| 1 |
Service Multiplexer (TCP) |
| 2 |
Management Utility (TCP/UDP), Death (TCP) |
| 3 |
Compression Process (TCP/UDP) |
| 5 |
Remote Job Entry (TCP/UDP) |
| 7 |
Echo (TCP/UDP) |
| 11 |
Systat Active Users (TCP/UDP) |
| 13 |
Daytime (TCP/UDP) |
| 17 |
Quote of the Day (TCP/UDP) |
| 18 |
Message Send Protocol (TCP/UDP) |
| 19 |
Character Generator (TCP/UDP) |
| 20 |
File Transfer Protocol (FTP) [Default Data] (TCP/UDP) |
| 21 |
File Transfer Protocol (FTP) [Control] (TCP/UDP), Back
Construction, Blade Runner, Doly Trojan, Fore, 7tp trojan, Invisible FTP,
Larva, MBT, Motiv, Net Administrator, Senna Spy FTP Server, Traitor, WebEx,
WinCrash (TCP) |
| 22 |
SSH Remote Login Protocol (TCP/UDP) |
| 23 |
Telnet (TCP/UDP), Prosiak (telnet), Tiny Telnet Server,
Truva Atl, Telnet, Wingate (TCP) |
| 25 |
Aji, Antigen, Email Password Sender, Email Worms, Gip,
Happy99/Ska, Haebu Coceda, Loveletter, Kuang2, Magic Horse, Moscow Email
Trojan, Neabi, ProMail trojan, NewApt, Shtrilitz, Stealth, Taripas, Terminator
(TCP), Simple Mail Transfer Protocol (SMTP) (TCP/UDP) |
| 27 |
NSW User System FE (TCP/UDP) |
| 29 |
MSG ICP (TCP/UDP) |
| 31 |
MSG Authentication (TCP/UDP), Agent 31, Hackers Paradise,
Masters Paradise, Masters Paradise.80 (TCP) |
| 33 |
Display SupProtocol (TCP/UDP) |
| 37 |
Time (TCP/UDP) |
| 38 |
Route Access Protocol (TCP/UDP) |
| 39 |
Resource Location Protocol (TCP/UDP) |
| 41 |
Graphics (TCP/UDP), DeepThroat (TCP) |
| 42 |
Host Name Server (TCP/UDP) |
| 43 |
Whois (TCP/UDP) |
| 44 |
MPM FLAGS Protocol (TCP/UDP) |
| 45 |
Message Processing Module [recv] (TCP/UDP) |
| 46 |
MPM [default send] (TCP/UDP) |
| 47 |
NI FTP (TCP/UDP) |
| 48 |
Digital Audit Daemon (TCP/UDP), DRAT (TCP) |
| 49 |
Login Host Protocol (TACACS) (TCP/UDP) |
| 50 |
Remote Mail Checking Protocol (TCP/UDP), DRAT (TCP) |
| 51 |
IMP Logical Address Maintenance (TCP/UDP) |
| 52 |
XNS Time Protocol (TCP/UDP) |
| 53 |
DNS (Domain Name Server) (TCP/UDP), Bonk (DoS) (TCP) |
| 54 |
XNS Clearinghouse (TCP/UDP) |
| 55 |
ISI Graphics Language (TCP/UDP) |
| 56 |
XNS Authentication (TCP/UDP) |
| 58 |
XNS Mail (TCP/UDP), DMSetup (TCP) |
| 59 |
DMSetup (TCP) |
| 61 |
NI Mail (TCP/UDP) |
| 62 |
ACA Services (TCP/UDP) |
| 63 |
whois++ (TCP/UDP) |
| 64 |
Communications Integrator (CI) (TCP/UDP) |
| 65 |
TACACS-Database Service (TCP/UDP) |
| 66 |
Oracle SQL*NET (TCP/UDP) |
| 67 |
Bootstrap Protocol Server (TCP/UDP) |
| 68 |
Bootstrap Protocol Client (TCP/UDP) |
| 69 |
Trivial File Transfer (TCP/UDP) |
| 70 |
Gopher (TCP/UDP) |
| 71 |
Remote Job Service (TCP/UDP) |
| 72 |
Remote Job Service (TCP/UDP) |
| 73 |
Remote Job Service (TCP/UDP) |
| 74 |
Remote Job Service (TCP/UDP) |
| 76 |
Distributed External Object Store (TCP/UDP) |
| 78 |
vetTCP (TCP/UDP) |
| 79 |
Finger (TCP/UDP), Firehotcker (TCP) |
| 80 |
Back End, Executor, Hooker, RingZero (TCP), Webserver
(IIS, Apache, etc.) (TCP/UDP) |
| 81 |
HOSTS2 Name Server (TCP/UDP) |
| 82 |
XFER Utility (TCP/UDP) |
| 83 |
MIT ML Device (TCP/UDP) |
| 84 |
Common Trace Facility (TCP/UDP) |
| 85 |
MIT ML Device (TCP/UDP) |
| 86 |
Micro Focus Cobol (TCP/UDP) |
| 88 |
Kerberos (TCP/UDP) |
| 89 |
SU | MIT Telnet Gateway (TCP/UDP) |
| 90 |
DNSIX Securit Attribute Token Map (TCP/UDP) |
| 91 |
MIT Dover Spooler (TCP/UDP) |
| 92 |
Network Printing Protocol (TCP/UDP) |
| 93 |
Device Control Protocol (TCP/UDP) |
| 94 |
Tivoli Object Dispatcher (TCP/UDP) |
| 95 |
SUPDUP (TCP/UDP) |
| 96 |
DIXIE Protocol Specification (TCP/UDP) |
| 97 |
Swift Remote Virtual File Protocol (TCP/UDP) |
| 98 |
TAC News (TCP/UDP) |
| 99 |
Metagram Relay (TCP/UDP), Hidden (TCP) |
| 101 |
NIC Host Name Server (TCP/UDP) |
| 102 |
ISO-TSAP Class 0 (TCP/UDP) |
| 103 |
Genesis Point-to-Point Trans Net (TCP/UDP) |
| 104 |
ACR-NEMA Digital Imag. & Comm. 300 (TCP/UDP) |
| 105 |
CCSO name server protocol, Mailbox Name Nameserver
(TCP/UDP) |
| 106 |
3COM-TSMUX (TCP/UDP) |
| 107 |
Remote Telnet Service (TCP/UDP) |
| 108 |
SNA Gateway Access Server (TCP/UDP) |
| 109 |
Post Office Protocol - Version 2 (POP2) (TCP/UDP) |
| 110 |
Post Office Protocol - Version 3 (POP3) (TCP/UDP), ProMail
trojan (TCP) |
| 111 |
SUN Remote Procedure Call (TCP/UDP) |
| 112 |
McIDAS Data Transmission Protocol (TCP/UDP) |
| 113 |
Authentication Service, Ident (TCP/UDP), Invisible Identd
Deamon, Kazimas (TCP) |
| 114 |
Audio News Multicast (TCP/UDP) |
| 115 |
Simple File Transfer Protocol (TCP/UDP) |
| 116 |
ANSA REX Notify (TCP/UDP) |
| 117 |
UUCP Path Service (TCP/UDP) |
| 118 |
SQL Services (TCP/UDP), Infector 1.4.2 (UDP) |
| 119 |
Happy99/Ska (TCP), Network News Transfer Protocol (NNTP)
(TCP/UDP) |
| 120 |
CFDPTKT (TCP/UDP) |
| 121 |
