Port No. | Protocol | Service | Description |
700 | tcp/udp | epp | Extensible Provisioning Protocol |
700 |
tcp/udp |
buddyphone |
This Internet telephony product communicates
over this port as well as the TCP range 5000-5111. |
701 | tcp/udp | lmp | Link Management Protocol (LMP) |
702 | tcp/udp | iris-beep | IRIS over BEEP |
703 | tcp/udp | # | Unassigned |
701 |
tcp/udp |
# |
Marotob |
704 | tcp/udp | elcsd | errlog copy/server daemon |
705 | tcp/udp | agentx | AgentX |
706 | tcp/udp | silc | SILC |
707 | tcp/udp | borland-dsj | Borland DSJ |
708 | tcp/udp | # | Unassigned |
709 | tcp/udp | entrust-kmsh | Entrust Key Management Service Handler |
710 | tcp/udp | entrust-ash | Entrust Administration Service Handler |
711 | tcp/udp | cisco-tdp | Cisco TDP |
712 | tcp/udp | tbrpf | TBRPF |
713-728 | tcp/udp | # | Unassigned |
729 | tcp/udp | netviewdm1 | IBM NetView DM/6000 Server/Client |
730 | tcp/udp | netviewdm2 | IBM NetView DM/6000 send tcp |
731 | tcp/udp | netviewdm3 | IBM NetView DM/6000 receive tcp |
732-740 | tcp/udp | # | Unassigned |
741 | tcp/udp | netgw | netGW |
742 | tcp/udp | netrcs | Network based Rev. Cont. Sys. |
743 | tcp/udp | # | Unassigned |
744 | tcp/udp | flexlm | Flexible License Manager |
745-746 | tcp/udp | # | Unassigned |
747 | tcp/udp | fujitsu-dev | Fujitsu Device Control |
748 | tcp/udp | ris-cm | Russell Info Sci Calendar Manager |
749 | tcp/udp | kerberos-adm | kerberos administration |
750 | tcp | rfile | |
750 | udp | loadav | |
750 | udp | kerberos-iv | kerberos version iv |
751 | tcp/udp | pump | |
752 | tcp/udp | qrh | |
753 | tcp/udp | rrh | |
754 | tcp/udp | tell | send |
755-756 | tcp/udp | # | Unassigned |
758 | tcp/udp | nlogin | |
759 | tcp/udp | con | |
760 | tcp/udp | ns | |
761 | tcp/udp | rxe | |
762 | tcp/udp | quotad | |
763 | tcp/udp | cycleserv | |
764 | tcp/udp | omserv | |
765 | tcp/udp | webster | |
766 | tcp/udp | # | Unassigned |
767 | tcp/udp | phonebook | phone |
768 | tcp/udp | # | Unassigned |
769 | tcp/udp | vid | |
770 | tcp/udp | cadlock | |
771 | tcp/udp | rtip | |
772 | tcp/udp | cycleserv2 | |
773 | tcp | submit | |
773 | udp | notify | |
774 | tcp | rpasswd | |
774 | udp | acmaint_dbd | |
775 | tcp | entomb | |
775 | udp | acmaint_transd | |
776 | tcp/udp | wpages | |
777 | tcp/udp | multiling-http | Multiling HTTP |
777 |
tcp |
# |
AimSpy, Undetected, NetCrack |
778 |
tcp |
# |
NetCrack |
778-779 | tcp/udp | # | Unassigned |
780 | tcp/udp | wpgs | |
781-785 | tcp/udp | # | Unassigned |
786 | tcp/udp | # | Unassigned |
787 | tcp/udp | # | Unassigned |
788-799 | tcp/udp | # | Unassigned |
800 | tcp/udp | mdbs_daemon | |
801 | tcp/udp | device | |
802-809 | tcp/udp | # | Unassigned |
808 |
tcp |
# |
WinHole |
810 | tcp | fcp-udp | FCP |
810 | udp | fcp-udp | FCP Datagram |
811-827 | tcp/udp | # | Unassigned |
