# Note: This database is designed for use from 
# http://66.82.75.68/pm/ports.html
# Revised 9/8/2003  RGF
|0|tcp|Reserved|
|0|udp|Reserved|
tcpmux|1|tcp|TCP Port Service Multiplexer|
tcpmux|1|udp|TCP Port Service Multiplexer|
compressnet|2|tcp|Management Utility|
compressnet|2|udp|Management Utility|
compressnet|3|tcp|Compression Process|
compressnet|3|udp|Compression Process|
mcserv|4|tcp|Midnight Commander Server|
sfssd|4|tcp|Self-certifying File System Server|
rje|5|tcp|Remote Job Entry|
rje|5|udp|Remote Job Entry|
|6|tcp|Unassigned|
|6|udp|Unassigned|
echo|7|tcp|Echo|
echo|7|udp|Echo|
|8|tcp|Unassigned|
|8|udp|Unassigned|
discard|9|tcp|Discard|
discard|9|udp|Discard|
chargen|9|udp||Chargen
|10|tcp|Unassigned|
|10|udp|Unassigned|
systat|11|tcp|Active Users|
systat|11|udp|Active Users|
|12|tcp|Unassigned|
|12|udp|Unassigned|
daytime|13|tcp|Daytime|
daytime|13|udp|Daytime|
|14|tcp|Unassigned|
|14|udp|Unassigned|
|15|tcp|Unassigned [was netstat]|
|15|udp|Unassigned|
|16|tcp|Unassigned|
|16|udp|Unassigned|
qotd|17|tcp|Quote of the Day|
qotd|17|udp|Quote of the Day|
msp|18|tcp|Message Send Protocol|
msp|18|udp|Message Send Protocol|
chargen|19|tcp|ttytst Source Character Generator|
chargen|19|udp|ttytst Source Character Generator|
ftp-data|20|tcp|File Transfer [Default Data]|
ftp-data|20|udp|File Transfer [Default Data]|
ftp|21|tcp|File Transfer [Control]|Back Construction, Blade Runner, Doly Trojan 1.1, Fore, 7TP trojan, Invisible FTP, Larva, MBT, Motiv, Ne, WebEx, WinCrash
ssh|22|tcp|SSH|abc
pc-anywhere|22|udp|PC-Anywhere|
telnet|23|tcp|Telnet|Prosiak (Telnet), Tiny Telnet Server, Truva ATL, Wingate
priv-mail|24|tcp|any private mail system|
priv-mail|24|udp|any private mail system|
smtp|25|tcp|Simple Mail Transfer|Ajan (Aji), AntiGen, Email Password Sender, Email Worms, Gip, Haebu Coceda, Happy99/Ska, Kuang2, Loveletter, ProMail trojan, Shtrilitz, Stealth, Tapiras, Terminator, WinPC, WinSpy
|26|tcp|Unassigned|
|26|udp|Unassigned|
nsw-fe|27|tcp|NSW User System FE|
nsw-fe|27|udp|NSW User System FE|
|28|tcp|Unassigned|
|28|udp|Unassigned|
msg-icp|29|tcp|MSG ICP|
msg-icp|29|udp|MSG ICP|
|30|tcp|Unassigned|
|30|udp|Unassigned|
msg-auth|31|tcp|MSG Authentication|Agent 31, Hackers Paradise, Masters Paradise, Masters Paradise.80
|32|tcp|Unassigned|
|32|udp|Unassigned|
dsp|33|tcp|Display Support Protocol|
dsp|33|udp|Display Support Protocol|
|34|tcp|Unassigned|
|34|udp|Unassigned|
priv-print|35|tcp|any private printer server|
priv-print|35|udp|any private printer server|
|36|tcp|Unassigned|
|36|udp|Unassigned|
time|37|tcp|Time|
time|37|udp|Time|
rap|38|tcp|Route Access Protocol|
rap|38|udp|Route Access Protocol|
rlp|39|tcp|Resource Location Protocol|
rlp|39|udp|Resource Location Protocol|
|40|tcp|Unassigned|
|40|udp|Unassigned|
graphics|41|tcp|Graphics|DeepThroat
nameserver|42|tcp|Host Name Server|
nameserver|42|udp|Host Name Server|
nicname|43|tcp|Whois|
nicname|43|udp|Whois|
mpm-flags|44|tcp|MPM FLAGS Protocol|
mpm-flags|44|udp|MPM FLAGS Protocol|
mpm|45|tcp|Message Processing Module [recv]|
mpm|45|udp|Message Processing Module [recv]|
mpm-snd|46|tcp|MPM [default send]|
mpm-snd|46|udp|MPM [default send]|
ni-ftp|47|tcp|NI FTP|
ni-ftp|47|udp|NI FTP|
auditd|48|tcp|Digital Audit Daemon|DRAT
auditd|48|udp|Digital Audit Daemon|DRAT
login|49|tcp|Login Host Protocol|
login|49|udp|Login Host Protocol|
re-mail-ck|50|tcp|Remote Mail Checking Protocol|
re-mail-ck|50|udp|Remote Mail Checking Protocol|
la-maint|51|tcp|IMP Logical Address Maintenance|
la-maint|51|udp|IMP Logical Address Maintenance|
xns-time|52|tcp|XNS Time Protocol|
xns-time|52|udp|XNS Time Protocol|
domain|53|tcp|Domain Name Server|Bonk (DoS)
domain|53|udp|Domain Name Server|
xns-ch|54|tcp|XNS Clearinghouse|
xns-ch|54|udp|XNS Clearinghouse|
isi-gl|55|tcp|ISI Graphics Language|
isi-gl|55|udp|ISI Graphics Language|
xns-auth|56|tcp|XNS Authentication|
xns-auth|56|udp|XNS Authentication|
|57|tcp|any private terminal access|
|57|udp|any private terminal access|
xns-mail|58|tcp|XNS Mail|DMSetup
|59|tcp|any private file service|DMSetup
|59|udp|any private file service|
|60|tcp|Unassigned|
|60|udp|Unassigned|
ni-mail|61|tcp|NI MAIL|
ni-mail|61|udp|NI MAIL|
acas|62|tcp|ACA Services|
acas|62|udp|ACA Services|
|63|tcp|Unassigned|
|63|udp|Unassigned|
covia|64|tcp|Communications Integrator (CI)|
covia|64|udp|Communications Integrator (CI)|
tacacs-ds|65|tcp|TACACS-Database Service|
tacacs-ds|65|udp|TACACS-Database Service|
sql net|66|tcp|Oracle SQL NET|
sql net|66|udp|Oracle SQL NET|
bootps|67|tcp|Bootstrap Protocol Server|
bootps|67|udp|Bootstrap Protocol Server|
bootpc|68|tcp|Bootstrap Protocol Client|
bootpc|68|udp|Bootstrap Protocol Client|
tftp|69|tcp|Trivial File Transfer|
tftp|69|udp|Trivial File Transfer|
gopher|70|tcp|Gopher|
gopher|70|udp|Gopher|
netrjs-1|71|tcp|Remote Job Service|
netrjs-1|71|udp|Remote Job Service|
netrjs-2|72|tcp|Remote Job Service|
netrjs-2|72|udp|Remote Job Service|
netrjs-3|73|tcp|Remote Job Service|
netrjs-3|73|udp|Remote Job Service|
netrjs-4|74|tcp|Remote Job Service|
netrjs-4|74|udp|Remote Job Service|
|75|tcp|any private dial out service|
|75|udp|any private dial out service|
deos|76|tcp|Distributed External Object Store|
deos|76|udp|Distributed External Object Store|
|77|tcp|any private RJE service|
|77|udp|any private RJE service|
vettcp|78|tcp|vettcp|
vettcp|78|udp|vettcp|
finger|79|tcp|Finger|Firehotcker
www-http|80|tcp|World Wide Web HTTP|Back End, Executor, Hooker, RingZero
hosts2-ns|81|tcp|HOSTS2 Name Server|
hosts2-ns|81|udp|HOSTS2 Name Server|
xfer|82|tcp|XFER Utility|
xfer|82|udp|XFER Utility|
mit-ml-dev|83|tcp|MIT ML Device|
mit-ml-dev|83|udp|MIT ML Device|
ctf|84|tcp|Common Trace Facility|
ctf|84|udp|Common Trace Facility|
mit-ml-dev|85|tcp|MIT ML Device|
mit-ml-dev|85|udp|MIT ML Device|
mfcobol|86|tcp|Micro Focus Cobol|
mfcobol|86|udp|Micro Focus Cobol|
|87|tcp|any private terminal link|
|87|udp|any private terminal link|
kerberos|88|tcp|Kerberos|
kerberos|88|udp|Kerberos|
su-mit-tg|89|tcp|SU/MIT Telnet Gateway|
su-mit-tg|89|udp|SU/MIT Telnet Gateway|
dnsix|90|tcp|DNSIX Securit Attribute Token Map|
dnsix|90|udp|DNSIX Securit Attribute Token Map|
mit-dov|91|tcp|MIT Dover Spooler|
mit-dov|91|udp|MIT Dover Spooler|
npp|92|tcp|Network Printing Protocol|
npp|92|udp|Network Printing Protocol|
dcp|93|tcp|Device Control Protocol|
dcp|93|udp|Device Control Protocol|
objcall|94|tcp|Tivoli Object Dispatcher|
objcall|94|udp|Tivoli Object Dispatcher|
supdup|95|tcp|SUPDUP|
supdup|95|udp|SUPDUP|
dixie|96|tcp|DIXIE Protocol Specification|
dixie|96|udp|DIXIE Protocol Specification|
swift-rvf|97|tcp|Swift Remote Vitural File Protocol|
swift-rvf|97|udp|Swift Remote Vitural File Protocol|
|98|tcp|linuxconf (inetd)|
tacnews|98|tcp|TAC News|
tacnews|98|udp|TAC News|
metagram|99|tcp|Metagram Relay|Hidden port V2.0
metagram|99|udp|Metagram Relay|
newacct|100|tcp|[unauthorized use]|
hostname|101|tcp|NIC Host Name Server|
hostname|101|udp|NIC Host Name Server|
iso-tsap|102|tcp|ISO-TSAP|
iso-tsap|102|udp|ISO-TSAP|
gppitnp|103|tcp|Genesis Point-to-Point Trans Net|
gppitnp|103|udp|Genesis Point-to-Point Trans Net|
x400|103|tcp|ISO Mail
acr-nema|104|tcp|ACR-NEMA Digital Imag. & Comm. 300|
acr-nema|104|udp|ACR-NEMA Digital Imag. & Comm. 300|
x400-snd|104|tcp|ISO Mail
csnet-ns|105|tcp|Mailbox Name Nameserver|
csnet-ns|105|udp|Mailbox Name Nameserver|
3com-tsmux|106|tcp|3COM-TSMUX|
3com-tsmux|106|udp|3COM-TSMUX|
rtelnet|107|tcp|Remote Telnet Service|
rtelnet|107|udp|Remote Telnet Service|
snagas|108|tcp|SNA Gateway Access Server|
snagas|108|udp|SNA Gateway Access Server|
pop2|109|tcp|Post Office Protocol - Version 2|b00ger-rpc
pop2|109|udp|Post Office Protocol - Version 2|
pop3|110|tcp|Post Office Protocol - Version 3|ProMail trojan
sunrpc|111|tcp|SUN Remote Procedure Call|
sunrpc|111|udp|SUN Remote Procedure Call|
portmapper|111|tcp|RPC Portmapper|
portmapper|111|udp|RPC Portmapper|
mcidas|112|tcp|McIDAS Data Transmission Protocol|
mcidas|112|udp|McIDAS Data Transmission Protocol|
auth|113|tcp|Authentication Service|Invisible Identd Deamon, Kazimas
auth|113|udp|Authentication Service|
audionews|114|tcp|Audio News Multicast|
audionews|114|udp|Audio News Multicast|
sftp|115|tcp|Simple File Transfer Protocol|
sftp|115|udp|Simple File Transfer Protocol|
