According to the port number, it can be divided into 3 categories: (1) Well Known Ports: From 0 to 1023, their close binding (binding) in some services. Usually the communication of these ports clearly shows the protocol of some service. For example: 80 ports are actually HTTP communication. (2) Registered ports: from 1024 to 49151. They are loosely bound to some services. That is to say, many services are bound to these ports, which are also used in many other purposes. For example: Many systems processes the dynamic port starting from around 1024. (3) Dynamic and / or private ports (Dynamic and / or Private Ports): from 49152 to 65535. In theory, these ports should not be assigned to the service. In fact, the machine usually allocates a dynamic port from 1024. But there are also exceptions: Sun's RPC port begins with 32768. 0 usually used to analyze the operating system. This method can work because "0" in some systems is invalid port, which will produce different results when you try to use a usual closing port to connect it. A typical scan: Use the IP address of 0.0.0.0 to set the ACK bit and broadcast in Ethernet layer.
1 tcpmux TCP Port Service Multiplexer Transmission Control Protocol port service multiplexer selector 2 compressnet Management Utility compressnet Administration Utility 3 compressnet Compression Process compression process 5 rje Remote Job Entry remote job Login 7 echo Echo Echo 9 discard Discard dropped 11 systat Active User Daytime Time 17 qotd Quote of The Day Daily Reference 18 MSP Message Send Protocol Message Send Agreement 19 Chargen Character Generator Characterizer 20 FTP-DATA File Transfer [Default Data] File Transfer Protocol (Default Data) 21 FTP File Transfer [Control] File Transfer Protocol (Control) 22 SSH SSH Remote Login Protocol SSH Remote Login Protocol 23 Telnet Telnet Terminal Simulation Protocol 24 Any Private Mail System Reserved to Personal Mail System 25 SMTP SIMPLE Mail Transfer Simple Mail Transit Agreement 27 NSW-FE NSW User System Fe NSW User System Scene Engineer 29 MSG-ICP MSG ICP MSG ICP 31 MSG-Auth MSG Authentication MSG Verification 33 DSP Display Support Protocol Display Support Protocol 35 Any Private Printer Server Reserved 37 Time Time Time 38 RAP ROUTE Access Protocol Route Access Protocol 39 RLP Resource Location Protocol Resource Location Protocol 41 Graphics Graphics Graphics 42 Nameserv Er Wins Host Name Server WINS Host Name Service 43 NICName Who IS "Nickname"
WHO IS Service 44 MPM-Flags MPM Flags Protocol MPM (Message Processing Module) Sign Protocol 45 MPM Message Processing Module [RECV] Message Processing Module 46 MPM-SND MPM [Default Send] Message Process Module (Default Send Port) 47 Ni-FTP Ni FTP NI FTP 48 Auditd Digital Audit Daemon Digital Audio Background Service 49 TACACS Login Host Protocol (TACACS) TACACS Login Host Protocol 50 RE-MAIL-CK Remote Mail Checking Protocol Remote Mail Check Protocol [Unbound] 51 LA-MAINT IMP LOGICAL ADDRESS Maintenance IMP (Interface Information Processing Machine) Logic Address Maintenance 52 XNS-Time XNS Time Protocol Xi Xi Network Service System Time Agreement 53 Domain Domain