomato Springs
tomato-springs 3040/udp # Tomato Springs
di-traceware 3041/tcp # DI Traceware
di-traceware 3041/udp # DI Traceware
journee 3042/tcp # journee
journee 3042/udp # journee
brp 3043/tcp # BRP
brp 3043/udp # BRP
responsenet 3045/tcp # ResponseNet
responsenet 3045/udp # ResponseNet
di-ase 3046/tcp # di-ase
di-ase 3046/udp # di-ase
hlserver 3047/tcp # Fast Security HL Server
hlserver 3047/udp # Fast Security HL Server
pctrader 3048/tcp # Sierra Net PC Trader
pctrader 3048/udp # Sierra Net PC Trader
NSWS 3049/tcp # NSWS
NSWS/nsws 3049/udp # NSWS
, nsws

nsws, cryptographic file system (nfs)
gds_db 3050/tcp # gds)db
gds_db 3050/udp # gds)db
galaxy-server 3051/tcp # Galaxy Server
galaxy-server 3051/udp # Galaxy Server
apcpcns 3052/tcp # APCPCNS
apcpcns 3052/udp # APCPCNS
dsom-server 3053/tcp # DSOM Server
dsom-server 3053/udp # DSOM Server
amt-cnf-prot 3054/tcp # AMT CNF PROT
amt-cnf-prot 3054/udp # AMT CNF PROT
policyserver 3055/tcp # Policy Server
policyserver 3055/udp # Policy Server
cdl-server 3056/tcp # CDL Server
cdl-server 3056/udp # CDL Server
goahead-fldup 3057/tcp # GoAhead FldUp
goahead-fldup 3057/udp # GoAhead FldUp
videobeans 3058/tcp # VideoBeans
videobeans 3058/udp # VideoBeans
qsoft/qsoft 3059/tcp # QSoft
, qsoft

qsoft
qsoft 3059/udp # QSoft
interserver 3060/tcp # interserver
interserver 3060/udp # interserver
cautcpd 3061/tcp # cautcpd
cautcpd 3061/udp # cautcpd
ncacn-ip-tcp/ncacn-ip-tcp 3062/tcp # NCACN-IP-TCP
, ncacn-ip-tcp

ncacn-ip-tcp
ncacn-ip-tcp 3062/udp # ncacn-ip-tcp

ncacn-ip-tcp
ncadg-ip-udp 3063/tcp # ncadg-ip-udp

ncadg-ip-udp
ncacn-ip-udp/ncadg-ip-udp 3063/udp # NCACN-IP-UDP
, ncadg-ip-udp

ncadg-ip-udp
slinterbase 3065/tcp # SlinterBase
slinterbase 3065/udp # SlinterBase
netattachsdmp 3066/tcp # NETATTACHSDMP
netattachsdmp 3066/udp # NETATTACHSDMP
fjhpjp 3067/tcp # FJHPJP
fjhpjp 3067/udp # FJHPJP
ls3bcast 3068/tcp # ls3 Broadcast
ls3bcast 3068/udp # ls3 Broadcast
ls3 3069/tcp # ls3
ls3 3069/udp # ls3
mgxswitch 3070/tcp # MGXSwitch
mgxswitch 3070/udp # MGXSwitch
opsec-sam 3071/tcp # OPSEC SAM
opsec-sam 3071/udp # OPSEC SAM
opsec-lea 3072/tcp # OPSEC LEA
opsec-lea 3072/udp # OPSEC LEA
opsec-ela 3073/tcp # OPSEC ELA
opsec-ela 3073/udp # OPSEC ELA
opsec-omi 3074/tcp # OPSEC OMI
opsec-omi 3074/udp # OPSEC OMI
orbix-locator 3075/tcp # Orbix 2000 Locator
orbix-locator 3075/udp # Orbix 2000 Locator
orbix-config 3076/tcp # Orbix 2000 Config
orbix-config 3076/udp # Orbix 2000 Config
orbix-loc-ssl 3077/tcp # Orbix 2000 Locator SSL
orbix-loc-ssl 3077/udp # Orbix 2000 Locator SSL
orbix-cfg-ssl 3078/tcp # Orbix-2000 Locator SSL
orbix-cfg-ssl 3078/udp # Orbix-2000 Locator SSL
stm_pproc 3080/tcp # stm_proc
stm_pproc 3080/udp # stm_proc
tl1-lv 3081/tcp # TL1-LC
tl1-lv 3081/udp # TL1-LC
tl1-raw 3082/tcp # TL1-RAW
tl1-raw 3082/udp # TL1-RAW
tl1-telnet 3083/tcp # TL1 Telnet
tl1-telnet 3083/udp # TL1 Telnet
cardbox 3105/tcp # Cardbox
cardbox 3105/udp # Cardbox
cardbox-http 3106/tcp # Cardbox HTTP
cardbox-http 3106/udp # Cardbox HTTP
squid-proxy 3128/tcp # Squid (Squid Web Proxy Cache)
squid-proxy 3128/udp # Squid (Squid Web Proxy Cache)
icpv2 3130/tcp # ICPv2
icpv2 3130/udp # ICPv2
netbookmark 3131/tcp # Net Book Mark
netbookmark 3131/udp # Net Book Mark
vmodem 3141/tcp # VMODEM
vmodem 3141/udp # VMODEM
rdc-wh-eos 3142/tcp # RDC WH EOS
rdc-wh-eos 3142/udp # RDC WH EOS
seaview 3143/tcp # Sea View
seaview 3143/udp # Sea View
tarantella 3144/tcp # Tarantella
tarantella 3144/udp # Tarantella
csi-lfap 3145/tcp # CSI-LFAP
csi-lfap 3145/udp # CSI-LFAP
rfio 3147/tcp # RFIO
rfio 3147/udp # RFIO
nm-game-admin 3148/tcp # NetMike Game Administrator
nm-game-admin 3148/udp # NetMike Game Administrator
nm-game-server 3149/tcp # NetMike Game Server
nm-game-server 3149/udp # NetMike Game Server
nm-asses-admin 3150/tcp # NetMike Assessor Administrator
nm-asses-admin 3150/udp # NetMike Assessor Administrator
nm-assessor 3151/tcp # NetMike Assessor
nm-assessor 3151/udp # NetMike Assessor
mc-brk-srv 3180/tcp # Millicent Broker Server
mc-brk-srv 3180/udp # Millicent Broker Server
bmcpatrolagent 3181/tcp # BMC Patrol Agent
bmcpatrolagent 3181/udp # BMC Patrol Agent
bmcpatrolrnvu 3182/tcp # BMC Patrol Rendezvous
bmcpatrolrnvu 3182/udp # BMC Patrol Rendezvous
necp 3262/tcp # NECP
necp 3262/udp # NECP
ccmail 3264/tcp # cc:mail/lotus
ccmail 3264/udp # cc:mail/lotus
altav-tunnel 3265/tcp # Altav Tunnel
altav-tunnel 3265/udp # Altav Tunnel
ns-cfg-server 3266/tcp # NS CFG Server
ns-cfg-server 3266/udp # NS CFG Server
ibm-dial-out 3267/tcp # IBM Dial Out
ibm-dial-out 3267/udp # IBM Dial Out
msft-gc 3268/tcp # Microsoft Global Catalog
msft-gc 3268/udp # Microsoft Global Catalog
msft-gc-ssl 3269/tcp # Microsoft Global Catalog w/ LDAP/SSL
msft-gc-ssl 3269/udp # Microsoft Global Catalog w/ LDAP/SSL
verismart 3270/tcp # Verismart
verismart 3270/udp # Verismart
csoft-prev 3271/tcp # CSoft Prev Port
csoft-prev 3271/udp # CSoft Prev Port
user-manager 3272/tcp # Fujitsu User Manager
user-manager 3272/udp # Fujitsu User Manager
sxmp 3273/tcp # Simple Experimental Multiplexed Protocol
sxmp 3273/udp # Simple Experimental Multiplexed Protocol
ordinox-server 3274/tcp # Ordinox Server
ordinox-server 3274/udp # Ordinox Server
samd 3275/tcp # SAMD
samd 3275/udp # SAMD
maxim-asics 3276/tcp # Maxim ASICs
maxim-asics 3276/udp # Maxim ASICs
awg-proxy 3277/tcp # AWG Proxy
awg-proxy 3277/udp # AWG Proxy
lkcmserver 3278/tcp # LKCM Server
lkcmserver 3278/udp # LKCM Server
admind 3279/tcp # admind
admind 3279/udp # admind
vs-server 3280/tcp # VS Server
vs-server 3280/udp # VS Server
sysopt 3281/tcp # SYSOPT
sysopt 3281/udp # SYSOPT
datusorb 3282/tcp # Datusorb
datusorb 3282/udp # Datusorb
net-assistant 3283/tcp # Net Assistant
net-assistant 3283/udp # Net Assistant
4talk 3284/tcp # 4Talk
4talk 3284/udp # 4Talk
plato 3285/tcp # Plato
plato 3285/udp # Plato
e-net 3286/tcp # E-Net
e-net 3286/udp # E-Net
directvdata 3287/tcp # DIRECTVDATA
directvdata 3287/udp # DIRECTVDATA
cops 3288/tcp # COPS
cops 3288/udp # COPS
enpc 3289/tcp # ENPC
enpc 3289/udp # ENPC
caps-lm 3290/tcp # CAPS-LOGISTICS TOOLKIT - LM
caps-lm 3290/udp # CAPS-LOGISTICS TOOLKIT - LM
sah-lm 3291/tcp # S A Holditch & Associates - LM
sah-lm 3291/udp # S A Holditch & Associates - LM
cart-o-rama 3292/tcp # Cart O Rama
cart-o-rama 3292/udp # Cart O Rama
fg-fps 3293/tcp # fg-fps
fg-fps 3293/udp # fg-fps
fg-gip 3294/tcp # fg-gip
fg-gip 3294/udp # fg-gip
dyniplookup 3295/tcp # Dynamic IP Lookup
dyniplookup 3295/udp # Dynamic IP Lookup
rib-slm 3296/tcp # Rib License Manager
rib-slm 3296/udp # Rib License Manager
cytel-lm 3297/tcp # Cytel License Manager
cytel-lm 3297/udp # Cytel License Manager
transview 3298/tcp # Transview
transview 3298/udp # Transview
pdrncs 3299/tcp # pdrncs
pdrncs 3299/udp # pdrncs
bmcpatrolagent 3300/tcp # BMC Patrol Agent
bmcpatrolagent 3300/udp # BMC Patrol Agent
bmcpatrolrnvu 3301/tcp # BMC Patrol Rendezvous
bmcpatrolrnvu 3301/udp # BMC Patrol Rendezvous
mcs-fastmail 3302/tcp # MCS Fastmail
mcs-fastmail 3302/udp # MCS Fastmail
opsession-clnt 3303/tcp # OP Session Client
opsession-clnt 3303/udp # OP Session Client
opsession-srvr 3304/tcp # OP Session Server
opsession-srvr 3304/udp # OP Session Server
odette-ftp 3305/tcp # ODETTE-FTP
odette-ftp 3305/udp # ODETTE-FTP
mysq1/mysql 3306/tcp # MySQL
, mysql

mysql
mysq1/mysql 3306/udp # MySQL
, mysql

mysql
opsession-prxy 3307/tcp # OP Session Proxy
opsession-prxy 3307/udp # OP Session Proxy
tns-server 3308/tcp # TNS Server
tns-server 3308/udp # TNS Server
tns-adv 3309/tcp # TNS ADV
tns-adv/tns-adv 3309/udp # TNS ADV
, tns-adv

tnd adv
dyna-access 3310/tcp # Dyna Access
dyna-access 3310/udp # Dyna Access
mcns-tel-ret 3311/tcp # MCNS Tel Ret
mcns-tel-ret 3311/udp # MCNS Tel Ret
appman-server 3312/tcp # Application Management Server
appman-server 3312/udp # Application Management Server
uorb 3313/tcp # Unify Object Broker
uorb 3313/udp # Unify Object Broker
uohost 3314/tcp # Unify Object Host
uohost 3314/udp # Unify Object Host
cdid 3315/tcp # CDID
cdid 3315/udp # CDID
aicc-cmi 3316/tcp # AICC/CMI
aicc-cmi 3316/udp # AICC/CMI
vsaiport 3317/tcp # VSAI PORT
vsaiport 3317/udp # VSAI PORT
ssrip 3318/tcp # Switch to Switch Routing Info Protocol
ssrip 3318/udp # Switch to Switch Routing Info Protocol
sdt-lmd 3319/tcp # SDT License Manager
sdt-lmd 3319/udp # SDT License Manager
officelink2000 3320/tcp # Office Link 2000
officelink2000 3320/udp # Office Link 2000
vnsstr 3321/tcp # VNSSTR
vnsstr 3321/udp # VNSSTR
active-net/active-net 3322/tcp # Active Networks
, active-net

active networks
active-net 3322/udp # Active Networks
active-net/active-net 3323/tcp # Active Networks
, active-net

active networks
active-net 3323/udp # Active Networks
active-net/active-net 3324/tcp # Active Networks
, active-net

active networks
active-net 3324/udp # Active Networks
active-net/active-net 3325/tcp # Active Networks
, active-net

active networks
active-net 3325/udp # Active Networks
sftu 3326/tcp # SFTU
sftu 3326/udp # SFTU
bbars 3327/tcp # BBARS
bbars 3327/udp # BBARS
egptlm 3328/tcp # Eaglepoint License Manager
egptlm 3328/udp # Eaglepoint License Manager
hp-device-disc 3329/tcp # HP Device Disc
hp-device-disc 3329/udp # HP Device Disc
mcs-calypsoicf 3330/tcp # MCS Calypso ICF
mcs-calypsoicf 3330/udp # MCS Calypso ICF
mcs-messaging 3331/tcp # MCS Messaging
mcs-messaging 3331/udp # MCS Messaging
mcs-mailsvr 3332/tcp # MCS Mail Server
mcs-mailsvr 3332/udp # MCS Mail Server
dec-notes/eggdrop 3333/tcp # DEC Notes
, Eggdrop bot
dec-notes/eggdrop 3333/udp # DEC Notes
, Eggdrop bot
directv-web 3334/tcp # Direct TV Webcasting
directv-web 3334/udp # Direct TV Webcasting
directv-soft 3335/tcp # Direct TV Software Updates
directv-soft 3335/udp # Direct TV Software Updates
directv-tick 3336/tcp # Direct TV Tickers
directv-tick 3336/udp # Direct TV Tickers
directv-catlog/directv-catlg 3337/tcp # Direct TV Data Catelog
, directv-catlg

direct tv data catalog
directv-catlog/directv-catlg 3337/udp # Direct TV Data Catelog
, directv-catlg

direct tv data catalog
anet-b 3338/tcp # OMF data b
anet-b 3338/udp # OMF data b
anet-l 3339/tcp # OMF data l
anet-l 3339/udp # OMF data l
anet-m 3340/tcp # OMF data m
anet-m 3340/udp # OMF data m
anet-h 3341/tcp # OMF data h
anet-h 3341/udp # OMF data h
webtie 3342/tcp # WebTIE
webtie 3342/udp # WebTIE
ms-cluster-net 3343/tcp # MS Cluster Net
ms-cluster-net 3343/udp # MS Cluster Net
bnt-manager 3344/tcp # BNT Manager
bnt-manager 3344/udp # BNT Manager
influence 3345/tcp # Influence
influence 3345/udp # Influence
trnsprntproxy 3346/tcp # Trnsprnt Proxy
trnsprntproxy 3346/udp # Trnsprnt Proxy
phoenix-rpc 3347/tcp # Phoenix RPC
phoenix-rpc 3347/udp # Phoenix RPC
pangolin-laser 3348/tcp # Pangolin Laser
pangolin-laser 3348/udp # Pangolin Laser
chevinservices 3349/tcp # Chevin Services
chevinservices 3349/udp # Chevin Services
findviatv 3350/tcp # FINDVIATV
findviatv 3350/udp # FINDVIATV
btrieve 3351/tcp # BTRIEVE
btrieve 3351/udp # BTRIEVE
ssq1/ssql 3352/tcp # SSQL
, ssql