ansanotify|116|tcp|ANSA REX Notify|
ansanotify|116|udp|ANSA REX Notify|
online_gaming|116|tcp|Online gaming|
uucp-path|117|tcp|UUCP Path Service|
uucp-path|117|udp|UUCP Path Service|
sqlserv|118|tcp|SQL Services|Infector 1.4.2
sqlserv|118|udp|SQL Services|
online_gaming|118|tcp|Online gaming|
nntp|119|tcp|Network News Transfer Protocol|Happy 99/Ska
nntp|119|udp|Network News Transfer Protocol|
cfdptkt|120|tcp|CFDPTKT|
cfdptkt|120|udp|CFDPTKT|
erpc|121|tcp|Encore Expedited Remote Pro.Call|BO JammerKillah, JammerKillah
smakynet|122|tcp|SMAKYNET|
smakynet|122|udp|SMAKYNET|
ntp|123|tcp|Network Time Protocol|Net Controller
ntp|123|udp|Network Time Protocol|
ansatrader|124|tcp|ANSA REX Trader|
ansatrader|124|udp|ANSA REX Trader|
locus-map|125|tcp|Locus PC-Interface Net Map Ser|
locus-map|125|udp|Locus PC-Interface Net Map Ser|
unitary|126|tcp|Unisys Unitary Login|
unitary|126|udp|Unisys Unitary Login|
locus-con|127|tcp|Locus PC-Interface Conn Server|
locus-con|127|udp|Locus PC-Interface Conn Server|
gss-xlicen|128|tcp|GSS X License Verification|
gss-xlicen|128|udp|GSS X License Verification|
pwdgen|129|tcp|Password Generator Protocol|
pwdgen|129|udp|Password Generator Protocol|
cisco-fna|130|tcp|cisco FNATIVE|
cisco-fna|130|udp|cisco FNATIVE|
cisco-tna|131|tcp|cisco TNATIVE|
cisco-tna|131|udp|cisco TNATIVE|
cisco-sys|132|tcp|cisco SYSMAINT|
cisco-sys|132|udp|cisco SYSMAINT|
statsrv|133|tcp|Statistics Service|Farnaz
statsrv|133|udp|Statistics Service|
ingres-net|134|tcp|INGRES-NET Service|
ingres-net|134|udp|INGRES-NET Service|
loc-srv|135|tcp|Microsoft DCE Locator (end-point mapper)|
loc-srv|135|udp|Microsoft DCE Locator (end-point mapper)|
profile|136|tcp|PROFILE Naming System|
profile|136|udp|PROFILE Naming System|
netbios-ns|137|tcp|NETBIOS Name Service|
netbios-ns|137|udp|NETBIOS Name Service|
netbios-dgm|138|tcp|NETBIOS Datagram Service|
netbios-dgm|138|udp|NETBIOS Datagram Service|
netbios-ssn|139|tcp|NETBIOS Session Service|Winnuke
netbios-ssn|139|udp|NETBIOS Session Service|
emfis-data|140|tcp|EMFIS Data Service|
emfis-data|140|udp|EMFIS Data Service|
emfis-cntl|141|tcp|EMFIS Control Service|
emfis-cntl|141|udp|EMFIS Control Service|
bl-idm|142|tcp|Britton-Lee IDM|
bl-idm|142|udp|Britton-Lee IDM|
imap2|143|tcp|Interim Mail Access Protocol v2|
imap2|143|udp|Interim Mail Access Protocol v2|
news|144|tcp|NewS|
news|144|udp|NewS|
uaac|145|tcp|UAAC Protocol|
uaac|145|udp|UAAC Protocol|
iso-tp0|146|tcp|ISO-IP0|Infector 1.x
iso-tp0|146|udp|ISO-IP0|
iso-ip|147|tcp|ISO-IP|
iso-ip|147|udp|ISO-IP|
cronus|148|tcp|CRONUS-SUPPORT|
cronus|148|udp|CRONUS-SUPPORT|
aed-512|149|tcp|AED 512 Emulation Service|
aed-512|149|udp|AED 512 Emulation Service|
sql-net|150|tcp|SQL-NET|
sql-net|150|udp|SQL-NET|
hems|151|tcp|HEMS|
hems|151|udp|HEMS|
bftp|152|tcp|Background File Transfer Program|
bftp|152|udp|Background File Transfer Program|
sgmp|153|tcp|SGMP|
sgmp|153|udp|SGMP|
netsc-prod|154|tcp|NETSC|
netsc-prod|154|udp|NETSC|
netsc-dev|155|tcp|NETSC|
netsc-dev|155|udp|NETSC|
sqlsrv|156|tcp|SQL Service|
sqlsrv|156|udp|SQL Service|
knet-cmp|157|tcp|KNET/VM Command/Message Protocol|
knet-cmp|157|udp|KNET/VM Command/Message Protocol|
pcmail-srv|158|tcp|PCMail Server|
pcmail-srv|158|udp|PCMail Server|
nss-routing|159|tcp|NSS-Routing|
nss-routing|159|udp|NSS-Routing|
sgmp-traps|160|tcp|SGMP-TRAPS|
sgmp-traps|160|udp|SGMP-TRAPS|
snmp|161|tcp|SNMP, NetFinity|
snmp|161|udp|SNMP, NetFinity|
snmptrap|162|tcp|SNMPTRAP|
snmptrap|162|udp|SNMPTRAP|
cmip-man|163|tcp|CMIP/TCP Manager|
cmip-man|163|udp|CMIP/TCP Manager|
cmip-agent|164|tcp|CMIP/TCP Agent|
smip-agent|164|udp|CMIP/TCP Agent|
xns-courier|165|tcp|Xerox|
xns-courier|165|udp|Xerox|
s-net|166|tcp|Sirius Systems|
s-net|166|udp|Sirius Systems|
namp|167|tcp|NAMP|
namp|167|udp|NAMP|
rsvd|168|tcp|RSVD|
rsvd|168|udp|RSVD|
send|169|tcp|SEND|
send|169|udp|SEND|
print-srv|170|tcp|Network PostScript|A-Trojan
print-srv|170|udp|Network PostScript|
multiplex|171|tcp|Network Innovations Multiplex|
multiplex|171|udp|Network Innovations Multiplex|
cl|172|tcp|Network Innovations CL/1|
cl|172|udp|Network Innovations CL/1|
xyplex-mux|173|tcp|Xyplex|
xyplex-mux|173|udp|Xyplex|
mailq|174|tcp|MAILQ|
mailq|174|udp|MAILQ|
vmnet|175|tcp|VMNET|
vmnet|175|udp|VMNET|
genrad-mux|176|tcp|GENRAD-MUX|
genrad-mux|176|udp|GENRAD-MUX|
xdmcp|177|tcp|X Display Manager Control Protocol|
xdmcp|177|udp|X Display Manager Control Protocol|
nextstep|178|tcp|NextStep Window Server|
NextStep|178|udp|NextStep Window Server|
bgp|179|tcp|Border Gateway Protocol|
bgp|179|udp|Border Gateway Protocol|
ris|180|tcp|Intergraph|
ris|180|udp|Intergraph|
unify|181|tcp|Unify|
unify|181|udp|Unify|
audit|182|tcp|Unisys Audit SITP|
audit|182|udp|Unisys Audit SITP|
ocbinder|183|tcp|OCBinder|
ocbinder|183|udp|OCBinder|
ocserver|184|tcp|OCServer|
ocserver|184|udp|OCServer|
remote-kis|185|tcp|Remote-KIS|
remote-kis|185|udp|Remote-KIS|
kis|186|tcp|KIS Protocol|
kis|186|udp|KIS Protocol|
aci|187|tcp|Application Communication Interface|
aci|187|udp|Application Communication Interface|
mumps|188|tcp|Plus Five's MUMPS|
mumps|188|udp|Plus Five's MUMPS|
qft|189|tcp|Queued File Transport|
qft|189|udp|Queued File Transport|
gacp|190|tcp|Gateway Access Control Protocol|
cacp|190|udp|Gateway Access Control Protocol|
prospero|191|tcp|Prospero Directory Service|
prospero|191|udp|Prospero Directory Service|
osu-nms|192|tcp|OSU Network Monitoring System|
osu-nms|192|udp|OSU Network Monitoring System|
srmp|193|tcp|Spider Remote Monitoring Protocol|
srmp|193|udp|Spider Remote Monitoring Protocol|
irc|194|tcp|Internet Relay Chat Protocol|
irc|194|udp|Internet Relay Chat Protocol|
dn6-nlm-aud|195|tcp|DNSIX Network Level Module Audit|
dn6-nlm-aud|195|udp|DNSIX Network Level Module Audit|
dn6-smm-red|196|tcp|DNSIX Session Mgt Module Audit Redir|
dn6-smm-red|196|udp|DNSIX Session Mgt Module Audit Redir|
dls|197|tcp|Directory Location Service|
dls|197|udp|Directory Location Service|
dls-mon|198|tcp|Directory Location Service Monitor|
dls-mon|198|udp|Directory Location Service Monitor|
smux|199|tcp|SMUX|
smux|199|udp|SMUX|
src|200|tcp|IBM System Resource Controller|
src|200|udp|IBM System Resource Controller|
at-rtmp|201|tcp|AppleTalk Routing Maintenance|
at-rtmp|201|udp|AppleTalk Routing Maintenance|
at-nbp|202|tcp|AppleTalk Name Binding|
at-nbp|202|udp|AppleTalk Name Binding|
at-3|203|tcp|AppleTalk Unused|
at-3|203|udp|AppleTalk Unused|
at-echo|204|tcp|AppleTalk Echo|
at-echo|204|udp|AppleTalk Echo|
at-5|205|tcp|AppleTalk Unused|
at-5|205|udp|AppleTalk Unused|
at-zis|206|tcp|AppleTalk Zone Information|
at-zis|206|udp|AppleTalk Zone Information|
at-7|207|tcp|AppleTalk Unused|
at-7|207|udp|AppleTalk Unused|
at-8|208|tcp|AppleTalk Unused|
at-8|208|udp|AppleTalk Unused|
tam|209|tcp|Trivial Authenticated Mail Protocol|
tam|209|udp|Trivial Authenticated Mail Protocol|
z39.50|210|tcp|ANSI Z39.50|
z39.50|210|udp|ANSI Z39.50|
914c/g|211|tcp|Texas Instruments 914C/G Terminal|
914c/g|211|udp|Texas Instruments 914C/G Terminal|
anet|212|tcp|ATEXSSTR|
anet|212|udp|ATEXSSTR|
ipx|213|tcp|IPX|
ipx|213|udp|IPX|
vmpwscs|214|tcp|VM PWSCS|
vmpwscs|214|udp|VM PWSCS|
softpc|215|tcp|Insignia Solutions|
softpc|215|udp|Insignia Solutions|
atls|216|tcp|Access Technology License Server|
atls|216|udp|Access Technology License Server|
dbase|217|tcp|dBASE Unix|
dbase|217|udp|dBASE Unix|
mpp|218|tcp|Netix Message Posting Protocol|
mpp|218|udp|Netix Message Posting Protocol|
uarps|219|tcp|Unisys ARPs|
uarps|219|udp|Unisys ARPs|
imap3|220|tcp|Interactive Mail Access Protocol v3|
imap3|220|udp|Interactive Mail Access Protocol v3|
fln-spx|221|tcp|Berkeley rlogind with SPX auth|
fln-spx|221|udp|Berkeley rlogind with SPX auth|
rsh-spx|222|tcp|Berkeley rshd with SPX auth|
rsh-spx|222|udp|Berkeley rshd with SPX auth|
cdc|223|tcp|Certificate Distribution Center|
cdc|223|udp|Certificate Distribution Center|
masqdialer|224|tcp|MASQ Dialer|
|242|tcp|Unassigned|
|242|udp|Unassigned|
sur-meas|243|tcp|Survey Measurement|
sur-meas|243|udp|Survey Measurement|
|244|tcp|Unassigned|
|244|udp|Unassigned|
link|245|tcp|LINK|
link|245|udp|LINK|
dsp3270|246|tcp|Display Systems Protocol|
dsp3270|246|udp|Display Systems Protocol|
|315|tcp||The Invasor
pdap|344|tcp|Prospero Data Access Protocol|
pdap|344|udp|Prospero Data Access Protocol|