Encore Expedited Remote Pro.Call (TCP/UDP), JammerKillah,
BO jammerkilla (TCP) |
| 122 |
SMAKYNET (TCP/UDP) |
| 123 |
Network Time Protocol (NTP) (TCP/UDP), Net Controller
(TCP) |
| 124 |
ANSA REX Trader (TCP/UDP) |
| 125 |
Locus PC-Interface Net Map Ser (TCP/UDP) |
| 126 |
Unisys Unitary Login (TCP/UDP) |
| 127 |
Locus PC-Interface Conn Server (TCP/UDP) |
| 128 |
GSS X License Verification (TCP/UDP) |
| 129 |
Password Generator Protocol (TCP/UDP) |
| 130 |
cisco FNATIVE (TCP/UDP) |
| 131 |
cisco TNATIVE (TCP/UDP) |
| 132 |
cisco SYSMAINT (TCP/UDP) |
| 133 |
Statistics Service (TCP/UDP), Farnaz (TCP) |
| 134 |
INGRES-NET Service (TCP/UDP) |
| 135 |
DCE endpoint resolution (TCP/UDP) |
| 136 |
PROFILER Naming Server (TCP/UDP) |
| 137 |
NETBIOS Name Service (MS Windows) (TCP/UDP) |
| 138 |
NETBIOS Datagram Service (MS Windows) (TCP/UDP) |
| 139 |
NETBIOS Session Service (MS Windows) (TCP/UDP) |
| 140 |
EMFIS Data Service (TCP/UDP) |
| 141 |
EMFIS Control Service (TCP/UDP) |
| 142 |
Britton-Lee IDM (TCP/UDP) |
| 143 |
Internet Message Access Protocol (TCP/UDP) |
| 144 |
NewS (TCP/UDP) |
| 145 |
UAAC Protocol (TCP/UDP) |
| 146 |
ISO-IP0 (TCP/UDP), Infector 1.x (TCP) |
| 147 |
ISO-IP (TCP/UDP) |
| 148 |
Jargon (TCP/UDP) |
| 149 |
AED 512 Emulation Service (TCP/UDP) |
| 150 |
SQL-NET (TCP/UDP) |
| 151 |
HEMS (TCP/UDP) |
| 152 |
Background File Transfer Program (TCP/UDP) |
| 153 |
SGMP (TCP/UDP) |
| 154 |
NETSC (TCP/UDP) |
| 155 |
NETSC (TCP/UDP) |
| 156 |
SQL Service (TCP/UDP) |
| 157 |
KNET | VM Command | Message Protocol (TCP/UDP) |
| 158 |
PCMail Server (TCP/UDP) |
| 159 |
NSS-Routing (TCP/UDP) |
| 160 |
SGMP-TRAPS (TCP/UDP) |
| 161 |
SNMP (TCP/UDP) |
| 162 |
SNMPTRAP (TCP/UDP) |
| 163 |
CMIP | TCP Manager (TCP/UDP) |
| 164 |
CMIP | TCP Agent (TCP/UDP) |
| 165 |
Xerox (TCP/UDP) |
| 166 |
Sirius Systems (TCP/UDP) |
| 167 |
NAMP (TCP/UDP) |
| 168 |
RSVD (TCP/UDP) |
| 169 |
SEND (TCP/UDP) |
| 170 |
Network PostScript (TCP/UDP), A-Trojan (TCP) |
| 171 |
Network Innovations Multiplex (TCP/UDP) |
| 172 |
Network Innovations CL | 1 (TCP/UDP) |
| 173 |
Xyplex (TCP/UDP) |
| 174 |
MAILQ (TCP/UDP) |
| 175 |
VMNET (TCP/UDP) |
| 176 |
GENRAD-MUX (TCP/UDP) |
| 177 |
X Display Manager Control Protocol (TCP/UDP) |
| 178 |
NextStep Window Server (TCP/UDP) |
| 179 |
Border Gateway Protocol (TCP/UDP) |
| 180 |
Intergraph (TCP/UDP) |
| 181 |
Unify (TCP/UDP) |
| 182 |
Unisys Audit SITP (TCP/UDP) |
| 183 |
OCBinder (TCP/UDP) |
| 184 |
OCServer (TCP/UDP) |
| 185 |
Remote-KIS (TCP/UDP) |
| 186 |
KIS Protocol (TCP/UDP) |
| 187 |
Application Communication Interface (TCP/UDP) |
| 188 |
Plus Five's MUMPS (TCP/UDP) |
| 189 |
Queued File Trans(TCP/UDP) |
| 190 |
Gateway Access Control Protocol (TCP/UDP) |
| 191 |
Prospero Directory Service (TCP/UDP) |
| 192 |
OSU Network Monitoring System (TCP/UDP) |
| 193 |
Spider Remote Monitoring Protocol (TCP/UDP) |
| 194 |
Internet Relay Chat Protocol (TCP/UDP) |
| 195 |
DNSIX Network Level Module Audit (TCP/UDP) |
| 196 |
DNSIX Session Mgt Module Audit Redir (TCP/UDP) |
| 197 |
Directory Location Service (TCP/UDP) |
| 198 |
Directory Location Service Monitor (TCP/UDP) |
| 199 |
SMUX (TCP/UDP) |
| 200 |
IBM System Resource Controller (TCP/UDP) |
| 201 |
AppleTalk Routing Maintenance (TCP/UDP) |
| 202 |
AppleTalk Name Binding (TCP/UDP) |
| 203 |
AppleTalk Unused (TCP/UDP) |
| 204 |
AppleTalk Echo (TCP/UDP) |
| 205 |
AppleTalk Unused (TCP/UDP) |
| 206 |
AppleTalk Zone Information (TCP/UDP) |
| 207 |
AppleTalk Unused (TCP/UDP) |
| 208 |
AppleTalk Unused (TCP/UDP) |
| 209 |
The Quick Mail Transfer Protocol (TCP/UDP) |
| 210 |
ANSI Z39.50 (TCP/UDP) |
| 211 |
Texas Instruments 914C | G Terminal (TCP/UDP) |
| 212 |
ATEXSSTR (TCP/UDP) |
| 213 |
IPX (TCP/UDP) |
| 214 |
VM PWSCS (TCP/UDP) |
| 215 |
Insignia Solutions (TCP/UDP) |
| 216 |
Computer Associates Int'l License Server (TCP/UDP) |
| 217 |
dBase Unix (TCP/UDP) |
| 218 |
Netix Message Posting Protocol (TCP/UDP) |
| 219 |
Unisys ARPs (TCP/UDP) |
| 220 |
Interactive Mail Access Protocol v3 (TCP/UDP) |
| 221 |
Berkeley rlogind with SPX auth (TCP/UDP) |
| 222 |
Berkeley rsdh with SPX auth (TCP/UDP) |
| 223 |
Certificate Distribution Center (TCP/UDP) |
| 242 |
Direct (TCP/UDP) |
| 243 |
Survey Measurement (TCP/UDP) |
| 244 |
Dayna (TCP/UDP) |
| 245 |
LINK (TCP/UDP) |
| 246 |
Display Systems Protocol (TCP/UDP) |
| 247 |
SUBNTBCST_TFTP (TCP/UDP) |
| 248 |
bhfhs (TCP/UDP) |
| 256 |
RAP (TCP/UDP) |
| 257 |
Secure Electronic Transaction (TCP/UDP) |
| 258 |
Yak Winsock Personal Chat (TCP/UDP) |
| 259 |
Efficient Short Remote Operations (TCP/UDP) |
| 260 |
Open(TCP/UDP) |
| 261 |
IIOP Name Service over TLS | SSL (TCP/UDP) |
| 262 |
Arcisdms (TCP/UDP) |