Name Server Domain Name Server 54 XNS-CH XNS Clearinghouse Server 54 ISI-GL ISI Graphics Language ISI graphics 56 xns-auth xns authentication Xerox Network Service System Verification 57? Any Private Terminal Access Reserved Personal Terminal Access 58 XNS-Mail Xns Mail Xerox Network Service System Mail 59 Any Private File Service Reserved Personal File Service 60 Unassigned Define 61 Ni-mail Ni Mail Ni Mail? 62 ACAS ACA Services Asynchronous Communication Adapter Service 63 Whois WHOIS WHOIS
64 covia Communications Integrator (CI) communication interface 65 tacacs-ds TACACS-Database Service TACACS database service 66 sql * net Oracle SQL * NET Oracle SQL * NET 67 bootps Bootstrap Protocol Server Bootstrap Protocol server 68 bootpc Bootstrap Protocol Client Bootstrap Protocol Client 69 TFTP Trivial File Transfer Small File Transfer Protocol 70 Gopher Gopher Information Retrieval Protocol 71 NETRJS-1 Remote Job Service Remote Job Service 72 Netrjs-2 Remote Job Service Remote Job Service 73 Netrjs-3 Remote Job Service Remote Job Service 74 NetRJS- 4 Remote Job Service Remote Job Services 75 Any Private Dial Out Service Reserved To your personal dial-out service 76 DEOS Distributed External Object Store Distributed External Object Storage 77 ANY Private RJE Service Reserved to Personal Remote Job Enter Services 78 VETTCP VETTCP Correct TCP? 79 Finger Finger query remote host online user information 80 HTTP World Wide Web HTTP Global Information Network Hypertext Transport Protocol 81 Hosts2-NS Hosts2 Name Server Host2 Name Service 82 XFER XFER UTILITY Transport Utility 83 MIT-ML-dev ML Device Module Intelligent Terminal ML Equipment 84 CTF Common Trace Facility Public Tracking Device 85 ML-ML DEVICE Modular Intelligent Terminal ML Device 86 MFCOBOL Micro Focus Cobol Micro Focus Cobol Programming Language 87 Any Private Terminal L INK reserved for personal terminal connection 88 Kerberos Kerberos Kerberros Security Authentication System 89 SU-MIT-TG SU / MIT TELNET GATEWAY SU / MIT Terminal Simulation Gateway 90 DNSIX DNSIX Securit Attribute Token Map DNSIX Security Properties Tags 91 MIT-DOV MIT DOVER SPOOLERER MIT Dover spool 92 npp network printing protocol network printing protocol 93 dcp device control protocol device control protocol 94 objcall Tivoli Object dispatcher Tivoli objects scheduler 95 supdup SUPDUP 96 dixie DIXIE protocol specification DIXIE protocol specification 97 swift-rvf (Swift Remote virtural File protocol ) Quick Remote Weight File Agreement 98 TACNEWS TAC News TAC News Agreement 99 Metagram Metagram Relay 100 NewAcct [Unauthorized Use] 101 = Nic Host Name Server 102 = ISO-TSAP 103 = Genesis Point-To-Point Trans Net 104 = Acr-Nema Digital IMAG. & COMM. 300 105 =