pawserv|345|tcp|Perf Analysis Workbench|
pawserv|345|udp|Perf Analysis Workbench|
zserv|346|tcp|Zebra server|
zserv|346|udp|Zebra server|
fatserv|347|tcp|Fatmen Server|
fatserv|347|udp|Fatmen Server|
csi-sgwp|348|tcp|Cabletron Management Protocol|
csi-sgwp|348|udp|Cabletron Management Protocol|
clearcase|371|tcp|Clearcase|
clearcase|371|udp|Clearcase|
ulistserv|372|tcp|Unix Listserv|
ulistserv|372|udp|Unix Listserv|
legent-1|373|tcp|Legent Corporation|
legent-1|373|udp|Legent Corporation|
legent-2|374|tcp|Legent Corporation|
legent-2|374|udp|Legent Corporation|
hassle|375|tcp|Hassle|
hassle|375|udp|Hassle|
nip|376|tcp|Amiga Envoy Network Inquiry Proto|
nip|376|udp|Amiga Envoy Network Inquiry Proto|
tnETOS|377|tcp|NEC Corporation|
tnETOS|377|udp|NEC Corporation|
dsETOS|378|tcp|NEC Corporation|
dsETOS|378|udp|NEC Corporation|
is99c|379|tcp|TIA/EIA/IS-99 modem client|
is99c|379|udp|TIA/EIA/IS-99 modem client|
is99s|380|tcp|TIA/EIA/IS-99 modem server|
is99s|380|udp|TIA/EIA/IS-99 modem server|
hp-collector|381|tcp|hp performance data collector|
hp-collector|381|udp|hp performance data collector|
hp-managed-node|382|tcp|hp performance data managed node|
hp-managed-node|382|udp|hp performance data managed node|
hp-alarm-mgr|383|tcp|hp performance data alarm manager|
hp-alarm-mgr|383|udp|hp performance data alarm manager|
arns|384|tcp|A Remote Network Server System|
arns|384|udp|A Remote Network Server System|
ibm-app|385|tcp|IBM Application|
ibm-app|385|tcp|IBM Application|
asa|386|tcp|ASA Message Router Object Def.|
asa|386|udp|ASA Message Router Object Def.|
aurp|387|tcp|Appletalk Update-Based Routing Pro.|
aurp|387|udp|Appletalk Update-Based Routing Pro.|
unidata-ldm|388|tcp|Unidata LDM Version 4|
unidata-ldm|388|udp|Unidata LDM Version 4|
ldap|389|tcp|Lightweight Directory Access Protocol|
ldap|389|udp|Lightweight Directory Access Protocol|
uis|390|tcp|UIS|
uis|390|udp|UIS|
synotics-relay|391|tcp|SynOptics SNMP Relay Port|
synotics-relay|391|udp|SynOptics SNMP Relay Port|
synotics-broker|392|tcp|SynOptics Port Broker Port|
synotics-broker|392|udp|SynOptics Port Broker Port|
dis|393|tcp|Data Interpretation System|
dis|393|udp|Data Interpretation System|
embl-ndt|394|tcp|EMBL Nucleic Data Transfer|
embl-ndt|394|udp|EMBL Nucleic Data Transfer|
netcp|395|tcp|NETscout Control Protocol|
netcp|395|udp|NETscout Control Protocol|
netware-ip|396|tcp|Novell Netware over IP|
netware-ip|396|udp|Novell Netware over IP|
mptn|397|tcp|Multi Protocol Trans. Net.|
mptn|397|udp|Multi Protocol Trans. Net.|
kryptolan|398|tcp|Kryptolan|
kryptolan|398|udp|Kryptolan|
|399|tcp|Unassigned|
|399|udp|Unassigned|
work-sol|400|tcp|Workstation Solutions|
work-sol|400|udp|Workstation Solutions|
ups|401|tcp|Uninterruptible Power Supply|
ups|401|udp|Uninterruptible Power Supply|
genie|402|tcp|Genie Protocol|
genie|402|udp|Genie Protocol|
decap|403|tcp|decap|
decap|403|udp|decap|
nced|404|tcp|nced|
nced|404|udp|nced|
ncld|405|tcp|ncld|
ncld|405|udp|ncld|
imsp|406|tcp|Interactive Mail Support Protocol|
imsp|406|udp|Interactive Mail Support Protocol|
timbuktu|407|tcp|Timbuktu|
timbuktu|407|udp|Timbuktu|
prm-sm|408|tcp|Prospero Resource Manager Sys. Man.|
prm-sm|408|udp|Prospero Resource Manager Sys. Man.|
prm-nm|409|tcp|Prospero Resource Manager Node Man.|
prm-nm|409|udp|Prospero Resource Manager Node Man.|
decladebug|410|tcp|DECLadebug Remote Debug Protocol|
decladebug|410|udp|DECLadebug Remote Debug Protocol|
rmt|411|tcp|Remote MT Protocol|
rmt|411|udp|Remote MT Protocol|
synoptics-trap|412|tcp|Trap Convention Port|
synoptics-trap|412|udp|Trap Convention Port|
smsp|413|tcp|SMSP|
smsp|413|udp|SMSP|
infoseek|414|tcp|InfoSeek|
infoseek|414|udp|InfoSeek|
bnet|415|tcp|BNet|
bnet|415|udp|BNet|
silverplatter|416|tcp|Silverplatter|
silverplatter|416|udp|Silverplatter|
onmux|417|tcp|Onmux|
onmux|417|udp|Onmux|
hyper-g|418|tcp|Hyper-G|
hyper-g|418|udp|Hyper-G|
ariel1|419|tcp|Ariel|
ariel1|419|udp|Ariel|
smpte|420|tcp|SMPTE|
smpte|420|udp|SMPTE|
ariel2|421|tcp|Ariel|TCP Wrappers
ariel3|422|tcp|Ariel|
ariel3|422|udp|Ariel|
opc-job-start|423|tcp|IBM Operations Planning and Control Start|
opc-job-start|423|udp|IBM Operations Planning and Control Start|
opc-job-track|424|tcp|IBM Operations Planning and Control Track|
opc-job-track|424|udp|IBM Operations Planning and Control Track|
icad-el|425|tcp|ICAD|
icad-el|425|udp|ICAD|
smartsdp|426|tcp|smartsdp|
smartsdp|426|udp|smartsdp|
svrloc|427|tcp|Server Location|
svrloc|427|udp|Server Location|
ocs_cmu|428|tcp|OCS_CMU|
ocs_cmu|428|udp|OCS_CMU|
ocs_amu|429|tcp|OCS_AMU|
ocs_amu|429|udp|OCS_AMU|
utmpsd|430|tcp|UTMPSD|
utmpsd|430|udp|UTMPSD|
utmpcd|431|tcp|UTMPCD|
utmpcd|431|udp|UTMPCD|
iasd|432|tcp|IASD|
iasd|432|udp|IASD|
nnsp|433|tcp|NNSP: Network News Transfer Protocol|
nnsp|433|udp|NNSP: Network News Transfer Protocol|
mobileip-agent|434|tcp|MobileIP-Agent|
mobileip-agent|434|udp|MobileIP-Agent|
mobilip-mn|435|tcp|MobilIP-MN|
mobilip-mn|435|udp|MobilIP-MN|
dna-cml|436|tcp|DNA-CML|
dna-cml|436|udp|DNA-CML|
comscm|437|tcp|comscm|
comscm|437|udp|comscm|
dsfgw|438|tcp|dsfgw|
dsfgw|438|udp|dsfgw|
dasp|439|tcp|dasp|Thomas Obermair|
dasp|439|udp|dasp|tommy@inlab.m.eunet.de|
sgcp|440|tcp|sgcp|
sgcp|440|udp|sgcp|
decvms-sysmgt|441|tcp|decvms-sysmgt|
decvms-sysmgt|441|udp|decvms-sysmgt|
cvc_hostd|442|tcp|cvc_hostd|
cvc_hostd|442|udp|cvc_hostd|
https|443|tcp|https (SSL)|MCom
https|443|udp|https (SSL)|MCom
snpp|444|tcp|Simple Network Paging Protocol|
snpp|444|udp|Simple Network Paging Protocol|
microsoft-ds|445|tcp|Microsoft-DS|W32/Deborm.worm
microsoft-ds|445|udp|Microsoft-DS|
ddm-rdb|446|tcp|DDM-RDB|
ddm-rdb|446|udp|DDM-RDB|
ddm-dfm|447|tcp|DDM-RFM|
ddm-dfm|447|udp|DDM-RFM|
ddm-byte|448|tcp|DDM-BYTE|
ddm-byte|448|udp|DDM-BYTE|
as-servermap|449|tcp|AS Server Mapper|
as-servermap|449|udp|AS Server Mapper|
tserver|450|tcp|TServer|
tserver|450|udp|TServer|
|456|tcp||Hackers Paradise
ipsec-doi|500|udp|IPSec-DOI (RFC 2407)|
exec|512|tcp|remote process execution|
biff|512|udp|used by mail system to notify users|
login|513|tcp|remote login (e.g., telnet)|
who|513|udp|whod|
cmd|514|tcp|like exec, but automatic|
syslog|514|udp|syslogd system logging|
printer|515|tcp|spooler|
printer|515|udp|spooler|
|516|tcp|Unassigned|
|516|udp|Unassigned|
talk|517|tcp|Talk|
talk|517|udp|Talk|
ntalk|518|tcp||
ntalk|518|udp||
utime|519|tcp|unixtime|
utime|519|udp|unixtime|
efs|520|tcp|extended file name server|
route|520|udp|local routing process (router, routed)|
timed|525|tcp|timeserver|
timed|525|udp|timeserver|
tempo|526|tcp|newdate|
tempo|526|udp|newdate|
courier|530|tcp|rpc|
courier|530|udp|rpc|
conference|531|tcp|chat|Rasmin
netnews|532|tcp|readnews|
netnews|532|udp|readnews|
netwall|533|tcp|for emergency broadcasts|
netwall|533|udp|for emergency broadcasts|
gdomap|538|tcp|GNUstep distributed objects|
gdomap|538|udp|GNUstep distributed objects|
apertus-ldp|539|tcp|Apertus Technologies Load Determination|
apertus-ldp|539|udp|Apertus Technologies Load Determination|
uucp|540|tcp|uucpd|
uucp|540|udp|uucpd|
uucp-rlogin|541|tcp|uucp-rlogin|
uucp-rlogin|541|udp|uucp-rlogin|
|542|tcp|Unassigned|
|542|udp|Unassigned|
klogin|543|tcp|Kerberos authenticated rlogin|
klogin|543|udp|Kerberos authenticated rlogin|
kshell|544|tcp|krcmd|
kshell|544|udp|krcmd|
new-rwho|550|tcp|new-who|
new-rwho|550|udp|new-who|
rtsp|554|tcp|Real Time Streaming Protocol|
dsf|555|tcp||iNi-Killer, Phase Zero, Stealth Spy, NeTadmin
remotefs|556|tcp|rfs server|
remotefs|556|udp|rfs server|
rmonitor|560|tcp|rmonitord|
rmonitor|560|udp|rmonitord|
monitor|561|tcp||
monitor|561|udp||
chshell|562|tcp|chcmd|
chshell|562|udp|chcmd|
|563|tcp|Unassigned|
|563|udp|Unassigned|
9pfs|564|tcp|plan 9 file service|
9pfs|564|udp|plan 9 file service|
whoami|565|tcp|whoami|
whoami|565|udp|whoami|
meter|570|tcp|demon|
meter|570|udp|demon|
meter|571|tcp|udemon|
meter|571|udp|udemon|
http-rpc-epmap|593|tcp|HTTP RPC Ep Map|
http-rpc-epmap|593|udp|HTTP RPC Ep Map|
ipcserver|600|tcp|Sun IPC server|
ipcserver|600|udp|Sun IPC server|
nqs|607|tcp|nqs|
nqs|607|udp|nqs|
urm|606|tcp|Cray Unified Resource Manager|Secret Service
urm|606|udp|Cray Unified Resource Manager|
sift-uft|608|tcp|Sender-Initiated/Unsolicited File Transfer|
sift-uft|608|udp|Sender-Initiated/Unsolicited File Transfer|
npmp-trap|609|tcp|npmp-trap|
npmp-trap|609|udp|npmp-trap|