| 263 |
HDAP (TCP/UDP) |
| 280 |
http-mgmt (TCP/UDP) |
| 281 |
Personal Link (TCP/UDP) |
| 282 |
Cable A | X (TCP/UDP) |
| 309 |
EntrustTime (TCP/UDP) |
| 310 |
bhmds (TCP/UDP) |
| 315 |
The Invasor (TCP) |
| 344 |
Prospero Data Access Protocol (TCP/UDP) |
| 345 |
Perf Analysis Workbench (TCP/UDP) |
| 346 |
Zebra server (TCP/UDP) |
| 347 |
Fatmen Server (TCP/UDP) |
| 348 |
Cabletron Management Protocol (TCP/UDP) |
| 349 |
mftp (TCP/UDP) |
| 350 |
MATIP Type A (TCP/UDP) |
| 351 |
MATIP Type B, bhoetty (TCP/UDP) |
| 352 |
DTAG (TCP/UDP), bhoedap4 (TCP/UDP) |
| 354 |
bh611 (TCP/UDP) |
| 357 |
bhevent (TCP/UDP) |
| 368 |
Wingate 3.0 (UDP) |
| 371 |
Clearcase (TCP/UDP) |
| 372 |
ListProcessor (TCP/UDP) |
| 373 |
Legent Corporation (TCP/UDP) |
| 374 |
Legent Corporation (TCP/UDP) |
| 375 |
Hassle, Direct Connect (TCP/UDP) |
| 376 |
Amiga Envoy Network Inquiry Protocol (TCP/UDP) |
| 377 |
NEC Corporation (TCP/UDP) |
| 378 |
NEC Corporation (TCP/UDP) |
| 379 |
TIA | EIA | IS-99 modem client (TCP/UDP) |
| 380 |
TIA | EIA | IS-99 modem server (TCP/UDP) |
| 381 |
hp performance data collector (TCP/UDP) |
| 382 |
hp performance data managed node (TCP/UDP) |
| 383 |
hp performance data alarm manager (TCP/UDP) |
| 384 |
A Remote Network Server System (TCP/UDP) |
| 385 |
IBM Application (TCP/UDP) |
| 386 |
ASA Message Router Object Def. (TCP/UDP) |
| 387 |
AppleTalk Update-Based Routing Pro. (TCP/UDP) |
| 388 |
Unidata LDM Version 4 (TCP/UDP) |
| 389 |
Lightweight Directory Access Protocol (TCP/UDP) |
| 390 |
UIS (TCP/UDP) |
| 391 |
SynOptics SNMP Relay (TCP/UDP) |
| 392 |
SynOptics Broker (TCP/UDP) |
| 393 |
Data Interpretation System (TCP/UDP) |
| 394 |
EMBL Nucleic Data Transfer (TCP/UDP) |
| 395 |
NETscout Control Protocol (TCP/UDP) |
| 396 |
Novell Netware over IP (TCP/UDP) |
| 397 |
Multi Protocol Trans. Net. (TCP/UDP) |
| 398 |
Kryptolan (TCP/UDP) |
| 399 |
ISO TransClass 2 Non-Control over TCP (TCP/UDP) |
| 400 |
Workstation Solutions (TCP/UDP) |
| 401 |
Uninterruptible Power Supply (TCP/UDP) |
| 402 |
Genie Protocol (TCP/UDP) |
| 403 |
decap (TCP/UDP) |
| 404 |
nced (TCP/UDP) |
| 405 |
ncld (TCP/UDP) |
| 406 |
Interactive Mail SupProtocol (TCP/UDP) |
| 407 |
Timbuktu (TCP/UDP) |
| 408 |
Prospero Resource Manager Sys. Man. (TCP/UDP) |
| 409 |
Prospero Resource Manager Node Man. (TCP/UDP) |
| 410 |
DECLadbug Remote Debug Protocol (TCP/UDP) |
| 411 |
Remote MT Protocol (TCP/UDP) |
| 412 |
Trap Convention (TCP/UDP) |
| 413 |
SMSP (TCP/UDP) |
| 414 |
InfoSeek (TCP/UDP) |
| 415 |
BNet (TCP/UDP) |
| 416 |
Silverplatter (TCP/UDP) |
| 417 |
Onmux (TCP/UDP) |
| 418 |
Hypter-G (TCP/UDP) |
| 419 |
Ariel (TCP/UDP) |
| 420 |
SMPTE (TCP/UDP) |
| 421 |
Ariel (TCP/UDP), (TCP Wrappers) (TCP) |
| 422 |
Ariel (TCP/UDP) |
| 423 |
IBM Operatings Planning and Control Start (TCP/UDP) |
| 424 |
IBM Operatings Planning and Control Track (TCP/UDP) |
| 425 |
ICAD (TCP/UDP) |
| 426 |
smartsdp (TCP/UDP) |
| 427 |
Server Location (TCP/UDP) |
| 428 |
OCS_CMU (TCP/UDP) |
| 429 |
OCS_AMU (TCP/UDP) |
| 430 |
UTMPSD (TCP/UDP) |
| 431 |
UTMPCD (TCP/UDP) |
| 432 |
IASD (TCP/UDP) |
| 433 |
NNSP (TCP/UDP) |
| 434 |
MobileIP-Agent (TCP/UDP) |
| 435 |
MobileIP-MN (TCP/UDP) |
| 436 |
DNA-CML (TCP/UDP) |
| 437 |
comscm (TCP/UDP) |
| 438 |
dsfgw (TCP/UDP) |
| 439 |
dasp (TCP) |
| 440 |
sgcp (TCP/UDP) |
| 441 |
decvms-sysmgt (TCP/UDP) |
| 442 |
cvc_hostd (TCP/UDP) |
| 443 |
HTTPS Webserver (SSL) Secure HTTP Protocol (TCP/UDP) |
| 444 |
Simple Network Paging Protocol (TCP/UDP) |
| 445 |
Microsoft-DS (TCP/UDP) |
| 446 |
DDM-RDB (TCP/UDP) |
| 447 |
DDM-RFM (TCP/UDP) |
| 448 |
DDM-BYTE (TCP/UDP) |
| 449 |
AS Server Mapper (TCP/UDP) |
| 450 |
TServer (TCP/UDP) |
| 451 |
Cray Network Semaphore server (TCP/UDP) |
| 452 |
Cray SFS config server (TCP/UDP) |
| 453 |
CreativeServer (TCP/UDP) |
| 454 |
ContentServer (TCP/UDP) |
| 455 |
CreativePartnr (TCP/UDP) |
| 456 |
macon-UDP (TCP/UDP), Hackers Paradise (TCP) |
| 457 |
scohelp (TCP/UDP) |
| 458 |
apple quick time (TCP/UDP) |
| 459 |
ampr-rcmd (TCP/UDP) |
| 460 |
skronk (TCP/UDP) |
| 461 |
DataRampSrv (TCP/UDP) |
| 462 |
DataRampSrvSec (TCP/UDP) |
| 463 |
alpes (TCP/UDP) |
| 464 |
kpasswd (TCP/UDP) |
| 465 |
smtp protocol over TLS | SSL (was ssmtp) (TCP/UDP) |
| 466 |
digital-vrc (TCP/UDP) |
| 467 |
mylex-mapd (TCP/UDP) |
| 468 |
proturis (TCP/UDP) |
| 469 |
Radio Control Protocol (TCP/UDP) |
| 470 |
scx-proxy (TCP/UDP) |
| 471 |
Mondex (TCP/UDP) |
| 472 |
ljk-login (TCP/UDP) |
| 473 |
hybrid-pop (TCP/UDP) |
| 474 |
tn-tl-w2 (TCP/UDP) |
| 475 |
TCPnethaspsrv (TCP) |
| 476 |
tn-tl-fd1 (TCP/UDP) |
| 477 |
ss7ns (TCP/UDP) |
| 478 |
spsc (TCP/UDP) |
| 479 |
iafserver (TCP/UDP) |
| 480 |
