| Port | Protocol | Service
|
| 1 | TCP | TCPMux - Port Service Multiplexer
|
| 7 | UDP | Echo
|
| 9 | TCP, UDP | Discard
|
| 11 | TCP | SyStat (active user)
|
| 13 | TCP, UDP | Daytime
|
| 17 | TCP, UDP | QOTD (Quote of the Day)
|
| 18 | TCP | Message Send
|
| 18 | UDP | RWP rwrite
|
| 19 | TCP, UDP | CharGen (Character Generator)
|
| 20 | TCP | FTP Data
|
| 21 | TCP, UDP | FTP File Transfer
|
| 22 | TCP | SSH Remote Login
|
| 23 | TCP | Telnet
|
| 25 | TCP | SMTP Outgoing mail
|
| 27 | TCP, UDP | NSW User System FE
|
| 29 | TCP, UDP | MSG ICP
|
| 31 | TCP, UDP | MSG Authentization
|
| 33 | TCP, UDP | Display Support Protocol
|
| 37 | TCP, UDP | Time
|
| 39 | TCP, UDP | Resource Location Protocol
|
| 41 | TCP, UDP | Graphics TCP, UDP
|
| 42 | TCP, UDP | Name (Host Name Server)
|
| 43 | TCP | Nickname (Who Is)
|
| 44 | TCP | MPM Flags Protocol
|
| 45 | TCP | Message Processing Module - recv
|
| 46 | TCP | Message Processing Module - default send
|
| 47 | TCP, UDP | NI FTP
|
| 48 | TCP, UDP | Digital Audit Daemon TCP, UDP
|
| 49 | TCP | TACACS Login
|
| 50 | TCP, UDP | Remote Mail Checking Protocol
|
| 51 | UDP | Logical Address Maintenance
|
| 52 | TCP, UDP | XNS Time Protocol
|
| 53 | TCP, UDP | DNS over TCP, DNS over UDP
|
| 55 | TCP, UDP | ISI Graphics Language
|
| 56 | TCP, UDP | XNS Authentication
|
| 58 | TCP, UDP | XNS Mail
|
| 64 | TCP | WhoIs++
|
| 66 | TCP | Oracle SQL*NET
|
| 67 | TCP | BootPS (Bootstrap Server)
|
| 68 | TCP | BootPC (Bootstrap Cleint)
|
| 69 | TCP, UDP | TFTP (Trivial File Transfer)
|
| 70 | TCP | Gopher
|
| 79 | TCP | Finger
|
| 80 | HTTP | World Wide Web
|
| 88 | TCP | Kerberos
|
| 90 | TCP | Rockliffe MailSite Buffer Overflow
|
| 92 | TCP | NPP (Network Printing)
|
| 101 | TCP | Hostnames
|
| 102 | TCP | ISO - TSAP
|
| 103 | TCP | X400
|
| 104 | TCP | X400-SND
|
| 105 | TCP | NSNET -NS
|
| 107 | TCP | Rtelnet (Remote Telnet)
|
| 109 | TCP | POP2 (Post Office - v2)
|
| 110 | TCP | POP incoming mail
|
| 111 | UDP | Portmap
|
| 111 | TCP | SUNRPC (SUN Remote Procedure Call)
|
| 113 | TCP | Auth (Authentication Service)
|
| 115 | TCP | SFTP (Simple File Transfer)
|
| 117 | TCP | UUCP -path
|
| 118 | TCP | SQL Services
|
| 119 | TCP | NNTP News
|
| 121 | TCP, UDP | Encore Expedited Remote Pro.Call
|
| 123 | TCP, UDP | Network Time Protocol
|
| 133 | TCP | StatSrv (Statistics Service)
|
| 137 | TCP, UDP | NETBIOS Name Service
|
| 138 | TCP, UDP | NETBIOS Datagram Service
|
| 139 | TCP, UDP | NETBIOS Session Service
|
| 143 | TCP | IMAP Internet Message Access
|
| 144 | TCP | NewS
|
| 150 | TCP | SQL-NET
|
| 156 | TCP | SQL Service
|
| 158 | TCP | PCMail Server
|
| 161 | UDP | SNMP (Simple Network Management)
|
| 162 | UDP | SNMPTRAP
|
| 170 | TCP | Print-srv
|
| 177 | TCP | XDMCP
|
| 220 | TCP | IMAP3 (Interactive Mail Access v3)
|
| 280 | TCP | HTTP Management
|
| 360 | TCP | UnixWare i2odialogd
|
| 389 | TCP | LDAP
|
| 443 | TCP | HTTP over SSL
|
| 450 | TCP | Tserver
|
| 465 | TCP | SMTP over SSL
|
| 512 | TCP | Exec
|
| 513 | TCP | Login
|
| 514 | TCP | Shell
|
| 514 | UDP | Syslog
|
| 515 | TCP | Spooler
|
| 517 | TCP, UDP | Talk
|