npmp-local|610|tcp|npmp-local|
npmp-local|610|udp|npmp-local|
npmp-gui|611|tcp|npmp-gui|
npmp-gui|611|udp|npmp-gui|
ginad|634|tcp|ginad|
ginad|634|udp|ginad|
rlzdbase|635|tcp|RLZ DBase|
rlzdbase|635|udp|RLZ DBase|
ldap-tls|636|tcp|ldap protocol over TLS/SSL (was sldap)|
ldap-tls|636|udp|ldap protocol over TLS/SSL (was sldap)|
mdqs|666|tcp||Attack FTP, Cain & Abel, Back Construction, Serve U, Peur de Rien FTP, Satanz Backdoor, Shadow Phyre
doom|666|tcp|doom Id Software|Attack FTP, Satanz Backdoor
|667|tcp||SniperNet
|669|tcp||DP Trojan
|692|tcp||GayOL
elcsd|704|tcp|errlog copy/server daemon|
elcsd|704|udp|errlog copy/server daemon|
entrustmanager|709|tcp|EntrustManager|
entrustmanager|709|udp|EntrustManager|
netviewdm1|729|tcp|IBM NetView DM/6000 Server/Client|
netviewdm1|729|udp|IBM NetView DM/6000 Server/Client|
netviewdm2|730|tcp|IBM NetView DM/6000 send/tcp||
netviewdm2|730|udp|IBM NetView DM/6000 send/tcp||
netviewdm3|731|tcp|IBM NetView DM/6000 receive/tcp||
netviewdm3|731|udp|IBM NetView DM/6000 receive/tcp||
netgw|741|tcp|netGW|
netgw|741|udp|netGW|
netrcs|742|tcp|Network based Rev. Cont. Sys.|
netrcs|742|udp|Network based Rev. Cont. Sys.|
flexlm|744|tcp|Flexible License Manager|
flexlm|744|udp|Flexible License Manager|
fujitsu-dev|747|tcp|Fujitsu Device Control|
fujitsu-dev|747|udp|Fujitsu Device Control|
ris-cm|748|tcp|Russell Info Sci Calendar Manager|
ris-cm|748|udp|Russell Info Sci Calendar Manager|
kerberos-adm|749|tcp|kerberos administration|
kerberos-adm|749|udp|kerberos administration|
rfile|750|tcp||
loadav|750|udp||
pump|751|tcp||
pump|751|udp||
qrh|752|tcp||
qrh|752|udp||
rrh|753|tcp||
rrh|753|udp||
tell|754|tcp|send|
tell|754|udp|send|
nlogin|758|tcp||
nlogin|758|udp||
con|759|tcp||
con|759|udp||
ns|760|tcp||
ns|760|udp||
rxe|761|tcp||
rxe|761|udp||
quotad|762|tcp||
quotad|762|udp||
cycleserv|763|tcp||
cycleserv|763|udp||
omserv|764|tcp||
omserv|764|udp||
webster|765|tcp||
webster|765|udp||
phonebook|767|tcp|phone|
phonebook|767|udp|phone|
vid|769|tcp||
vid|769|udp||
cadlock|770|tcp||
cadlock|770|udp||
rtip|771|tcp||
rtip|771|udp||
cycleserv2|772|tcp||
cycleserv2|772|udp||
submit|773|tcp||
notify|773|udp||
rpasswd|774|tcp||
acmaint_dbd|774|udp||
entomb|775|tcp||
acmaint_transd|775|udp||
wpages|776|tcp||
wpages|776|udp||
|777|tcp||AimSpy
wpgs|780|tcp||
wpgs|780|udp||
concert|786|tcp|Concert|
concert|786|udp|Concert|
mdbs_daemon|800|tcp||
mdbs_daemon|800|udp||
device|801|tcp||
device|801|udp||
|808|tcp||WinHole
|815|tcp||Everyone's Darling
|911|tcp||Dark Shadow
xtreelic|996|tcp|Central Point Software|
xtreelic|996|udp|Central Point Software|
maitrd|997|tcp||
maitrd|997|udp||
busboy|998|tcp||
puparp|998|udp||
garcon|999|tcp||DeepThroat, WinSatan
puprouter|999|tcp||DeepThroat
cadlock|1000|tcp||Der Spaeher 3
ock|1000|udp||
|1001|tcp||Der Spaeher 3, Le Guardian, Silencer, WebEx
|1003|tcp||BackDoor 2.0x
|1008|tcp||Li0n worm root shell
|1010|tcp||Doly Trojan 1.3 & 1.35, CafeIni 0.9 (1010:1100)
|1011|tcp||Doly Trojan 1.1/1.2
|1012|tcp||Doly Trojan
|1015|tcp||Doly Trojan 1.5
|1016|tcp||Doly Trojan 1.6
|1020|tcp||Vampire
|1023|tcp|Reserved|
rexd|1024|tcp|RPC-rexd|Latinus, NetSpy, Psyber Streaming Server 
blackjack|1025|tcp|network blackjack|NetSpy, Maverick's Matrix,  RemoteStorm
blackjack|1025|udp|network blackjack|
ICQ|1027|tcp|ICQ|
mountd|1027|udp|RPC-mountd|
ICQ|1029|tcp|ICQ|InCommand
iad1|1030|tcp|BBN IAD|
iad1|1030|udp|BBN IAD|
iad2|1031|tcp|BBN IAD|
iad2|1031|udp|BBN IAD|
iad3|1032|tcp|BBN IAD, ICQ|
iad3|1032|udp|BBN IAD|
|1033|tcp||NetSpy
|1042|tcp||Bla 1.1
|1045|tcp||Rasmin
|1047|tcp||GateCrasher.b, GateCrasher.c
|1050|tcp||MiniCommand
instl_boots|1067|tcp|Installation Bootstrap Proto. Serv.|
instl_boots|1067|udp|Installation Bootstrap Proto. Serv.|
instl_bootc|1068|tcp|Installation Bootstrap Proto. Cli.|
instl_bootc|1068|udp|Installation Bootstrap Proto. Cli.|
socks|1080|tcp|Socks|WinHole, Wingate Socks Proxy
socks|1080|udp|Socks|
|1081|tcp||WinHole
|1082|tcp||WinHole
ansoft-lm-1|1083|tcp|Anasoft License Manager|WinHole
ansoft-lm-1|1083|udp|Anasoft License Manager|
ansoft-lm-2|1084|tcp|Anasoft License Manager|
ansoft-lm-2|1084|udp|Anasoft License Manager|
|1090|tcp||Xtreme
|1095|tcp||Rat
|1097|tcp||Rat
|1098|tcp||Rat
|1099|tcp||BFevolution, Rat
|1100|tcp||CafeIni 0.9 (1010:1100)
mSQL|1114|tcp|Linux mSQL|
|1137|tcp||MTX
nfa|1155|tcp|Network File Access|
nfa|1155|udp|Network File Access|
|1170|tcp||Psyber Streaming Server, Streaming Audio Trojan, Voice
|1200|tcp||NoBackO
|1201|tcp||NoBackO
|1207|tcp||SoftWar
|1208|tcp||Infector 1.3 & 1.4.1
|1212|tcp||Kaos
nerv|1222|tcp|SNI R&D network|
nerv|1222|udp|SNI R&D network|
|1225|tcp||Scarab
|1234|tcp||Ultors Trojan, SubSeven 2.0
nessus|1241|tcp|Nessus|
|1243|tcp||BackDoor-G, SubSeven, SubSeven Apocalypse,  Tiles
|1245|tcp||VooDoo Doll
hermes|1248|tcp||
hermes|1248|udp||
|1255|udp||Scarab
|1256|udp||Project nEXT
|1269|tcp||Maverick's Matrix
|1313|tcp||NETrojan
|1338|tcp||Millenium Worm
alta-ana-lm|1346|tcp|Alta Analytics License Manager|
alta-ana-lm|1346|udp|Alta Analytics License Manager|
bbn-mmc|1347|tcp|multi media conferencing|
bbn-mmc|1347|udp|multi media conferencing|
bbn-mmx|1348|tcp|multi media conferencing|
bbn-mmx|1348|udp|multi media conferencing|
sbook|1349|tcp|Registration Network Protocol|Back Orifice DLL
sbook|1349|udp|Registration Network Protocol|Back Orifice DLL
editbench|1350|tcp|Registration Network Protocol|
editbench|1350|udp|Registration Network Protocol|
equationbuilder|1351|tcp|Digital Tool Works (MIT)|
equationbuilder|1351|udp|Digital Tool Works (MIT)|
lotusnote|1352|tcp|Lotus Notes/Domino|
lotusnote|1352|udp|Lotus Notes/Domino|
relief|1353|tcp|Relief Consulting|
relief|1353|udp|Relief Consulting|
rightbrain|1354|tcp|RightBrain Software|
rightbrain|1354|udp|RightBrain Software|
intuitive edge|1355|tcp|Intuitive Edge|
intuitive edge|1355|udp|Intuitive Edge|
cuillamartin|1356|tcp|CuillaMartin Company|
cuillamartin|1356|udp|CuillaMartin Company|
pegboard|1357|tcp|Electronic PegBoard|
pegboard|1357|udp|Electronic PegBoard|
connlcli|1358|tcp|CONNLCLI|
connlcli|1358|udp|CONNLCLI|
ftsrv|1359|tcp|FTSRV|
ftsrv|1359|udp|FTSRV|
mimer|1360|tcp|MIMER|
mimer|1360|udp|MIMER|
linx|1361|tcp|LinX|
linx|1361|udp|LinX|
timeflies|1362|tcp|TimeFlies|
timeflies|1362|udp|TimeFlies|
ndm-requester|1363|tcp|Network DataMover Requester|
ndm-requester|1363|udp|Network DataMover Requester|
ndm-server|1364|tcp|Network DataMover Server|
ndm-server|1364|udp|Network DataMover Server|
adapt-sna|1365|tcp|Network Software Associates|
adapt-sna|1365|udp|Network Software Associates|
netware-csp|1366|tcp|Novell NetWare Comm Service Platform|
netware-csp|1366|udp|Novell NetWare Comm Service Platform|
dcs|1367|tcp|DCS|
dcs|1367|udp|DCS|
screencast|1368|tcp|ScreenCast|
screencast|1368|udp|ScreenCast|
gv-us|1369|tcp|GlobalView to Unix Shell|
gv-us|1369|udp|GlobalView to Unix Shell|
us-gv|1370|tcp|Unix Shell to GlobalView|
us-gv|1370|udp|Unix Shell to GlobalView|
fc-cli|1371|tcp|Fujitsu Config Protocol|
fc-cli|1371|udp|Fujitsu Config Protocol|
fc-ser|1372|tcp|Fujitsu Config Protocol|
fc-ser|1372|udp|Fujitsu Config Protocol|
chromagrafx|1373|tcp|Chromagrafx|
chromagrafx|1373|udp|Chromagrafx|
molly|1374|tcp|EPI Software Systems|
molly|1374|udp|EPI Software Systems|
bytex|1375|tcp|Bytex|
bytex|1375|udp|Bytex|
ibm-pps|1376|tcp|IBM Person to Person Software|
ibm-pps|1376|udp|IBM Person to Person Software|
cichlid|1377|tcp|Cichlid License Manager|
cichlid|1377|udp|Cichlid License Manager|
elan|1378|tcp|Elan License Manager|
elan|1378|udp|Elan License Manager|
dbreporter|1379|tcp|Integrity Solutions|
dbreporter|1379|udp|Integrity Solutions|
telesis-licman|1380|tcp|Telesis Network License Manager|
telesis-licman|1380|udp|Telesis Network License Manager|
apple-licman|1381|tcp|Apple Network License Manager|
apple-licman|1381|udp|Apple Network License Manager|
udt_os|1382|tcp||
udt_os|1382|udp||
gwha|1383|tcp|GW Hannaway Network License Manager|
gwha|1383|udp|GW Hannaway Network License Manager|
os-licman|1384|tcp|Objective Solutions License Manager|
os-licman|1384|udp|Objective Solutions License Manager|
atex_elmd|1385|tcp|Atex Publishing License Manager|
atex_elmd|1385|udp|Atex Publishing License Manager|
checksum|1386|tcp|CheckSum License Manager|
checksum|1386|udp|CheckSum License Manager|