iafdbase (TCP/UDP) |
| 481 |
Ph service (TCP/UDP) |
| 482 |
bgs-nsi (TCP/UDP) |
| 483 |
ulpnet (TCP/UDP) |
| 484 |
Integra Software Management Environment (TCP/UDP) |
| 485 |
Air Soft Power Burst (TCP/UDP) |
| 486 |
avian (TCP/UDP) |
| 487 |
saft (TCP/UDP) |
| 488 |
gss-http (TCP/UDP) |
| 489 |
nest-protocol (TCP/UDP) |
| 490 |
micom-pfs (TCP/UDP) |
| 491 |
go-login (TCP/UDP) |
| 492 |
TransIndependent Convergence for FNA (TCP/UDP) |
| 493 |
TransIndependent Convergence for FNA (TCP/UDP) |
| 494 |
POV-Ray (TCP/UDP) |
| 495 |
intecourier (TCP/UDP) |
| 496 |
PIM-RP-DISC (TCP/UDP) |
| 497 |
dantz (TCP/UDP) |
| 498 |
siam (TCP/UDP) |
| 499 |
ISO ILL Protocol (TCP/UDP) |
| 500 |
isakmp (TCP/UDP) |
| 501 |
STMF (TCP/UDP) |
| 502 |
asa-appl-proto (TCP/UDP) |
| 503 |
Intrinsa (TCP/UDP) |
| 504 |
citadel (TCP/UDP) |
| 505 |
mailbox-lm (TCP/UDP) |
| 506 |
ohimsrv (TCP/UDP) |
| 507 |
crs (TCP/UDP) |
| 508 |
xvttp (TCP/UDP) |
| 509 |
snare (TCP/UDP) |
| 510 |
FirstClass Protocol (TCP/UDP) |
| 511 |
mynet-as (TCP/UDP) |
| 512 |
remote procexx execution, Comsat, Biff (TCP/UDP) |
| 513 |
login (remote login a la telnet) (TCP), who (who is logged
in) (UDP) |
| 514 |
shell (cmd like exed) (TCP), syslog (UDP) |
| 515 |
printer spooler (TCP/UDP) |
| 516 |
videotex (TCP/UDP) |
| 517 |
talk (rendezvous from wich a TCP connection ist
etablished) (TCP/UDP) |
| 518 |
ntalk (TCP/UDP) |
| 519 |
unixtime (TCP/UDP) |
| 520 |
extended file name server, router (TCP/UDP) |
| 521 |
ripng (TCP/UDP) |
| 522 |
ULP (TCP/UDP) |
| 523 |
IBM-DB2 (TCP) |
| 524 |
NCP (TCP/UDP) |
| 525 |
timeserver (TCP/UDP) |
| 526 |
Newdate (TCP/UDP) |
| 527 |
Stock IXChange (TCP/UDP) |
| 528 |
Customer IXChange (TCP/UDP) |
| 529 |
IRC-SERV (TCP/UDP) |
| 530 |
rpc (TCP/UDP) |
| 531 |
chat (TCP/UDP), Rasmin (TCP) |
| 532 |
readnews (TCP/UDP) |
| 533 |
for emergency broadcasts (TCP/UDP) |
| 534 |
MegaMedia Admin (TCP/UDP) |
| 535 |
iiop (TCP/UDP) |
| 536 |
opalis-rdv (TCP/UDP) |
| 537 |
Networked Media Streaming Protocol (TCP/UDP) |
| 538 |
gdomap (TCP/UDP) |
| 539 |
Apertus Technologies Load Determination (TCP/UDP) |
| 540 |
uucpd (TCP/UDP) |
| 541 |
uucp-rlogin (TCP/UDP) |
| 542 |
commerce (TCP/UDP) |
| 543 |
klogin (TCP/UDP) |
| 544 |
krcmd (TCP/UDP) |
| 545 |
applegtcsrvr (TCP/UDP) |
| 546 |
DHCPv6 Client (TCP/UDP) |
| 547 |
DHCPv6 Server (TCP/UDP) |
| 548 |
AFP over TCP (TCP/UDP) |
| 549 |
IDFP (TCP/UDP) |
| 550 |
new-who (TCP/UDP) |
| 551 |
cybercash (TCP/UDP) |
| 552 |
deviceshare (TCP/UDP) |
| 553 |
Pirp (TCP/UDP) |
| 554 |
Real Time Stream Control Protocol (TCP/UDP) |
| 555 |
dsf (TCP/UDP), Ini-Killer, NeTAdministrator, Phase Zero,
Stealth Spy (TCP/UDP) |
| 556 |
rfs server (TCP/UDP) |
| 557 |
openvms-sysipc (TCP/UDP) |
| 558 |
SDNSKMP (TCP/UDP) |
| 559 |
TEEDTAP (TCP/UDP) |
| 560 |
rmonitord (TCP/UDP) |
| 561 |
monitor (TCP/UDP) |
| 562 |
chcmd (TCP/UDP) |
| 563 |
nntp protocol over TLS | SSL (was snntp) (TCP/UDP) |
| 564 |
plan 9 file service (TCP/UDP) |
| 565 |
whoami (TCP/UDP) |
| 566 |
streettalk (TCP/UDP) |
| 567 |
banyan-rpc (TCP/UDP) |
| 568 |
microsoft shuttle (TCP/UDP) |
| 569 |
microsoft rome (TCP/UDP) |
| 570 |
demon (TCP/UDP) |
| 571 |
udemon (TCP/UDP) |
| 572 |
sonar (TCP/UDP) |
| 573 |
banyan-vip (TCP/UDP) |
| 574 |
FTP Software Agent System (TCP/UDP) |
| 575 |
VEMMI (TCP/UDP) |
| 576 |
ipcd (TCP/UDP) |
| 577 |
vnas (TCP/UDP) |
| 578 |
ipdd (TCP/UDP) |
| 579 |
decbsrv (TCP/UDP) |
| 580 |
SNTP HEARTBEAT (TCP/UDP) |
| 581 |
Bundle Discovery Protocol (TCP/UDP) |
| 582 |
SCC Security (TCP/UDP) |
| 583 |
Phillips Video-Conferencing (TCP/UDP) |
| 584 |
Key Server (TCP/UDP) |
| 585 |
IMAP4+SSL (not recommended, use 993 instead) (TCP/UDP) |
| 586 |
Password Change (TCP/UDP) |
| 587 |
Submission (TCP/UDP) |
| 588 |
CAL (TCP/UDP) |
| 589 |
EyeLink (TCP/UDP) |
| 590 |
TNS CML (TCP/UDP) |
| 591 |
FMPRO4 - http (TCP/UDP) |
| 592 |
Eudora Set (TCP/UDP) |
| 600 |
Sun IPC server (TCP/UDP) |
| 606 |
Cray Unified Resource Manager (TCP/UDP), Secret Service
(TCP) |
| 607 |
nqs (TCP/UDP) |
| 608 |
Sender-Initiated | Unsolicited File Transfer (TCP/UDP) |
| 609 |
npmp-trap (TCP/UDP) |
| 610 |
npmp-local (TCP/UDP) |
| 611 |
npmp-gui (TCP/UDP) |
| 612 |
HMMP Indication (TCP/UDP) |
| 613 |
HMMP Operation (TCP/UDP) |
| 614 |
SSLshell (TCP/UDP) |
| 615 |
Internet Configuration Manager (TCP/UDP) |
| 616 |
SCO System Administration Server (TCP/UDP) |
| 617 |
SCO Desktop Administration Server (TCP/UDP) |
| 618 |
DEI-ICDA (TCP/UDP) |
| 619 |
Digital EVM (TCP/UDP) |
| 620 |
SCO WebServer Manager (TCP/UDP) |
| 621 |
ESCP (TCP/UDP) |
| 633 |
Service Status update (Sterling Software) (TCP/UDP) |
| 634 |
ginad (TCP/UDP) |
| 635 |
RLZ DBase (TCP/UDP) |