ssql
ssq1/ssql 3352/udp # SSQL
, ssql

ssql
fatpipe 3353/tcp # FATPIPE
fatpipe 3353/udp # FATPIPE
suitjd 3354/tcp # SUITJD
suitjd 3354/udp # SUITJD
ordinox-dbase 3355/tcp # Ordinox Dbase
ordinox-dbase 3355/udp # Ordinox Dbase
upnotifyps 3356/tcp # UPNOTIFYPS
upnotifyps 3356/udp # UPNOTIFYPS
adtech-test 3357/tcp # Adtech Test IP
adtech-test 3357/udp # Adtech Test IP
mpsysrmsvr 3358/tcp # Mp Sys Rmsvr
mpsysrmsvr 3358/udp # Mp Sys Rmsvr
wg-netforce 3359/tcp # WG NetForce
wg-netforce 3359/udp # WG NetForce
kv-server 3360/tcp # KV Server
kv-server 3360/udp # KV Server
kv-agent 3361/tcp # KV Agent
kv-agent 3361/udp # KV Agent
dj-ilm 3362/tcp # DJ ILM
dj-ilm 3362/udp # DJ ILM
nati-vi-server 3363/tcp # NATI Vi Server
nati-vi-server 3363/udp # NATI Vi Server
creativeserver 3364/tcp # Creative Server
creativeserver 3364/udp # Creative Server
contentserver 3365/tcp # Content Server
contentserver 3365/udp # Content Server
creativepartnr 3366/tcp # Creative Partner
creativepartnr 3366/udp # Creative Partner
satvid-datalnk/satvid-datalnk 3367/tcp # Satellite Video Data Link
, satvid-datalnk

satellite video data link
satvid-datalnk 3367/udp # Satellite Video Data Link
satvid-datalnk/satvid-datalnk 3368/tcp # Satellite Video Data Link
, satvid-datalnk

satellite video data link
satvid-datalnk 3368/udp # Satellite Video Data Link
satvid-datalnk/satvid-datalnk 3369/tcp # Satellite Video Data Link
, satvid-datalnk

satellite video data link
satvid-datalnk 3369/udp # Satellite Video Data Link
satvid-datalnk/satvid-datalnk 3370/tcp # Satellite Video Data Link
, satvid-datalnk

satellite video data link
satvid-datalnk 3370/udp # Satellite Video Data Link
satvid-datalnk/satvid-datalnk 3371/tcp # Satellite Video Data Link
, satvid-datalnk

satellite video data link
satvid-datalnk 3371/udp # Satellite Video Data Link
tip2l/tip2 3372/tcp # TIP 2
, tip2

tip 2
tip2l/tip2 3372/udp # TIP 2
, tip2

tip 2
lavenir-lm 3373/tcp # Lavenir License Manager
lavenir-lm 3373/udp # Lavenir License Manager
cluster-disc 3374/tcp # Cluster Disc
cluster-disc 3374/udp # Cluster Disc
vsnm-agent 3375/tcp # VSNM Agent
vsnm-agent 3375/udp # VSNM Agent
cdbroker 3376/tcp # CD Broker
cdbroker/cdbroker 3376/udp # CD Broker
, cdbroker

cd broker
cogsys-lm 3377/tcp # Cogsys Network License Manager
cogsys-lm 3377/udp # Cogsys Network License Manager
wsicopy 3378/tcp # WSICOPY
wsicopy 3378/udp # WSICOPY
socorfs 3379/tcp # SOCORFS
socorfs 3379/udp # SOCORFS
sns-channels 3380/tcp # SNS Channels
sns-channels 3380/udp # SNS Channels
geneous 3381/tcp # Geneous
geneous 3381/udp # Geneous
fujitsu-neat 3382/tcp # Fujitsu Net Enhanced Antitheft
fujitsu-neat 3382/udp # Fujitsu Net Enhanced Antitheft
esp-lm 3383/tcp # Enterprise Software Products LM
esp-lm 3383/udp # Enterprise Software Products LM
hp-clic 3384/tcp # Cluster Management Services
hp-clic 3384/udp # Hardware Management
qnxnetman 3385/tcp # qnxnetman
qnxnetman 3385/udp # qnxnetman
gprs-data 3386/tcp # GPRS Data
gprs-sig 3386/udp # GPRS Signal
backroomnet 3387/tcp # Back Room Net
backroomnet 3387/udp # Back Room Net
cbserver 3388/tcp # CB Server
cbserver 3388/udp # CB Server
ms-wbt-server 3389/tcp # MS Terminal Server RDP Client
ms-wbt-server/ms-wbt-server 3389/udp # MS Terminal Server RDP Client
, ms-wbt-server

ms wbt server
dsc 3390/tcp # Distributed Service Coordinator
dsc 3390/udp # Distributed Service Coordinator
savant 3391/tcp # SAVANT
savant 3391/udp # SAVANT
efi-lm 3392/tcp # EFI License Management
efi-lm 3392/udp # EFI License Management
d2k-tapestry1 3393/tcp # D2K Tapestry Client to Server
d2k-tapestry1 3393/udp # D2K Tapestry Client to Server
d2k-tapestry2 3394/tcp # D2K Tapestry Server to Client
d2k-tapestry2 3394/udp # D2K Tapestry Server to Client
dyna-lm 3395/tcp # Dyna License Manager (Elam)
dyna-lm 3395/udp # Dyna License Manager (Elam)
printer_agent 3396/tcp # Printer Agent
printer_agent 3396/udp # Printer Agent
cloanto-lm 3397/tcp # Cloanto License Manager
cloanto-lm 3397/udp # Cloanto License Manager
merchantile/mercantile 3398/tcp # Mercantile
, mercantile

mercantile
merchantile/mercantile 3398/udp # Mercantile
, mercantile

mercantile
csms 3399/tcp # CSMS
csms 3399/udp # CSMS
csms2 3400/tcp # CSMC2
csms2 3400/udp # CSMC2
filecast 3401/tcp # FileCast
filecast 3401/udp # FileCast
bmap 3421/tcp # Bull Apprise portmapper
bmap 3421/udp # Bull Apprise portmapper
mira 3454/tcp # Apple Remote Access Protocol
/udp #
prsvp 3455/tcp # RSVP Port
prsvp/prsvp 3455/udp # RSVP Port
, prsvp

rsvp port, rsvp encapsulated in udp
vat 3456/tcp # VAT default data
vat 3456/udp # VAT default data
vat-control 3457/tcp # VAT default control
vat-control 3457/udp # VAT default control
d3winosfi 3458/tcp # D3WinOsfi
d3winosfi/d3winosfi 3458/udp # D3WinOsfi
, d3winosfi

dswinosfi
integral 3459/tcp # Integral
integral 3459/udp # Integral
edm-manager 3460/tcp # EDM Manager
edm-manager 3460/udp # EDM Manager
edm-stager 3461/tcp # EDM Stager
edm-stager 3461/udp # EDM Stager
edm-std-notify 3462/tcp # EDM STD Notify
edm-std-notify/edm-std-notify 3462/udp # EDM STD Notify
, edm-std-notify

edm std notify
edm-adm-notify 3463/tcp # EDM ADM Notify
edm-adm-notify 3463/udp # EDM ADM Notify
edm-mgr-sync 3464/tcp # EDM MGR Sync
edm-mgr-sync 3464/udp # EDM MGR Sync
edm-mgr-cntrl 3465/tcp # EDM MGR Control
edm-mgr-cntrl 3465/udp # EDM MGR Control
workflow 3466/tcp # WORKFLOW
workflow 3466/udp # WORKFLOW
rcst 3467/tcp # RCST
rcst 3467/udp # RCST
ttcmremotectrl 3468/tcp # TTCM Remote Control
ttcmremotectrl 3468/udp # TTCM Remote Control
pluribus 3469/tcp # Pluribus
pluribus 3469/udp # Pluribus
jt400 3470/tcp # jt400
jt400 3470/udp # jt400
jt400-ssl 3471/tcp # jt400 SSL
jt400-ssl 3471/udp # jt400 SSL
watcomdebug 3472/tcp # Watcom Debug
watcomdebug 3472/udp # Watcom Debug
harlequinorb 3473/tcp # harlequinorb
harlequinorb 3473/udp # harlequinorb
ms-la 3535/tcp # MS-LA
ms-la 3535/udp # MS-LA
vhd 3802/tcp # VHD
vhd 3802/udp # VHD
v-one-spp 3845/tcp # V-ONE Single Port Proxy
v-one-spp 3845/udp # V-ONE Single Port Proxy
udt_os 3900/tcp # Unidata UDT OS
udt_os 3900/udp # Unidata UDT OS
mapper-nodemgr 3984/tcp # MAPPER network node manager
mapper-nodemgr 3984/udp # MAPPER network node manager
mapper-mapethd 3985/tcp # MAPPER TCP/IP server
mapper-mapethd 3985/udp # MAPPER TCP/IP server
mapper-ws_ethd 3986/tcp # MAPPER workstation server
mapper-ws_ethd 3986/udp # MAPPER workstation server
centerline 3987/tcp # Centerline
centerline 3987/udp # Centerline
terabase/icq-tcp 4000/tcp # Terabase
, ICQ Control Port

Used to negotiate random-high udp ports for ICQ data tx.
terabase/icq-udp 4000/udp # Terabase
, ICQ Data Port
newoak 4001/tcp # NewOak
newoak 4001/udp # NewOak
pxc-spvr-ft 4002/tcp # pxc-spvr-ft
pxc-spvr-ft 4002/udp # pxc-spvr-ft
pxc-splr-ft 4003/tcp # pxc-splr-ft
pxc-splr-ft 4003/udp # pxc-splr-ft
pxc-roid 4004/tcp # pxc-roid
pxc-roid 4004/udp # pxc-roid
pxc-pin 4005/tcp # pxc-pin
pxc-pin 4005/udp # pxc-pin
pxc-spvr 4006/tcp # pxc-spvr
pxc-spvr 4006/udp # pxc-spvr
pxc-splr 4007/tcp # pxc-splr
pxc-splr 4007/udp # pxc-splr
netcheque 4008/tcp # NetCheque accounting
netcheque 4008/udp # NetCheque accounting
chimera-hwm 4009/tcp # Chimera HWM
chimera-hwm 4009/udp # Chimera HWM
samsung-unidex 4010/tcp # Samsung Unidex
samsung-unidex 4010/udp # Samsung Unidex
altserviceboot 4011/tcp # Alternate Service Boot
altserviceboot 4011/udp # Alternate Service Boot
pda-gate 4012/tcp # PDA Gate
pda-gate 4012/udp # PDA Gate
acl-manager 4013/tcp # ACL Manager
acl-manager 4013/udp # ACL Manager
taiclock 4014/tcp # TAICLOCK
taiclock 4014/udp # TAICLOCK
talarian-mcast1 4015/tcp # Talarian Mcast
talarian-mcast1 4015/udp # Talarian Mcast
talarian-mcast2 4016/tcp # Talarian Mcast
talarian-mcast2 4016/udp # Talarian Mcast
talarian-mcast3 4017/tcp # Talarian Mcast
talarian-mcast3 4017/udp # Talarian Mcast
talarian-mcast4 4018/tcp # Talarian Mcast
talarian-mcast4 4018/udp # Talarian Mcast
talarian-mcast5 4019/tcp # Talarian Mcast
talarian-mcast5 4019/udp # Talarian Mcast
ichat 4020/tcp # IChat Chat Room
ichat 4020/udp # IChat Chat Room
lockd 4045/tcp # NFS lock daemon (alt port)

Supports record locking on NFS files. On some OS's (eg: Solaris), lockd tracks NFS requests to tcp 2049. Attackers know this and will probe NFS via tcp 4045 instead, hoping probe escapes detection.
lockd/lockd 4045/udp # NFS lock daemon (alt port)

Supports record locking on NFS files. On some OS's (eg: Solaris), lockd tracks NFS requests to tcp 2049. Attackers know this and will probe NFS via tcp 4045 instead, hoping probe escapes detection.
, lockd

nfs lock daemon/manager
bre 4096/tcp # Bridge Relay Element
bre 4096/udp # Bridge Relay Element
patrolview 4097/tcp # Patrol View
patrolview 4097/udp # Patrol View
drmsfsd 4098/tcp # drmsfsd
drmsfsd 4098/udp # drmsfsd
dpcp 4099/tcp # DPCD
dpcp 4099/udp # DPCD
nuts_dem 4132/tcp # NUTS Daemon
nuts_dem 4132/udp # NUTS Daemon
nuts_bootp 4133/tcp # NUTS Bootp Server
nuts_bootp 4133/udp # NUTS Bootp Server
nifty-hmi 4134/tcp # NIFTY-Serve HMI protocol
nifty-hmi 4134/udp # NIFTY-Serve HMI protocol
oirtgsvc 4141/tcp # Workflow Server
oirtgsvc 4141/udp # Workflow Server
oidocsvc 4142/tcp # Document Server
oidocsvc 4142/udp # Document Server
oidsr 4143/tcp # Document Replication
oidsr 4143/udp # Document Replication
CIM/wincim 4144/tcp # Compuserve server port
, wincim

pc windows compuserve.com protocol
CIM 4144/udp # Compuserve server port
jini-discovery 4160/tcp # Jini Discovery
jini-discovery 4160/udp # Jini Discovery
eims=admin/eims-admin 4199/tcp # EIMS Admin
, eims-admin

eims admin
eims=admin/eims-admin 4199/udp # EIMS Admin
, eims-admin

eims admin
vrml-multi-use/vrml-multi-use 4200/tcp # VRML Multi User Systems
, vrml-multi-use

vrml multi user systems
vrml-multi-use 4200/udp # VRML Multi User Systems
corelccam 4300/tcp # Corel Ccam
corelccam 4300/udp # Corel Ccam
rwhois 4321/tcp # Remote Who Is
rwhois 4321/udp # Remote Who Is
unicall 4343/tcp # UNICALL
unicall 4343/udp # UNICALL
vinainstall 4344/tcp # VinaInstall
vinainstall 4344/udp # VinaInstall
m4-network-as 4345/tcp # Macro 4 Network AS
m4-network-as 4345/udp # Macro 4 Network AS
elanlm 4346/tcp # ELAN LM
elanlm 4346/udp # ELAN LM
lansurveyor 4347/tcp # LAN Surveyor
lansurveyor 4347/udp # LAN Surveyor
itose 4348/tcp # ITOSE
itose 4348/udp # ITOSE
fsportmap 4349/tcp # File System Port Map
fsportmap 4349/udp # File System Port Map
net-device 4350/tcp # Net Device
net-device 4350/udp # Net Device
plcy-net-svcs 4351/tcp # PLCY Net Services
plcy-net-svcs 4351/udp # PLCY Net Services
f5-iquery 4353/tcp # F5iQuery
f5-iquery 4353/udp # F5iQuery
saris 4442/tcp # Saris
saris 4442/udp # Saris
pharos 4443/tcp # Pharos
pharos 4443/udp # Pharos
krb524/nv-video/eggdrop 4444/tcp # KRB524
, NV Video default
, Common for eggdrop bot
krb524/nv-video/eggdrop/krb524 4444/udp # KRB524
, NV Video default
, Common for eggdrop bot
, krb524

nv video default, krb524
upnotifyp 4445/tcp # UPNOTIFYP
upnotifyp 4445/udp # UPNOTIFYP
n1-fwp 4446/tcp # N1-FWP
n1-fwp 4446/udp # N1-FWP
n1-rmgmt 4447/tcp # N1-RMGMT
n1-rmgmt 4447/udp # N1-RMGMT
asc-slmd 4448/tcp # ASC Licence Manager
asc-slmd 4448/udp # ASC Licence Manager
arcryptoip/privatewire 4449/tcp # ARCrypto IP
, PrivateWire
arcryptoip/privatewire 4449/udp # ARCrypto IP
, PrivateWire
camp 4450/tcp # Camp
camp 4450/udp # Camp
ctisystemmsg 4451/tcp # CTI System Msg
ctisystemmsg 4451/udp # CTI System Msg
ctiprogramload 4452/tcp # CTI Program Load
ctiprogramload 4452/udp # CTI Program Load
nssalertmgr 4453/tcp # NSS Alert Manager
nssalertmgr 4453/udp # NSS Alert Manager
nssagentmgr 4454/tcp # NSS Agent Manager
nssagentmgr 4454/udp # NSS Agent Manager
prchat-user 4455/tcp # PR Chat User
prchat-user 4455/udp # PR Chat User
prchat-server 4456/tcp # PR Chat Server
prchat-server 4456/udp # PR Chat Server
prRegister 4457/tcp # PR Register
prRegister 4457/udp # PR Register
sae-urn 4500/tcp # sae-urn
sae-urn/NAT-T 4500/udp # sae-urn
, NAT-T (NAT transparency) in ISAKMP negotiations for IPSec.
urn-x-cdchoice 4501/tcp # urn-x-cdchoice
urn-x-cdchoice 4501/udp # urn-x-cdchoice
worldscores 4545/tcp # WorldScores
worldscores 4545/udp # WorldScores
sf-lm 4546/tcp # SF License Manager (Sentinel)
sf-lm 4546/udp # SF License Manager (Sentinel)
lanner-lm 4547/tcp # Lanner License Manager
lanner-lm 4547/udp # Lanner License Manager
tram 4567/tcp # TRAM
tram 4567/udp # TRAM
bmc-reporting 4568/tcp # BMC Reporting
bmc-reporting 4568/udp # BMC Reporting
piranha1 4600/tcp # Piranha-1
piranha1 4600/udp # Piranha-1
piranha2 4601/tcp # Piranha-2
piranha2 4601/udp # Piranha-2
rfa 4672/tcp # remote file access server
EMule, rfa 4672/udp # P2P, remote file access server
/tcp #
pgpfone 4747/udp # PGP Secure Phone Data Stream
iims 4800/tcp # Icona Instant Messenging System
iims 4800/udp # Icona Instant Messenging System
iwec 4801/tcp # Icona Web Embedded Chat
iwec 4801/udp # Icona Web Embedded Chat
ilss 4802/tcp # Icona License System Server
ilss 4802/udp # Icona License System Server
htcp 4827/tcp # HTCP
htcp 4827/udp # HTCP
phrelay 4868/tcp # Photon Relay
phrelay 4868/udp # Photon Relay
phrelaydbg 4869/tcp # Photon Relay Debug
phrelaydbg 4869/udp # Photon Relay Debug
abbs 4885/tcp # ABBS
abbs 4885/udp # ABBS
att-intercom 4983/tcp # AT&T Intercom
att-intercom 4983/udp # AT&T Intercom
sockets-de-troje/commplex-main/Sybase/nortel-voip/YahooMessenger 5000/tcp # Sockets de Trojie Backdoor