cadsi-lm|1387|tcp|Computer Aided Design Software Inc LM|
cadsi-lm|1387|udp|Computer Aided Design Software Inc LM|
objective-dbc|1388|tcp|Objective Solutions DataBase Cache|
objective-dbc|1388|udp|Objective Solutions DataBase Cache|
iclpv-dm|1389|tcp|Document Manager|
iclpv-dm|1389|udp|Document Manager|
iclpv-sc|1390|tcp|Storage Controller|
iclpv-sc|1390|udp|Storage Controller|
iclpv-sas|1391|tcp|Storage Access Server|
iclpv-sas|1391|udp|Storage Access Server|
iclpv-pm|1392|tcp|Print Manager|
iclpv-pm|1392|udp|Print Manager|
iclpv-nls|1393|tcp|Network Log Server|
iclpv-nls|1393|udp|Network Log Server|
iclpv-nlc|1394|tcp|Network Log Client|
iclpv-nlc|1394|udp|Network Log Client|
iclpv-wsm|1395|tcp|PC Workstation Manager software|
iclpv-wsm|1395|udp|PC Workstation Manager software|
dvl-activemail|1396|tcp|DVL Active Mail|
dvl-activemail|1396|udp|DVL Active Mail|
audio-activmail|1397|tcp|Audio Active Mail|
audio-activmail|1397|udp|Audio Active Mail|
video-activmail|1398|tcp|Video Active Mail|
video-activmail|1398|udp|Video Active Mail|
cadkey-licman|1399|tcp|Cadkey License Manager|
cadkey-licman|1399|udp|Cadkey License Manager|
cadkey-tablet|1400|tcp|Cadkey Tablet Daemon|
cadkey-tablet|1400|udp|Cadkey Tablet Daemon|
goldleaf-licman|1401|tcp|Goldleaf License Manager|
goldleaf-licman|1401|udp|Goldleaf License Manager|
prm-sm-np|1402|tcp|Prospero Resource Manager|
prm-sm-np|1402|udp|Prospero Resource Manager|
prm-nm-np|1403|tcp|Prospero Resource Manager|
prm-nm-np|1403|udp|Prospero Resource Manager|
igi-lm|1404|tcp|Infinite Graphics License Manager|
igi-lm|1404|udp|Infinite Graphics License Manager|
ibm-res|1405|tcp|IBM Remote Execution Starter|
ibm-res|1405|udp|IBM Remote Execution Starter|
netlabs-lm|1406|tcp|NetLabs License Manager|
netlabs-lm|1406|udp|NetLabs License Manager|
dbsa-lm|1407|tcp|DBSA License Manager|
dbsa-lm|1407|udp|DBSA License Manager|
sophia-lm|1408|tcp|Sophia License Manager|
sophia-lm|1408|udp|Sophia License Manager|
here-lm|1409|tcp|Here License Manager|
here-lm|1409|udp|Here License Manager|
hiq|1410|tcp|HiQ License Manager|
hiq|1410|udp|HiQ License Manager|
af|1411|tcp|AudioFile|
af|1411|udp|AudioFile|
innosys|1412|tcp|InnoSys|
innosys|1412|udp|InnoSys|
innosys-acl|1413|tcp|Innosys-ACL|
innosys-acl|1413|udp|Innosys-ACL|
ibm-mqseries|1414|tcp|IBM MQSeries|
ibm-mqseries|1414|udp|IBM MQSeries|
dbstar|1415|tcp|DBStar|
dbstar|1415|udp|DBStar|
novell-lu6.2|1416|tcp|Novell LU6.2|
novell-lu6.2|1416|udp|Novell LU6.2|
timbuktu-srv1|1417|tcp|Timbuktu Service 1 Port|
timbuktu-srv1|1417|tcp|Timbuktu Service 1 Port|
timbuktu-srv2|1418|tcp|Timbuktu Service 2 Port|
timbuktu-srv2|1418|udp|Timbuktu Service 2 Port|
timbuktu-srv3|1419|tcp|Timbuktu Service 3 Port|
timbuktu-srv3|1419|udp|Timbuktu Service 3 Port|
timbuktu-srv4|1420|tcp|Timbuktu Service 4 Port|
timbuktu-srv4|1420|udp|Timbuktu Service 4 Port|
gandalf-lm|1421|tcp|Gandalf License Manager|
gandalf-lm|1421|udp|Gandalf License Manager|
autodesk-lm|1422|tcp|Autodesk License Manager|
autodesk-lm|1422|udp|Autodesk License Manager|
essbase|1423|tcp|Essbase Arbor Software|
essbase|1423|udp|Essbase Arbor Software|
hybrid|1424|tcp|Hybrid Encryption Protocol|
hybrid|1424|udp|Hybrid Encryption Protocol|
zion-lm|1425|tcp|Zion Software License Manager|
zion-lm|1425|udp|Zion Software License Manager|
sas-1|1426|tcp|Satellite-data Acquisition System 1|
sas-1|1426|udp|Satellite-data Acquisition System 1|
mloadd|1427|tcp|mloadd monitoring tool|
mloadd|1427|udp|mloadd monitoring tool|
informatik-lm|1428|tcp|Informatik License Manager|
informatik-lm|1428|udp|Informatik License Manager|
nms|1429|tcp|Hypercom NMS|
nms|1429|udp|Hypercom NMS|
tpdu|1430|tcp|Hypercom TPDU|
tpdu|1430|udp|Hypercom TPDU|
rgtp|1431|tcp|Reverse Gosip Transport|
rgtp|1431|udp|Reverse Gosip Transport|
blueberry-lm|1432|tcp|Blueberry Software License Manager|
blueberry-lm|1432|udp|Blueberry Software License Manager|
ms-sql-s|1433|tcp|Microsoft-SQL-Server|
ms-sql-s|1433|udp|Microsoft-SQL-Server|
ms-sql-m|1434|tcp|Microsoft-SQL-Monitor|
ms-sql-m|1434|udp|Microsoft-SQL-Monitor|
ibm-cics|1435|tcp|IBM CISC|
ibm-cics|1435|udp|IBM CISC|
sas-2|1436|tcp|Satellite-data Acquisition System 2|
sas-2|1436|udp|Satellite-data Acquisition System 2|
tabula|1437|tcp|Tabula|
tabula|1437|udp|Tabula|
eicon-server|1438|tcp|Eicon Security Agent/Server|
eicon-server|1438|udp|Eicon Security Agent/Server|
eicon-x25|1439|tcp|Eicon X25/SNA Gateway|
eicon-x25|1439|udp|Eicon X25/SNA Gateway|
eicon-slp|1440|tcp|Eicon Service Location Protocol|
eicon-slp|1440|udp|Eicon Service Location Protocol|
cadis-1|1441|tcp|Cadis License Management|RemoteStorm
cadis-1|1441|udp|Cadis License Management|
cadis-2|1442|tcp|Cadis License Management|
cadis-2|1442|udp|Cadis License Management|
ies-lm|1443|tcp|Integrated Engineering Software|
ies-lm|1443|udp|Integrated Engineering Software|
marcam-lm|1444|tcp|Marcam|License Management|
marcam-lm|1444|udp|Marcam|License Management|
proxima-lm|1445|tcp|Proxima License Manager|
proxima-lm|1445|udp|Proxima License Manager|
ora-lm|1446|tcp|Optical Research Associates License Manager|
ora-lm|1446|udp|Optical Research Associates License Manager|
apri-lm|1447|tcp|Applied Parallel Research LM|
apri-lm|1447|udp|Applied Parallel Research LM|
oc-lm|1448|tcp|OpenConnect License Manager|
oc-lm|1448|udp|OpenConnect License Manager|
peport|1449|tcp|PEport|
peport|1449|udp|PEport|
dwf|1450|tcp|Tandem Distributed Workbench Facility|
dwf|1450|udp|Tandem Distributed Workbench Facility|
infoman|1451|tcp|IBM Information Management|
infoman|1451|udp|IBM Information Management|
gtegsc-lm|1452|tcp|GTE Government Systems License Man|
gtegsc-lm|1452|udp|GTE Government Systems License Man|
genie-lm|1453|tcp|Genie License Manager|
genie-lm|1453|udp|Genie License Manager|
interhdl_elmd|1454|tcp|interHDL License Manager|
interhdl_elmd|1454|tcp|interHDL License Manager|
esl-lm|1455|tcp|ESL License Manager|
esl-lm|1455|udp|ESL License Manager|
dca|1456|tcp|DCA|
dca|1456|udp|DCA|
valisys-lm|1457|tcp|Valisys License Manager|
valisys-lm|1457|udp|Valisys License Manager|
nrcabq-lm|1458|tcp|Nichols Research Corp.|
nrcabq-lm|1458|udp|Nichols Research Corp.|
proshare1|1459|tcp|Proshare Notebook Application|
proshare1|1459|udp|Proshare Notebook Application|
proshare2|1460|tcp|Proshare Notebook Application|
proshare2|1460|udp|Proshare Notebook Application|
ibm_wrless_lan|1461|tcp|IBM Wireless LAN|
ibm_wrless_lan|1461|udp|IBM Wireless LAN|
world-lm|1462|tcp|World License Manager|
world-lm|1462|udp|World License Manager|
nucleus|1463|tcp|Nucleus|
nucleus|1463|udp|Nucleus|
msl_lmd|1464|tcp|MSL License Manager|
msl_lmd|1464|udp|MSL License Manager|
pipes|1465|tcp|Pipes Platform|
pipes|1465|udp|Pipes Platform|mfarlin@peerlogic.com|
oceansoft-lm|1466|tcp|Ocean Software License Manager|
oceansoft-lm|1466|udp|Ocean Software License Manager|
csdmbase|1467|tcp|CSDMBASE|
csdmbase|1467|udp|CSDMBASE|
csdm|1468|tcp|CSDM|
csdm|1468|udp|CSDM|
aal-lm|1469|tcp|Active Analysis Limited License Manager|
aal-lm|1469|udp|Active Analysis Limited License Manager|
uaiact|1470|tcp|Universal Analytics|
uaiact|1470|udp|Universal Analytics|
csdmbase|1471|tcp|csdmbase|
csdmbase|1471|udp|csdmbase|
csdm|1472|tcp|csdm|
csdm|1472|udp|csdm|
openmath|1473|tcp|OpenMath|
openmath|1473|udp|OpenMath|
telefinder|1474|tcp|Telefinder|
telefinder|1474|udp|Telefinder|
taligent-lm|1475|tcp|Taligent License Manager|
taligent-lm|1475|udp|Taligent License Manager|
clvm-cfg|1476|tcp|clvm-cfg|
clvm-cfg|1476|udp|clvm-cfg|
ms-sna-server|1477|tcp|ms-sna-server|
ms-sna-server|1477|udp|ms-sna-server|
ms-sna-base|1478|tcp|ms-sna-base|
ms-sna-base|1478|udp|ms-sna-base|
dberegister|1479|tcp|dberegister|
dberegister|1479|udp|dberegister|
pacerforum|1480|tcp|PacerForum|
pacerforum|1480|udp|PacerForum|
airs|1481|tcp|AIRS|
airs|1481|udp|AIRS|
miteksys-lm|1482|tcp|Miteksys License Manager|
miteksys-lm|1482|udp|Miteksys License Manager|
afs|1483|tcp|AFS License Manager|
afs|1483|udp|AFS License Manager|
confluent|1484|tcp|Confluent License Manager|
confluent|1484|udp|Confluent License Manager|
lansource|1485|tcp|LANSource|
lansource|1485|udp|LANSource|
nms_topo_serv|1486|tcp|nms_topo_serv|
nms_topo_serv|1486|udp|nms_topo_serv|
localinfosrvr|1487|tcp|LocalInfoSrvr|
localinfosrvr|1487|udp|LocalInfoSrvr|