| 636 |
ldap protocol over TLS | SSL (was sldap) (TCP/UDP) |
| 637 |
lanserver (TCP/UDP) |
| 666 |
doom Id Software (TCP/UDP), Attack FTP, Satanz Backdoor
(TCP) |
| 667 |
SniperNet (TCP), campaign contribution disclosures - SDR
Technologies (TCP/UDP) |
| 668 |
MeComm (TCP/UDP) |
| 669 |
MeRegister (TCP/UDP), DP Trojan (TCP) |
| 670 |
VACDSM-SWS (TCP/UDP) |
| 671 |
VACDSM-APP (TCP/UDP) |
| 672 |
VPPS-QUA (TCP/UDP) |
| 673 |
CIMPLEX (TCP/UDP) |
| 674 |
ACAP (TCP/UDP) |
| 675 |
DCTP (TCP/UDP) |
| 692 |
GayOL (TCP) |
| 704 |
errlog copy | server daemon (TCP/UDP) |
| 705 |
AgentX (TCP/UDP) |
| 709 |
Entrust Key Management Service Handler (TCP/UDP) |
| 710 |
Entrust Administration Service Handler (TCP/UDP) |
| 729 |
IBM NetView DM | 6000 Server | Client (TCP/UDP) |
| 730 |
IBM NetView DM | 6000 send | TCP (TCP/UDP) |
| 731 |
IBM NetView DM | 6000 receive | TCP (TCP/UDP) |
| 741 |
netGW (TCP/UDP) |
| 742 |
Network based Rev. Cont. Sys. (TCP/UDP) |
| 744 |
Flexible License Manager (TCP/UDP) |
| 747 |
Fujitsu Device Control (TCP/UDP) |
| 748 |
Russell Info Sci Calendar Manager (TCP/UDP) |
| 749 |
kerberos administration (TCP/UDP) |
| 750 |
kerberos version IV (UDP) |
| 777 |
Aim Spy (TCP) |
| 799 |
Remotely Possible Server (TCP) |
| 808 |
WinHole (TCP) |
| 815 |
Everyone's Darling (TCP/UDP) |
| 886 |
ICL coNETion locate server (TCP/UDP) |
| 887 |
ICL coNETion server info
(TCP/UDP) |
| 888 |
AccessBuilder (TCP/UDP) |
| 900 |
OMG Initial Refs (TCP/UDP) |
| 911 |
xact-backup (TCP), Dark Shadow (TCP) |
| 989 |
ftp protocol, data, over TLS | SSL (TCP/UDP) |
| 990 |
ftp protocol, control, over TLS | SSL (TCP/UDP) |
| 991 |
Netnews Administration System (TCP/UDP) |
| 992 |
telnet protocol over TLS | SSL (TCP/UDP) |
| 993 |
imap4 protocol over TLS | SSL (TCP/UDP) |
| 994 |
irc protocol over TLS | SSL (TCP/UDP) |
| 995 |
pop3 protocol over TLS | SSL (was spop3) (TCP/UDP) |
| 999 |
DeepThroat (TCP) |
| 1000 |
Der Spaeher 3 (TCP) |
| 1001 |
Der Spaeher 3, Le Guardian, Silencer, WebEx (TCP) |
| 1003 |
BackDoor 2.0x (TCP) |
| 1010 |
Doly Trojan 1.3 + 1.35, CafeIni 0.9 (10101100) (TCP) |
| 1011 |
Doly Trojan 1.1/1.2 (TCP) |
| 1012 |
Doly Trojan 1.5 (TCP) |
| 1015 |
Doly Trojan 1.6 (TCP) |
| 1016 |
Doly Trojan (TCP) |
| 1020 |
Vampire (TCP) |
| 1024 |
NetSpy, Latinus (TCP), mIRC DCC / IRC DCC (1024-5000),
Dwyco Video, ICUII Client, H.323 compliant video player, NetMeeting 2.0, 3.0,
Intel Video Phone (TCP) |
| 1025 |
NetSpy, Maverick's Matrix, RemoteStorm (TCP/UDP), Windows
RPC, Scheduled Tasks (TCP/UDP) |
| 1027 |
ICQ (TCP) |
| 1029 |
ICQ, LSASS (TCP/UDP), InCommand (TCP/UDP) |
| 1030 |
Need for Speed 3- Hot Pursuit (TCP) |
| 1031 |
Computer Associated FTP Server (TCP) |
| 1032 |
ICQ (TCP) |
| 1033 |
NetSpy (TCP) |
| 1034 |
PhoneFree (TCP/UDP), Mydoom.M (TCP) |
| 1035 |
PhoneFree (TCP/UDP) |
| 1042 |
Bla 1.1 (TCP) |
| 1045 |
Rasmin (TCP) |
| 1047 |
GateCrasher.b, GateCrasher.c (TCP) |
| 1050 |
MiniCommand (TCP) |
| 1080 |
WinHole, Wingate, Bagle.AI (TCP), Socks, Wingate (TCP/UDP) |
| 1081 |
WinHole (TCP) |
| 1082 |
WinHole (TCP) |
| 1083 |
WinHole (TCP) |
| 1090 |
Xtreme (TCP) |
| 1095 |
Rat (TCP) |
| 1097 |
Rat (TCP) |
| 1098 |
Rat (TCP) |
| 1099 |
BFevolution, Rat (TCP) |
| 1100 |
CafeIni 0.9 (10101100) (TCP), ICQ Lite (TCP) |
| 1117 |
Audiogalaxy Satellite (1117-5190) (TCP) |
| 1137 |
MTX (TCP) |
| 1140 |
Westwood Online - C&C Tiberian Sun & Dune 2000
(TCP/UDP) |
| 1155 |
Network File Access (TCP/UDP) |
| 1170 |
Psyber Stream Server, Streaming Audio Trojan, Voice (TCP) |
| 1200 |
NoBackO (UDP) |
| 1201 |
NoBackO (UDP) |
| 1207 |
SoftWAR (TCP) |
| 1208 |
Infector 1.3 + 1.4.1 (TCP/UDP) |
| 1212 |
Kaos (TCP), lupa (TCP/UDP) |
| 1214 |
KaZaA (TCP) |
| 1225 |
Scarab (TCP) |
| 1234 |
Ultors Trojan, SubSeven 2.0, Bagle.AF (TCP) |
| 1243 |
BackDoor-G, SubSeven, Sub7(*), SubSeven Apocalypse, Tiles
(TCP) |
| 1245 |
VooDoo Doll (TCP) |
| 1255 |
Scarab (TCP) |
| 1256 |
Project nEXT (TCP) |
| 1269 |
Maverick's Matrix (TCP) |
| 1313 |
NETrojan (TCP) |
| 1338 |
Millenium Worm (TCP) |
| 1349 |
BO DLL (UDP) |
| 1352 |
Lotus Notes Server (TCP) |
| 1417 |
Timbuktu (TCP/UDP) |
| 1418 |
Timbuktu (TCP/UDP) |
| 1419 |
Timbuktu (TCP/UDP) |
| 1420 |
Timbuktu (TCP/UDP) |
| 1433 |
Microsoft-SQL-Server (TCP/UDP) |
| 1434 |
Microsoft-SQL-Monitor (TCP/UDP) |
| 1437 |
Kohan Immortal Sovereigns (TCP/UDP) |
| 1441 |
RemoteStorm (TCP) |
| 1451 |
IBM Information Management (TCP/UDP) |
| 1492 |
FTP99CMP, Back.Orifice.FTP (TCP) |
| 1494 |
CITRIX Metaframe / ICA client (TCP) |
| 1503 |
H.323 compliant video player, NetMeeting 2.0, 3.0, Intel
Video Phone (TCP) |
| 1504 |
H.323 compliant video player, NetMeeting 2.0, 3.0, Intel
