Commonly used default port lists and features Chinese annotations
1 TCPMUX TCP Port Service Multiplexer Transfer Control Protocol Port Services Multi-Switch Selector
2 CompressNet Management Utility CompressNet Management Utility
3 CompressNet Compression Process Compression Process
5 RJE Remote Job Entry Remote Job Login
7 echo echo return
9 Discard Discard Discard
11 SYSTAT ACTIVE USERS online user
13 DayTime Daytime Time
17 qotd quote of the day daily reference
18 MSP Message Send Protocol Message Send Agreement
19 Chargen Character Generator Character Generator
20 FTP-DATA File Transfer [Default Data] File Transfer Protocol (Default Data Port)
21 FTP File Transfer [Control] File Transfer Protocol (Control)
22 SSH SSH Remote Login Protocol SSH Remote Login Protocol
23 Telnet Telnet Terminal Simulation Agreement
24? Any Private Mail System reserved for personal mail system
25 SMTP SIMPLE MAIL TRANSFER Simple Mail Send Agreement
27 NSW-Fe NSW User System FE NSW User System Field Engineer
29 MSG-ICP MSG ICP MSG ICP
31 MSG-Auth MSG Authentication MSG Verification
33 DSP Display Support Protocol Display Support Protocol
35? Any Private Printer Server reserved for personal printer services
37 Time Time Time
38 Rap Route Access Protocol Route Access Protocol
39 RLP Resource Location Protocol Resource Location Protocol
41 Graphics Graphics Graphics
42 Nameserver Wins Host Name Server WINS Host Name Service
43 NICName WHO IS "Nickname" WHO IS Service
44 MPM-Flags MPM Flags Protocol MPM (Message Processing Module) Sign Protocol
45 MPM Message Processing Module [RECV] Message Processing Module
46 MPM-SND MPM [Default Send] Message Process Module (Default Send Port)
47 NI-FTP NI FTP NI FTP
48 Auditd Digital Audit Daemon Digital Audio Background Service
49 Tacacs Login Host Protocol (TACACS) TACACS Login Host Protocol
50 RE-MAIL-CK Remote Mail Checking Protocol Remote Mail Check Protocol
51 la-maint IMP logical address maintenance IMP logical address maintenance
52 XNS-Time XNS Time Protocol Xerox Network Service System Time Agreement
53 Domain Domain Name Server Domain Name Server
54 XNS-CH XNS Clearinghouse Xerox Network Service System Bill Exchange 55 ISI-GL ISI Graphics Language ISI Graphic Language