| 518 | TCP, UDP | Ntalk
|
| 519 | TCP | Utime
|
| 520 | UDP | RIP
|
| 526 | TCP | Tempo (New date)
|
| 531 | TCP | Conference
|
| 532 | TCP | Netnews
|
| 540 | TCP | UUCP
|
| 541 | TCP | UUCP -rlogin
|
| 550 | TCP | New-rwho
|
| 556 | TCP | Remote FS
|
| 563 | TCP | NNTP over SSL
|
| 565 | TCP | Whoami
|
| 569 | TCP | MSN Microsoft Network
|
| 600 | TCP | PCServer
|
| 666 | TCP | Doom (game)
|
| 765 | TCP | Webster
|
| 767 | TCP | Phonebook
|
| 800 | HTTP | World Wide Web
|
| 888 | TCP | CDDataBase
|
| 989 | TCP | FTP Data over SSL
|
| 990 | TCP | FTP Control over SSL
|
| 992 | TCP | Telnet over SSL
|
| 994 | TCP | IRC over SSL
|
| 995 | TCP | POP3 over SSL
|
| 1109 | TCP | Pop with Kerberos
|
| 1167 | UDP | phone
|
| 1347 | TCP, UDP | bbn-mcc (Multimedia conferencing TCP,UDP)
|
| 1348 | TCP, UDP | bbn-mcc (Multimedia conferencing TCP,UDP)
|
| 1352 | TCP, UDP | Lotus Note
|
| 1524 | TCP, UDP | Ingres (TCP, UDP)
|
| 1525 | TCP | Archie
|
| 1723 | TCP, UDP | PPTP
|
| 2000 | TCP | Deerfield World Client
|
| 2002 | TCP | Deerfield Web Config
|
| 2003 | TCP | Cfinger
|
| 2009 | TCP | news (alternative)
|
| 2049 | UDP | NFS
|
| 2080 | TCP | wingate-redirector
|
| 2301 | TCP | Compaq Insight Manager
|
| 2345 | TCP | HP Alarm Service Buffer Overrun
|
| 2592 | TCP | Netrek game
|
| 4000 | UDP | ICQ
|
| 4444 | TCP | WhitePine Reflector
|
| 4557 | TCP | Fax
|
| 5050 | TCP | Yahoo Messanger
|
| 5190-5193 | TCP | AOL America Online
|
| 5195 | TCP | AOL America Online
|
| 5631-5632 | TCP | pc-anywhere
|
| 5858 | TCP | Netrek game
|
| 6000-6060 | TCP | X Windows System
|
| 6065 | TCP | X Windows System
|
| 6373 | TCP | Calendar Server SCO UNIX
|
| 6665
| TCP
| IRC (Internet Relay Chat)
|
| 6666 | TCP | IRC - serv
|
| 6667-6669 | TCP | IRC (Internet Relay Chat)
|
| 6723 | TCP | Mstream DDOS communication TCP
|
| 6838 | UDP | Mstream DDOS communication UDP
|
| 7000 | TCP | Real Audio control
|
| 7070 | TCP | Real Audio control + data
|
| 7161 | TCP | Cisco Catalyst
|
| 7323 | TCP | SyGate 3.11 Remote Administration
|
| 7640 | TCP, UDP | CUSeeMe (TCP, UDP)
|
| 7648-7649 | TCP, UDP | CUSeeMe (TCP, UDP)
|
| 7776 | TCP | SessionWall Log-View Data Service
|
| 7983 | UDP | Mstraem DDOS communication UDP
|
| 8000 | HTTP | World Wide Web
|
| 8002 | TCP | Cmail Web Admin
|
| 8080 | HTTP | World Wide Web
|
| 8181 | TCP | Imail Monitor
|
| 8431 | TCP | Trend Micro PC-Cilin
|
| 8765 | TCP | Infoseek Ultraseek
|
| 8999 | TCP | Gauntlet Firewall
|
| 9325 | UDP | Mstream DDOS communication UDP
|
| 10498 | UDP | Mstream DDOS Communication UDP
|
| 12345 | TCP | NetBus (!!! trojan)
|
| 12346 | TCP | NetBus (!!! trojan)
|
| 12754 | TCP | Mstream DDOS communication TCP
|
| 13326 | TCP | Crossfire game
|
| 15104 | TCP | Mstream DDOS communication TCP
|
| 16660 | TCP | Stacheldraht Cleint
|
| 20034 | TCP | NetBus II (!!! trojan)
|
| 21554 | TCP | GirlFriend
|
| 25793 | TCP | Vocaltec Address Server
|
| 27444 | UDP | Trinoo Daemon
|
| 27665 | TCP | Trinoo Master
|
| 31337 | UDP | cDc Back Orifice
|
| 32000 | TCP | Artisoft XtraMail v1.11
|
| 54320 | TCP | Back Orifice 2000 (TCP)
|
| 54321 | UDP | Back Orifice 2000 (UDP)
|