Video Phone (TCP) |
| 1509 |
Psyber Streaming Server (TCP) |
| 1512 |
Wins (Microsoft's Windows Internet Name Service) (TCP/UDP) |
| 1524 |
Trin00 (DDoS) (TCP) |
| 1547 |
Laplink (TCP/UDP) |
| 1559 |
web2host (TCP/UDP) |
| 1584 |
Dialpad (TCP) |
| 1585 |
Dialpad (TCP) |
| 1600 |
Shivka-Burka (TCP) |
| 1611 |
Black and White (TCP) |
| 1612 |
Black and White (TCP) |
| 1680 |
CarbonCopy32 host on your LAN (TCP) |
| 1700 |
Rux.Tick (TCP) |
| 1731 |
H.323 compliant video player, NetMeeting 2.0, 3.0, Intel
Video Phone (TCP) |
| 1732 |
H.323 compliant video player, NetMeeting 2.0, 3.0, Intel
Video Phone (TCP) |
| 1735 |
PrivateChat (TCP/UDP) |
| 1745 |
remote-winsock (TCP/UDP) |
| 1777 |
Scarab (TCP) |
| 1784 |
Snid X2 (TCP) |
| 1789 |
hello (TCP/UDP) |
| 1801 |
Microsoft Message Que (TCP/UDP) |
| 1807 |
SpySender (TCP) |
| 1863 |
MSN Messenger (TCP/UDP) |
| 1966 |
Fake FTP (TCP) |
| 1969 |
OpC BO (TCP) |
| 1981 |
Shockrave (TCP) |
| 1986 |
cisco license management (TCP/UDP) |
| 1987 |
cisco RSRB Priority 1 (TCP/UDP) |
| 1988 |
cisco RSRB Priority 2 (TCP/UDP) |
| 1989 |
cisco RSRB Priority 3 (TCP/UDP) |
| 1990 |
cisco STUN Priority 1 (TCP/UDP) |
| 1991 |
cisco STUN Priority 2 (TCP/UDP) |
| 1992 |
cisco STUN Priority 3 Port, IPsendmsg (TCP/UDP) |
| 1993 |
cisco SNMP TCP (TCP/UDP) |
| 1994 |
cisco serial tunnel (TCP/UDP) |
| 1995 |
cisco perf (TCP/UDP) |
| 1996 |
cisco Remote SRB (TCP/UDP) |
| 1997 |
cisco Gateway Discovery Protocol (TCP/UDP) |
| 1998 |
cisco X.25 service (XOT) (TCP/UDP) |
| 1999 |
cisco identification (TCP/UDP), BackDoor, BackDoor
1.00-1.03, BackDoor 2.x, TransScout 1.x (TCP) |
| 2000 |
Der Spaeher 3, TransScout, Insane Network (TCP), Remotely
AnyWhere (TCP) |
| 2001 |
Der Spaeher 3, TransScout, Trojan Cow (TCP) |
| 2002 |
TransScout (TCP) |
| 2003 |
TransScout (TCP) |
| 2004 |
TransScout (TCP) |
| 2005 |
TransScout (TCP) |
| 2023 |
HackCity Ripper Pro (TCP) |
| 2047 |
Camerades (TCP/UDP) |
| 2048 |
Camerades (TCP/UDP) |
| 2049 |
Network File System - Sun Microsystems (TCP/UDP) |
| 2080 |
Wingate 3.0 (TCP), WinHole (TCP) |
| 2090 |
Pal Talk (file transfer) (TCP/UDP), Go2Call (TCP/UDP) |
| 2091 |
Go2Call (TCP), Pal Talk (video listening) (TCP/UDP) |
| 2095 |
Pal Talk (file transfer) (TCP) |
| 2115 |
Bugs (TCP) |
| 2140 |
Deep Throat (all versions), The Invasor (UDP) |
| 2208 |
Rux.PSW (TCP) |
| 2233 |
Shiva VPN (UDP) |
| 2283 |
HLV Rat 5, Rat (TCP) |
| 2300 |
Xplorer (TCP), Battlecom (2300-2400) (TCP) |
| 2346 |
Rogue Spear, Rainbow Six (Client and Server) (TCP/UDP) |
| 2565 |
Striker (TCP) |
| 2583 |
WinCrash 2 (TCP) |
| 2600 |
Digital RootBeer (TCP) |
| 2644 |
PhoneFree (TCP) |
| 2718 |
The Prayer 2 (TCP) |
| 2773 |
BackDoor-G, SubSeven, Sub7(*) (TCP) |
| 2784 |
world wide web - development (TCP/UDP) |
| 2801 |
Phineas Phucker (TCP) |
| 2989 |
Rat 1.2 (TCP/UDP) |
| 3000 |
Remote Shutdown (TCP), Deerfield MDaemon Email Server,
Active Worlds (TCP) |
| 3001 |
Deerfield MDaemon Email Server (TCP) |
| 3024 |
WinCrash (TCP) |
| 3100 |
Delta Force (Client and Server) (TCP/UDP) |
| 3128 |
RingZero (TCP) |
| 3129 |
Masters Paradise, MastersParadise.92 (TCP) |
| 3150 |
Deep Throat, Deep Throat 10, The Invasor (UDP) |
| 3230 |
Polycom ViaVideo H.323 (3230-3235) (TCP/UDP) |
| 3264 |
ccmail | lotus (TCP/UDP) |
| 3268 |
Microsoft Global Catalog (TCP/UDP) |
| 3269 |
Microsoft Global Catalog with LDAP | SSL (TCP/UDP) |
| 3270 |
Verismart (TCP/UDP) |
| 3389 |
Windows NT/2000 Terminal Server (TCP/UDP) |
| 3453 |
Bungie.net, Myth, Myth II Server (TCP) |
| 3456 |
Teror Trojan (TCP) |
| 3459 |
Eclipse 2000, Sanctuary (TCP) |
| 3586 |
Snid X2 (TCP) |
| 3700 |
Portal of Doom (PoD), al of Doom (TCP) |
| 3782 |
Roger Wilco (TCP/UDP) |
| 3791 |
Total Eclipse (FTP) (TCP) |
| 3801 |
Total Eclipse (UDP) |
| 3855 |
Kohan Immortal Sovereigns (TCP/UDP) |
| 3999 |
Remote Anything (TCP) |
| 4000 |
Remote Anything, Blizzard Battlenet, Westwood Online -
C&C Tiberian Sun & Dune 2000 (TCP/UDP), Skydance (TCP) |
| 4092 |
WinCrash (TCP) |
| 4242 |
Virtual hacking Machine (TCP) |
| 4245 |
Rux.Backdoor (TCP) |
| 4321 |
BoBo, Schoolbus 1.0 (TCP) |
| 4444 |
Prosiak, Swift remote (TCP) |
| 4567 |
File Nail (TCP) |
| 4590 |
ICQTrojan (TCP) |
| 4711 |
Olfactor (UDP) |
| 4899 |
RAdmin (Fama Tech) (TCP) |
| 4950 |
ICQTrojan, Icq Trojan (TCP) |
| 5000 |
Bubbel, Back Door Setup, Blazer 5, Socket 23, Sockets de
Troie (TCP), Windows ME, XP and 2003 Network Plug & Play (TCP) |
| 5001 |
Yahoo Messenger Chat (TCP), Back Door Setup, Sockets de
Troie (TCP) |
| 5003 |
Claris FileMaker Pro (TCP/UDP) |
| 5011 |
OOTLT (TCP) |
| 5031 |
NetMetropolitan 1.0, NetMetropolitan 1.04 (TCP) |
| 5032 |
NetMetropolitan 1.04 (TCP) |