56 XNS-Auth XNS Authentication Xerox Network Service System Verification
57? Any Private Terminal Access Reserved Personal Terminal Access
58 XNS-Mail XNS Mail Xerox Network Service System Mail
59? Any Private File Service Reserved personal file service
60? Unassigned undefined
61 NI-mail ni mail ni mail?
62 ACAS ACA Services Asynchronous Communication Adapter Service
63 WHOIS WHOIS WHOIS
64 COVIA Communications Integrator (CI) Communication Interface
65 TACACS-DS TACACS-Database Service TACACS Database Services
66 SQL * NET ORACLE SQL * NET ORACLE SQL * NET
67 Bootps Bootstrap Protocol Server Boot Protocol Service
68 Bootpc Bootstrap Protocol Client Boot Protocol Client
69 TFTP Trivial File Transfer Small File Transfer Protocol
70 GOPHER GOPHER Information Retrieval Agreement
71 NETRJS-1 Remote Job Service Remote Job Service
72 NETRJS-2 Remote Job Service Remote Job Services
73 NETRJS-3 Remote Job Service Remote Job Service
74 NETRJS-4 Remote Job Service Remote Job Service
75? Any Private Dial Out Service Reserved to your personal allocation service
76 DEOS Distributed External Object Store Distributed External Object Storage
77? Any Private RjE Service Reserved to your personal remote job input service
78 VETTCP VETTCP Fix TCP?
79 Finger Finger query remote host online user, etc.
80 HTTP World Wide Web HTTP Global Information Network Hypertext Transfer Protocol
81 Hosts2-NS Hosts2 Name Server Host2 Name Service
82 XFER XFER Utility Transfer Utility
83 mit-ml-dev mit ml Device Modular Intelligent Terminal ML Equipment
84 CTF Common Trace Facility Public Tracking Equipment
85 mit-ml-dev mit ml Device modular smart terminal ML device
86 MFCOBOL Micro Focus Cobol Micro Focus Cobol Programming Language
87? Any Private Terminal Link reserved to a personal terminal connection
88 Kerberos Kerberos Kerberros Security Authentication System
89 SU-MIT-TG SU / MIT TELNET GATEWAY SU / MIT Terminal Simulation Gateway
90 DNSIX DNSIX Securit Attribute Token Map DNSIx Security Properties Tags
91 MIT-DOV MIT DOVER SPOOLER MIT DOVER Vacation 92 NPP Network Printing Protocol Network Print Protocol
93 DCP Device Control Protocol Device Control Protocol
94 Objcall Tivoli Object Dispatcher Tivoli Object Scheduling
95 Supdup SuPDUP
96 DIXIE DIXIE PROTOCOL SPECification DIXIE Agreement Specification
97 SWIFT-RVF (SWIFT Remote Virtural File Protocol) Quick Remote Virtual File Agreement
98 TacNews Tac News TAC News Agreement
99 Metagram Metagram RELAY
100 NewAcct [Unauthorized USE]
101 = Nic Host Name Server
102 = ISO-TSAP
103 = Genesis Point-to-Point Trans Net
104 = Acr-Nema Digital Imag. & Comm. 300
105 = Mailbox Name Nameserver
106 = 3com-TSMUX3COM-TSMUX
107 = Remote Telnet Service
108 = SNA Gateway Access Server
109 = Post Office Protocol - Version 2
110 = Post Office Protocol - Version 3
111 = Sun RPC
112 = MCIDAS Data Transmission Protocol
113 = Authentication Service
114 = Audio News Multicast
115 = Simple File Transfer Protocol
116 = Ansa Rex Notify
117 = UUCP PATH Service
118 = SQL Servicesqlserv
119 = NetWork News Transfer Protocol
120 = cfdptktcfdptkt
121 = Encore Expedited Remote Pro.Call
122 = SMAKYNETSMAKYNET
123 = NetWork Time Protocol
124 = Ansa Rex Trader
125 = LOCUS PC-Interface Net Map Ser
126 = Unisys Unityary Login
127 = LOCUS PC-Interface Conn Server
128 = GSS X License Verification
129 = Password Generator Protocol
130 = Cisco Fnative
131 = Cisco TNATIVE
132 = Cisco Sysmaint
133 = Statistics Service
134 = INGRES-NET Service
135 = Location Service
136 = Profile Naming System
137 = NetBIOS Name Service
138 = NetBIOS DataGram Service
139 = Netbios Session Service
140 = EMFIS DATA Service
141 = EMFIS Control Service
142 = BRITTON-Lee IDM143 = Interim Mail Access Protocol V2
144 = Newsnews
145 = UAAC Protocoluaac
146 = ISO-IP0ISO-TP0
147 = ISO-IPISO-IP
148 = cronus-support
149 = AED 512 Emulation Service
150 = SQL-NetSQL-NET
151 = Hemshems
152 = Background File Transfer Program
153 = SGMPSGMP
154 = Netscnetsc-Prod
155 = Netscnetsc-dev
156 = SQL Service
157 = KNET / VM Command / Message Protocol
158 = PCMAIL Serverpcmail-SRV
159 = NSS-RoutingNSS-ROUTING
160 = SGMP-TRAPSSGMP-TRAPS
161 = SNMP
162 = SNMP TRAP
163 = CMIP / TCP Manager
164 = CMIP / TCP Agent
165 = Xeroxxns-Courier
166 = sirius systems