Also infects tcp/udp 5001, 30303, 50505.
, Complex Main
, , Nortel Networks i2050 Software Phone, Yahoo Messenger Voice Chat
sockets-de-troje/commplex-main/commplex-main/nortel-voip 5000/udp # Sockets de Trojie Backdoor

Also infects tcp/udp 5001, 30303, 50505.
, Complex Main
, commplex-main


, Nortel Networks i2050 Software Phone
commplex-link/sockets-de-troje/YahooMessenger 5001/tcp # Complex Link
, Sockets de Trojie Backdoor

Also infects tcp/udp 5000, 30303, 50505.
, Yahoo Messenger Voice Chat
commplex-link/sockets-de-troje 5001/udp # Complex Link
, Sockets de Trojie Backdoor

Also infects tcp/udp 5000, 30303, 50505.
rfe 5002/tcp # radio free ethernet
rfe/rfe 5002/udp # radio free ethernet
, rfe

radio free ethernet, actually uses udp only
claris-fmpro/fmpro-internal 5003/tcp # Claris FileMaker Pro
, FileMaker - Proprietary Transport
claris-fmpro/fmpro-internal/fmpro-internal 5003/udp # Claris FileMaker Pro
, FileMaker - Proprietary Transport
, fmpro-internal

filemaker, inc. - proprietary name binding
avt-profile-1 5004/tcp # avt-profile-1
avt-profile-1 5004/udp # avt-profile-1
avt-profile-2 5005/tcp # avt-profile-2
avt-profile-2 5005/udp # avt-profile-2
wsm-server 5006/tcp # WSM Server
wsm-server 5006/udp # WSM Server
wsm-server-ssl 5007/tcp # WSM Server SSL
wsm-server-ssl 5007/udp # WSM Server SSL
telelpathstart 5010/tcp # TelepathStart
telelpathstart 5010/udp # TelepathStart
telelpathattack 5011/tcp # TelepathAttack
telelpathattack 5011/udp # TelepathAttack
zenginkyo-1 5020/tcp # zenginkyo-1
zenginkyo-1 5020/udp # zenginkyo-1
zenginkyo-2 5021/tcp # zenginkyo-2
zenginkyo-2 5021/udp # zenginkyo-2
asnaacceler8db 5042/tcp # asnaacceler8db
asnaacceler8db 5042/udp # asnaacceler8db
mmcc 5050/tcp # multimedia conference control tool
mmcc 5050/udp # multimedia conference control tool
ita-manager/ita-agent 5051/tcp # ITA Manager

Open on Axent ITA Manager, to receive comms from agents.
, ita-agent

ita agent
ita-agent 5051/udp # ita-agent

ita agent
ita-agent/ita-manager 5052/tcp # ITA Agent

Open on Axent ITA agents, to receive comms from manager.
, ita-manager

ita manager
ita-manager 5052/udp # ita-manager

ita manager
unot 5055/tcp # UNOT
unot 5055/udp # UNOT
sip/hp-chorus 5060/tcp # SIP
, HP Motive Chorus (HTTP)
sip 5060/udp # SIP
I-net-2000-npr 5069/tcp # I/Net 2000-NPR
I-net-2000-npr 5069/udp # I/Net 2000-NPR
powerschool 5071/tcp # PowerSchool
powerschool 5071/udp # PowerSchool
rmonitor_secure 5145/tcp # rmonitor secure
rmonitor_secure 5145/udp # rmonitor secure
atmp 5150/tcp # Ascend Tunnel Management Protocol
atmp 5150/udp # Ascend Tunnel Management Protocol
esri_sde 5151/tcp # ESRI SDE Instance
esri_sde 5151/udp # ESRI SDE Remote Start
sde-discovery 5152/tcp # ESRI SDE Instance Discovery
sde-discovery 5152/udp # ESRI SDE Instance Discovery
ife_icorp 5165/tcp # ife_1corp
ife_icorp 5165/udp # ife_1corp
aol 5190/tcp # America-Online Server Port

Primary AOL Internet-connect port; also used in Instant Messaging. Alternate ports: 5191, 5192, 5193.
aol 5190/udp # America-Online Server Port

Primary AOL Internet-connect port; also used in Instant Messaging. Alternate ports: 5191, 5192, 5193.
aol-1 5191/tcp # America-Online1 Server Port
aol-1 5191/udp # America-Online1 Server Port
aol-2 5192/tcp # America-Online2 Server Port
aol-2 5192/udp # America-Online2 Server Port
aol-3 5193/tcp # America-Online3 Server Port
aol-3 5193/udp # America-Online3 Server Port
targus-aib1 5200/tcp # Targus AIB 1
targus-aib1 5200/udp # Targus AIB 1
targus-aib2 5201/tcp # Targus AIB 2
targus-aib2 5201/udp # Targus AIB 2
targus-tnts1 5202/tcp # Targus TNTS 1
targus-tnts1 5202/udp # Targus TNTS 1
targus-tnts2 5203/tcp # Targus TNTS 2
targus-tnts2 5203/udp # Targus TNTS 2
padl2sim 5236/tcp # padl2sim
padl2sim 5236/udp # padl2sim
pk 5272/tcp #
pk 5272/udp #
hacl-hb 5300/tcp # HA cluster heartbeat
hacl-hb 5300/udp # HA cluster heartbeat
hacl-gs 5301/tcp # HA cluster general services
hacl-gs 5301/udp # HA cluster general services
hacl-cfg 5302/tcp # HA cluster configuration
hacl-cfg 5302/udp # HA cluster configuration
hacl-probe 5303/tcp # HA cluster probing
hacl-probe 5303/udp # HA cluster probing
hacl-local 5304/tcp # HA Cluster Commands
hacl-local/hacl-local 5304/udp # HA Cluster Commands
, hacl-local


hacl-test 5305/tcp # HA Cluster Test
hacl-test/hacl-test 5305/udp # HA Cluster Test
, hacl-test


sun-mc-grp 5306/tcp # Sun MC Group
sun-mc-grp 5306/udp # Sun MC Group
sco-aip 5307/tcp # SCO AIP
sco-aip 5307/udp # SCO AIP
cfengine 5308/tcp # CFengine
cfengine 5308/udp # CFengine
jprinter 5309/tcp # J Printer
jprinter 5309/udp # J Printer
outlaws 5310/tcp # Outlaws
outlaws 5310/udp # Outlaws
tmlogin 5311/tcp # TM Login
tmlogin 5311/udp # TM Login
excerpt 5400/tcp # Excerpt Search
excerpt 5400/udp # Excerpt Search
excerpts 5401/tcp # Excerpt Search Secure
excerpts 5401/udp # Excerpt Search Secure
mftp 5402/tcp # MFTP
mftp 5402/udp # MFTP
hpoms-ci-lstn 5403/tcp # HPOMS-CI-LSTN
hpoms-ci-lstn 5403/udp # HPOMS-CI-LSTN
hpoms-dps-lstn 5404/tcp # HPOMS-DPS-LSTN
hpoms-dps-lstn 5404/udp # HPOMS-DPS-LSTN
netsupport 5405/tcp # NetSupport
netsupport 5405/udp # NetSupport
systemics-sox 5406/tcp # Systemics Sox
systemics-sox 5406/udp # Systemics Sox
foresyte-clear 5407/tcp # Foresyte-Clear
foresyte-clear 5407/udp # Foresyte-Clear
foresyte-sec 5408/tcp # Foresyte-Sec
foresyte-sec 5408/udp # Foresyte-Sec
salient-dtasrv 5409/tcp # Salient Data Server
salient-dtasrv 5409/udp # Salient Data Server
salient-usrmgr 5410/tcp # Salient User Manager
salient-usrmgr 5410/udp # Salient User Manager
actnet 5411/tcp # ActNet
actnet 5411/udp # ActNet
continuus 5412/tcp # Continuus
continuus 5412/udp # Continuus
wwiotalk 5413/tcp # WWIOTALK
wwiotalk 5413/udp # WWIOTALK
statusd 5414/tcp # StatusD
statusd 5414/udp # StatusD
ns-server 5415/tcp # NS Server
ns-server 5415/udp # NS Server
sns-gateway 5416/tcp # SNS Gateway
sns-gateway 5416/udp # SNS Gateway
sns-agent 5417/tcp # SNS Agent
sns-agent 5417/udp # SNS Agent
mcntp 5418/tcp # MCNTP
mcntp 5418/udp # MCNTP
dj-ice 5419/tcp # DJ-ICE
dj-ice 5419/udp # DJ-ICE
cylink-c 5420/tcp # Cylink-C
cylink-c 5420/udp # Cylink-C
netsupport2 5421/tcp # Net Support 2
netsupport2 5421/udp # Net Support 2
salient-mux 5422/tcp # Salient Multiplexor
salient-mux 5422/udp # Salient Multiplexor
virtualuser 5423/tcp # VirtualUser
virtualuser 5423/udp # VirtualUser
bmc-perf-ad 5424/tcp # BMC-PERF-SD
bmc-perf-ad 5424/udp # BMC-PERF-SD
bmc-perf-agnt 5425/tcp # BMC-PERF-Agent
bmc-perf-agnt 5425/udp # BMC-PERF-Agent
devbasic 5426/tcp # DevBasic
devbasic 5426/udp # DevBasic
sco-peer-tta 5427/tcp # SCO Peer-TTA
sco-peer-tta 5427/udp # SCO Peer-TTA
telaconsole 5428/tcp # TelaConsole
telaconsole 5428/udp # TelaConsole
base 5429/tcp # Billing and Accounting System Exchange
base 5429/udp # Billing and Accounting System Exchange
radec-corp 5430/tcp # RADEC Corp
radec-corp 5430/udp # RADEC Corp
park-agent 5431/tcp # PARK Agent
park-agent/park-agnet 5431/udp # PARK Agent
, park-agnet

park agent
apc-tcp-udp-4 5454/tcp # apc-tcp-udp-4
apc-tcp-udp-4 5454/udp # apc-tcp-udp-4
apc-tcp-udp-5 5455/tcp # apc-tcp-udp-5
apc-tcp-udp-5 5455/udp # apc-tcp-udp-5
apc-tcp-udp-6 5456/tcp # apc-tcp-udp-6
apc-tcp-udp-6 5456/udp # apc-tcp-udp-6
silkmeter 5461/tcp # SilkMeter
silkmeter 5461/udp # SilkMeter
fcp-addr-srvr1 5500/tcp # fcp-addr-srvr1
securid/fcp-addr-srvr1/fcp-addr-srvr1 5500/udp # SecurID Services

SecurID Services use:
- tcp 5510, 5520, 5530, 5540, 5550
- udp 5500, 5540
, fcp-addr-srvr1
, fcp-addr-srvr1

fcp-addr-srvr1, securid
fcp-addr-srvr2 5501/tcp # fcp-addr-srvr2
fcp-addr-srvr2 5501/udp # fcp-addr-srvr2
fcp-addr-inst1/fcp-srvr-inst1 5502/tcp # fcp-addr-inst2
, fcp-srvr-inst1

fcp-srvr-inst1
fcp-addr-inst1/fcp-srvr-inst1 5502/udp # fcp-addr-inst2
, fcp-srvr-inst1

fcp-srvr-inst1
fcp-addr-inst2/fcp-srvr-inst2 5503/tcp # fcp-addr-inst2
, fcp-srvr-inst2

fcp-srvr-inst2
fcp-addr-inst2/fcp-srvr-inst2 5503/udp # fcp-addr-inst2
, fcp-srvr-inst2

fcp-srvr-inst2
fcp-cics-gw1 5504/tcp # fcp-cics-gw1
fcp-cics-gw1 5504/udp # fcp-cics-gw1
securidprop/secureidprop 5510/tcp # SecurID Services

SecurID Services use:
- tcp 5510, 5520, 5530, 5540, 5550
- udp 5500, 5540
, secureidprop

ace/server services
/udp #
sdlog 5520/tcp # SecurID Services

SecurID Services use:
- tcp 5510, 5520, 5530, 5540, 5550
- udp 5500, 5540
/udp #
sdserv 5530/tcp # SecurID Services

SecurID Services use:
- tcp 5510, 5520, 5530, 5540, 5550
- udp 5500, 5540
/udp #
sdreport 5540/tcp # SecurID Services

SecurID Services use:
- tcp 5510, 5520, 5530, 5540, 5550
- udp 5500, 5540
sdxauth/sdxauthd 5540/udp # SecurID Services

SecurID Services use:
- tcp 5510, 5520, 5530, 5540, 5550
- udp 5500, 5540
, sdxauthd

ace/server services
sdadmin/sdadmind 5550/tcp # SecurID Services

SecurID Services use:
- tcp 5510, 5520, 5530, 5540, 5550
- udp 5500, 5540
, sdadmind

ace/server services
/udp #
sgi-esphttp 5554/tcp # SGI ESP HTTP
sgi-esphttp 5554/udp # SGI ESP HTTP
omni/rmt/personal-agent/eggdrop 5555/tcp # OmniBack-II
, Rmtd
, Personal Agent
, Common for eggdrop bot
personal-agent/eggdrop 5555/udp # Personal Agent
, Common for eggdrop bot
mtb 5556/tcp # Mtbd (mtb backup)
/udp #
esinstall 5599/tcp # Enterprise Security Remote Install
esinstall 5599/udp # Enterprise Security Remote Install
esm-agent/esmmanager 5600/tcp # Enterprise Security Agent - Unix Open on Axent ESM Unix agents, to receive comms from its manager. Data is encrypted during transfer., esmmanager

enterprise security manager
esmmanager 5600/udp # esmmanager

enterprise security manager
esm-agent/esm-manager/esmagent 5601/tcp # Enterprise Security Agent - NT

Open on Axent ESM NT agents, to receive comms from its manager.
, Enterprise Security Manager

Open on Axent ESM manager, to receive comms from its agents.
, esmagent

enterprise security agent
esmagent 5601/udp # esmagent

enterprise security agent
a1-msc 5602/tcp # A1-MSC
a1-msc 5602/udp # A1-MSC
a1-bs 5603/tcp # A1-BS
a1-bs 5603/udp # A1-BS
a3-sdunode 5604/tcp # A3-SDUNode
a3-sdunode 5604/udp # A3-SDUNode
a4-sdunode 5605/tcp # A4-SDUNode
a4-sdunode 5605/udp # A4-SDUNode
pcanywheredata/pcanywheredata 5631/tcp # pcAnywhere Data