| 5190 |
AIM Talk (TCP) |
| 5310 |
Outlaws (TCP/UDP) |
| 5321 |
Firehotcker (TCP) |
| 5333 |
Backage Trojan Box 3 (TCP) |
| 5343 |
WCrat (TCP) |
| 5400 |
Blade Runner, Back Construction 1.2 (TCP) |
| 5401 |
Blade Runner 1.x, Back Construction (TCP) |
| 5402 |
Blade Runner 2.x, Back Construction (TCP) |
| 5500 |
Virtual Network Computing (VNC), Hotline Server
(5500-5503) (TCP) |
| 5512 |
Illusion Mailer (TCP) |
| 5521 |
Illusion Mailer (TCP) |
| 5550 |
Xtcp 2 (TCP) |
| 5555 |
ServeMe (TCP) |
| 5556 |
BO Facil, H0rtiga (TCP) |
| 5557 |
BO Facil (TCP) |
| 5569 |
RoboHack (TCP) |
| 5598 |
BackDoor 2.03 (TCP) |
| 5631 |
pcANYWHEREdat (TCP/UDP) |
| 5632 |
pcANYWHEREstat (TCP/UDP) |
| 5637 |
PC Crasher (TCP) |
| 5638 |
PC Crasher (TCP) |
| 5670 |
Active Worlds (TCP) |
| 5698 |
BackDoor.203 (TCP) |
| 5714 |
WinCrash, WinCrash 3 (TCP) |
| 5741 |
WinCrash, WinCrash 3 (TCP) |
| 5742 |
WinCrash (TCP) |
| 5800 |
Virtual Network Computing (VNC) (TCP) |
| 5881 |
Y3K RAT (UDP) |
| 5882 |
Y3K RAT (TCP/UDP) |
| 5888 |
Y3K RAT (TCP/UDP) |
| 5889 |
Y3K RAT (TCP) |
| 5900 |
Virtual Network Computing (VNC) (TCP) |
| 6000 |
The Thing, APStrojan (TCP) |
| 6006 |
The Thing, APStrojan (TCP) |
| 6112 |
Starcraft, Blizzard Battlenet (TCP) |
| 6272 |
Secret Service (TCP) |
| 6346 |
GNUtella (TCP/UDP) |
| 6400 |
The Thing, APStrojan (TCP) |
| 6500 |
Devil 1.03 (TCP) |
| 6666 |
TCPshell.c (TCP) |
| 6667 |
Schedule Agent (TCP), MSN Game Zone, Black and White, mIRC
Chat (TCP) |
| 6669 |
Host Control, Vampyre 1.0 (TCP) |
| 6670 |
DeepThroat, BackWeb Server, WinNuke eXtreame (TCP) |
| 6699 |
Napster (TCP/UDP) |
| 6700 |
Dwyco Video Conferencing (6700-6702) (TCP) |
| 6711 |
BackDoor-G, SubSeven, Sub7(*) (TCP) |
| 6712 |
BackDoor-G, SubSeven, Sub7(*), Funny Trojan (TCP) |
| 6713 |
BackDoor-G, SubSeven, Sub7(*) (TCP) |
| 6723 |
Mstream (TCP) |
| 6767 |
NT Remote Control (TCP) |
| 6771 |
DeepThroat (TCP) |
| 6776 |
2000 Cracks, BackDoor-G, SubSeven, Sub7(*) (TCP) |
| 6789 |
Doly Trojan (TCP) |
| 6838 |
Mstream (UDP) |
| 6880 |
Dwyco Video Conferencing (TCP) |
| 6883 |
DeltaSource (TCP) |
| 6891 |
MSN Messenger (6891-6900) (TCP) |
| 6901 |
MSN Messenger (TCP/UDP) |
| 6912 |
Shit Heep (TCP) |
| 6939 |
Indoctrination, Gatecrasher.a (TCP) |
| 6969 |
GateCrasher, IRC 3, NetController, Priority (TCP/UDP) |
| 6970 |
GateCrasher (TCP), QuickTime 4 Server (TCP/UDP) |
| 7000 |
Active Worlds (7000-7100) (TCP), BackDoor-G, SubSeven,
Sub7*, Remote Grab, Kazimas (TCP) |
| 7001 |
Freak88 (TCP) |
| 7013 |
Anarchy Online (TCP/UDP) |
| 7070 |
RealAudio (TCP/UDP) |
| 7201 |
NetMonitor (TCP) |
| 7215 |
BackDoor-G, SubSeven, Sub7(*) (TCP) |
| 7300 |
NetMonitor (TCP) |
| 7301 |
NetMonitor (TCP) |
| 7306 |
NetMonitor (TCP) |
| 7307 |
NetMonitor (TCP) |
| 7308 |
NetMonitor (TCP) |
| 7424 |
Host Control (TCP/UDP) |
| 7597 |
Qaz (TCP) |
| 7609 |
Snid X2 (TCP) |
| 7777 |
Active Worlds (TCP) |
| 7789 |
Back Door Setup, ICQKiller (TCP) |
| 7875 |
Ultima UOMonitor (TCP) |
| 7983 |
Mstream (TCP) |
| 8000 |
ShoutCast Server (TCP), PhoneFree (TCP) |
| 8010 |
Wingate 3.0 (TCP) |
| 8076 |
IStreamVideo2HP (TCP/UDP) |
| 8077 |
IStreamVideo2HP (TCP/UDP) |
| 8080 |
RingZero (TCP), WebWasher 2.x, Unreal Tournament server
(TCP/UDP) |
| 8787 |
Back Orifice 2000, BO2K(*) (TCP) |
| 8888 |
Ultima Patch (TCP) |
| 8897 |
HackOffice Armageddon (TCP) |
| 8989 |
Rcon (TCP) |
| 9000 |
Netministrator (TCP) |
| 9325 |
Mstream (UDP) |
| 9400 |
InCommand (TCP) |
| 9442 |
Need for Speed - Porche (TCP) |
| 9872 |
Portal of Doom (PoD) (TCP) |
| 9873 |
Portal of Doom (PoD) (TCP) |
| 9874 |
Portal of Doom (PoD) (TCP) |
| 9875 |
Portal of Doom (PoD) (TCP) |
| 9876 |
Cyber Attacker, Rux.Backdoor (TCP) |
| 9878 |
TransScout (TCP) |
| 9989 |
iNi-Killer (TCP) |
| 9999 |
The Prayer 1 (TCP), Ultima Patch (TCP) |
| 10067 |
Portal of Doom (PoD) (UDP) |
| 10085 |
Syphillis (TCP) |
| 10086 |
Syphillis (TCP) |
| 10101 |
BrainSpy (TCP) |
| 10167 |
Portal of Doom (PoD) (UDP) |
| 10520 |
Acid Shivers (TCP) |
| 10528 |
Host Control (TCP) |
| 10607 |
Coma (TCP) |
| 10666 |
Ambush (UDP) |
| 11000 |
Senna Spy, Senna Spy Trojans (TCP) |
| 11050 |
Host Control (TCP) |
| 11051 |
Host Control (TCP) |
| 11223 |
Progenic Trojan, Secret Agent (TCP) |
| 12053 |
Delta Three PC to Phone (TCP) |
| 12076 |
GJamer, MSH.104b (TCP) |
| 12083 |
Delta Three PC to Phone (TCP) |
| 12223 |
Hack'99 KeyLogger (TCP) |
| 12345 |
GabanBus, NetBus 1.x, NetBus 1.7(*), Pie Bill Gates,
WhackJob, X-bill (TCP) |
| 12346 |
GabanBus, NetBus 1.x, NetBus 1.7(*), X-bill (TCP) |
| 12349 |
BioNet (TCP) |
| 12361 |
Whack-a-mole (TCP) |
| 12362 |
Whack-a-mole (TCP) |
| 12623 |
DUN Control (UDP) |
| 12624 |
Buttman (TCP) |