167 = Nampnamp
168 = RSVDRSVD
169 = Send
170 = NetWork PostScript
170 = NetWork PostScript
171 = NetWork Innovations Multiplex
172 = NetWork Innovations CL / 1
173 = XYPLEXXYPLEX-MUX
174 = Mailq
175 = VMNET
176 = Genrad-Muxgenrad-MUX
177 = x Display Manager Control Protocol
178 = NextStep Window Server
179 = Border Gateway Protocol
180 = Intergraphris
181 = Unifyunify
182 = Unisys Audit Sitp
183 = Ocbinderocbinder
184 = OCSERVEROCSERVER
185 = Remote-Kis
186 = Kis Protocolkis
187 = Application Communication Interface
188 = Plus Five's Mumps
189 = Queued File Transport
189 = Queued File Transport
190 = Gateway Access Control Protocol
190 = Gateway Access Control Protocol
191 = Prospero Directory Service
191 = Prospero Directory Service
192 = OSU NetWork Monitoring System
193 = SRMP, Spider Remote Monitoring Protocol
194 = IRC, Internet Relay Chat Protocl
195 = DNSIX NetWork Level Module Audit
196 = DNSIX Session MGT Module Audit Redir
197 = Directory Location Service
198 = Directory Location Service Monitor199 = SMUX
200 = IBM SYSTEM RESOURCE Controller
201 = At-RTMP AppleTalk Routing Maintenance
202 = AT-NBP AppleTalk Name Binding
203 = AT-3 AppleTalk Unused
204 = AppleTalk Echo
205 = AppleTalk Unused
206 = AppleTalk Zone Information
207 = AppleTalk Unused
208 = AppleTalk Unused
209 = Trivial Authenticated Mail Protocol
210 = ANSI Z39.50Z39.50
211 = TEXAS INSTRUMENTS 914C / g Terminal
212 = ATEXSSTRANET
213 = IPX
214 = VM PWSCSVMPWSCS
215 = INSIGNIA SOLUTIONS
216 = Access Technology License Server
217 = DBASE UNIX
218 = Netix Message Posting Protocol
219 = Unisys Arpsuarps
220 = INTERACTIVE MAIL Access Protocol V3
221 = Berkeley Rlogind with spx auth
222 = Berkeley RSHD with SPX Auth
223 = CERTIFICATE DISTRIBUTION CENTER
224 = reserved (224-241)
241 = Reserved (224-241)
242 = Unassigned #
243 = Survey Measurement
244 = Unassigned #
245 = LinkLink
246 = Display Systems Protocol
247-255 Reserved
256-343 unassigned
344 = Prospero Data Access Protocol
345 = Perf analyysis Workbench
346 = Zebra ServerzServ
347 = Fatmen ServerfatServ
348 = CABLETRON Management Protocol
349-370 Unassigned
371 = ClearCaseClearcase
372 = UNIX ListServulistServ
373 = Legent Corporation
374 = Legent Corporation
375 = hasslehassle
376 = Amiga Envoy Network Inquiry PROTO
377 = NEC CORPORATION
378 = NEC CORPORATION
379 = TIA / EIA / IS-99 MODEM Client
380 = TIA / EIA / IS-99 MODEM Server
381 = HP Performance Data Collector
382 = HP Performance Data Managed Node
383 = HP Performance Data Alarm Manager
384 = a Remote Network Server System
385 = IBM Application
386 = Asa Message Router Object DEF.387 = AppleTalk Update-based Routing Pro.
388 = Unidata LDM VERSION 4
389 = Lightweight Directory Access Protocol
390 = uisuis
391 = Synoptics SNMP RELAY Port
392 = Synoptics Port Broker Port
393 = Data Interpretation System
394 = EMBL Nucleic Data Transfer
395 = NetScout Control Protocol
396 = Novell NetWare Over IP
397 = MULTI protocol trans. Net.
398 = Kryptolankryptolan
399 = unassigned #
400 = Workstation Solutions
401 = Uninterruptible Power Supply
402 = Genie Protocol
403 = DecapDecap
404 = ncednced
405 = nCldNCLD
406 = INTERACTIVE MAIL Support Protocol
407 = TimbuktutImbuktu
408 = Prospero Resource Manager sys.
409 = Prospero Resource Manager Node Man.
410 = DECLADEBUG Remote Debug Protocol
411 = Remote MT Protocol
412 = TRAP Convention Port
413 = SMSPSMSP
414 = INFOSEEKINFOSEEK
415 = BNETBNET
416 = SilverPlattersilverPlatter
417 = ONMUXONMUX
418 = Hyper-ghyper-g
419 = Arielariel1
420 = SMPTESMPTE
421 = Arielariel2
422 = Arielariel3
423 = IBM Operations Planning and Control Start
424 = IBM Operations Planning and Control TRACK
425 = ICADICAD-EL
426 = smartsdpsmartsdp
427 = Server Location
429 = OCS_AMU
430 = utsdutmpsd
431 = utmpcdutmpcd
432 = IASDIASD
433 = NNSPNNSP
434 = MobileIP-Agent
435 = mobilip-mn
436 = DNA-CMLDNA-CML
437 = comscmcomscm
439 = DASP, Thomas Obermair
440 = SGCPSGCP
441 = decvms-sysmgtdecvms-sysmgt
442 = CVC_HostDCVC_HOSTD
443 = https
444 = SIMPLE NetWork Paging Protocol
445 = Microsoft-DS
446 = DDM-RDBDDM-RDB
447 = DDM-RFMDDM-DFM
448 = DDM-BYTEDDM-BYTE
449 = as server mapper450 = TSERVERTSERVER
512 = EXEC, Remote Process Execution
513 = login, Remote Login
514 = cmd, Exec with auto auth.