Default tcp port for v7.52 and above. v2.0 thru v7.51, plus CE version, use tcp 65301 & udp 22.
, pcanywheredata

pcanywheredata
pcanywheredata 5631/udp # pcanywheredata

pcanywheredata
pcanywherestat 5632/tcp # pcanywherestat

pcanywherestat
pcanywherestat/pcanywherestat 5632/udp # pcAnywhere Status

Default udp port for v7.52 and above. v2.0 thru v7.51, plus CE version, use tcp 65301 & udp 22.
, pcanywherestat

pcanywherestat
rrac 5678/tcp # Remote Replication Agent Connection
rrac 5678/udp # Remote Replication Agent Connection
dccm 5679/tcp # Direct Cable Connect Manager
dccm 5679/udp # Direct Cable Connect Manager
proshareaudio 5713/tcp # proshare conf audio
proshareaudio 5713/udp # proshare conf audio
prosharevideo 5714/tcp # proshare conf video
prosharevideo 5714/udp # proshare conf video
prosharedata 5715/tcp # proshare conf data
prosharedata 5715/udp # proshare conf data
prosharerequest 5716/tcp # proshare conf request
prosharerequest 5716/udp # proshare conf request
prosharenotify 5717/tcp # proshare conf notify
prosharenotify 5717/udp # proshare conf notify
openmail 5729/tcp # Openmail User Agent Layer
openmail 5729/udp # Openmail User Agent Layer
ida-discover1 5741/tcp # IDA Discover Port1
ida-discover1 5741/udp # IDA Discover Port1
ida-discover2 5742/tcp # IDA Discover Port 2
ida-discover2 5742/udp # IDA Discover Port 2
fcopy-server 5745/tcp # fcopy-server
fcopy-server 5745/udp # fcopy-server
fcopys-server 5746/tcp # fcopys-server
fcopys-server 5746/udp # fcopys-server
openmailg 5755/tcp # OpenMail Desk Gateway server
openmailg 5755/udp # OpenMail Desk Gateway server
x500ms 5757/tcp # OpenMail X.500 Directory Server
x500ms 5757/udp # OpenMail X.500 Directory Server
openmailns 5766/tcp # OpenMail NewMail Server
openmailns 5766/udp # OpenMail NewMail Server
s-openmail 5767/tcp # OpenMail Suer Agent Layer (Secure)
s-openmail 5767/udp # OpenMail Suer Agent Layer (Secure)
openmailpxy 5768/tcp # OpenMail CMTS Server
openmailpxy 5768/udp # OpenMail CMTS Server
netagent 5771/tcp # NetAgent
netagent 5771/udp # NetAgent
mppolicy-v5 5968/tcp # MM Policy v5
mppolicy-v5 5968/udp # MM Policy v5
mppolicy-mgr 5969/tcp # MP Policy Manager
mppolicy-mgr 5969/udp # MP Policy Manager
x11 6000/tcp # X-Window System

X11 ports to support remote x-windows sessions. Sessions are vulnerable to spoofing, session hijacking, capture of user screen data, keystroke monitoring, insertion of hostile keystrokes & commands, data diddling, and DOS.

Review x-windows security techniques; do not run default x-windows server config's in production environment!
x11/x11 6000/udp # X-Window System

X11 ports to support remote x-windows sessions. Sessions are vulnerable to spoofing, session hijacking, capture of user screen data, keystroke monitoring, insertion of hostile keystrokes & commands, data diddling, and DOS.

Review x-windows security techniques; do not run default x-windows server config's in production environment!
, x11

x window system
softcm 6110/tcp # HP SoftBench CM
softcm 6110/udp # HP SoftBench CM
spc 6111/tcp # HP SoftBench Sub-Process Control
spc 6111/udp # HP SoftBench Sub-Process Control
dtspcd 6112/tcp # dtspcd
dtspcd/dtspcd 6112/udp # dtspcd
, dtspcd

dtspcd
backup-express 6123/tcp # Backup Express
backup-express 6123/udp # Backup Express
meta-corp 6141/tcp # Meta Corporation License Manager
meta-corp 6141/udp # Meta Corporation License Manager
aspentec-lm 6142/tcp # Aspen Technology License Manager
aspentec-lm 6142/udp # Aspen Technology License Manager
watershed-lm 6143/tcp # Watershed License Manager
watershed-lm 6143/udp # Watershed License Manager
statsci1-lm 6144/tcp # StatSci License Manager - 1
statsci1-lm 6144/udp # StatSci License Manager - 1
statsci2-lm 6145/tcp # StatSci License Manager - 2
statsci2-lm 6145/udp # StatSci License Manager - 2
lonewolf-lm 6146/tcp # Lone Wolf Systems License Manager
lonewolf-lm 6146/udp # Lone Wolf Systems License Manager
montage-lm 6147/tcp # Montage License Manager
montage-lm 6147/udp # Montage License Manager
ricardo-lm 6148/tcp # Ricardo North America License Manager
ricardo-lm 6148/udp # Ricardo North America License Manager
tal-pod 6149/tcp # tal-pod
tal-pod 6149/udp # tal-pod
crip 6253/tcp # CRIP
crip 6253/udp # CRIP
/tcp #
roadrunner 6284/udp # RoadRunner Cable Modem "Keep Alive"

Operates in conjunction with tcp 7283 (Roadrunner Logon).
clariion-evr01 6389/tcp # clariion-evr01
clariion-evr01 6389/udp # clariion-evr01
info-aps/info-aps 6400/tcp # Info - APS
, info-aps


info-aps 6400/udp # Info - APS
info-was/info-was 6401/tcp # Info - WAS
, info-was


info-was 6401/udp # Info - WAS
info-eventsvr/info-eventsvr 6402/tcp # Info - Event Server
, info-eventsvr


info-eventsvr 6402/udp # Info - Event Server
info-filesvr/info-filesvr 6404/tcp # Info - File Server
, info-filesvr


info-filesvr 6404/udp # Info - File Server
info-pagesvr/info-pagesvr 6405/tcp # Info - Page Server
, info-pagesvr


info-pagesvr 6405/udp # Info - Page Server
info-processor/info-processvr 6406/tcp # Info - Processor
, info-processvr


info-processor 6406/udp # Info - Processor
skip-cert-recv 6455/tcp # skip-cert-recv

skip certificate receive
skip-cert-recv 6455/udp # SKIP Certificate Receive
skip-cert-send 6456/tcp # SKIP Certificate Send
/udp #
lvision-lm 6471/tcp # LVision License Manager
lvision-lm 6471/udp # LVision License Manager
netscape 6498/tcp # Netscape Audio-Conferencing
Note: Also see tcp 6502 & udp 2327
/udp #
cooltalk 6499/tcp # CoolTalk Voice Comm Protocol
/udp #
boks 6500/tcp # BoKS Master
boks 6500/udp # BoKS Master
boks_servc 6501/tcp # BoKS Servc
boks_servc 6501/udp # BoKS Servc
netscape/boks_servm 6502/tcp # Netscape Audio-Conferencing
Note: Also see tcp 6498 & udp 2327
, BoKS Servm
boks_servm 6502/udp # BoKS Servm
boks_clntd 6503/tcp # BoKS Clntd
boks_clntd 6503/udp # BoKS Clntd
badm_priv 6505/tcp # BoKS Admin Private Port
badm_priv 6505/udp # BoKS Admin Private Port
badm_pub 6506/tcp # BoKS Admin Public Port
badm_pub 6506/udp # BoKS Admin Public Port
bdir_priv 6507/tcp # BoKS Dir Server, Private Port
bdir_priv 6507/udp # BoKS Dir Server, Private Port
bdir_pub 6508/tcp # BoKS Dir Server, Public Port
bdir_pub 6508/udp # BoKS Dir Server, Public Port
apc-tcp-udp-1 6547/tcp # apc-tcp-udp-1
apc-tcp-udp-1 6547/udp # apc-tcp-udp-1
apc-tcp-udp-2 6548/tcp # apc-tcp-udp-2
apc-tcp-udp-2 6548/udp # apc-tcp-udp-2
apc-tcp-udp-3 6549/tcp # apc-tcp-udp-3
apc-tcp-udp-3 6549/udp # apc-tcp-udp-3
fg-sysupdate 6550/tcp # fg-sysupdate
fg-sysupdate 6550/udp # fg-sysupdate
xdsxdm 6558/tcp # xdsxdm
xdsxdm 6558/udp # xdsxdm
circ 6660/tcp # Common for IRCD
circ 6660/udp # Common for IRCD
ircu 6665/tcp # IRCU
ircu 6665/udp # IRCU
/tcp #
nirc/ircu 6667/udp # IRC backbone

Control port for IRC. Client data exchange sets up on random-high udp port, similar to talk/ntalk.

Trojanized IRC Server source code exists in wild; beware or your source!
, ircu

ircu
circ 6668/tcp # Common for IRCD
circ/ircu 6668/udp # Common for IRCD
, ircu

ircu
irc/vocaltec-gold 6670/tcp # Internet Chat Relay
, Vocaltec Global Online Directory

Video-Teleconferencing. Also uses tcp 1490 & 25793, tcp/udp 22555.
vocaltec-gold 6670/udp # Vocaltec Global Online Directory

Video-Teleconferencing. Also uses tcp 1490 & 25793, tcp/udp 22555.
vision_server 6672/tcp # vision_server
vision_server 6672/udp # vision_server
vision_elmd 6673/tcp # vision_elmd
vision_elmd 6673/udp # vision_elmd
irc 6680/tcp # Internet Chat Relay
/udp #
winmx 6699/tcp # WinMx, Napster
winmx 6699/udp # WinMx, Napster
kti-icad-srvr 6701/tcp # KTI/ICAD Nameserver
kti-icad-srvr 6701/udp # KTI/ICAD Nameserver
subsevel-infection 6711/tcp # SubSevel Infection Port

One of the known SubSeven tcp control ports. Others include tcp 1243, 6712, 6713, 6776. Default is tcp 27374.
/udp #
subsevel-infection 6712/tcp # SubSevel Infection Port

One of the known SubSeven tcp control ports. Others include tcp 1243, 6711, 6713, 6776. Default is tcp 27374.
/udp #
subsevel-infection 6713/tcp # SubSevel Infection Port

One of the known SubSeven tcp control ports. Others include tcp 1243, 6711, 6712, 6776. Default is tcp 27374.
/udp #
subsevel-infection 6776/tcp # SubSevel Infection Port

One of the known SubSeven tcp control ports. Others include tcp 1243, 6711, 6712, 6713. Default is tcp 27374.
/udp #
hnmp 6790/tcp # HNMP
hnmp 6790/udp # HNMP
ambit-lm 6831/tcp # ambit-lm
ambit-lm 6831/udp # ambit-lm
netmo-default 6841/tcp # Netmo Default
netmo-default 6841/udp # Netmo Default
netmo-http 6842/tcp # Netmo HTTP
netmo-http 6842/udp # Netmo HTTP
iccrushmore 6850/tcp # ICC RushMore
iccrushmore 6850/udp # ICC RushMore
jmact3 6961/tcp # JMACT3
jmact3 6961/udp # JMACT3
jmevt2 6962/tcp # JMACT2
jmevt2 6962/udp # JMACT2
swismgr1 6963/tcp # SWIS Manager 1
swismgr1 6963/udp # SWIS Manager 1
swismgr2 6964/tcp # SWIS Manager 2
swismgr2 6964/udp # SWIS Manager 2
swistrap 6965/tcp # SWIS Trap
swistrap 6965/udp # SWIS Trap
swispol 6966/tcp # SWIS Poll
swispol 6966/udp # SWIS Poll
acmsoda 6969/tcp # acmsoda
acmsoda 6969/udp # acmsoda
/tcp #
real-audio-data 6970/udp # RealAudio Data Streaming Ports

RealAudio data streaming port range. RealAudio server dynamically selects udp port in this range to send client it's audio request. Server contol port is tcp 7070.
iatp-highpri 6998/tcp # IATP-highPri
iatp-highpri 6998/udp # IATP-highPri
iatp-normalpri 6999/tcp # IATP-normalPri
iatp-normalpri 6999/udp # IATP-normalPri
afs3-fileserver 7000/tcp # file server itself
afs3-fileserver/vdo-live/afs3-fileserver 7000/udp # file server itself
, VDO-Live Control Port

Server port for client VDO-Live connections. Video datastream is to client's udp 7001.
, afs3-fileserver

afs fileserver, file server itself
afs3-callback 7001/tcp # callbacks to cache managers, afs callback server
afs3-callback 7001/udp # callbacks to cache managers, afs callback server
afs3-prserver 7002/tcp # users & groups database
afs3-prserver/afs3-prserver 7002/udp # users & groups database
, afs3-prserver

afs protection server, users & groups database
afs3-vlserver 7003/tcp # volume location database
afs3-vlserver/afs3-vlserver 7003/udp # volume location database
, afs3-vlserver

afs volumelocation server, volume location database
afs3-kaserver 7004/tcp # AFS/Kerberos authentication service
afs3-kaserver/afs3-kaserver 7004/udp # AFS/Kerberos authentication service
, afs3-kaserver

afs kerberos authenication server, afs/kerberos authentication service
afs3-volser 7005/tcp # volume managment server
afs3-volser/afs3-volser 7005/udp # volume managment server
, afs3-volser

afs volume server, volume managment server
afs3-errors 7006/tcp # error interpretation service
afs3-errors/afs3-errors 7006/udp # error interpretation service
, afs3-errors

afs error server ?, error interpretation service
afs3-bos 7007/tcp # basic overseer process
afs3-bos/afs3-bos 7007/udp # basic overseer process
, afs3-bos

afs basic over-see server ?, basic overseer process
afs3-update 7008/tcp # server-to-server updater
afs3-update/afs3-update 7008/udp # server-to-server updater
, afs3-update

server-to-server updater, ?
afs3-rmtsys 7009/tcp # Remote Cache Manager Service
afs3-rmtsys/afs3-rmtsys 7009/udp # Remote Cache Manager Service
, afs3-rmtsys

remote cache manager service, ?
ups-onlinet 7010/tcp # Onlinet Uninterruptable Power Supplies
ups-onlinet 7010/udp # Onlinet Uninterruptable Power Supplies
talon-disc 7011/tcp # Talon Discovery Port
talon-disc 7011/udp # Talon Discovery Port
talon-engine 7012/tcp # Talon Engine
talon-engine 7012/udp # Talon Engine
dpserve 7020/tcp # DP Serve
dpserve 7020/udp # DP Serve
dpserveadmin 7021/tcp # DP Serve Admin
dpserveadmin 7021/udp # DP Serve Admin
arcp/real-audio-control 7070/tcp # ARCP
, RealAudio Contol Port

Server control port for RealAudio. Client rqsts are answered with audio data stream on dynamic UDP ports in 6970-7170 range.
arcp 7070/udp # ARCP
lazy-ptop 7099/tcp # lazy-ptop
lazy-ptop 7099/udp # lazy-ptop
fs 7100/tcp # X Font Service

Required if host provids X-windows sessions to remote clients. May also be needed to support localhost GUI (depends on OS version).
fs/font-service 7100/udp # X Font Service

Required if host provids X-windows sessions to remote clients. May also be needed to support localhost GUI (depends on OS version).
, font-service

x font service
virprot-lm 7121/tcp # Virtual Prototypes License Manager
virprot-lm 7121/udp # Virtual Prototypes License Manager
clutild 7174/tcp # Clutild
clutild 7174/udp # Clutild
fodms 7200/tcp # FODMS FLIP
fodms 7200/udp # FODMS FLIP
dlip 7201/tcp # DLIP
dlip 7201/udp # DLIP
roadrunner 7283/tcp # RoadRunner Cable Modem Logon

RoadRunner cable modem logon port, uses Toshiba's Auth Service (TAS).
/udp #
swx/swx 7300/tcp # Swiss Exchange
, swx

the swiss exchange
swx 7300/udp # Swiss Exchange
winqedit 7395/tcp # winqedit
winqedit 7395/udp # winqedit
pmdmgr 7426/tcp # OpenView DM Postmaster Manager
pmdmgr 7426/udp # OpenView DM Postmaster Manager
oveadmgr 7427/tcp # OpenView DM Event Agent Manager
oveadmgr 7427/udp # OpenView DM Event Agent Manager
ovladmgr 7428/tcp # OpenView DM Log Agent Manager
ovladmgr 7428/udp # OpenView DM Log Agent Manager
opi-sock 7429/tcp # OpenView DM rqt communication
opi-sock 7429/udp # OpenView DM rqt communication
xmpv7 7430/tcp # OpenView DM xmpv7 api pipe
xmpv7 7430/udp # OpenView DM xmpv7 api pipe
pmd 7431/tcp # OpenView DM ovc/xmpv3 api pipe
pmd 7431/udp # OpenView DM ovc/xmpv3 api pipe
faximum 7437/tcp # Faximum
faximum 7437/udp # Faximum
telops-lmd 7491/tcp # telops-lmd
telops-lmd 7491/udp # telops-lmd
pafec-lm 7511/tcp # pafec-lm
pafec-lm 7511/udp # pafec-lm
nta-ds 7544/tcp # FlowAnalyzer DisplayServer
nta-ds 7544/udp # FlowAnalyzer DisplayServer
nta-us 7545/tcp # FlowAnalyzer UtilityServer
nta-us 7545/udp # FlowAnalyzer UtilityServer
vsi-omega 7566/tcp # VSI Omega
vsi-omega 7566/udp # VSI Omega
aries-kfinder 7570/tcp # Aries Kfinder
aries-kfinder 7570/udp # Aries Kfinder
sun-lm 7588/tcp # Sun License Manager
sun-lm 7588/udp # Sun License Manager
CU-SeeMe-srv 7648/tcp # CU-SeeMe Server Ports

Server control port for CU-SeeMe. Client contact port is tcp 7649. Data stream is over udp ports 7648-7652, and 24032.
CU-SeeMe/CU-SeeMe-srv/cucme-1 7648/udp # CU-SeeMe video, audio, and chat
, CU-SeeMe Server Ports

Server control port for CU-SeeMe. Client contact port is tcp 7649. Data stream is over udp ports 7648-7652, and 24032.
, cucme-1

cucme live video/audio server
pmdfmgt 7633/tcp # PMDF Manager
pmdfmgt 7633/udp # PMDF Manager
CU-SeeMe-clnt 7649/tcp # CU-SeeMe Client Ports

Client contact port for CU-SeeMe. Server port is tcp 7648. Data stream is over udp ports 7648-7652, and 24032.
CU-SeeMe-clnt/cucme-2 7649/udp # CU-SeeMe Client Ports

Client contact port for CU-SeeMe. Server port is tcp 7648. Data stream is over udp ports 7648-7652, and 24032.
, cucme-2

cucme live video/audio server
/tcp #
udpcmd 7666/udp # UDP-Shell Backdoor (AKA: udpsh)

A udp-based backdoor shell program. Once planted, remote intruder connects, receives root-level shell, and controls host with 800-byte udp pkts. Popular because udp scanning is laborious; less chance of detection by security scanners.