| 12631 |
WhackJob, WhackJob.NB1.7 (TCP) |
| 12701 |
Eclipse 2000 (TCP) |
| 12754 |
Mstream (TCP) |
| 13000 |
Senna Spy (TCP) |
| 13010 |
Hacker Brazil (TCP) |
| 13700 |
Kuang2 The Virus (TCP) |
| 14456 |
Solero (TCP) |
| 14500 |
PC Invader 0.7 (TCP) |
| 14501 |
PC Invader 0.7 (TCP) |
| 14502 |
PC Invader 0.7 (TCP) |
| 14503 |
PC Invader 0.7 (TCP) |
| 15000 |
NetDaemon 1.0 (TCP) |
| 15092 |
Host Control (TCP) |
| 15104 |
Mstream (TCP) |
| 16000 |
Motorhead Server (TCP) |
| 16484 |
Mosucker (TCP) |
| 16639 |
SWAT3 (TCP) |
| 16660 |
Stacheldraht (DDoS) (TCP) |
| 16772 |
ICQ Revenge (TCP) |
| 16969 |
Priority (TCP) |
| 17166 |
Mosaic (TCP) |
| 17300 |
Kuang2 The Virus (TCP) |
| 17490 |
CrazyNet (TCP) |
| 17500 |
CrazyNet (TCP) |
| 17569 |
Infector 1.4.x + 1.6.x (TCP) |
| 17777 |
Nephron (TCP) |
| 18753 |
Shaft (DDoS) (UDP) |
| 19864 |
ICQ Revenge (TCP) |
| 20000 |
Millennium II (TCP), ICQ (TCP) |
| 20001 |
Millennium (TCP) |
| 20002 |
AcidkoR (TCP) |
| 20034 |
NetBus 2.0 Pro, NetRex, WhackJob (TCP) |
| 20203 |
Chupacabra, Logged! (TCP) |
| 20331 |
Bla (TCP) |
| 20432 |
Shaft (DDoS) (TCP/UDP) |
| 21544 |
GirlFriend (TCP) |
| 21554 |
GirlFriend, Schwindler, Schwindler 1.82, WinSp00fer,
Kidterror (TCP) |
| 22222 |
Prosiak (TCP) |
| 23005 |
Net Trash 1.0 (TCP/UDP) |
| 23023 |
Logged (TCP) |
| 23432 |
Asylum (TCP) |
| 23456 |
Evil FTP, Ugly FTP, WhackJob (TCP/UDP) |
| 23476 |
Donald Dick (TCP/UDP) |
| 23477 |
Donald Dick (TCP) |
| 26000 |
quake (TCP) |
| 26214 |
Dark Reign 2 (TCP/UDP) |
| 26274 |
Delta Source (UDP) |
| 26681 |
Spy Voice (TCP) |
| 27015 |
Half Life Server (UDP) |
| 27374 |
BackDoor-G, SubSeven, Sub7(*) (TCP) |
| 27444 |
Trin00 (DDoS) (UDP) |
| 27660 |
QuakeIII (UDP) |
| 27665 |
Trin00 (DDoS) (TCP) |
| 27910 |
Quake2 (Client and Server) (UDP) |
| 28431 |
Hack'a'Tack (UDP) |
| 28432 |
Hack'a'Tack (UDP) |
| 28910 |
Soldier of Fortune (TCP), Heretic II Server (TCP) |
| 29104 |
Host Control (TCP) |
| 29891 |
The Unexplained (UDP) |
| 30001 |
Terr0r32 (TCP) |
| 30029 |
AOL Trojan (TCP) |
| 30100 |
NetSphere 1.27a, NetSphere 1.31 (TCP) |
| 30101 |
NetSphere 1.27a, NetSphere 1.31 (TCP) |
| 30102 |
NetSphere 1.27a, NetSphere 1.31 (TCP) |
| 30103 |
NetSphere 1.31 (TCP/UDP) |
| 30133 |
NetSphere Final (TCP) |
| 30303 |
Sockets de Troie, Socket 23 (TCP) |
| 30947 |
Intruse (TCP) |
| 30999 |
Kuang2 (TCP) |
| 31335 |
Trin00 (DDoS) (UDP) |
| 31336 |
BOWhack, ButtFunnel (TCP) |
| 31337 |
BackFire, Baron Night, Back Orifice, BackOrificeLM.LEENTech,
BO client, BO2K(*), Bo Facil, Deep BO, Freak (TCP/UDP) |
| 31338 |
Back Orifice, ButtFunnel, DeepBO, NetSpy DK (TCP/UDP) |
| 31339 |
NetSpy DK (TCP) |
| 31554 |
Schwindler (TCP) |
| 31666 |
BOWhack, BOWackmole (TCP) |
| 31778 |
Hack'a'Tack (TCP) |
| 31785 |
Hack'a'Tack (TCP) |
| 31787 |
Hack'a'Tack (TCP) |
| 31788 |
Hack'a'Tack (UDP) |
| 31789 |
Hack'a'Tack (UDP) |
| 31790 |
Hack'a'Tack (UDP) |
| 31791 |
Hack'a'Tack (UDP) |
| 31792 |
Hack'a'Tack (TCP) |
| 32100 |
Peanut Brittle, Project nEXT (TCP) |
| 32418 |
Acid Battery (TCP) |
| 33333 |
Blakharaz, Prosiak (TCP) |
| 33577 |
PsychWard (TCP) |
| 33777 |
PsychWard (TCP) |
| 33911 |
Trojan Spirit 2001a (TCP) |
| 34324 |
BigGluck, TN, Tiny Telnet Server (TCP) |
| 34555 |
Trin00 (Windows) (DDoS) (UDP) |
| 35555 |
Trin00 (Windows) (DDoS) (UDP) |
| 37651 |
YAT (TCP) |
| 40412 |
The Spy (TCP) |
| 40421 |
Agent 40421, Masters Paradise, Master Paradise .96 (TCP) |
| 40422 |
Masters Paradise 1.x (TCP) |
| 40423 |
Masters Paradise, Masters Paradise .97 (TCP) |
| 40425 |
Masters Paradise (TCP) |
| 40426 |
Masters Paradise 3.x (TCP) |
| 41000 |
Audiogalaxy Satellite (41000-50000) (TCP) |
| 41666 |
Remote Boot (TCP/UDP) |
| 43210 |
Schoolbus 1.6 / 2.0 (TCP) |
| 44444 |
Prosiak (TCP) |
| 47262 |
Delta Source (UDP) |
| 47624 |
Operation FlashPoint, MSN Game Zone (TCP), Starfleet
Command, Battlecom (TCP/UDP) |
| 49301 |
Online Keylogger (TCP) |
| 50505 |
Sockets de Troie (TCP) |
| 50766 |
Fore, Schwindler (TCP) |
| 51210 |
Dialpad (TCP) |
| 51996 |
CafeIni (TCP) |
| 53001 |
Remote Windows Shutdown (TCP) |
| 53217 |
Acid Battery 2000 (TCP) |
| 54283 |
BackDoor-G, SubSeven, Sub7(*) (TCP) |
| 54320 |
Back Orifice 2000, BO2K(*) (UDP) |
| 54321 |
Schoolbus .69-1.11 + 1.6 + 2.0, Back Orifice 2000, BO2K(*)
(TCP/UDP) |
| 57341 |
NetRaider (TCP) |
| 58339 |
ButtFunnel (TCP) |
| 60000 |
Deep Throat 2.0 / 3.0 (TCP) |
| 60068 |
Xzip 6000068 (TCP) |
| 60411 |
Connection (TCP) |
| 61348 |
Bunker-Hill (TCP) |
| 61466 |
Telecommando (TCP) |
| 61603 |
Bunker-Hill (TCP) |
| 63485 |
Bunker-Hill (TCP) |
| 65000 |
Devil Trojan 1.03, Stacheldraht (DDoS) (TCP) |
| 65432 |
The Traitor (TCP/UDP) |
| 65535 |
RC (TCP) |
Mister Wong