514 = syslog
515 = Printer Spooler
516 = unassigned
517 = Talk
519 = Unixtime
520 = Extended File Name Server
521 = unassigned
522 = unassigned
523 = Unassigned
524 = unassigned
526 = newdate
530 = RPC Courier
531 = Chatconference
532 = readnewsnetNetNews
533 = for EMERGENCY BROADCASTS
539 = Apertus Technologies Load Determination
540 = uucp
541 = uucp-rlogin
542 = unassigned
543 = klogin
544 = kshell
545 = unassigned
546 = unassigned
547 = unassigned
548 = unassigned
549 = unassigned
550 = New-WHO
551 = unassigned
552 = unassigned
553 = unassigned
554 = unassigned
555 = DSF
556 = Remotefs
557-559 = RMonitor
560 = rmonitord
561 = DMONITOR
562 = CHCMD
563 = Unassigned
564 = Plan 9 File Service
565 = WhoAmi
566-569 unassigned
570 = DEMONMETER
571 = udemonmeter
572-599 Unassigned IPC Server
600 = Sun IPC Server
607 = NQS
606 = CRAY UNIFIED RESOURCE MANAGER
608 = sender-initiated / unsolicited file transfer
609 = NPMP-TRAPNPMP-TRAP
610 = npmp-localnpmpmpmp-local
611 = NPMP-GuinPmpMP-GUI
634 = GINADGINAD
666 = DOM ID Software
704 = Errlog COPY / Server Daemon
709 = entrustManager
729 = IBM NetView DM / 6000 Server / Client
730 = IBM NetView DM / 6000 SEND / TCP
731 = IBM NetView DM / 6000 Receive / TCP
741 = NetGwNetGW
742 = NetWork based Rev. Cont. Sys.
744 = flexible license Manager
747 = Fujitsu Device Control
748 = Russell Info Sci Calendar Manager
749 = Kerberos Administration
751 = PUMP
752 = qrh
754 = send758 = nlogin
759 = con
760 = ns
762 = quotad
763 = CycleServ
765 = Webster
767 = PhonePhonebook
769 = VID
771 = RTIP
772 = CycleServ2
774 = ACMAINT_DBD
775 = ACMAINT_TRANSD
780 = WPGS
786 = ConcertConcert
800 = mdbs_daemon
996 = Central Point Software
997 = Maitrd
999 = PuProuter
1023 = Reserved
1024 = Reserved
1025 = NetWork BlackJack
1030 = BBN IAD
1031 = BBN IAD
1032 = BBN IAD
1067 = Installation Bootstrap Proto. Serv.
1068 = Installation Bootstrap Proto. CLI.
1080 = SOCKS
1083 = Anasoft license Manager
1084 = Anasoft license Manager
1155 = NetWork File Access
1222 = SNI R & D NetWork
1248 = Hermes
1346 = Alta Analytics License Manager
1347 = Multi Media Conferencing
1347 = Multi Media Conferencing
1348 = Multi Media Conferencing
1349 = Registration Network Protocol
1350 = Registration Network Protocol
1351 = Digital Tool Works (MIT)
1352 = / Lotus Notelotusnote
1353 = Relief Consulting
1354 = Rightbrain Software
1355 = INTUTIVE EDGE
1356 = Cuillamartin Company
1357 = Electronic Pegboard
1358 = connlcliconnlcli
1359 = ftsrvftsrv
1360 = mimermimimer
1361 = LINX
1362 = Timefliestimeflies
1363 = Network DataMover Requester
1364 = NetWork DataMover Server
1365 = NetWork Software Associates
1366 = Novell NetWare Comm Service Platform
1367 = DCSDCS
1368 = ScreencastScreencast
1369 = GlobalView to Unix Shell
1370 = UNIX Shell to GlobalView
1371 = Fujitsu config protocol
1372 = Fujitsu Config Protocol
1373 = chromagrafxchromagrafx
1374 = EPI Software Systems
1375 = BYTEXBYTEX
1376 = IBM Person to Person Software
1377 = Cichlid License Manager1378 = Elan license Manager
1379 = INTEGRITY SOLUTIONS
1380 = Telesis Network license Manager
1381 = Apple Network License Manager
1382 = UDT_OS
1383 = GW Hannaway Network license Manager
1384 = Objective Solutions license Manager
1385 = Atex Publishing License Manager
1386 = Checksum License Manager
1387 = Computer Aided Design Software Inc LM
1388 = Objective Solutions Database Cache
1389 = Document Manager
1390 = Storage Controller