Open port indicates likely root-level intrusion. Grep processes for "udpcmd" daemon.
cbt/eggdrop 7777/tcp # cbt
, Common for eggdrop bot
cbt/eggdrop 7777/udp # cbt
, Common for eggdrop bot
accu-lmgr 7781/tcp # accu-lmgr
accu-lmgr 7781/udp # accu-lmgr
t2-drm 7932/tcp # Tier 2 Data Resource Manager
t2-drm 7932/udp # Tier 2 Data Resource Manager
t2-brm 7933/tcp # Tier 2 Business Rules Manager
t2-brm 7933/udp # Tier 2 Business Rules Manager
supercell 7967/tcp # Supercell
supercell 7967/udp # Supercell
quest-vista 7980/tcp # Quest Vista
quest-vista 7980/udp # Quest Vista
irdmi2 7999/tcp # iRDMI2
irdmi2 7999/udp # iRDMI2
irdmi 8000/tcp # iRDMI
irdmi 8000/udp # iRDMI
vcom-tunnel 8001/tcp # VCOM Tunnel
vcom-tunnel 8001/udp # VCOM Tunnel
rcgi/teradataordbms 8002/tcp # Perl.nlm port

Perl.nlm port on NetWare v4.1 web servers. If reachable, attacker can access and execute perl scripts on the server.
, teradataordbms

teradata ordbms
teradataordbms 8002/udp # teradataordbms

teradata ordbms
http-alt 8008/tcp # HTTP Alternative
http-alt 8008/udp # HTTP Alternative
wingate 8010/tcp # Wingate Logfile (Deerfield)

Wingate Logfile on v2.1 Wingate servers.
Security Concerns: Listens for HTTP connects on tcp 8080. Open HTTP session to this logfile port may provide dir listing of Wingate's drive. To block this, config GateKeeper's "LogFile Service Bindings" to not allow inbound connections. Also config WinGate server to deny all but trusted IPs.
wingate 8010/udp # Wingate Logfile (Deerfield)

Wingate Logfile on v2.1 Wingate servers.
Security Concerns: Listens for HTTP connects on tcp 8080. Open HTTP session to this logfile port may provide dir listing of Wingate's drive. To block this, config GateKeeper's "LogFile Service Bindings" to not allow inbound connections. Also config WinGate server to deny all but trusted IPs.
pro-ed 8032/tcp # ProEd
pro-ed 8032/udp # ProEd
mindprint 8033/tcp # MindPrint
mindprint 8033/udp # MindPrint
http-alt 8080/tcp # HTTP Alternative
http-alt/http-alt 8080/udp # HTTP Alternative
, http-alt

http alternate (see port 80)
blackice-logon 8081/tcp # BlackIce Login

Network admin port for BlackIce's "Network Ice" host-based firewall/intrusion detection program.
Security Concerns:
- May have shipped with default logon of "iceman
/udp #
blackice-alerts 8082/tcp # BlackIce Alerts

Alerting port for BlackIce's "Network Ice" host-based firewall/intrusion detection program. See Security Concerns above (8081).
/udp #
patrol 8160/tcp #
patrol 8160/udp #
patrol-snmp 8161/tcp # Patrol SNMP
patrol-snmp 8161/udp # Patrol SNMP
trivnet1 8200/tcp # TRIVNET
trivnet1 8200/udp # TRIVNET
trivnet2 8201/tcp # TRIVNET
trivnet2 8201/udp # TRIVNET
lm-perfworks 8204/tcp # LM Perfworks
lm-perfworks 8204/udp # LM Perfworks
lm-instmgr 8205/tcp # LM Instmgr
lm-instmgr 8205/udp # LM Instmgr
lm-dta 8206/tcp # LM Dta
lm-dta 8206/udp # LM Dta
lm-sserver 8207/tcp # LM Sserver
lm-sserver 8207/udp # LM Sserver
lm-webwatcher 8208/tcp # LM Webwatcher
lm-webwatcher 8208/udp # LM Webwatcher
server-find 8351/tcp # Server Find
server-find 8351/udp # Server Find
cruise-enum 8376/tcp # Cruise ENUM
cruise-enum 8376/udp # Cruise ENUM
cruise-swroute 8377/tcp # Cruise SWROUTE
cruise-swroute 8377/udp # Cruise SWROUTE
cruise-config 8378/tcp # Cruise CONFIG
cruise-config 8378/udp # Cruise CONFIG
cruise-diags 8379/tcp # Cruise DIAGS
cruise-diags 8379/udp # Cruise DIAGS
cruise-update 8380/tcp # Cruise UPDATE
cruise-update 8380/udp # Cruise UPDATE
cvd 8400/tcp # cvd
cvd 8400/udp # cvd
sabarsd 8401/tcp # sabarsd
sabarsd 8401/udp # sabarsd
abarsd 8402/tcp # abarsd
abarsd 8402/udp # abarsd
admind 8403/tcp # admind
admind 8403/udp # admind
npmp 8450/tcp # npmp
npmp 8450/udp # npmp
vp2p 8473/tcp # Virtual Point-to-Point
vp2p 8473/udp # Virtual Point-to-Point
rtsp-alt 8554/tcp # RTSP Alternate (alt to port 554)
rtsp-alt 8554/udp # RTSP Alternate (alt to port 554)
netscape-adm 8649/tcp # Netscape Web Server Admin Mgmt
/udp #
ibus 8733/tcp # iBus
ibus 8733/udp # iBus
mc-appserver 8763/tcp # MC App Server
mc-appserver 8763/udp # MC App Server
ultraseek-http 8765/tcp # Ultraseek HTTP
ultraseek-http 8765/udp # Ultraseek HTTP
truecm 8804/tcp # truecm
truecm 8804/udp # truecm
cddbp-alt 8880/tcp # CDDBP
cddbp-alt 8880/udp # CDDBP
ddi-tcp-1 8888/tcp # NewsEDGE server TCP (TCP 1)
ddi-tcp-1/ddi-udp-1 8888/udp # NewsEDGE server TCP (TCP 1)
, ddi-udp-1

newsedge server udp (udp 1)
ddi-tcp-2 8889/tcp # Desktop Data TCP 1
ddi-tcp-2/ddi-udp-2 8889/udp # Desktop Data TCP 1
, ddi-udp-2

newsedge server broadcast
ddi-tcp-3 8890/tcp # Desktop Data TCP 2
ddi-tcp-3/ddi-udp-3 8890/udp # Desktop Data TCP 2
, ddi-udp-3

newsedge client broadcast
ddi-tcp-4 8891/tcp # Desktop Data TCP 3: NESS application
ddi-tcp-4/ddi-udp-4 8891/udp # Desktop Data TCP 3: NESS application
, ddi-udp-4

desktop data udp 3: ness application
ddi-tcp-5 8892/tcp # Desktop Data TCP 4: FARM product
ddi-tcp-5/ddi-udp-5 8892/udp # Desktop Data TCP 4: FARM product
, ddi-udp-5

desktop data udp 4: farm product
ddi-tcp-6 8893/tcp # Desktop Data TCP 5: NewsEDGE/Web App
ddi-tcp-6/ddi-udp-6 8893/udp # Desktop Data TCP 5: NewsEDGE/Web App
, ddi-udp-6

desktop data udp 5: newsedge/web application
ddi-tcp-7 8894/tcp # Desktop Data TCP 6: COAL application
ddi-tcp-7/ddi-udp-7 8894/udp # Desktop Data TCP 6: COAL application
, ddi-udp-7

desktop data udp 6: coal application
jmb-cds1 8900/tcp # JMB-CDS 1
jmb-cds1 8900/udp # JMB-CDS 1
jmb-cds2 8901/tcp # JMB-CDS 2
jmb-cds2 8901/udp # JMB-CDS 2
cslistener 9000/tcp # Cslistener
cslistener 9000/udp # Cslistener
kastenxpipe 9001/tcp # KastenX Pipe
kastenxpipe 9001/udp # KastenX Pipe
sctp 9006/tcp # SCTP
sctp 9006/udp # SCTP
websm/CiscoSecure 9090/tcp # WebSM
, CiscoSecure

Web server frontend for CiscoSecure.
websm/websm 9090/udp # WebSM
, websm

websm
CiscoSecure 9091/tcp # CiscoSecure

Web server frontend for CiscoSecure.
/udp #
netlock1 9160/tcp # NetLOCK1
netlock1 9160/udp # NetLOCK1
netlock2 9161/tcp # NetLOCK2
netlock2 9161/udp # NetLOCK2
netlock3 9162/tcp # NetLOCK3
netlock3 9162/udp # NetLOCK3
netlock4 9163/tcp # NetLock4
netlock4 9163/udp # NetLock4
netlock5 9164/tcp # NetLOCK5
netlock5 9164/udp # NetLOCK5
wap-wsp 9200/tcp # WAP Connectionless Session Service
wap-wsp 9200/udp # WAP Connectionless Session Service
wap-wsp-wtp 9201/tcp # WAP Session Service
wap-wsp-wtp 9201/udp # WAP Session Service
wap-wsp-s 9202/tcp # WAP Secure Connectionless Session Service
wap-wsp-s 9202/udp # WAP Secure Connectionless Session Service
wap-wsp-wtp-s 9203/tcp # WAP Secure Session Service
wap-wsp-wtp-s 9203/udp # WAP Secure Session Service
wap-wsp-vcard/wap-vcard 9204/tcp # WAP vCard
, wap-vcard

wap vcard
wap-wsp-vcard/wap-vcard 9204/udp # WAP vCard
, wap-vcard

wap vcard
wap-wsp-vcal/wap-vcal 9205/tcp # WAP vCal
, wap-vcal

wap vcal
wap-wsp-vcal/wap-vcal 9205/udp # WAP vCal
, wap-vcal

wap vcal
wap-wsp-vcard-s/wap-vcard-s 9206/tcp # WAP vCard Secure
, wap-vcard-s

wap vcard secure
wap-wsp-vcard-s/wap-vcard-s 9206/udp # WAP vCard Secure
, wap-vcard-s

wap vcard secure
wap-wsp-vcal-s/wap-vcal-s 9207/tcp # WAP vCal Secure
, wap-vcal-s

wap vcal secure
wap-wsp-vcal-s/wap-vcal-s 9207/udp # WAP vCal Secure
, wap-vcal-s

wap vcal secure
quibase/guibase 9321/tcp # quibase
, guibase

guibase
quibase/guibase 9321/udp # quibase
, guibase

guibase
mpidcmgr 9343/tcp # Mpidcmgr
mpidcmgr 9343/udp # Mpidcmgr
mphlpdmc 9344/tcp # Mphlpdmc
mphlpdmc 9344/udp # Mphlpdmc
fjdmimgr 9374/tcp # fjdmimgr
fjdmimgr 9374/udp # fjdmimgr
fjinvmgr 9396/tcp # fjinvmgr
fjinvmgr 9396/udp # fjinvmgr
mpidcagt 9397/tcp # mpidcagt
mpidcagt 9397/udp # mpidcagt
ismserver 9500/tcp # ismserver
ismserver 9500/udp # ismserver
man 9535/tcp # man
man 9535/udp # man
w 9536/tcp # w
/udp #
mantst 9537/tcp # Remote man server, testing
/udp #
msgsys 9594/tcp # Message System
msgsys 9594/udp # Message System
pds 9595/tcp # Ping Discovery Service
pds 9595/udp # Ping Discovery Service
rasadv 9753/tcp # rasadv
rasadv 9753/udp # rasadv
sd 9876/tcp # Session Director
sd 9876/udp # Session Director
cyborg-systems 9888/tcp # CYBORG Systems
cyborg-systems 9888/udp # CYBORG Systems
monkeycom 9898/tcp # MonkeyCom
monkeycom 9898/udp # MonkeyCom
cisco-acs/iua 9900/tcp # CiscoSecure Access Control Server (ACS)

Cisco alert states unauth remote users can read/write to server's database. Block via ACS config, network blocking, or upgrade of ACS software.
, iua

iua
iua 9900/udp # iua

iua
CiscoSecureDB 9901/tcp # CiscoSecureDB
CiscoSecureDB 9901/udp # CiscoSecureDB
domaintime 9909/tcp # domaintime
domaintime 9909/udp # domaintime
/tcp #
ivisit 9943/udp # ivisit Video-Teleconferencing

Also uses udp 9945, 56768.
/tcp #
ivisit 9945/udp # ivisit Video-Teleconferencing

Also uses udp 9943, 56768.
palace 9992/tcp # Palace Chat
palace 9992/udp # Palace Chat
cpalace/distinct32/pirc 9998/tcp # Common Palace
, Distinct32
, Possible for IRCD
distinct32/pirc 9998/udp # Distinct32
, Possible for IRCD
Backdoor/distinct/onguard 9999/tcp # Intruder Backdoor Port

Internet-publicized hack to replace in.telnetd with modified version that starts up in debug mode. This makes it bind to tcp 9999 and execute /bin/sh instead of /bin/login. Also forks before executing shell, which means it will accept multiple simultaneous connects.
, distinct
, Lenel OnGuard HTTP License Administrator.
distinct 9999/udp # distinct
ndmp/bnews/Webmin/Cisco-NAT-T 10000/tcp # Network Data Management Protocol

Used to centrally control data backups.
, bnews
, , Cisco proprietary encapsulations for NAT transparency
ndmp/rscs0/Cisco-NAT-T 10000/udp # Network Data Management Protocol

Used to centrally control data backups.
, rscs0
, Cisco proprietary encapsulations for NAT transparency
queue 10001/tcp # queue
rscs1 10001/udp # rscs1
poker/rusers 10002/tcp # poker
, rusers

The ruser udp broadcast will return list of logged on users on local network, plus when they logged in, current duratino of logon, and idle time. Can also be used for single probes.
Security Concerns: Provides valuable info to attackers, such as usernames, logged on users on key servers, and which sessions are idle (ripe for hijack).

Disable rusers on all hosts.
rscs2/rusers 10002/udp # rscs2
, rusers

The ruser udp broadcast will return list of logged on users on local network, plus when they logged in, current duratino of logon, and idle time. Can also be used for single probes.
Security Concerns: Provides valuable info to attackers, such as usernames, logged on users on key servers, and which sessions are idle (ripe for hijack).