docstor|1488|tcp|DocStor|
docstor|1488|udp|DocStor|
dmdocbroker|1489|tcp|dmdocbroker|
dmdocbroker|1489|udp|dmdocbroker|
insitu-conf|1490|tcp|insitu-conf|
insitu-conf|1490|udp|insitu-conf|
anynetgateway|1491|tcp|anynetgateway|
anynetgateway|1491|udp|anynetgateway|
stone-design-1|1492|tcp|stone-design-1|FTP99CMP, Back.Orifice.FTP
netmap_lm|1493|tcp|netmap_lm|
netmap_lm|1493|udp|netmap_lm|
ica|1494|tcp|ICA session|
ica|1494|udp|ICA session|
cvc|1495|tcp|cvc|
cvc|1495|udp|cvc|
liberty-lm|1496|tcp|liberty-lm|
liberty-lm|1496|udp|liberty-lm|
rfx-lm|1497|tcp|rfx-lm|
rfx-lm|1497|udp|rfx-lm|
watcom-sql|1498|tcp|Watcom-SQL|
watcom-sql|1498|udp|Watcom-SQL|
fhc|1499|tcp|Federico Heinz Consultora|
fhc|1499|udp|Federico Heinz Consultora|
vlsi-lm|1500|tcp|VLSI License Manager|
vlsi-lm|1500|udp|VLSI License Manager|
sas-3|1501|tcp|Satellite-data Acquisition System 3|
sas-3|1501|udp|Satellite-data Acquisition System 3|
shivadiscovery|1502|tcp|Shiva|
shivadiscovery|1502|udp|Shiva|
imtc-mcs|1503|tcp|Databeam|
imtc-mcs|1503|udp|Databeam|
evb-elm|1504|tcp|EVB Software Engineering License Manager|
evb-elm|1504|udp|EVB Software Engineering License Manager|
funkproxy|1505|tcp|Funk Software, Inc.|
funkproxy|1505|udp|Funk Software, Inc.|
|1509|tcp||Psyber Streaming Server
ingreslock|1524|tcp|ingres|Trin00 (DDoS)
ingreslock|1524|udp|ingres|
orasrv|1525|tcp|Oracle|
orasrv|1525|udp|Oracle|
prospero-np|1525|tcp|Prospero Directory Service non-priv|
prospero-np|1525|udp|Prospero Directory Service non-priv|
pdap-np|1526|tcp|Prospero Data Access Prot non-priv|
pdap-np|1526|udp|Prospero Data Access Prot non-priv|
tlisrv|1527|tcp|Oracle|
tlisrv|1527|udp|Oracle|
coauthor|1529|tcp|Oracle|
coauthor|1529|udp|Oracle|
gridgen-elmd|1542|tcp|gridgen-elmd|
gridgen-elmd|1542|udp|gridgen-elmd|
issd|1600|tcp|issd|Shivka-Burka
ica|1604|udp|ICA Browser|
nkd|1650|tcp|nkd|
nkd|1650|udp|nkd|
proshareaudio|1651|tcp|proshare conf audio|
proshareaudio|1651|udp|proshare conf audio|
prosharevideo|1652|tcp|proshare conf video|
prosharevideo|1652|udp|proshare conf video|
prosharedata|1653|tcp|proshare conf data|
prosharedata|1653|udp|proshare conf data|
prosharerequest|1654|tcp|proshare conf request|
prosharerequest|1654|udp|proshare conf request|
prosharenotify|1655|tcp|proshare conf notify|
prosharenotify|1655|udp|proshare conf notify|
netview-aix-1|1661|tcp|netview-aix-1|
netview-aix-1|1661|udp|netview-aix-1|
netview-aix-2|1662|tcp|netview-aix-2|
netview-aix-2|1662|udp|netview-aix-2|
netview-aix-3|1663|tcp|netview-aix-3|
netview-aix-3|1663|udp|netview-aix-3|
netview-aix-4|1664|tcp|netview-aix-4|
netview-aix-4|1664|udp|netview-aix-4|
netview-aix-5|1665|tcp|netview-aix-5|
netview-aix-5|1665|udp|netview-aix-5|
netview-aix-6|1666|tcp|netview-aix-6|
netview-aix-6|1666|udp|netview-aix-6|
|1700|tcp||Rux.Tick
|1777|tcp||Scarab
|1784|tcp||Snid X2
|1807|tcp||SpySender
ssdp|1900|udp|Simple Service Discover Protocol (Plug & Play)|
|1966|tcp||Fake FTP
|1969|tcp||OpC BO
|1981|tcp||ShockRave
licensedaemon|1986|tcp|cisco license management|
licensedaemon|1986|udp|cisco license management|
tr-rsrb-p1|1987|tcp|cisco RSRB Priority 1 port|
tr-rsrb-p1|1987|udp|cisco RSRB Priority 1 port|
tr-rsrb-p2|1988|tcp|cisco RSRB Priority 2 port|
tr-rsrb-p2|1988|udp|cisco RSRB Priority 2 port|
tr-rsrb-p3|1989|tcp|cisco RSRB Priority 3 port|
tr-rsrb-p3|1989|udp|cisco RSRB Priority 3 port|
mshnet|1989|tcp|MHSnet system|
mshnet|1989|udp|MHSnet system|
stun-p1|1990|tcp|cisco STUN Priority 1 port|
stun-p1|1990|udp|cisco STUN Priority 1 port|
stun-p2|1991|tcp|cisco STUN Priority 2 port|
stun-p2|1991|udp|cisco STUN Priority 2 port|
stun-p3|1992|tcp|cisco STUN Priority 3 port|
stun-p3|1992|udp|cisco STUN Priority 3 port|
ipsendmsg|1992|tcp|IPsendmsg|
ipsendmsg|1992|udp|IPsendmsg|
snmp-tcp-port|1993|tcp|cisco SNMP TCP port|
snmp-tcp-port|1993|udp|cisco SNMP TCP port|
stun-port|1994|tcp|cisco serial tunnel port|
stun-port|1994|udp|cisco serial tunnel port|
perf-port|1995|tcp|cisco perf port|
perf-port|1995|udp|cisco perf port|
tr-rsrb-port|1996|tcp|cisco Remote SRB port|
tr-rsrb-port|1996|udp|cisco Remote SRB port|
gdp-port|1997|tcp|cisco Gateway Discovery Protocol|
gdp-port|1997|udp|cisco Gateway Discovery Protocol|
x25-svc-port|1998|tcp|cisco X.25 service (XOT)|
x25-svc-port|1998|udp|cisco X.25 service (XOT)|
tcp-id-port|1999|tcp|cisco identification port|BackDoor 1.00-1.03,  BackDoor 2.x, TransScout 1.x
callbook|2000|tcp||Der Spaeher 3, Insane Network, TransScout
callbook|2000|udp||
dc|2001|tcp||Der Spaeher 3, TrojanCow, TransScout
globe|2002|tcp||TransScout
globe|2002|udp||
|2003|tcp||TransScout
mailbox|2004|tcp||TransScout
emce|2004|udp|CCWS mm conf|
berknet|2005|tcp||TransScout
oracle|2005|udp||
invokator|2006|tcp||
raid-cc|2006|udp|raid|
dectalk|2007|tcp||
raid-am|2007|udp||
conf|2008|tcp||
terminaldb|2008|udp||
news|2009|tcp||
whosockami|2009|udp||
search|2010|tcp||
pipe_server|2010|udp||
raid-cc|2011|tcp|raid|
servserv|2011|udp||
ttyinfo|2012|tcp||
raid-ac|2012|udp||
raid-am|2013|tcp||
raid-cd|2013|udp||
troff|2014|tcp||
raid-sf|2014|udp||
cypress|2015|tcp||
raid-cs|2015|udp||
bootserver|2016|tcp||
bootserver|2016|udp||
cypress-stat|2017|tcp||
bootclient|2017|udp||
terminaldb|2018|tcp||
rellpack|2018|udp||
whosockami|2019|tcp||
about|2019|udp||
xinupageserver|2020|tcp||
xinupageserver|2020|udp||
servexec|2021|tcp||
xinuexpansion1|2021|udp||
down|2022|tcp||
xinuexpansion2|2022|udp||
xinuexpansion3|2023|tcp||Hack City Ripper Pro, Pass Ripper
xinuexpansion4|2024|tcp||
xinuexpansion4|2024|udp||
ellpack|2025|tcp||
xribs|2025|udp||
scrabble|2026|tcp||
scrabble|2026|udp||
shadowserver|2027|tcp||
shadowserver|2027|udp||
submitserver|2028|tcp||
submitserver|2028|udp||
device2|2030|tcp||
device2|2030|udp||
blackboard|2032|tcp||
blackboard|2032|udp||
glogger|2033|tcp||
glogger|2033|udp||
scoremgr|2034|tcp||
scoremgr|2034|udp||
imsldoc|2035|tcp||
imsldoc|2035|udp||
objectmanager|2038|tcp||
objectmanager|2038|udp||
lam|2040|tcp||
lam|2040|udp||
interbase|2041|tcp||
interbase|2041|udp||
isis|2042|tcp||
isis|2042|udp||
isis-bcast|2043|tcp||
isis-bcast|2043|udp||
rimsl|2044|tcp||
rimsl|2044|udp||
cdfunc|2045|tcp||
cdfunc|2045|udp||
sdfunc|2046|tcp||
sdfunc|2046|udp||
dls|2047|tcp||
dls|2047|udp||
dls-monitor|2048|tcp||
dls-monitor|2048|udp||
shilp|2049|tcp||
shilp|2049|udp||
nfs|2049|tcp|RPC-NFS|
nfs|2049|udp|RPC-NFS|
dlsrpn|2065|tcp|Data Link Switch Read Port Number|
dlsrpn|2065|udp|Data Link Switch Read Port Number|
dlswpn|2067|tcp|Data Link Switch Write Port Number|
dlswpn|2067|udp|Data Link Switch Write Port Number|
|2080|tcp||WinHole
|2115|tcp||Bugs
|2140|tcp||Deep Throat 1/2, The Invasor
|2155|tcp||Illusion Mailer
ats|2201|tcp|Advanced Training System Program|
ats|2201|udp|Advanced Training System Program|
|2208|tcp||Rux.PSW
ivsd|2241|tcp|IVS Daemon|
ivsd|2241|udp|IVS Daemon|
|2283|tcp||HVL Rat5, Rat
|2300|tcp||Xplorer
cim-web|2301|tcp|Compaq Insight Manager Web Interface|
rtsserv|2500|tcp|Resource Tracking system server|
rtsserv|2500|udp|Resource Tracking system server|
rtsclient|2501|tcp|Resource Tracking system client|
rtsclient|2501|udp|Resource Tracking system client|
hp-3000-telnet|2564|tcp|HP 3000 NS/VT block mode telnet|
|2565|tcp||Striker
|2583|tcp||WinCrash 2
|2600|tcp||Digital RootBeer
|2716|tcp||The Prayer 1.2 & 1.3
|2718|tcp||The Prayer 2
nlps|2766|tcp|NLPS server|
|2773|tcp||BackDoor-G, SubSeven
www-dev|2784|tcp|World Wide Web - Development|
www-dev|2784|udp|World Wide Web - Development|
|2801|tcp||Phineas Phucker
spcsdlobby|2888|tcp|SPCSDLOBBY|
spcsdlobby|2888|udp|SPCSDLOBBY|
|2989|tcp||Rat 1.2
|2989|udp||Rat 1.2
|3000|tcp||Remote Shutdown
nessus|3001|tcp|Nessus|
|3024|tcp||WinCrash
NSWS|3049|tcp||
NSWS|3049|udp||
squid, cobalt-proxy|3128|tcp|Squid Proxy Server, Cobalt Web-Caching Proxy Server|RingZero
|3129|tcp||Masters Paradise, MastersParadise.92
|3150|tcp||Deep Throat 1/2, The Invasor
ccmail|3264|tcp|CC:Mail/Lotus|
ccmail|3264|udp|CC:Mail/Lotus|
dec-notes|3333|tcp|DEC Notes|
dec-notes|3333|udp|DEC Notes|
|3456|tcp||Teror Trojan
|3459|tcp||Eclipse 2000, Sanctuary
|3586|tcp||Snid X2
|3700|tcp||Portal of Doom (PoD)
|3791|tcp||Total Eclipse (FTP)
|3801|udp||Total Eclipse
mapper-nodemgr|3984|tcp|MAPPER network node manager|
mapper-nodemgr|3984|udp|MAPPER network node manager|