Mailbox Name Nameserver 106 = 3COM-TSMUX3com-tsmux 107 = Remote Telnet Service 108 = SNA Gateway Access Server 109 = Post Office Protocol - Version 2 110 = Post Office Protocol - Version 3 111 = SUN RPC 112 = McIDAS Data Transmission Protocol 113 = Authentication Service 114 = Audio News Multicast 115 = Simple File Transfer Protocol 116 = ANSA REX Notify 117 = UUCP Path Service 118 = SQL Servicessqlserv 119 = Network News Transfer Protocol 120 = CFDPTKTcfdptkt 121 = Encore Expedited Remote Pro.Call 122 = SMAKYNETsmakynet 123 = Network Time Protocol 124 = ANSA REX Trader 125 = Locus PC-Interface Net Map Ser 126 = Unisys Unitary Login 127 = Locus PC-Interface Conn Server 128 = GSS X License Verification 129 = Password Generator Protocol 130 = cisco FNATIVE 131 = cisco TNATIVE 132 = cisco SYSMAINT 133 = Statistics Service 134 = INGRES-NET Service 135 = Location Service 136 = PROFILE Naming System 137 = NETBIOS Name Service 138 = NETBIOS Datagram Service 139 = NETBIOS Session Service 140 = EMFIS Data Service 141 = EMFIS Control Service 142 = Britton-Lee IDM 143 = Interim Mail Access Protocol v2 144 = NewSnews 145 = UAAC Protocoluaac 146 = ISO-IP0iso-tp0 147 = ISO-IPiso-ip 148 = CRONUS-SUPPORT 149 = AED 512 Emulation Service 150 = SQL-NETsql-net 151 = HEMShems 152 = Background File Transfer Program 153 = SGMPsgmp 154 = NETSCnetsc-prod 155 = NETSCnetsc-dev 156 = SQL Service 157 = KNET / VM Command / Message Protocol 158 = PCMail Serverpcmail-srv 159 = NSS-Routingnss-routing 160 = SGMP-TRAPSsgmp-traps 161 = SNMP 162 = SNMP TRAP 163 = CMIP / TCP Manager 164 = CMIP / TCP Agent 165 = Xeroxxns-Courier 166 =
Sirius Systems 167 = NAMPnamp 168 = RSVDrsvd 169 = Send 170 = Network PostScript 170 = Network PostScript 171 = Network Innovations Multiplex 172 = Network Innovations CL / 1 173 = Xyplexxyplex-mux 174 = MAILQ 175 = VMNET 176 = GENRAD-MUXgenrad-mux 177 = X Display Manager Control Protocol 178 = NextStep Window Server 179 = Border Gateway Protocol 180 = Intergraphris 181 = Unifyunify 182 = Unisys Audit SITP 183 = OCBinderocbinder 184 = OCServerocserver 185 = Remote-KIS 186 = KIS Protocolkis 187 = Application Communication Interface 188 = Plus Five 401 = Uninterruptible Power Supply 402 = Genie Protocol 403 = decapdecap 404 = ncednced 405 = ncldncld 406 = Interactive Mail Support Protocol 407 = Timbuktutimbuktu 408 = Prospero Resource Manager Sys. Man. 409 = Prospero Resource Manager Node Man. 410 = DECLadebug Remote Debug Protocol 411 = Remote MT Protocol 412 = Trap Convention Port 413 = SMSPsmsp 414 = InfoSeekinfoseek 415 = BNetbnet 416 = Silverplattersilverplatter 417 = Onmuxonmux 418 = Hyper-Ghyper-g 419 = Arielariel1 420 = SMPTEsmpte 421 = Arielariel2 422 = Arielariel3 423 = IBM Operations Planning and Control Start 424 = IBM Operations Planning and Control Track 425 = ICADicad-el 426 = smartsdpsmartsdp 427 = Server Location 429 = OCS_AMU 430 = UTMPSDutmpsd 431 = UTMPCDutmpcd 432 = IASDiasd 433 = NNSPnnsp 434 = MobileIP-Agent 435 = MobilIP -MN 436 = DNA-CMLdna-cml 437 = comscmcomscm 439 = dasp, Thomas Obermair 440 = sgcpsgcp 441 = decvms-sysmgtdecvms-sysmgt 442 = cvc_hostdcvc_hostd 443 = https 444 = Simple Network Paging Protocol 445 = Microsoft-DS 446 = DDM-RDBddm -rdb 447 =