1391 = Storage Access Server
1392 = Print ManagericLPV-PM
1393 = NetWork log Server
1394 = NetWork log client
1395 = PC Workstation Manager Software
1396 = DVL ACTIVE MAIL
1397 = Audio Active Mail
1398 = Video Active Mail
1399 = Cadkey License Manager
1400 = CADKEY TABLET DAEMON
1401 = Goldleaf License Manager
1402 = Prospero Resource Manager
1403 = Prospero Resource Manager
1404 = Infinite Graphics License Manager
1405 = IBM Remote EXECUTION STARTER
1406 = NetLabs license Manager
1407 = DBSA License Manager
1408 = Sophia License Manager
1409 = Here License Manager
1410 = HIQ LICENSE Manager
1411 = Audiofileaf
1412 = InnosysInnosys
1413 = Innosys-Aclinnosys-ACL
1414 = IBM MQSerIBM-MQSeries
1415 = dbstardbstar
1416 = novell lu6.2novell-lu6.2
1417 = TIMBUKTU Service 1 Port
1417 = TIMBUKTU Service 1 Port
1418 = Timbuktu Service 2 Port
1419 = Timbuktu Service 3 Port
1420 = Timbuktu Service 4 Port
1421 = Gandalf License Manager
1422 = Autodesk License Manager
1423 = EssBase Arbor Software
1424 = Hybrid Encryption Protocol
1425 = Zion Software License Manager
1426 = Satellite-Data Acquisition System 1
1427 = mloadd monitoring Tool1428 = Informatik License Manager
1429 = Hypercom NMSNMS
1430 = Hypercom TPDUTPDU
1431 = Reverse Gosip Transport
1432 = Blueberry Software License Manager
1433 = Microsoft-SQL-Server
1434 = Microsoft-SQL-MONITOR
1435 = IBM CISCIBM-CICS
1436 = Satellite-Data Acquisition System 2
1437 = Tabulatabula
1438 = Eicon Security Agent / Server
1439 = EICON X25 / SNA GATEWAY
1440 = Eicon Service Location Protocol
1441 = CADIS license Management
1442 = CADIS license management
1443 = INTEGRATED ENGINEERING SOFTWARE
1444 = Marcam License Management
1445 = Proxima license Manager
1446 = Optical Research Associates License Manager
1447 = Applied Parallel Research LM
1448 = OpenConnect License Manager
1449 = PeportPeport
1450 = Tandem Distributed Workbench Facility
1451 = IBM INFORMATION management MANAGEMENT
1452 = GTE GOVERNMENT SYSTEMS license Man
1453 = Genie License Manager
1454 = InterhDL License Manager
1454 = InterhDL License Manager
1455 = ESL LICENSE MANAGER
1456 = DCADCA
1457 = ValiSys license Manager
1458 = Nichols Research Corp.
1459 = Proshare Notebook Application
1460 = ProShare Notebook Application
1461 = IBM Wireless Lan
1462 = World License Manager
1463 = NucleusNucleus
1464 = MSL License Manager
1465 = Pipes Platform
1466 = Ocean Software License Manager
1467 = CSDMBaseCSDMBase
1468 = CSDMCSDM
1469 = ACTIVE ANALYSIS LIMITED LICENSE MANAGER
1470 = Universal Analytics
1471 = CSDMBaseCSDMBase
1472 = CSDMCSDM
1473 = OpenMathOpenMathMath
1474 = TelefindertElefinder
1475 = Taligent License Manager
1476 = CLVM-CFGCLVM-CFG
1477 = MS-SNA-Server
1478 = MS-SNA-BASE
1479 = DberegisterDberegister
1480 = PACERFORUMPACERFORUM
1481 = Airsairs
1482 = MITEKSYS LICENSE Manager
1483 = AFS license Manager
1484 = Confluent License Manager
1485 = LansourceLansource
1486 = NMS_TOPO_SERV
1487 = Localinfosrvr
1488 = DOCSTORDOCSTOR
1489 = DMDocBrokerdmdocbroker
1490 = INSITU-Confinsitu-Conf
1491 = AnynetGateway
1492 = stone-design-1
1493 = netmap_lmnetmap_lm
1494 = ICAICA
1495 = CVCCVC
1496 = Liberty-LMLIBERTY-LM
1497 = RFX-LMRFX-LM
1498 = Watcom-Sqlwatcom-SQL
1499 = Federico Heinz Consultora
1500 = VLSI License Manager
1501 = Satellite-Data Acquisition System 3
1502 = Shivashivadiscovery
1503 = DATABEAMIMTC-MCS
1504 = EVB Software Engineering License Manager
1505 = funk Software, Inc.