Disable rusers on all hosts.
gateway 10003/tcp # gateway
rscs3 10003/udp # rscs3
remp 10004/tcp # remp
rscs4 10004/udp # rscs4
stel 10005/tcp # stel

secure telnet
rscs5 10005/udp # rscs5
/tcp #
rscs6 10006/udp # rscs6
mvs-capacity 10007/tcp # MVS Capacity
rscs7/mvs-capacity 10007/udp # rscs7
, MVS Capacity
/tcp #
rscs8 10008/udp # rscs8
/tcp #
rscs9 10009/udp # rscs9
/tcp #
rscsa 10010/udp # rscsa
/tcp #
rscsb 10011/udp # rscsb
qmaster 10012/tcp # qmaster
qmaster 10012/udp # qmaster
amanda 10080/tcp # Amanda
amanda/amanda 10080/udp # Amanda
, amanda

amanda, amanda backup util, dump server control
ganymede-endpt 10115/tcp # Ganymede Endpoint
ganymede-endpt 10115/udp # Ganymede Endpoint
blocks 10288/tcp # Blocks
blocks 10288/udp # Blocks
irisa 11000/tcp # IRISA
irisa 11000/udp # IRISA
metasys 11001/tcp # Metasys
metasys 11001/udp # Metasys
vce 11111/tcp # Viral Computing Environment (VCE)
vce 11111/udp # Viral Computing Environment (VCE)
atm-uhas 11367/tcp # ATM UHAS
atm-uhas 11367/udp # ATM UHAS
h323callsigalt 11720/tcp # H.323 Call Signal Alternative
h323callsigalt 11720/udp # H.323 Call Signal Alternative
entextxid/solaris-cluster 12000/tcp # IBM Enterprise Extender SNA XID Exchange
, Solaris Cluster v2.x opens this port. When enabled, remote attaker can read host's syslog and view cluster config info. If attacker has a local account, can create a symbolic link in /var/opt/SUNWcluster/fm/fmstatus/nfs/<logicalhostname/status, then use "open hastat" command of the monitor daemon to view any file on the host.
entextxid/solaris-cluster 12000/udp # IBM Enterprise Extender SNA XID Exchange
, Solaris Cluster v2.x opens this port. When enabled, remote attaker can read host's syslog and view cluster config info. If attacker has a local account, can create a symbolic link in /var/opt/SUNWcluster/fm/fmstatus/nfs/<logicalhostname/status, then use "open hastat" command of the monitor daemon to view any file on the host.
entextnetwk 12001/tcp # IBM Enterprise Extender SNA COS Network Priority
entextnetwk 12001/udp # IBM Enterprise Extender SNA COS Network Priority
entexthigh 12002/tcp # IBM Enterprise Extender SNA COS Hi-Priority
entexthigh 12002/udp # IBM Enterprise Extender SNA COS Hi-Priority
entextmed 12003/tcp # IBM Enterprise Extender SNA COS Med-Priority
entextmed 12003/udp # IBM Enterprise Extender SNA COS Med-Priority
entextlow 12004/tcp # IBM Enterprise Extender SNA COS Low-Priority
entextlow 12004/udp # IBM Enterprise Extender SNA COS Low-Priority
hivep 12172/tcp # HiveP
hivep 12172/udp # HiveP
NetBus-Cmd/NetBus 12345/tcp # NetBus Command Port

Command Port on original NetBus infections. See below (12346).
, NetBus

netbus backdoor trojan
/udp #
NetBus-Data/NetBus 12346/tcp # NetBus Data Transfer Port
Note: Data transfer port on original NetBus infections (Win9x & NT hosts). On original NetBus, Command & Data Tx ports were fixed. In second version (c1999), it's configurable.
, NetBus

netbus backdoor trojan
/udp #
webtheater 12468/tcp # Web Theater Control Port

Server port for Web Theater client requests. Server responds with multimedia data stream via UDP port (NFI).
/udp #
tsaf 12753/tcp # tsaf port
tsaf 12753/udp # tsaf port
i-zipqd 13160/tcp # I-ZIPQD
i-zipqd 13160/udp # I-ZIPQD
bprd 13720/tcp # BPRD Protocol (Veritas NetBackup)
bprd 13720/udp # BPRD Protocol (Veritas NetBackup)
bpbrm 13721/tcp # BPBRM Protocol (Veritas NetBackup)
bpbrm 13721/udp # BPBRM Protocol (Veritas NetBackup)
bpjava-msvc 13722/tcp # BP Java MSVC Protocol
bpjava-msvc 13722/udp # BP Java MSVC Protocol
bpcd 13782/tcp # Veritas NetBackup
bpcd 13782/udp # Veritas NetBackup
vopied 13783/tcp # VOPIED Protocol
vopied 13783/udp # VOPIED Protocol
dsmcc-config 13818/tcp # DSMCC Config
dsmcc-config 13818/udp # DSMCC Config
dsmcc-session 13819/tcp # DSMCC Session Messages
dsmcc-session 13819/udp # DSMCC Session Messages
dsmcc-passthru 13820/tcp # DSMCC Pass-Thru Messages
dsmcc-passthru 13820/udp # DSMCC Pass-Thru Messages
dsmcc-download 13821/tcp # DSMCC Download Protocol
dsmcc-download 13821/udp # DSMCC Download Protocol
dsmcc-ccp 13822/tcp # DSMCC Channel Change Protocol
dsmcc-ccp 13822/udp # DSMCC Channel Change Protocol
itu-sccp-ss7 14001/tcp # ITU SCCP (SS7)
itu-sccp-ss7 14001/udp # ITU SCCP (SS7)
hotsync 14237/tcp # Palm Network Hotsync
/udp #
/tcp #
hotsync 14238/udp # Palm Network Hotsync
netserialext1 16360/tcp # netserialext1
netserialext1 16360/udp # netserialext1
netserialext2 16361/tcp # netserialext2
netserialext2 16361/udp # netserialext2
netserialext3 16367/tcp # netserialext3
netserialext3 16367/udp # netserialext3
netserialext4 16368/tcp # netserialext4
netserialext4 16368/udp # netserialext4
connected-ob 16384/tcp # Connected On-Line Backup

Host "wake up" daemon. Controller connects to this port on "sleeping" host, powers it completely up, and instructs it to send backup data to server. Includes encryption.
/udp #
deslogin 16661/tcp # DESlogon backdoor

Default port for "deslogin". Upon connect and correct username/password, user receives a DES-encrypted secure shell.
/udp #
isode-dua 17007/tcp # isode-dua
isode-dua 17007/udp # isode-dua
chipper 17219/tcp # Chipper
chipper 17219/udp # Chipper
biimenu 18000/tcp # Beckman Instruments, Inc.
biimenu 18000/udp # Beckman Instruments, Inc.
opsec-cvp 18181/tcp # OPSEC CVP
opsec-cvp 18181/udp # OPSEC CVP
opsec-ufp 18182/tcp # OPSEC UFP
opsec-ufp 18182/udp # OPSEC UFP
ac-cluster 18463/tcp # AC Cluster
ac-cluster 18463/udp # AC Cluster
apc-necmp/liquid-audio 18888/tcp # APC NECMP
, Liquid Audio Control
apc-necmp/liquid-audio 18888/udp # APC NECMP
, Liquid Audio Control
/tcp #
liquid-audio 18889/udp # Liquid Audio Data Streaming
keysrv/keysrvr 19283/tcp # Key Server for SASSAFRAS
, keysrvr

key server for sassafras
keysrv/keysrvr 19283/udp # Key Server for SASSAFRAS
, keysrvr

key server for sassafras
keyshadow 19315/tcp # Key Shadow for SASSAFRAS
keyshadow 19315/udp # Key Shadow for SASSAFRAS
hp-sco 19410/tcp # hp-sco
hp-sco 19410/udp # hp-sco
hp-sca 19411/tcp # hp-sca
hp-sca 19411/udp # hp-sca
jcp 19541/tcp # JCP Client
jcp 19541/udp # JCP Client
dnp/Usermin 20000/tcp # DNP
,
dnp 20000/udp # DNP
netbus-cmd 20034/tcp # Default port for NetBus v2.0

NetBus is a program used to remotely control Win95/98 and NT hosts. It is a popular program used by attackers to subvert Microsoft hosts.
/udp #
track 20670/tcp # Track
track 20670/udp # Track
/tcp #
FreeTel 21300/udp # FreeTel Voice Comm Protocol
vofr-gateway 21590/tcp # VOFR Gateway
vofr-gateway 21590/udp # VOFR Gateway
webphone 21845/tcp # webphone
webphone 21845/udp # webphone
netspeak-is 21846/tcp # NetSpeak Corp. Directory Services
netspeak-is 21846/udp # NetSpeak Corp. Directory Services
netspeak-cs 21847/tcp # NetSpeak Corp. Connection Services
netspeak-cs 21847/udp # NetSpeak Corp. Connection Services
netspeak-acd 21848/tcp # NetSpeak Corp. Automatic Call Distro
netspeak-acd 21848/udp # NetSpeak Corp. Automatic Call Distro
netspeak-cps 21849/tcp # NetSpeak Corp. Credit Processing System
netspeak-cps 21849/udp # NetSpeak Corp. Credit Processing System
snapenetio 22000/tcp # SNAPenet IO
snapenetio 22000/udp # SNAPenet IO
optocontrol 22001/tcp # OptoControl
optocontrol 22001/udp # OptoControl
wnn6 22273/tcp # wnn6
wnn6/wnn6 22273/udp # wnn6
, wnn6

wnn6
vocaltec-wconf 22555/tcp # Vocaltec Audio&Doc Web Conferencing

Video-Teleconferencing. Also uses tcp 1490, 6670, 25793; udp 22555.
vocaltec-phone 22555/udp # Vocaltec Internet Phone

Video-Teleconferencing. Also uses tcp 1490, 6670, 25793; tcp 22555.
aws-brf 22800/tcp # Telerate Info Platform LAN
aws-brf 22800/udp # Telerate Info Platform LAN
brf-gw 22951/tcp # Telerate Info Platform WAN
brf-gw 22951/udp # Telerate Info Platform WAN
med-ltp 24000/tcp # med-ltp
med-ltp 24000/udp # med-ltp
med-fsp-rx 24001/tcp # med-fsp-rx
med-fsp-rx 24001/udp # med-fsp-rx
med-fsp-tx 24002/tcp # med-fsp-tx
med-fsp-tx 24002/udp # med-fsp-tx
med-supp 24003/tcp # med-supp
med-supp 24003/udp # med-supp
med-ovw 24004/tcp # med-ovw
med-ovw 24004/udp # med-ovw
med-ci 24005/tcp # med-ci
med-ci 24005/udp # med-ci
med-net-svc 24006/tcp # med-net-svc
med-net-svc 24006/udp # med-net-svc
intel_rci 24386/tcp # Intel RCI
intel_rci 24386/udp # Intel RCI
icl-twobase1 25000/tcp # icl-twobase1
icl-twobase1 25000/udp # icl-twobase1
icl-twobase2 25001/tcp # icl-twobase2
icl-twobase2 25001/udp # icl-twobase2
icl-twobase3 25002/tcp # icl-twobase3
icl-twobase3 25002/udp # icl-twobase3
icl-twobase4 25003/tcp # icl-twobase4
icl-twobase4 25003/udp # icl-twobase4
icl-twobase5 25004/tcp # icl-twobase5
icl-twobase5 25004/udp # icl-twobase5
icl-twobase6 25005/tcp # icl-twobase6
icl-twobase6 25005/udp # icl-twobase6
icl-twobase7 25006/tcp # icl-twobase7
icl-twobase7 25006/udp # icl-twobase7
icl-twobase8 25007/tcp # icl-twobase8
icl-twobase8 25007/udp # icl-twobase8
icl-twobase9 25008/tcp # icl-twobase9
icl-twobase9 25008/udp # icl-twobase9
icl-twobase10 25009/tcp # icl-twobase10
icl-twobase10 25009/udp # icl-twobase10
telalert 25378/tcp # Telalert
/udp #
vocaltec-hos/vocaltec-hos 25793/tcp # Vocaltec Address Server

Video-Teleconferencing. Also uses tcp 1490, 6670, 22555; udp 22555.
, vocaltec-hos

vocaltec address server
vocaltec-hos 25793/udp # vocaltec-hos

vocaltec address server
webcam32 25867/tcp # Webcam32 (Kolban Webcam Software)

v4.8.3 and below have buffer overflow that allows attacker to execute arbitrary commands on user's Win95/98 host.
/udp #
quake 26000/tcp # quake
quake 26000/udp # quake
wnn6-ds 26208/tcp # wnn6-ds
wnn6-ds/wnn6-ds 26208/udp # wnn6-ds
, wnn6-ds

wnn6-ds
flex-lm/flex-lm 27000/tcp # Flex License Manager (1-10)
, flex-lm

flex lm (1-10)
flex-lm 27000/udp # Flex License Manager (1-10)
subsevel-infection 27374/tcp # SubSevel Infection Port

Default SubSeven tcp control ports. Others can include tcp 1243, 6711, 6712, 6713, & 6776.
/udp #
tw-auth-key 27999/tcp # TW Auth/Key Distribution & Attribute Cert Services
tw-auth-key/tw-auth-key 27999/udp # TW Auth/Key Distribution & Attribute Cert Services
, tw-auth-key

attribute certificate services
sockets-de-troje 30303/tcp # Sockets de Trojie Backdoor

Also infects tcp/udp 5000, 5001, 50505.
sockets-de-troje 30303/udp # Sockets de Trojie Backdoor

Also infects tcp/udp 5000, 5001, 50505.
pirc/eleet 31337/tcp # Possible for IRCD
, Intruder Programs!

Port 31337 has long been popular for intruder programs. Consider any connection attempts to it highly suspicious! Common programs using it include: original Back Orifice (Win9x, NT) and socdmini (Unix).

"ELEET" is hackereze for "31337".
pirc/eleet/BackOrifice 31337/udp # Possible for IRCD
, Intruder Programs!

Port 31337 has long been popular for intruder programs. Consider any connection attempts to it highly suspicious! Common programs using it include: original Back Orifice (Win9x, NT) and socdmini (Unix).