DDM-RFMddm-dfm 448 = DDM-BYTEddm-byte 449 = AS Server Mapper 450 = TServertserver 512 = exec, Remote process execution 513 = login, remote login 514 = cmd, exec with auto auth. 514 = syslog 515 = Printer spooler 516 = Unassigned 517 = talk 519 = unixtime 520 = extended file name server 521 = Unassigned 522 = Unassigned 523 = Unassigned 524 = Unassigned 526 = newdate 530 = rpc courier 531 = chatconference 532 = readnewsnetnews 533 = for emergency broadcasts 539 = apertus Technologies Load Determination 540 = uucp 541 = uucp-rlogin 542 = Unassigned 543 = klogin 544 = kshell 545 = Unassigned 546 = Unassigned 547 = Unassigned 548 = Unassigned 549 = Unassigned 550 = new-who 551 = Unassigned 552 = Unassigned 553 = Unassigned 554 = Unassigned 555 = dsf 556 = remotefs 557-559 = rmonitor 560 = rmonitord 561 = dmonitor 562 = chcmd 563 = Unassigned 564 = plan 9 file service 565 = whoami 566-569 Unassigned 570 = demonmeter 571 = udemonmeter 572-599 Unassigned ipc server 600 = Sun IPC Server 607 = NQS 606 = CRAY UNIFIED Resource Manager 608 = sender-initiated / unsolicited file transfer 609 = npmp-trapnp mp-trap 610 = npmp-localnpmp-local 611 = npmp-guinpmp-gui 634 = ginadginad 666 = Doom Id Software 704 = errlog copy / server daemon 709 = EntrustManager 729 = IBM NetView DM / 6000 Server / Client 730 = IBM NetView DM / 6000 send / tcp 731 = IBM NetView DM / 6000 receive / tcp 741 = netGWnetgw 742 = Network based Rev. Cont. Sys. 744 = Flexible License Manager 747 = Fujitsu Device Control 748 = Russell Info Sci Calendar Manager 749 = kerberos administration 751 = pump 752 = qrh 754 = send 758 = nlogin 759 =
con 760 = ns 762 = quotad 763 = cycleserv 765 = webster 767 = phonephonebook 769 = vid 771 = rtip 772 = cycleserv2 774 = acmaint_dbd 775 = acmaint_transd 780 = wpgs 786 = Concertconcert 800 = mdbs_daemon 996 = Central Point Software 997 = maitrd 999 = puprouter 1023 = Reserved 1024 = Reserved 1025 = network blackjack 1030 = BBN IAD 1031 = BBN IAD 1032 = BBN IAD 1067 = Installation Bootstrap Proto. Serv. 1068 = Installation Bootstrap Proto. Cli. 1080 = SOCKS 1083 = Anasoft License Manager 1084 = Anasoft License Manager 1155 = Network File Access 1222 = SNI R & D network 1248 = hermes 1346 = Alta Analytics License Manager 1347 = multi media conferencing 1347 = multi media conferencing 1tyue = multi media conferencing 1349 = Registration Network Protocol 1350 = Registration Network Protocol 1351 = Digital Tool Works (MIT) 1352 = / Lotus Notelotusnote 1353 = Relief Consulting 1354 = RightBrain Software 1355 = Intuitive Edge 1356 = CuillaMartin Company 1357 = Electronic pegBoard 1358 = CONNLCLIconnlcli 1359 = FTSRVftsrv 1360 = MIMERmimer 1361 = LinX 1362 = TimeFliestimeflies 1363 = Network DataMover Requester 1364 = Network DataMover Server 1365 = Network Software Associates 1366 = Novell NetWare Comm Service Platform 1367 = DCSdcs 1368 = ScreenCastscreencast 1369 = GlobalView to Unix Shell 1370 = Unix Shell to GlobalView 1371 = Fujitsu Config Protocol 1372 = Fujitsu Config Protocol 1373 = Chromagrafxchromagrafx 1374 = EPI Software Systems 1375 = BYTEXBYTEX 1376 = IBM Person to Person Software 1377 = Cichlid License Manager 1378 = Elan license Manager 1379 = Integrity Solutions 1380 =