1524 = ingres
1525 = Oracle
1525 = Prospero Directory Service Non-Priv
1526 = Prospero Data Access Prot Non-Priv
1527 = ORACleTLISRV
1529 = Oraclecoauthor
1600 = ISSD
1651 = Proshare conf Audio
1652 = ProShare conf video
1653 = Proshare conf Data
1654 = Proshare conf renest
1655 = ProShare conf Notify
1661 = NetView-AIX-1NetView-AIX-1
1662 = NetView-AIX-2NetView-AIX-2
1663 = NETVIEW-AIX-3NetView-AIX-3
1664 = NETVIEW-AIX-4NetView-AIX-4
1665 = NETVIEW-AIX-5NetView-AIX-5
1666 = NetView-AIX-6NetView-AIX-6
1986 = Cisco License Management
1987 = Cisco Rsrb Priority 1 Port
1988 = Cisco Rsrb Priority 2 Port
1989 = Cisco Rsrb Priority 3 port
1989 = MHSNET SystemMshnet
1990 = Cisco Stun Priority 1 Port
1991 = Cisco Stun Priority 2 Port
1992 = Cisco Stun Priority 3 Port
1992 = ipsendmsgipsendmsg
1993 = Cisco SNMP TCP Port
1994 = Cisco Serial Tunnel Port
1995 = cisco perf port1996 = Cisco Remote SRB Port
1997 = Cisco Gateway Discovery Protocol
1998 = Cisco X.25 Service (XOT)
1999 = Cisco IDENTIFICATION Port
2009 = WhoscodaMi
2010 = PIPE_SERVER
2011 = RAID
2012 = RAID-AC
2013 = RAD-AM
2015 = RAID-CS
2016 = bootserver
2017 = TerminalDB
2018 = RelPack
2019 = About
2019 = xinupageserver
2020 = xinupageserver
2021 = xinuexpansion1
2021 = DOWN
2022 = xinuexpansion2
2023 = xinuexpansion3
2023 = xinuexpansion4
2024 = xinuexpansion4
2025 = XRIBS
2026 = Scrabble
2027 = ShadowServer
2028 = SUBMITSERVER
2039 = Device2
2032 = Blackboard
2033 = Glogger
2034 = scoremgr
2035 = IMSLDOC
2038 = ObjectManager
2040 = LAM
2041 = Interbase
2042 = ISIS
2043 = ISIS-BCAST
2044 = Primsl
2045 = CDFUNC
2047 = DLS
2048 = DLS-MONITOR
2065 = Data Link Switch Read Port Number
2067 = Data Link Switch Write Port Number
2201 = Advanced Training System Program
2500 = Resource TRACKING SYSTEM Server
2501 = Resource TRACKING SYSTEM Client
2564 = HP 3000 NS / VT Block Mode Telnet
2784 = World Wide Web - Developments
3049 = Ccmail
3264 = Ccmail, CC: Mail / Lotus
3333 = DEC-Notes
3984 = Mapper Network Node Manager
3985 = Mapper TCP / IP Server
3986 = Mapper Workstation Server
3421 = BULL APPRISE Portmapper
3900 = Unidata UDT OS
4132 = nuts daemnuts_dem
4133 = NUTS BOOTP SERVER
4343 = unicarl
4444 = KRB524
4672 = Remote File Access Server
5002 = Radio Free Ethernet
5010 = TelepathStarttelelPathStart
5011 = TELEPATHACK
5050 = MultiMedia Conference Control Tool
5145 = rmonitor_secure
5190 = aol, America-online
5300 = ha cluster heartbeat5301 = HACL-GS # ha cluster general services
5302 = ha cluster configuration
5303 = HACL-PROBE HA Cluster Probing
5305 = HACL-TEST
6000-6063 = x11 x window system
6111 = Sub-Process HP SoftBench Sub-Process Control
6141 / = Meta-Corp Meta Corporation License Manager
6142 = Aspentec-LM Aspen Technology License Manager
6143 = WaterShed-LM Watershed License Manager
6144 = Statsci1-LM Statsci License Manager - 1
6145 = Statsci2-LM Statsci License Manager - 2
6146 = LONEWOLF-LM LONE WOLF SYSTEMS LICENSE Manager
6147 = Montage-LM Montage License Manager
7000 = AFS3-FILESERVER FILE Server Itself
7000 = WebLogic
7001 = AFS3-CALLBACK CALLBACKS to Cache Managers
7002 = AFS3-PRSERVER USERS & GROUROUPS DATABASE
7003 = AFS3-VLSERVER VOLUME LOCATION DATABASE
7004 = AFS3-Kaserver AFS / KERBEROS Authentication Service
7005 = AFS3-VOLSER VOLUME MANAGMENT Server