"ELEET" is hackereze for "31337".
, BackOrifice

cdc back orifice remote admin tool
/tcp #
Hack-a-tack 31789/udp # Hack-a-tack Backdoor

Remote access login port using udp shell.
filenet-tms 32768/tcp # Filenet TMS
filenet-tms 32768/udp # Filenet TMS
filenet-rpc 32769/tcp # Filenet RPC
filenet-rpc 32769/udp # Filenet RPC
filenet-nch 32770/tcp # Filenet NCH
filenet-nch 32770/udp # Filenet NCH
traceroute 33434/tcp # traceroute use
traceroute 33434/udp # traceroute use
kastenxpipe 36865/tcp # KastenX Pipe
kastenxpipe 36865/udp # KastenX Pipe
reachout 43188/tcp # reachout
reachout 43188/udp # reachout
rockwell-encap 44818/tcp # Rockwell Encapsulation
rockwell-encap 44818/udp # Rockwell Encapsulation
eba 45678/tcp # EBA PRISE
eba 45678/udp # EBA PRISE
netranger 45000/tcp # NetRanger's Alert Traffic

Used by NetRanger
/udp #
dbbrowse 47557/tcp # Databeam Corporation
dbbrowse 47557/udp # Databeam Corporation
directplaysrvr 47624/tcp # Direct Play Server
directplaysrvr 47624/udp # Direct Play Server
ap 47806/tcp # ALC Protocol
ap 47806/udp # ALC Protocol
bacnet 47808/tcp # Building Automation & Control Networks
bacnet 47808/udp # Building Automation & Control Networks
nimcontroller 48000/tcp # Nimbus Controller
nimcontroller 48000/udp # Nimbus Controller
nimspooler 48001/tcp # Nimbus Spooler
nimspooler 48001/udp # Nimbus Spooler
nimhub 48002/tcp # Nimbus Hub
nimhub 48002/udp # Nimbus Hub
nimgtw 48003/tcp # Nimbus Gateway
nimgtw 48003/udp # Nimbus Gateway
sockets-de-troje 50505/tcp # Sockets de Trojie Backdoor

Also infects tcp/udp 5000, 5001, 30303.
sockets-de-troje 50505/udp # Sockets de Trojie Backdoor

Also infects tcp/udp 5000, 5001, 30303.
dialpad 51210/tcp # Dialpad Telephony

Also uses udp 51200 & 51201.
/udp #
/tcp #
ivisit 56768/udp # ivisit Video-Teleconferencing

Also uses udp 9943, 9945.
pcanywheredata/pcanywhere 65301/tcp # pcAnywhere Data

Default tcp port for v2.0 thru v7.51, plus CE. Versions v8+ on use tcp 5631 & udp 5632.
, pcanywhere


/udp #
backdoor-port 65534/tcp # Reported Backdoor

Reported found on Linux hosts as a hacked backdoor, along with tcp 1049 (both open on same host). Little else known.
/udp #
/tcp #
ufsd 1008/udp # ufsd


amandaidx 10082/tcp # amandaidx

amanda indexing
/udp #
amidxtape 10083/tcp # amidxtape

amanda tape indexing
/udp #
/tcp #
sometimes-rpc1 1012/udp # sometimes-rpc1

this is rstatd on my openbsd box
nterm 1026/tcp # nterm

remote_login network_terminal
/udp #
vfo 1056/tcp # vfo

vfo
vfo 1056/udp # vfo

vfo
xaudio 1103/tcp # xaudio

x audio server, xaserver
/udp #
msql 1112/tcp # msql

mini-sql server
/udp #
supfiledbg 1127/tcp # supfiledbg

sup debugging, for sup
/udp #
tripwire 1169/tcp # tripwire

tripwire
tripwire 1169/udp # tripwire

tripwire
skkserv 1178/tcp # skkserv

skk (kanji input)
/udp #
hp-webadmin 1188/tcp # hp-webadmin

hp web admin
hp-webadmin 1188/udp # hp-webadmin

hp web admin
msg 1241/tcp # msg

remote message server
/udp #
intuitive-edge 1355/tcp # intuitive-edge

intuitive edge
intuitive-edge 1355/udp # intuitive-edge

intuitive edge
intel-rci-mp 16991/tcp # intel-rci-mp

intel-rci-mp
intel-rci-mp 16991/udp # intel-rci-mp

intel-rci-mp
opsec-sam 18183/tcp # opsec-sam

opsec sam
opsec-sam 18183/udp # opsec-sam

opsec sam
opsec-lea 18184/tcp # opsec-lea

opsec lea
opsec-lea 18184/udp # opsec-lea

opsec lea
opsec-omi 18185/tcp # opsec-omi

opsec omi
opsec-omi 18185/udp # opsec-omi

opsec omi
opsec-ela 18187/tcp # opsec-ela

opsec ela
opsec-ela 18187/udp # opsec-ela

opsec ela
ardusmul 1835/tcp # ardusmul

ardus multicast
ardusmul 1835/udp # ardusmul

ardus multicast
mc2studios 1899/tcp # mc2studios

mc2studios
mc2studios 1899/udp # mc2studios

mc2studios
hp-sessmon 19412/tcp # hp-sessmon

hp-sessmon
hp-sessmon 19412/udp # hp-sessmon

hp-sessmon
btx 20005/tcp # btx

xcept4 (interacts with german telekom's cept videotext service)
/udp #
cfingerd 2003/tcp # cfingerd

gnu finger
/udp #
ergolight 2109/tcp # ergolight

ergolight
ergolight 2109/udp # ergolight

ergolight
umsp 2110/tcp # umsp

umsp
umsp 2110/udp # umsp

umsp
/tcp #
dsatp 2111/udp # dsatp

dsatp
/tcp #
idonix-metanet 2112/udp # idonix-metanet

idonix metanet
hsl-storm 2113/tcp # hsl-storm

hsl storm
hsl-storm 2113/udp # hsl-storm

hsl storm
newheights 2114/tcp # newheights

newheights
newheights 2114/udp # newheights

newheights
kdm 2115/tcp # kdm

kdm
kdm 2115/udp # kdm

kdm
ccowcmr 2116/tcp # ccowcmr

ccowcmr
ccowcmr 2116/udp # ccowcmr

ccowcmr
mentaclient 2117/tcp # mentaclient

mentaclient
mentaclient 2117/udp # mentaclient

mentaclient
mentaserver 2118/tcp # mentaserver

mentaserver
mentaserver 2118/udp # mentaserver

mentaserver
gsigatekeeper 2119/tcp # gsigatekeeper

gsigatekeeper
gsigatekeeper 2119/udp # gsigatekeeper

gsigatekeeper
/tcp #
qencp 2120/udp # qencp

quick eagle networks cp
scientia-ssdb 2121/tcp # scientia-ssdb

scientia-ssdb
scientia-ssdb 2121/udp # scientia-ssdb

scientia-ssdb
caupc-remote 2122/tcp # caupc-remote

caupc remote control
caupc-remote 2122/udp # caupc-remote

caupc remote control
gtp-control 2123/tcp # gtp-control

gtp-control plane (3gpp)
gtp-control 2123/udp # gtp-control

gtp-control plane (3gpp)
elatelink 2124/tcp # elatelink

elatelink
elatelink 2124/udp # elatelink

elatelink
lockstep 2125/tcp # lockstep

lockstep
lockstep 2125/udp # lockstep

lockstep
pktcable-cops 2126/tcp # pktcable-cops

pktcable-cops
pktcable-cops 2126/udp # pktcable-cops

pktcable-cops
index-pc-wb 2127/tcp # index-pc-wb

index-pc-wb
index-pc-wb 2127/udp # index-pc-wb

index-pc-wb
net-steward 2128/tcp # net-steward

net steward control
net-steward 2128/udp # net-steward

net steward control
cs-live 2129/tcp # cs-live

cs-live.com
cs-live 2129/udp # cs-live

cs-live.com
swc-xds 2130/tcp # swc-xds

swc-xds
swc-xds 2130/udp # swc-xds

swc-xds
avantageb2b 2131/tcp # avantageb2b

avantageb2b
avantageb2b 2131/udp # avantageb2b

avantageb2b
avail-epmap 2132/tcp # avail-epmap

avail-epmap
avail-epmap 2132/udp # avail-epmap

avail-epmap
zymed-zpp 2133/tcp # zymed-zpp

zymed-zpp
zymed-zpp 2133/udp # zymed-zpp

zymed-zpp
avenue 2134/tcp # avenue

avenue
avenue 2134/udp # avenue

avenue
iwserver 2166/tcp # iwserver

iwserver
iwserver 2166/udp # iwserver

iwserver
wnn4_Cn 22289/tcp # wnn4_Cn

wnn6 (chinese input), wnn4 (chinese input)
/udp #
wnn4_Kr 22305/tcp # wnn4_Kr

wnn4 (korean input), wnn6 (korean input)
/udp #
wnn4_Tw 22321/tcp # wnn4_Tw

wnn4 (taiwanse input), wnn6 (taiwanse input)
/udp #
sd-request 2384/tcp # sd-request

sd-request
sd-request 2384/udp # sd-request

sd-request
priv-mail 24/tcp # priv-mail

any private mail system
priv-mail 24/udp # priv-mail

any private mail system
cp-svn 18264/tcp # Check Point SVN foundation (HTTP)
/udp #
/tcp #
hunt 26740/udp # hunt

multi-player/multi-host maze-wars, hunt(6)
flex-lm 27001/tcp # flex-lm

flex lm (1-10)
/udp #
flex-lm 27002/tcp # flex-lm

flex lm (1-10)
/udp #
flex-lm 27003/tcp # flex-lm

flex lm (1-10)
/udp #
flex-lm 27004/tcp # flex-lm

flex lm (1-10)
/udp #
flex-lm 27005/tcp # flex-lm

flex lm (1-10)
/udp #
flex-lm 27006/tcp # flex-lm

flex lm (1-10)
/udp #
flex-lm 27007/tcp # flex-lm

flex lm (1-10)
/udp #
flex-lm 27008/tcp # flex-lm

flex lm (1-10)
/udp #
flex-lm 27009/tcp # flex-lm

flex lm (1-10)
/udp #
/tcp #
Trinoo_Bcast 27444/udp # Trinoo_Bcast

trinoo distributed attack tool master -> bcast daemon communication
Trinoo_Master 27665/tcp # Trinoo_Master

trinoo distributed attack tool master server control port
/udp #
gtp-user 285/tcp # gtp-user

gtp-user plane (3gpp)
gtp-user 285/udp # gtp-user

gtp-user plane (3gpp)
fxp-1 286/tcp # fxp-1

fxp-1
fxp-1 286/udp # fxp-1

fxp-1
k-block 287/tcp # k-block

k-block
k-block 287/udp # k-block

k-block
dfoxserver 2960/tcp # dfoxserver

dfoxserver
dfoxserver 2960/udp # dfoxserver

dfoxserver
distrib-net-proxy 3064/tcp # distrib-net-proxy

stupid closed source distributed.net project proxy port
/udp #
lv-frontpanel 3079/tcp # lv-frontpanel

lv front panel
lv-frontpanel 3079/udp # lv-frontpanel

lv front panel
itm-mccs 3084/tcp # itm-mccs

itm-mccs
itm-mccs 3084/udp # itm-mccs

itm-mccs
pcihreq 3085/tcp # pcihreq

pcihreq
pcihreq 3085/udp # pcihreq

pcihreq
/tcp #
jdl-dbkitchen 3086/udp # jdl-dbkitchen

jdl-dbkitchen
ca-licmgr 10203/tcp # Computer Associates License Manager
/udp #
/tcp #
Trinoo_Register 31335/udp # Trinoo_Register

trinoo distributed attack tool bcast daemon registration port
/tcp #
sometimes-rpc6 32771/udp # sometimes-rpc6

sometimes an rpc port on my solaris box (rusersd)
/tcp #
sometimes-rpc8 32772/udp # sometimes-rpc8

sometimes an rpc port on my solaris box (status)
/tcp #
sometimes-rpc10 32773/udp # sometimes-rpc10

sometimes an rpc port on my solaris box (rquotad)
/tcp #
sometimes-rpc12 32774/udp # sometimes-rpc12

sometimes an rpc port on my solaris box (rusersd)
/tcp #
sometimes-rpc14 32775/udp # sometimes-rpc14

sometimes an rpc port on my solaris box (status)
/tcp #
sometimes-rpc16 32776/udp # sometimes-rpc16

sometimes an rpc port on my solaris box (sprayd)
/tcp #
sometimes-rpc18 32777/udp # sometimes-rpc18

sometimes an rpc port on my solaris box (walld)
/tcp #
sometimes-rpc20 32778/udp # sometimes-rpc20

sometimes an rpc port on my solaris box (rstatd)
/tcp #
sometimes-rpc22 32779/udp # sometimes-rpc22

sometimes an rpc port on my solaris box
/tcp #
sometimes-rpc24 32780/udp # sometimes-rpc24

sometimes an rpc port on my solaris box
watcomdebug 3563/tcp # watcomdebug

watcom debug
watcomdebug 3563/udp # watcomdebug

watcom debug
harlequinorb 3672/tcp # harlequinorb

harlequinorb
harlequinorb 3672/udp # harlequinorb

harlequinorb
cscp 40841/tcp # cscp

cscp
cscp 40841/udp # cscp

cscp
vrml-multi-use 4201/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4202/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4203/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4204/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4205/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4206/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4207/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4208/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4209/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4210/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4211/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4212/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4213/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4214/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4215/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4216/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4217/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4218/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4219/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4220/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4221/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4222/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4223/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4224/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4225/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4226/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4227/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4228/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4229/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4230/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4231/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4232/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4233/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4234/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4235/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4236/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4237/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4238/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4239/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4240/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4241/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4242/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4243/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4244/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4245/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4246/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4247/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4248/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4249/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4250/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4251/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4252/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4253/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4254/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4255/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4256/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4257/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4258/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4259/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4260/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4261/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4262/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4263/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4264/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4265/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4266/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4267/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4268/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4269/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4270/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4271/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4272/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4273/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4274/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4275/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4276/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4277/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4278/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4279/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4280/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4281/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4282/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4283/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4284/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4285/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4286/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4287/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4288/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4289/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4290/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4291/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4292/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4293/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4294/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4295/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4296/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4297/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4298/tcp # vrml-multi-use

vrml multi user systems
/udp #
vrml-multi-use 4299/tcp # vrml-multi-use

vrml multi user systems
/udp #
reachout 43118/tcp # reachout


/udp #
msql 4333/tcp # msql

mini-sql server
/udp #
fax 4557/tcp # fax

flexfax fax transmission service, fax transmission service
/udp #
hylafax 4559/tcp # hylafax

hylafax client-server protocol
/udp #
ssr-servermgr 45966/tcp # ssr-servermgr

ssrservermgr
ssr-servermgr 45966/udp # ssr-servermgr

ssrservermgr
sgi-dgl 5232/tcp # sgi-dgl

sgi distributed graphics
/udp #
postgres 5432/tcp # postgres

postgres database server
/udp #
netops-broker 5465/tcp # netops-broker

netops-broker
netops-broker 5465/udp # netops-broker

netops-broker
canna 5680/tcp # canna

canna (japanese input), kana->kanji server
/udp #
unieng 5730/tcp # unieng

netscape suiteware
/udp #
unisnc 5731/tcp # unisnc

netscape suiteware
/udp #
unidas 5732/tcp # unidas

netscape suiteware
/udp #
vnc 5800/tcp # vnc


/udp #
vnc 5801/tcp # vnc


/udp #
vnc 5900/tcp # vnc

virtual network computer, orl virtual network client
/udp #
vnc-1 5901/tcp # vnc-1

virtual network computer display :1
/udp #
vnc-2 5902/tcp # vnc-2

virtual network computer display :2
/udp #
ncd-pref-tcp 5977/tcp # ncd-pref-tcp

ncd preferences tcp port
/udp #
ncd-diag-tcp 5978/tcp # ncd-diag-tcp

ncd diagnostic tcp port
/udp #
ncd-conf-tcp 5979/tcp # ncd-conf-tcp

ncd configuration tcp port
/udp #
ncd-pref 5997/tcp # ncd-pref

ncd preferences telnet port
/udp #
ncd-diag 5998/tcp # ncd-diag

ncd diagnostic telnet port
/udp #
cvsup 5999/tcp # cvsup

cvsup file transfer/john polstra/freebsd, ncd configuration telnet port
/udp #
/tcp #
x11 6001/udp # x11

x window system
/tcp #
x11 6002/udp # x11

x window system
/tcp #
x11 6003/udp # x11

x window system
/tcp #
x11 6004/udp # x11

x window system
/tcp #
x11 6005/udp # x11

x window system
/tcp #
x11 6006/udp # x11

x window system
/tcp #
x11 6007/udp # x11

x window system
/tcp #
x11 6008/udp # x11

x window system
/tcp #
x11 6009/udp # x11

x window system
x11 6010/tcp # x11

x window system
x11 6010/udp # x11

x window system
x11 6011/tcp # x11

x window system
x11 6011/udp # x11

x window system
x11 6012/tcp # x11

x window system
x11 6012/udp # x11

x window system
x11 6013/tcp # x11

x window system
x11 6013/udp # x11

x window system
x11 6014/tcp # x11

x window system
x11 6014/udp # x11

x window system
x11 6015/tcp # x11

x window system
x11 6015/udp # x11

x window system
x11 6016/tcp # x11

x window system
x11 6016/udp # x11

x window system
x11 6017/tcp # x11

x window system
x11 6017/udp # x11

x window system
x11 6018/tcp # x11

x window system
x11 6018/udp # x11

x window system
x11 6019/tcp # x11

x window system
x11 6019/udp # x11

x window system
x11 6020/tcp # x11

x window system
x11 6020/udp # x11

x window system
x11 6021/tcp # x11

x window system
x11 6021/udp # x11

x window system
x11 6022/tcp # x11

x window system
x11 6022/udp # x11

x window system
x11 6023/tcp # x11

x window system
x11 6023/udp # x11

x window system
x11 6024/tcp # x11

x window system
x11 6024/udp # x11

x window system
x11 6025/tcp # x11

x window system
x11 6025/udp # x11

x window system
x11 6026/tcp # x11

x window system
x11 6026/udp # x11

x window system
x11 6027/tcp # x11

x window system
x11 6027/udp # x11

x window system
x11 6028/tcp # x11

x window system
x11 6028/udp # x11

x window system
x11 6029/tcp # x11

x window system
x11 6029/udp # x11

x window system
x11 6030/tcp # x11

x window system
x11 6030/udp # x11

x window system
x11 6031/tcp # x11

x window system
x11 6031/udp # x11

x window system
x11 6032/tcp # x11

x window system
x11 6032/udp # x11

x window system
x11 6033/tcp # x11

x window system
x11 6033/udp # x11

x window system
x11 6034/tcp # x11

x window system
x11 6034/udp # x11

x window system
x11 6035/tcp # x11

x window system
x11 6035/udp # x11

x window system
x11 6036/tcp # x11

x window system
x11 6036/udp # x11

x window system
x11 6037/tcp # x11

x window system
x11 6037/udp # x11

x window system
x11 6038/tcp # x11

x window system
x11 6038/udp # x11

x window system
x11 6039/tcp # x11

x window system
x11 6039/udp # x11

x window system
x11 6040/tcp # x11

x window system
x11 6040/udp # x11

x window system
x11 6041/tcp # x11

x window system
x11 6041/udp # x11

x window system
x11 6042/tcp # x11

x window system
x11 6042/udp # x11

x window system
x11 6043/tcp # x11

x window system
x11 6043/udp # x11

x window system
x11 6044/tcp # x11

x window system
x11 6044/udp # x11

x window system
x11 6045/tcp # x11

x window system
x11 6045/udp # x11

x window system
x11 6046/tcp # x11

x window system
x11 6046/udp # x11

x window system
x11 6047/tcp # x11

x window system
x11 6047/udp # x11

x window system
x11 6048/tcp # x11

x window system
x11 6048/udp # x11

x window system
x11 6049/tcp # x11

x window system
x11 6049/udp # x11

x window system
x11 6050/tcp # x11

x window system
x11 6050/udp # x11

x window system
x11/AVG-Server 6051/tcp # x11

x window system
, AVG anti-virus client connection to DataCenter
x11 6051/udp # x11