Telesis Network License Manager 1381 = Apple Network License Manager 1382 = udt_os 1383 = GW Hannaway Network License Manager 1384 = Objective Solutions License Manager 1385 = Atex Publishing License Manager 1386 = CheckSum License Manager 1387 = Computer Aided Design Software Inc LM 1388 = Objective Solutions DataBase Cache 1389 = Document Manager 1390 = Storage Controller 1391 = Storage Access Server 1392 = Print Managericlpv-pm 1393 = Network Log Server 1394 = Network Log Client 1395 = PC Workstation Manager software 1396 = DVL Active Mail 1397 = Audio Active Mail 1398 = Video Active mail 1399 = Cadkey License Manager 1400 = Cadkey Tablet Daemon 1401 = Goldleaf License Manager 1402 = Prospero Resource Manager 1403 = Prospero Resource Manager 1404 = Infinite Graphics License Manager 1405 = IBM Remote Execution Starter 1406 = NetLabs License Manager 1407 = DBSA License Manager 1408 = Sophia license Manager 1409 = here License Manager 1410 = HIQ License Manager 1411 = Audiofileaf 1412 = Innosysinnosys 1413 = Innosys-Aclinnosys-ACL 1414 = IBM MQSeriesib m-mqseries 1415 = DBStardbstar 1416 = Novell LU6.2novell-lu6.2 1417 = Timbuktu Service 1 Port 1417 = Timbuktu Service 1 Port 1418 = Timbuktu Service 2 Port 1419 = Timbuktu Service 3 Port 1420 = Timbuktu Service 4 Port 1421 = Gandalf License Manager 1422 = Autodesk License Manager 1423 = Essbase Arbor Software 1424 = Hybrid Encryption Protocol 1425 = Zion Software License Manager 1426 = Satellite-data Acquisition System 1 1427 = mloadd monitoring tool 1428 = Informatik License Manager 1429 = Hypercom NMSnms 1430 = Hypercom TPDUtpdu 1431 = Reverse gosip transport 1432 =
Blueberry Software License Manager 1433 = Microsoft-SQL-Server 1434 = Microsoft-SQL-Monitor 1435 = IBM CISCibm-cics 1436 = Satellite-data Acquisition System 2 1437 = Tabulatabula 1438 = Eicon Security Agent / Server 1439 = Eicon X25 / SNA Gateway 1440 = Eicon Service Location Protocol 1441 = Cadis License Management 1442 = Cadis License Management 1443 = Integrated Engineering Software 1444 = Marcam License Management 1445 = Proxima License Manager 1446 = Optical Research Associates License Manager 1447 = Applied Parallel Research LM 1448 = openConnect License Manager 1449 = PEportpeport 1450 = Tandem Distributed Workbench Facility 1451 = IBM Information Management 1452 = GTE Government Systems License Man 1453 = Genie License Manager 1454 = interHDL License Manager 1454 = interHDL License Manager 1455 = ESL License Manager 1456 = DCAdca 1457 = Valisys License Manager 1458 = Nichols Research Corp. 1459 = Proshare Notebook Application 1460 = Proshare Notebook Application 1461 = IBM Wireless LAN 1462 = World License Manager 1463 = NucleusNuCleus 1464 = MSL License Manager 1465 = Pipes Platform 1466 = Ocean Software License Manager 1467 = CSDMBASEcsdmbase 1468 = CSDMcsdm 1469 = Active Analysis Limited License Manager 1470 = Universal Analytics 1471 = csdmbasecsdmbase 1472 = csdmcsdm 1473 = OpenMathopenmath 1474 = Telefindertelefinder 1475 = Taligent License Manager 1476 = clvm- cfgclvm-cfg 1477 = ms-sna-server 1478 = ms-sna-base 1479 = dberegisterdberegister 1480 = PacerForumpacerforum 1481 = AIRSairs 1482 = Miteksys License Manager 1483 = AFS License Manager 1484 = Confluent License Manager 1485 =