7006 = AFS3-ERRORS ERROR Interpretation Service
7007 = AFS3-BOS BASIC OVERSEER Process
7008 = AFS3-UPDATE Server-to-Server Updater
7009 = AFS3-RMTSYS Remote Cache Manager Service
7010 = UPS-ONLINE ONLINET Uninterruptable Power Supplies
7100 = x font service
7200 = FODMS FLIP
8010 = Wingate
8080 = Tomcat
8181 = iMail
9535 = Man
Below is a row of the default ports of some known Trojan programs, you can roughly judge the situation of your network in accordance with port conditions (using #netstat -an | more) according to the port conditions opened in the operating system. :
Port 21 - Back Construction, Blade Runner, Doly Trojan, Fore, FTP Trojan, Invisible FTP, Larva,
Webex, WinCrash
Port 23 - TINY TELNET Server (= TTS)
Port 25 - Ajan, Antigen, Email Password Sender, Haebu Coceda (= Naebi), Happy 99, Kuang2,
Promail Trojan, Shtrilitz, Stealth, Tapiras, Terminator, WinPC, Winsport 31 - Agent 31, Hackers Paradise, Masters Paradise
Port 41 - DeepThroat
Port 59 - DMSETUP
Port 79 - Firehotcker
Port 80 - EXECUTOR, RINGZERO
Port 99 - Hidden Port
Port 110 - Promail Trojan
Port 113 - Kazimas
Port 119 - Happy 99
Port 121 - Jammerkillah
Port 421 - TCP Wrappers
Port 456 - HACKERS PARADISE
Port 531 - Rasmin
Port 555 - Ini-Killer, Netadmin, Phase Zero, Stealth Spy
Port 666 - Attack FTP, Back Construction, Cain & Abel, Satanz Backdoor, Serveu, Shadow Phyre
Port 911 - Dark Shadow
Port 999 - Deepthroat, Winsatan
Port 1001 - Silencer, Webex
Port 1010 - Doly Trojan
Port 1011 - Doly Trojan
Port 1012 - Doly Trojan
Port 1015 - Doly Trojan
Port 1024 - Netspy
Port 1042 - Black
Port 1045 - Rasmin
Port 1090 - Xtreme
Port 1170 - Psyber Street Server, Streaming Audio Trojan, Voice
Port 1234 - Ultors Trojan
Port 1243 - Backdoor-G, Subseven, Subseven apocalypse
Port 1245 - Voodoo Doll
Port 1269 - MAVERICKS MATRIX
Port 1349 (UDP) - BO DLL
Port 1492 - ftp99cmp
Port 1509 - psyber streaming server
Port 1600 - Shivka-Burka
Port 1807 - SpySender
Port 1981 - shockrave
Port 1999 - Backdoor
Port 1999 - Transscout
Port 2000 - TransScout
Port 2001 - Transscout
Port 2001 - Trojan Cow
Port 2002 - Transscout
Port 2003 - Transscout
Port 2004 - Transscout
Port 2005 - Transscout
Port 2023 - RIPPER
Port 2115 - BUGS
Port 2140 - Deep Throat, THE INVAOR
Port 2155 - Illusion MAILER
Port 2283 - HVL Rat5
Port 2565 - Striker
Port 2583 - WinCrash
Port 2600 - Digital Rootbeer
Port 2801 - Phineas Phucker
Port 2989 (UDP) - RAT
Port 3024 - WinCrash
Port 3128 - Ringzero
Port 3129 - MASTERS PARADISE
Port 3150 - Deep Throat, THE INVASORPORT 3459 - Eclipse 2000
Port 3700 - Portal of Doom
Port 3791 - eclypse
Port 3801 (UDP) - Eclypse
Port 4092 - WinCrash
Port 4321 - BOBO
Port 4567 - File Nail
Port 4590 - ICQTROJAN
Port 5000 - Bubbel, Back Door Setup, Sockets de Troie
Port 5001 - Back Door Setup, Sockets de Troie
Port 5011 - One of the last Trojans (OOTLT)
Port 5031 - Netmetro
Port 5321 - Firehotcker
Port 5400 - Blade Runner, Back Construction
Port 5401 - Blade Runner, Back Construction
Port 5402 - Blade Runner, Back Construction
Port 5550 - XTCP
Port 5512 - Illusion MAILER
Port 5555 - Serveme
Port 5556 - Bo Facil
Port 5557 - Bo Facil
Port 5569 - ROBO-HACK
Port 5742 - WinCrash
Port 6400 - The Thing
Port 6669 - Vampyre
Port 6670 - Deepthroat
Port 6771 - Deepthroat
Port 6776 - Backdoor-g, Subseven
Port 6912 - Shit Heep (NOT Port 69123!)