x window system
x11 6052/tcp # x11

x window system
x11 6052/udp # x11

x window system
x11 6053/tcp # x11

x window system
x11 6053/udp # x11

x window system
x11 6054/tcp # x11

x window system
x11 6054/udp # x11

x window system
x11 6055/tcp # x11

x window system
x11 6055/udp # x11

x window system
x11 6056/tcp # x11

x window system
x11 6056/udp # x11

x window system
x11 6057/tcp # x11

x window system
x11 6057/udp # x11

x window system
x11 6058/tcp # x11

x window system
x11 6058/udp # x11

x window system
x11 6059/tcp # x11

x window system
x11 6059/udp # x11

x window system
x11 6060/tcp # x11

x window system
x11 6060/udp # x11

x window system
x11 6061/tcp # x11

x window system
x11 6061/udp # x11

x window system
x11 6062/tcp # x11

x window system
x11 6062/udp # x11

x window system
x11 6063/tcp # x11

x window system
x11 6063/udp # x11

x window system
ndl-ahp-svc 6064/tcp # ndl-ahp-svc

ndl-ahp-svc
ndl-ahp-svc 6064/udp # ndl-ahp-svc

ndl-ahp-svc
winpharaoh 6065/tcp # winpharaoh

winpharaoh
winpharaoh 6065/udp # winpharaoh

winpharaoh
ewctsp 6066/tcp # ewctsp

ewctsp
ewctsp 6066/udp # ewctsp

ewctsp
srb 6067/tcp # srb

srb
srb 6067/udp # srb

srb
gsmp 6068/tcp # gsmp

gsmp
gsmp 6068/udp # gsmp

gsmp
trip 6069/tcp # trip

trip
trip 6069/udp # trip

trip
messageasap 6070/tcp # messageasap

messageasap
messageasap 6070/udp # messageasap

messageasap
ssdtp 6071/tcp # ssdtp

ssdtp
ssdtp 6071/udp # ssdtp

ssdtp
/tcp #
diagmose-proc 6072/udp # diagmose-proc

diagnose-proc
directplay8 6073/tcp # directplay8

directplay8
directplay8 6073/udp # directplay8

directplay8
synchronet-db 6100/tcp # synchronet-db

synchronet-db
synchronet-db 6100/udp # synchronet-db

synchronet-db
synchronet-rtc 6101/tcp # synchronet-rtc

synchronet-rtc
synchronet-rtc 6101/udp # synchronet-rtc

synchronet-rtc
synchronet-upd 6102/tcp # synchronet-upd

synchronet-upd
synchronet-upd 6102/udp # synchronet-upd

synchronet-upd
rets 6103/tcp # rets

rets
rets 6103/udp # rets

rets
dbdb 6104/tcp # dbdb

dbdb
dbdb 6104/udp # dbdb

dbdb
primaserver 6105/tcp # primaserver

prima server
primaserver 6105/udp # primaserver

prima server
mpsserver 6106/tcp # mpsserver

mps server
mpsserver 6106/udp # mpsserver

mps server
etc-control 6107/tcp # etc-control

etc control
etc-control 6107/udp # etc-control

etc control
sercomm-scadmin 6108/tcp # sercomm-scadmin

sercomm-scadmin
sercomm-scadmin 6108/udp # sercomm-scadmin

sercomm-scadmin
globecast-id 6109/tcp # globecast-id

globecast-id
globecast-id 6109/udp # globecast-id

globecast-id
gnutella/gnutella 6346/tcp # gnutella

gnutella, the gnu napster
, Gnutella, Limewire, Morpheus, BearShare
gnutella 6346/udp # Gnutella, Limewire, Morpheus, BearShare
info-cachesvr 6403/tcp # Info - Cache Server
/udp #
reserved1 6407/tcp # reserved1


/udp #
reserved2 6408/tcp # reserved2


/udp #
reserved3 6409/tcp # reserved3


/udp #
reserved4 6410/tcp # reserved4


/udp #
dhcp-failover 647/tcp # dhcp-failover

dhcp failover
dhcp-failover 647/udp # dhcp-failover

dhcp failover
/tcp #
ircu 6666/udp # ircu

ircu
ircu 6669/tcp # ircu

ircu
ircu 6669/udp # ircu

ircu
swx 7301/tcp # swx

the swiss exchange
/udp #
swx 7302/tcp # swx

the swiss exchange
/udp #
swx 7303/tcp # swx

the swiss exchange
/udp #
swx 7304/tcp # swx

the swiss exchange
/udp #
swx 7305/tcp # swx

the swiss exchange
/udp #
swx 7306/tcp # swx

the swiss exchange
/udp #
swx 7307/tcp # swx

the swiss exchange
/udp #
swx 7308/tcp # swx

the swiss exchange
/udp #
swx 7309/tcp # swx

the swiss exchange
/udp #
swx 7310/tcp # swx

the swiss exchange
/udp #
swx 7311/tcp # swx

the swiss exchange
/udp #
swx 7312/tcp # swx

the swiss exchange
/udp #
swx 7313/tcp # swx

the swiss exchange
/udp #
swx 7314/tcp # swx

the swiss exchange
/udp #
swx 7315/tcp # swx

the swiss exchange
/udp #
swx 7316/tcp # swx

the swiss exchange
/udp #
swx 7317/tcp # swx

the swiss exchange
/udp #
swx 7318/tcp # swx

the swiss exchange
/udp #
swx 7319/tcp # swx

the swiss exchange
/udp #
swx 7320/tcp # swx

the swiss exchange
/udp #
swx 7321/tcp # swx

the swiss exchange
/udp #
swx 7322/tcp # swx

the swiss exchange
/udp #
swx 7323/tcp # swx

the swiss exchange
/udp #
swx 7324/tcp # swx

the swiss exchange
/udp #
swx 7325/tcp # swx

the swiss exchange
/udp #
swx 7326/tcp # swx

the swiss exchange, internet citizen's band
/udp #
swx 7327/tcp # swx

the swiss exchange
/udp #
swx 7328/tcp # swx

the swiss exchange
/udp #
swx 7329/tcp # swx

the swiss exchange
/udp #
swx 7330/tcp # swx

the swiss exchange
/udp #
swx 7331/tcp # swx

the swiss exchange
/udp #
swx 7332/tcp # swx

the swiss exchange
/udp #
swx 7333/tcp # swx

the swiss exchange
/udp #
swx 7334/tcp # swx

the swiss exchange
/udp #
swx 7335/tcp # swx

the swiss exchange
/udp #
swx 7336/tcp # swx

the swiss exchange
/udp #
swx 7337/tcp # swx

the swiss exchange
/udp #
swx 7338/tcp # swx

the swiss exchange
/udp #
swx 7339/tcp # swx

the swiss exchange
/udp #
swx 7340/tcp # swx

the swiss exchange
/udp #
swx 7341/tcp # swx

the swiss exchange
/udp #
swx 7342/tcp # swx

the swiss exchange
/udp #
swx 7343/tcp # swx

the swiss exchange
/udp #
swx 7344/tcp # swx

the swiss exchange
/udp #
swx 7345/tcp # swx

the swiss exchange
/udp #
swx 7346/tcp # swx

the swiss exchange
/udp #
swx 7347/tcp # swx

the swiss exchange
/udp #
swx 7348/tcp # swx

the swiss exchange
/udp #
swx 7349/tcp # swx

the swiss exchange
/udp #
swx 7350/tcp # swx

the swiss exchange
/udp #
swx 7351/tcp # swx

the swiss exchange
/udp #
swx 7352/tcp # swx

the swiss exchange
/udp #
swx 7353/tcp # swx

the swiss exchange
/udp #
swx 7354/tcp # swx

the swiss exchange
/udp #
swx 7355/tcp # swx

the swiss exchange
/udp #
swx 7356/tcp # swx

the swiss exchange
/udp #
swx 7357/tcp # swx

the swiss exchange
/udp #
swx 7358/tcp # swx

the swiss exchange
/udp #
swx 7359/tcp # swx

the swiss exchange
/udp #
swx 7360/tcp # swx

the swiss exchange
/udp #
swx 7361/tcp # swx

the swiss exchange
/udp #
swx 7362/tcp # swx

the swiss exchange
/udp #
swx 7363/tcp # swx

the swiss exchange
/udp #
swx 7364/tcp # swx

the swiss exchange
/udp #
swx 7365/tcp # swx

the swiss exchange
/udp #
swx 7366/tcp # swx

the swiss exchange
/udp #
swx 7367/tcp # swx

the swiss exchange
/udp #
swx 7368/tcp # swx

the swiss exchange
/udp #
swx 7369/tcp # swx

the swiss exchange
/udp #
/tcp #
sometimes-rpc2 737/udp # sometimes-rpc2

rusersd on my openbsd box
swx 7370/tcp # swx

the swiss exchange
/udp #
swx 7371/tcp # swx

the swiss exchange
/udp #
swx 7372/tcp # swx

the swiss exchange
/udp #
swx 7373/tcp # swx

the swiss exchange
/udp #
swx 7374/tcp # swx

the swiss exchange
/udp #
swx 7375/tcp # swx

the swiss exchange
/udp #
swx 7376/tcp # swx

the swiss exchange
/udp #
swx 7377/tcp # swx

the swiss exchange
/udp #
swx 7378/tcp # swx

the swiss exchange
/udp #
swx 7379/tcp # swx

the swiss exchange
/udp #
swx 7380/tcp # swx

the swiss exchange
/udp #
swx 7381/tcp # swx

the swiss exchange
/udp #
swx 7382/tcp # swx

the swiss exchange
/udp #
swx 7383/tcp # swx

the swiss exchange
/udp #
swx 7384/tcp # swx

the swiss exchange
/udp #
swx 7385/tcp # swx

the swiss exchange
/udp #
swx 7386/tcp # swx

the swiss exchange
/udp #
swx 7387/tcp # swx

the swiss exchange
/udp #
swx 7388/tcp # swx

the swiss exchange
/udp #
swx 7389/tcp # swx

the swiss exchange
/udp #
swx 7390/tcp # swx

the swiss exchange
/udp #
netcp 740/tcp # netcp

netscout control protocol
netcp 740/udp # netcp

netscout control protocol
priv-dial 75/tcp # priv-dial

any private dial out service
priv-dial 75/udp # priv-dial

any private dial out service
/tcp #
cucme-3 7650/udp # cucme-3

cucme live video/audio server
/tcp #
cucme-4 7651/udp # cucme-4

cucme live video/audio server
minivend 7786/tcp # minivend

minivend
minivend 7786/udp # minivend

minivend
hp-collector 781/tcp # hp-collector

hp performance data collector
hp-collector 781/udp # hp-collector

hp performance data collector
hp-managed-node 782/tcp # hp-managed-node

hp performance data managed node
hp-managed-node 782/udp # hp-managed-node

hp performance data managed node
hp-alarm-mgr 783/tcp # hp-alarm-mgr

hp performance data alarm manager
hp-alarm-mgr 783/udp # hp-alarm-mgr

hp performance data alarm manager
controlit 799/tcp # controlit


/udp #
supfilesrv 871/tcp # supfilesrv

sup server, for sup
/udp #
openqueue 8764/tcp # openqueue

openqueue
openqueue 8764/udp # openqueue

openqueue
jetdirect 9100/tcp # jetdirect

hp jetdirect card
/udp #
sctp-tunneling 9899/tcp # sctp-tunneling

sctp tunneling
sctp-tunneling 9899/udp # sctp-tunneling

sctp tunneling
apcpcpluswin1 9950/tcp # apcpcpluswin1

apcpcpluswin1
apcpcpluswin1 9950/udp # apcpcpluswin1

apcpcpluswin1
apcpcpluswin2 9951/tcp # apcpcpluswin2

apcpcpluswin2
apcpcpluswin2 9951/udp # apcpcpluswin2

apcpcpluswin2
apcpcpluswin3 9952/tcp # apcpcpluswin3

apcpcpluswin3
apcpcpluswin3 9952/udp # apcpcpluswin3

apcpcpluswin3
palace 9993/tcp # palace

palace
palace 9993/udp # palace

palace
palace 9994/tcp # palace

palace
palace 9994/udp # palace

palace
palace 9995/tcp # palace

palace
palace 9995/udp # palace

palace
palace 9996/tcp # palace

palace
palace 9996/udp # palace

palace
palace 9997/tcp # palace

palace
palace 9997/udp # palace

palace
waste 1337/tcp # p2p file sharing: http://www.sourceforget.net/projects/waste/
/udp #
power-broker/pbmaster 24345/tcp # Symark Power-Broker, PowerBroker Master Daemon
/udp #
power-broker/pblocald 24346/tcp # Symark Power-Broker, PowerBroker local daemon
/udp #
power-broker 24347/tcp # Symark Power-Broker
/udp #
Google-desktop 4664/tcp # Google Desktop search agent port, HTTP. Localhost only.
/udp #
tftpn 5452/tcp # Sequoia failover xport (Nokia)
/udp #
DB2 50000/tcp # IBM DB2
/udp #
webmail2 3511/tcp #
/udp #
sadmin 698/tcp # Solaris sadmin
/udp #
ca-licmgr 10204/tcp # Computer Associates License Manager
/udp #
hddtemp 7634/tcp #
/udp #
bf2/battlefield2 16567/tcp # Battlefield II,
/udp #
LCDproc 13666/tcp #
/udp #
famatech -admin 4899/tcp # famatech remote administrator
/udp #
limewire 6347/tcp # Limewire, Morpheus
limewire 6347/udp # Limewire, Morpheus
Emule-Edonkey 4662/tcp # P2P
/udp #
BitTorrent 6881/tcp # P2P
BitTorrent 6881/udp # P2P
BitTorrent 6882/tcp # P2P
BitTorrent 6882/udp # P2P
BitTorrent 6883/tcp # P2P
BitTorrent 6883/udp # P2P
BitTorrent 6884/tcp # P2P
BitTorrent 6884/udp # P2P
BitTorrent 6885/tcp # P2P
BitTorrent 6885/udp # P2P
BitTorrent 6886/tcp # P2P
BitTorrent 6886/udp # P2P
BitTorrent 6887/tcp # P2P
BitTorrent 6887/udp # P2P
BitTorrent 6888/tcp # P2P
BitTorrent 6888/udp # P2P
BitTorrent 6889/tcp # P2P
BitTorrent 6889/udp # P2P
/tcp #
winmx 6257/udp # WinMx, Napster
AVG-Server 4156/tcp # AVG TCP Server connection
/udp #
AVG-Agent 6150/tcp # AVG Agent port (for remote installation)
/udp #
Interwoven-CMS 3434/tcp # Interwoven Content Management System
/udp #
db2 6789/tcp # IBM DB2
/udp #
OperaBT 18768/tcp # Opera browser's Bittorrent client
/udp #
DMRC 6129/tcp # DMRC Client Agent Service, http://www.dameware.com/
/udp #
MikroTik Router OS Winbox Configuration Interface 8291/tcp #
/udp #
MikroTik Router OS API Custom Management Inferface 8278/tcp #
/udp #
VxWorks-debug 17185/tcp #
/udp #