828 | tcp/udp | itm-mcell-s | itm-mcell-s |
829 | tcp/udp | pkix-3-ca-ra | PKIX-3 CA/RA |
830-846 | tcp/udp | # | Unassigned |
847 | tcp/udp | dhcp-failover2 | dhcp-failover 2 |
848 | tcp/udp | gdoi | GDOI |
849-859 | tcp/udp | # | Unassigned |
860 | tcp/udp | iscsi | iSCSI |
861-872 | tcp/udp | # | Unassigned |
873 | tcp/udp | rsync | rsync |
874-885 | tcp/udp | # | Unassigned |
886 | tcp/udp | iclcnet-locate | ICL coNETion locate server |
887 | tcp/udp | iclcnet_svinfo | ICL coNETion server info |
887 |
tcp |
# |
W32.Huayu |
888 | tcp/udp | accessbuilder | AccessBuilder |
888 | tcp | cddbp | CD Database Protocol |
889-899 | tcp/udp | # | Unassigned |
890 |
tcp |
# |
Dsklite |
900 | tcp/udp | omginitialrefs | OMG Initial Refs |
901 | tcp/udp | smpnameres | SMPNAMERES |
901 |
tcp |
swat |
SWAT is an HTTP interface to SAMBA. |
901 |
tcp/udp |
# |
ISS RealSecure
The IDS sensor listens on this port
for communication from the console. |
902 | tcp/udp | ideafarm-chat | IDEAFARM-CHAT |
903 | tcp/udp | ideafarm-catch | IDEAFARM-CATCH |
904-909 | tcp/udp | # | Unassigned |
905 |
tcp/udp |
# |
NetDevil |
910 | tcp/udp | kink | Kerberized Internet Negotiation of Keys (KINK) |
911 | tcp/udp | xact-backup | xact-backup |
911 |
tcp |
# |
Dark Shadow |
912 | tcp/udp | apex-mesh | APEX relay-relay service |
913 | tcp/udp | apex-edge | APEX endpoint-relay service |
914-988 | tcp/udp | # | Unassigned |
989 | tcp/udp | ftps-data | "ftp protocol, data, over TLS/SSL" |
990 | tcp/udp | ftps | "ftp protocol, control, over TLS/SSL" |
991 | tcp/udp | nas | Netnews Administration System |
992 | tcp/udp | telnets | telnet protocol over TLS/SSL |
993 | tcp/udp | imaps | imap4 protocol over TLS/SSL |
994 | tcp/udp | ircs | irc protocol over TLS/SSL |
995 | tcp/udp | pop3s | pop3 protocol over TLS/SSL (was spop3) |
996 | tcp/udp | vsinet | vsinet |
997 | tcp/udp | maitrd | |
998 | tcp | busboy | |
998 | udp | puparp | |
999 | tcp | garcon | |
999 | udp | applix | Applix ac |
999 | tcp/udp | puprouter | |
999 |
tcp |
# |
RAT: Deep Throat
Puts a keylogger at port 999 (TCP).
This will record all of a user's keystrokes. |
999 |
tcp |
# |
Foreplay, WinSatan |
1000 | tcp/udp | cadlock2 | |
1000 |
tcp |
# |
Der Spaher / Der Spaeher, Direct Connection, Nibu |
1001-1009 | tcp/udp | # | Unassigned |
1001 |
tcp |
# |
Der Spaher / Der Spaeher, Le Guardien, Silencer, WebEx, Ghoice, Nibu, W32.Dumaru,
Wortbot |
1008 | udp | # | Possibly used by Sun Solaris???? |
1010 | tcp/udp | surf | surf |
1010-1012 |
tcp |
# |
Doly Trojan |
1011-1022 | tcp/udp | # | Reserved |
1011 |
tcp |
# |
Augudor |
1012 |
tcp |
# |
Backdoor.Urat |
1015-1016 |
tcp |
# |
Doly Trojan |
1020 |
tcp |
# |
Vampire |
1021 |
tcp |
# |
Webus |
1022 |
tcp |
# |
W32.Sasser |
1023 | tcp/udp | # | Reserved |
1023 |
tcp |
# |
W32.Sasser |