mapper-mapethd|3985|tcp|MAPPER TCP/IP server|
mapper-mapethd|3985|udp|MAPPER TCP/IP server|
mapper-ws_ethd|3986|tcp|MAPPER workstation server|
mapper-ws_ethd|3986|udp|MAPPER workstation server|
bmap|3421|tcp|Bull Apprise portmapper|
bmap|3421|udp|Bull Apprise portmapper|
|3791|tcp||Total Eclipse 1.0
udt_os|3900|tcp|Unidata UDT OS|
udt_os|3900|udp|Unidata UDT OS|
ICQ-Mirabilis|4000|tcp|Default ICQ port/Mirabilis|Psyber Streaming Server, Skydance
ICQ-Mirabilis|4000|udp|Default ICQ port/Mirabilis|
lockd|4045|tcp|Solaris NFS Lock Daemon/Manager|
lockd|4045|udp|Solaris NFS Lock Daemon/Manager|
|4092|tcp||WinCrash
nuts_dem|4132|tcp|NUTS Daemon|
nuts_dem|4132|udp|NUTS Daemon|
nuts_bootp|4133|tcp|NUTS Bootp Server|
nuts_bootp|4133|udp|NUTS Bootp Server|
|4242|tcp||Virtual Hacking Machine
|4245|tcp||Rux.Backdoor
|4321|tcp||BoBo, Schoolbus 1.0 
msql|4333|tcp|mSQL|
unicall|4343|tcp|UNICALL|
unicall|4343|udp|UNICALL|
krb524|4444|tcp|KRB524|Prosiak, Swift remote
krb524|4444|udp|KRB524|
|4567|tcp||FileNail, Danny
|4590|tcp||ICQTrojan
eDonkey2000|4661|tcp|eDonkey2000 server|
eDonkey2000|4662|tcp|eDonkey2000 client|
eDonkey2000|4665|udp|eDonkey2000 inter-server communication|
rfa|4672|tcp|remote file access server|
rfa|4672|udp|remote file access server|
|4711|tcp||Olfactor
|4950|tcp||ICQTrojan
commplex-main|5000|tcp||Bubbel, Back Door Setup, Blazer 5, Sockets de Troie, Socket23
ssdp|5000|tcp|SSDP Web-XML parser for Universal Plug & Play|
commplex-link|5001|tcp||Back Door Setup, Sockets de Troie
rfe|5002|tcp|radio free ethernet|
rfe|5002|udp|radio free ethernet|
telepathstart|5010|tcp|TelepathStart|
telepathstart|5010|udp|TelepathStart|
telepathattack|5011|tcp|TelepathAttack|OOTLT
telepathattack|5011|udp|TelepathAttack|
|5031|tcp||NetMetropolitan 1.0 & 1.04
|5032|tcp||NetMetropolitan 1.04
mmcc|5050|tcp|multimedia conference control tool|
mmcc|5050|udp|multimedia conference control tool|
rmonitor_secure|5145|tcp||
rmonitor_secure|5145|udp||
aol|5190|tcp|America-Online|
aol|5190|udp|America-Online|
sgi-dgl|5232|tcp|SGI Distributed Graphics Library|
padl2sim|5236|tcp||
padl2sim|5236|udp||
hacl-hb|5300|tcp|HA cluster heartbeat|
hacl-hb|5300|udp|HA cluster heartbeat|
hacl-gs|5301|tcp|HA cluster general services|
hacl-gs|5301|udp|HA cluster general services|
hacl-cfg|5302|tcp|HA cluster configuration|
hacl-cfg|5302|udp|HA cluster configuration|
hacl-probe|5303|tcp|HA cluster probing|
hacl-probe|5303|udp|HA cluster probing|
hacl-local|5304|tcp||
hacl-local|5304|udp||
hacl-test|5305|tcp||
hacl-test|5305|udp||
|5321|tcp||Firehotcker, BackDoorz
|5333|tcp||Backage Trojan Box 3
|5343|tcp||WCrat
|5400|tcp||Blade Runner, BackConstruction 1.2 & 1.5
|5401|tcp||Blade Runner 1.x
|5402|tcp||Blade Runner 2.x
hotline|5498|tcp|Hotline Tracker|
hotline|5500|tcp|Hotline (Auth)|
hotline|5501|tcp|Hotline (Data)|
|5512|tcp||Illusion Mailer
|5521|tcp||Illusion Mailer
|5550|tcp||Xtcp 2
|5555|tcp||ServeMe
|5556|tcp||BO Facil, H0rtiga
|5557|tcp||BO Facil
|5569|tcp||RoboHack
|5598|tcp||BackDoor 2.03
pc-anywhere|5631|tcp|PC-Anywhere|
pc-anywhere|5632|udp|PC-Anywhere|
|5637|tcp||PC Crasher
|5638|tcp||PC Crasher
|5698|tcp||BackDoor 2.03, WinCrash 3
|5714|tcp||WinCrash
|5741|tcp||WinCrash
|5742|tcp||WinCrash
|5881|tcp||Y3K RAT
|5882|tcp||Y3K RAT
|5888|tcp||Y3K RAT
|5889|tcp||Y3K RAT
|5991|tcp||Network UniX Shell Logger (nuxsl)
x11|6000|tcp|X Window System|tHe tHing 1.6, APStrojan
x11|6000|udp|X Window System|
x11|6001|tcp|X Window System|
x11|6001|udp|X Window System|
x11|6002|tcp|X Window System|
x11|6002|udp|X Window System|
x11|6003|tcp|X Window System|
x11|6003|udp|X Window System|
x11|6004|tcp|X Window System|
x11|6004|udp|X Window System|
x11|6005|tcp|X Window System|
x11|6005|udp|X Window System|
x11|6006|tcp|X Window System|tHe tHing 1.6, APStrojan
x11|6006|udp|X Window System|
x11|6007|tcp|X Window System|
x11|6007|udp|X Window System|
x11|6008|tcp|X Window System|
x11|6008|udp|X Window System|
x11|6009|tcp|X Window System|
x11|6009|udp|X Window System|
x11|6010|tcp|X Window System|
x11|6010|udp|X Window System|
x11|6011|tcp|X Window System|
x11|6011|udp|X Window System|
x11|6012|tcp|X Window System|
x11|6012|udp|X Window System|
x11|6013|tcp|X Window System|
x11|6013|udp|X Window System|
x11|6014|tcp|X Window System|
x11|6014|udp|X Window System|
x11|6015|tcp|X Window System|
x11|6015|udp|X Window System|
x11|6016|tcp|X Window System|
x11|6016|udp|X Window System|
x11|6017|tcp|X Window System|
x11|6017|udp|X Window System|
x11|6018|tcp|X Window System|
x11|6018|udp|X Window System|
x11|6019|tcp|X Window System|
x11|6019|udp|X Window System|
x11|6020|tcp|X Window System|
x11|6020|udp|X Window System|
x11|6021|tcp|X Window System|
x11|6021|udp|X Window System|
x11|6022|tcp|X Window System|
x11|6022|udp|X Window System|
x11|6023|tcp|X Window System|
x11|6023|udp|X Window System|
x11|6024|tcp|X Window System|
x11|6024|udp|X Window System|
x11|6025|tcp|X Window System|
x11|6025|udp|X Window System|
x11|6026|tcp|X Window System|
x11|6026|udp|X Window System|
x11|6027|tcp|X Window System|
x11|6027|udp|X Window System|
x11|6028|tcp|X Window System|
x11|6028|udp|X Window System|
x11|6029|tcp|X Window System|
x11|6029|udp|X Window System|
x11|6030|tcp|X Window System|
x11|6030|udp|X Window System|
x11|6031|tcp|X Window System|
x11|6031|udp|X Window System|
x11|6032|tcp|X Window System|
x11|6032|udp|X Window System|
x11|6033|tcp|X Window System|
x11|6033|udp|X Window System|
x11|6034|tcp|X Window System|
x11|6034|udp|X Window System|
x11|6035|tcp|X Window System|
x11|6035|udp|X Window System|
x11|6036|tcp|X Window System|
x11|6036|udp|X Window System|
x11|6037|tcp|X Window System|
x11|6037|udp|X Window System|
x11|6038|tcp|X Window System|
x11|6038|udp|X Window System|
x11|6039|tcp|X Window System|
x11|6039|udp|X Window System|
x11|6040|tcp|X Window System|
x11|6040|udp|X Window System|
x11|6041|tcp|X Window System|
x11|6041|udp|X Window System|
x11|6042|tcp|X Window System|
x11|6042|udp|X Window System|
x11|6043|tcp|X Window System|
x11|6043|udp|X Window System|
x11|6044|tcp|X Window System|
x11|6044|udp|X Window System|
x11|6045|tcp|X Window System|
x11|6045|udp|X Window System|
x11|6046|tcp|X Window System|
x11|6046|udp|X Window System|
x11|6047|tcp|X Window System|
x11|6047|udp|X Window System|
x11|6048|tcp|X Window System|
x11|6048|udp|X Window System|
x11|6049|tcp|X Window System|
x11|6049|udp|X Window System|
x11|6050|tcp|X Window System|
x11|6050|udp|X Window System|
x11|6051|tcp|X Window System|
x11|6051|udp|X Window System|
x11|6052|tcp|X Window System|
x11|6052|udp|X Window System|
x11|6053|tcp|X Window System|
x11|6053|udp|X Window System|
x11|6054|tcp|X Window System|
x11|6054|udp|X Window System|
x11|6055|tcp|X Window System|
x11|6055|udp|X Window System|
x11|6056|tcp|X Window System|
x11|6056|udp|X Window System|
x11|6057|tcp|X Window System|
x11|6057|udp|X Window System|
x11|6058|tcp|X Window System|
x11|6058|udp|X Window System|
x11|6059|tcp|X Window System|
x11|6059|udp|X Window System|
x11|6060|tcp|X Window System|
x11|6060|udp|X Window System|
x11|6061|tcp|X Window System|
x11|6061|udp|X Window System|
x11|6062|tcp|X Window System|
x11|6062|udp|X Window System|
x11|6063|tcp|X Window System|
x11|6063|udp|X Window System|
sub-process|6111|tcp|HP SoftBench Subprocess Control|
sub-process|6111|udp|HP SoftBench Subprocess Control|
dtspc|6112|tcp|Sun Solaris CDE Subprocess Control
online_gaming|6112|udp|Online gaming|
meta-corp|6141|tcp|Meta Corporation License Manager|
meta-corp|6141|udp|Meta Corporation License Manager|
aspentec-lm|6142|tcp|Aspen Technology License Manager|
aspentec-lm|6142|udp|Aspen Technology License Manager|
watershed-lm|6143|tcp|Watershed License Manager|
watershed-lm|6143|udp|Watershed License Manager|
statsci1-lm|6144|tcp|StatSci License Manager - 1|
statsci1-lm|6144|udp|StatSci License Manager - 1|
statsci2-lm|6145|tcp|StatSci License Manager - 2|
statsci2-lm|6145|udp|StatSci License Manager - 2|
lonewolf-lm|6146|tcp|Lone Wolf Systems License Manager|
lonewolf-lm|6146|udp|Lone Wolf Systems License Manager|
montage-lm|6147|tcp|Montage License Manager|
montage-lm|6147|udp|Montage License Manager|
|6272|tcp||Secret Service
gnutella|6346|tcp|Gnutella default port|
|6400|tcp||tHe tHing, APStrojan
|6500|tcp||Devil 1.03
|6666|tcp||TCPshell.c