Port 6939 - IndocTrination
Port 6969 - Gatecrasher, Priority, IRC 3
Port 6970 - GATCRASHER
Port 7000 - Remote Grab, Kazimas
Port 7300 - NetMonitor
Port 7301 - NetMonitor
Port 7306 - NetMonitor
Port 7307 - NetMonitor
Port 7308 - NetMonitor
Port 7789 - Back Door Setup, Ickiller
Port 8080 - Ringzero
Port 9400 - Incommman
Port 9872 - Portal of Doom
Port 9873 - Portal of Doom
Port 9874 - Portal of Doom
Port 9875 - Portal of Doom
Port 9876 - Cyber Attacker
Port 9878 - Transscout
Port 9989 - Ini-Killer
Port 10067 (UDP) - Portal of Doom
Port 10101 - BRAINSPY
Port 10167 (UDP) - Portal of Doom
Port 10520 - ACID Shivers
Port 10607 - COMA
Port 11000 - SENNA SPY
Port 11223 - Progenic Trojan
Port 12076 - gjamer
Port 12223 - HACK? 9 Keylogger
Port 12345 - Gabanbus, Netbus, Pie Bill Gates, X-Bill
Port 12346 - Gabanbus, Netbus, X-BILL
Port 12361 - WHACK-A-MOLEPORT 12362 - WHACK-A-MOLE
Port 12631 - WHACKJOB
Port 13000 - SENNA SPY
Port 16969 - Priority
Port 17300 - Kuang2 The Virus
Port 20000 - Millennium
Port 20001 - Millennium
Port 20034 - Netbus 2 Pro
Port 20203 - Logged
Port 21544 - Girlfriend
Port 22222 - Prosiak
Port 23456 - Evil FTP, UGLY FTP, WHACK JOB
Port 23476 - Donald Dick
Port 23477 - Donald Dick
Port 26274 (UDP) - Delta Source
Port 29891 (UDP) - The UnExplained
Port 30029 - AOL Trojan
Port 30100 - NetSphere
Port 30101 - NetSphere
Port 30102 - NetSphere
Port 30303 - Sockets de Troi
Port 30999 - Kuang2
Port 31336 - Bo WHACK
Port 31337 - Baron Night, Bo Client, Bo2, Bo Facil
Portfire, Back Orific, Deepbo, PORT 31337 (UDP)
Port 31338 - Netspy DK
Port 31338 (UDP) - Back Orific, Deepbo
Port 31339 - Netspy DK
Port 31666 - Bowhack
Port 31785 - HACK 玜玊 ACK
Port 31787 - HACK 玜玊 ACK
Port 31788 - HACK 玜玊 ACK
Port 31789 (UDP) - HACK 玜玊 ACK
Port 31791 (UDP) - HACK 玜玊 ACK
Port 31792 - HACK 玜玊 ACK
Port 33333 - Prosiak
Port 33911 - Spirit 2001A
Port 34324 - Biggluck, TN
Port 40412 - the spy
Port 40421 - Agent 40421, Masters Paradise
Port 40422 - MASTERS PARADISE
Port 40423 - MASTERS PARADISE
Port 40426 - MASTERS PARADISE
Port 47262 (UDP) - Delta Source
Port 50505 - Sockets de Troie
Port 50766 - Fore, Schwindler
Port 53001 - Remote Windows SHUTDOWN
Port 54320 - Back Orifice 2000
Port 54321 - School Bus
Port 54321 (UDP) - Back Orific 2000
Port 60000 - Deep Throat
Port 61466 - Telecommando
Port 65000 - Devil