LANSourcelansource 1486 = nms_topo_serv 1487 = LocalInfoSrvr 1488 = DocStordocstor 1489 = dmdocbrokerdmdocbroker 1490 = insitu-confinsitu-conf 1491 = anynetgateway 1492 = stone-design-1 1493 = netmap_lmnetmap_lm 1494 = icaica 1495 = cvccvc 1496 = liberty-lmliberty-lm 1497 = rfx- lmrfx-lm 1498 = Watcom-SQLwatcom-sql 1499 = Federico Heinz Consultora 1500 = VLSI License Manager 1501 = Satellite-data Acquisition System 3 1502 = Shivashivadiscovery 1503 = Databeamimtc-mcs 1504 = EVB Software Engineering License Manager 1505 = Funk Software, Inc. 1524 = ingres 1525 = oracle 1525 = Prospero Directory Service non-priv 1526 = Prospero Data Access Prot non-priv 1527 = oracletlisrv 1529 = oraclecoauthor 1600 = issd 1651 = proshare conf audio 1652 = proshare conf video 1653 = proshare conf data 1654 = proshare CONF Request 1655 = Proshare conf Notify 1661 = NetView-aix-1NetView-AIX-1 1662 = NetView-AIX-2NetView-AIX-2 1663 = NetView-AIX-3NetView-AIX-3 1664 = NetView-AIX-4NetView-AIX- 4 1665 = NetView-AIX-5NetView-AIX-5 1666 = NetView-AIX-6NetView-AIX-6 1986 = Cisco License Man agement 1987 = cisco RSRB Priority 1 port 1988 = cisco RSRB Priority 2 port 1989 = cisco RSRB Priority 3 port 1989 = MHSnet systemmshnet 1990 = cisco STUN Priority 1 port 1991 = cisco STUN Priority 2 port 1992 = cisco STUN Priority 3 port 1992 = IPsendmsgipsendmsg 1993 = cisco SNMP TCP port 1994 = cisco serial tunnel port 1995 = cisco perf port 1996 = cisco Remote SRB port 1997 = cisco Gateway Discovery Protocol 1998 = cisco X.25 service (XOT) 1999 = cisco identification port 2009 = whosockami 2010 = pipe_server 2011 = raid 2012 = RAID-AC 2013 =
rad-am 2015 = raid-cs 2016 = bootserver 2017 = terminaldb 2018 = rellpack 2019 = about 2019 = xinupageserver 2020 = xinupageserver 2021 = xinuexpansion1 2021 = down 2022 = xinuexpansion2 2023 = xinuexpansion3 2023 = xinuexpansion4 2024 = xinuexpansion4 2025 = xribs 2026 = scrabble 2027 = shadowserver 2028 = submitserver 2039 = device2 2032 = blackboard 2033 = glogger 2034 = scoremgr 2035 = imsldoc 2038 = objectmanager 2040 = lam 2041 = interbase 2042 = isis 2043 = isis-bcast 2044 = primsl 2045 = cdfunc 2047 = dls 2048 = dls -monitor 2065 = Data Link Switch Read Port Number 2067 = Data Link Switch Write Port Number 2201 = Advanced Training System Program 2500 = Resource Tracking system server 2501 = Resource Tracking system client 2564 = HP 3000 NS / VT block mode telnet 2784 = world wide web - development 3049 = ccmail 3264 = ccmail, cc: mail / lotus 3333 = dec-notes 3984 = MAPPER network node manager 3985 = MAPPER TCP / IP server 3986 = MAPPER workstation server 3421 = Bull Apprise portmapper 3900 = Unidata UDT OS 4132 = NUTS daemonnuts_dem 4133 = nuts bootp server 4343 = unicalL 4444 = KRB 524 4672 = remote file access server 5002 = radio free ethernet 5010 = TelepathStarttelelpathstart 5011 = TelepathAttack 5050 = multimedia conference control tool 5145 = rmonitor_secure 5190 = aol, America-Online 5300 = HA cluster heartbeat 5301 = hacl-gs # HA cluster general services 5302 = HA cluster configuration 5303 = hacl-probe HA cluster probing 5305 = hacl-test 6000-6063 = x11 X Window System 6111 = sub-process HP SoftBench Sub-Process Control 6141 / = meta-corp Meta Corporation License Manager 6142 =