|6667|tcp||Schedule Agent
xdsxdm|6558|tcp||
xdsxdm|6558|udp||
napster|6669|tcp||Host Control, Vampyre 1.0
napster|6670|tcp||Deep Throat 2/3, BackWeb Server, WinNuke eXtreme
|6674|tcp||Deep Throat
|6711|tcp||BackDoor-G, Deep Throat 2, SubSeven
|6712|tcp||BackDoor-G, Funny Trojan, SubSeven
|6713|tcp||BackDoor-G, SubSeven
|6723|tcp||Mstream attacker->handler
|6767|tcp||NT Remote Control
|6771|tcp||DeepThroat 2.0 & 3.0
|6776|tcp||2000 Cracks, BackDoor-G, SubSeven
|6789|tcp||Doly Trojan
|6838|tcp||Mstream agent->handler
|6883|tcp||DarkStar, DeltaSource 
|6912|tcp||ShitHeep
|6939|tcp||Gatecrasher.a, Indoctrination, 
|6969|tcp||GateCrasher, IRC 3, NetController, Priority
|6970|tcp||GateCrasher
afs3-fileserver|7000|tcp|file server itself|BackDoor-G, Kazimas, Remote Grab, SubSeven
afs3-fileserver|7000|udp|file server itself|
afs3-callback|7001|tcp|callbacks to cache managers|Freak88
weblogic-server|7001|tcp|BEA Weblogic Server default port|
afs3-callback|7001|udp|callbacks to cache managers|
afs3-prserver|7002|tcp|users & groups database|
afs3-prserver|7002|udp|users & groups database|
afs3-vlserver|7003|tcp|volume location database|
afs3-vlserver|7003|udp|volume location database|
afs3-kaserver|7004|tcp|AFS/Kerberos authentication service|
afs3-kaserver|7004|udp|AFS/Kerberos authentication service|
afs3-volser|7005|tcp|volume managment server|
afs3-volser|7005|udp|volume managment server|
afs3-errors|7006|tcp|error interpretation service|
afs3-errors|7006|udp|error interpretation service|
afs3-bos|7007|tcp|basic overseer process|
afs3-bos|7007|udp|basic overseer process|
afs3-update|7008|tcp|server-to-server updater|
afs3-update|7008|udp|server-to-server updater|
afs3-rmtsys|7009|tcp|remote cache manager service|
afs3-rmtsys|7009|udp|remote cache manager service|
ups-onlinet|7010|tcp|onlinet uninterruptable power supplies|
ups-onlinet|7010|udp|onlinet uninterruptable power supplies|
ra-transport|7070|udp|Real Audio Transport|
font-service|7100|tcp|X Font Service|
font-service|7100|udp|X Font Service|
fodms|7200|tcp|FODMS FLIP|
fodms|7200|udp|FODMS FLIP|
|7201|tcp||NetMonitor
|7215|tcp||BackDoor-G, SubSeven
|7300|tcp||NetMonitor
|7301|tcp||NetMonitor
|7306|tcp||NetMonitor
|7307|tcp||NetMonitor
|7308|tcp||NetMonitor
|7424|tcp||Host Control
|7597|tcp||Qaz
|7609|tcp||Snid X2
Unreal Tournament|7778|udp|Unreal Tournament Server|
|7789|tcp||Back Door Setup, ICQKiller
|7983|tcp||Mstream handler->agent
proxy|8080|tcp|HTTP Proxy Service|RingZero
|8897|tcp||HackOffice Armageddon
|8989|tcp||Rcon
|9000|tcp||Netministrator
|9088|tcp||Popular rootshell port (inetd.conf)
wap-wsp 9200|9200|tcp|WAP connectionless session service|
wap-wsp 9200|9200|udp|WAP connectionless session service|
wap-wsp-wtp 9201|9201|tcp|WAP session service|
wap-wsp-wtp 9201|9201|udp|WAP session service|
wap-wsp-s 9202|9202|tcp|WAP secure connectionless session service|
wap-wsp-s 9202|9202|udp|WAP secure connectionless session service|
wap-wsp-s 9203|9203|tcp|WAP secure session service|
wap-wsp-s 9203|9203|udp|WAP secure session service|
|9325|tcp||mstream agent->handler
|9400|tcp||InCommand 1.0
|9494|tcp||Tivoli
man|9535|tcp||
man|9535|udp||
|9704|tcp||Popular rootshell port (inetd.conf)
|9872|tcp||Portal of Doom
|9873|tcp||Portal of Doom
|9874|tcp||Portal of Doom
|9875|tcp||Portal of Doom
|9876|tcp||Cyber Attacker, Rux.Backdoor
|9878|tcp||TransScout (scan port)
|9989|tcp||iNi-Killer
|9999|tcp||The Prayer 1
|10067|tcp||Portal of Doom
|10085|tcp||Syphillis
|10086|tcp||Syphillis
|10101|tcp||BrainSpy
|10167|tcp||Portal of Doom
|10498|udp||mstream handler->agent
|10520|tcp||Acid Shivers
|10528|tcp||Host Control
|10607|tcp||Coma, Danny
|10666|tcp||Ambush
|11000|tcp||Senna Spy
|11050|tcp||Host Control
|11051|tcp||Host Control
|11223|tcp||Hack '99, KeyLogger, Progenic, Secret Agent
|12076|tcp||Gjamer, MSH.104b
|12223|tcp||Hack´99, KeyLogger
Trend Micro AV|12345|tcp|Trend Micro OfficeScan AV|Gaban Bus, NetBus 1.x, Pie Bill Gates, WhackJob, X-Bill
|12346|tcp||Gaban Bus, NetBus 1.x, X-Bill
|12349|tcp||BioNet
|12361|tcp||Whack-a-mole
|12362|tcp||Whack-a-mole
|12623|tcp||DUN Control
|12624|tcp||Buttman
|12631|tcp||WhackJob, WhackJob.NB1.7
|12701|tcp||Eclipse2000
|12754|tcp||Mstream attacker->handler
|13000|tcp||Senna Spy
|13010|tcp||Hacker Brazil
pwchat|13223|tcp|PowWow Chat|
|13700|tcp||Kuang2, theVirus
|14456|tcp||Solero
|14500|tcp||PC Invader 0.7
|14501|tcp||PC Invader 0.7
|14502|tcp||PC Invader 0.7
|14503|tcp||PC Invader 0.7
|15000|tcp||NetDaemon 1.0
|15092|tcp||Host Control
|15104|tcp||Mstream attacker->handler
|16484|tcp||Mosucker
|16660|tcp||Stacheldraht (DDoS)
|16772|tcp||ICQ Revenge
|16969|tcp||Priority
isode-dua|17007|tcp||
isode-dua|17007|udp||
|17300|tcp||Kuang2, theVirus
|17490|tcp||CrazyNet
|17500|tcp||CrazyNet
|17569|tcp||Infector 1.4.x & 1.6.x
|17777|tcp||Nephron
|18753|tcp||Shaft (DDoS)
|19864|tcp||ICQ Revenge
|20000|tcp||Millennium II
|20001|tcp||Millennium
|20002|tcp||Acidkor
|20034|tcp||NetBus 2.0 Pro, NetRex, WhackJob
|20203|tcp||Chupacabra, Logged!
|20331|tcp||Bla
|20432|tcp||Shaft (DDoS)
|21554|tcp||GirlFriend, Kidterror, Schwindler 1.82, WinSp00fer
|22222|tcp||Prosiak 0.47
|23005|tcp||Net Trash 1.0
|23023|tcp||Logged!
|23432|tcp||Asylum
|23456|tcp||Evil FTP, Ugly FTP, WhackJob
|23476|tcp||Donald Dick
|23477|tcp||Donald Dick
|26274|tcp||Delta Source
|26681|tcp||Spy Voice
online_gaming|27015|udp|Online gaming|
|27374|tcp||BackDoor-G, ramen.tgz, SubSeven 2.1
|27444|tcp||Trin00 Master --> daemons
|27665|tcp||Trin00 Intruder --> Master
online_gaming|27910|udp|Online gaming|
online_gaming|27950|udp|Online gaming|
online_gaming|27960|udp|Online gaming|
online_gaming|27961|udp|Online gaming|
online_gaming|27962|udp|Online gaming|
online_gaming|27963|udp|Online gaming|
online_gaming|28000|udp|Online gaming|
online_gaming|28001|udp|Online gaming|
online_gaming|28002|udp|Online gaming|
online_gaming|28003|udp|Online gaming|
|28431|tcp||Trin00 (DDoS)
|28432|tcp||Trin00 (DDoS)
|29104|tcp||Host Control
|29891|udp||The Unexplained
|30029|tcp||AOLTrojan 1.1
|30100|tcp||NetSphere 1.27a/1.29/1.31
|30101|tcp||NetSphere 1.27a/1.29/1.31
|30102|tcp||NetSphere 1.27a/1.29/1.31
|30103|tcp||NetSphere 1.31
|30133|tcp||NetSphere Final, Trojan Spirit 2001a
|30303|tcp||Sockets de Troie, Socket25
|30947|tcp||Intruse
|30999|tcp||Kuang2
|31335|udp||Trin00 daemons --> Master
|31336|tcp||BOWhack, ButtFunnel
|31337|tcp||BackFire, BackOrificeLM.LEENTech, Baron Night, BO client, BO2, Bo Facil, Back Fire
|31337|udp||BackFire, Back Orifice-DeepBO
|31338|tcp||Back Orifice-DeepBO, ButtFunnel, NetSpy DK,  
|31338|udp||Back Orifice, DeepBO, NetSpy DK
|31339|tcp||NetSpy DK
|31554|tcp||Schwindler
|31666|tcp||BOWhack, BOWackmole
|31780|tcp||Hack'a'Tack
|31785|tcp||Hack'a'Tack
|31787|tcp||Hack'a'Tack
|31789|udp||Hack'a'Tack
|31790|tcp||Hack'a'Tack
|31791|udp||Hack'a'Tack
|31792|tcp||Hack'a'Tack
|32100|tcp||Peanut Brittle, Project nEXT
|32418|tcp||Acid Battery 1.0
ypbind|32771|udp|ypbind|
ypbind|32773|tcp|ypbind|
|33333|tcp||Blakharaz, Prosiak
DiscoverMusic|33434|udp|Streaming Audio from DiscoverMusic.com|
|33577|tcp||PsychWard
|33777|tcp||PsychWard
|33911|tcp||Trojan Spirit 2001a
|34324|tcp||BigGluck (TN), Tiny Telnet Server
|34555|tcp||service.exe (Win32 Trin00)
|35555|tcp||service.exe (Win32 Trin00)
|37651|tcp||YAT
SygateHNM|39213|udp|Sygate Home Network Manager|
|40412|tcp||The Spy
|40421|tcp||Agent 40421, Masters Paradise .96
|40422|tcp||Masters Paradise 1.x
|40423|tcp||Masters Paradise .97
|40425|tcp||Masters Paradise 
|40426|tcp||Masters Paradise 3.x
inoculan|41508|udp|CA Inoculan broadcasts|
|41666|tcp||Remote Boot
|43210|tcp||Schoolbus 1.6 & 2.0
|44444|tcp||Prosiak
|47262|tcp||Delta Source
|49301|tcp||Online Keylogger 
|50505|tcp||Sockets de Troie
|50766|tcp||Fore, Schwindler
|51996|tcp||CafeIni
|53001|tcp||Remote Windows Shutdown
|53217|tcp||Acid Battery 2000
|54283|tcp||BackDoor-G, SubSeven
|54321|tcp||School Bus .69-1.11/1.6/2.0
|55555|tcp||BO2K "eurocalculator.exe"
|57341|tcp||NetRaider
|58339|tcp||ButtFunnel
|60000|tcp||DeepThroat 2/3
|60068|tcp||Xzip 6000068
|60411|tcp||Connection
|61348|tcp||Bunker-Hill
|61466|tcp||Telecommando
|61603|tcp||Bunker-Hill
|63485|tcp||Bunker-Hill
|65000|tcp||Devil 1.03, Stacheldraht (DDoS)
pc-anywhere|65301|tcp|PC-Anywhere|
|65432|tcp||The Traitor
|65535|tcp||R