NMAP (WIN/UNIX)

Este manual lo he sacado de recopilar unos cuantos que había por la red. Los he ampliado escasamente porque no lo necesitaban demasiado, he corregido faltas ortográficas (no todas como veréis, ampliar algún tema, alguna investigación por la red…juntar las cosas…. (Vamos que no encontrareis ningún manual de NMAP mejor y más completo que este, ¡garantizado!) Se que el formato del texto es un poco cutre pero bueno la verdad es que me da pereza ponerlo todo igual, todo se debe a los diferentes manuales de los que he sacado información y tal…

Decir que este manual vale tanto como para Windows como para Unix (solo cambia la versión del Nmap, los comandos son los mismos para los dos S.O) Aquí Podéis descargarlo: http://www.insecure.org/nmap. Es muy amplio pero enseña mucho, recomiendo que se lea y que cada uno saque un resumencillo con la mas interesante, con sus ejemplos y todo. Hay cosas difíciles de entender debido a la amplitud técnica del manual en cuanto a que se explica mucho de cada opción. Te aseguro que con este manual vas a saber escanear de una manera efectiva aunque no tengas muchos conocimientos del tema.

Para Windows hay varias versiones. El Nmap para poder sacarle todo el partido es mejor hacerlo por comandos que es como se explica aquí. (El de Windows no requiere instalación solo accede a el mediante ms-dos y ya esta. (Ruta sin espacios)

Decir que para un mejor escaneo podéis utilizar mas escaneadotes (Que son menos potentes como Superscan, Portscan, scan,…) y comparar ya que siempre hay algo que se escapa en uno de ellos que otro puede captar, esto podréis verlo en la sección ejemplos.

NOTAS DEL CREADOR Nmap (fyodor@insecure.org)

¿Bugs? Por favor, envíeme cualquier bug que descubra. Los parches tampoco estarían mal. Recuerde enviar también nuevas huellas de sistemas operativos para que podamos ampliar nuestra base de datos.

INDICE: 1- Tipos de escaneo* Ejemplos de los tipos

2- Opciones generales*Opción idlscan

3- Ejemplos de comandos *Super ejemplo*Diferencias entre scaners

4- Puertos de interés

SINOPSIS Nmap [Tipos(s)de escaneo] [Opciones] <servidor o red #1... [#N]>

<servidor o red #1... [#N]> lo que vas a escanear www.XXX.com ó IP

*********************Tipos de Escaneo************************

-sT (Deja ver tu IP) Escaneo TCP connect(): Es la forma mas basica de

escaneo TCP. La llamada de sistema connect() pro- proporcionada por nuestro sistema operativo se usa para establecer una conexión con todos los puertos interesantes de la maquina. Si el puerto esta a la escucha, connect() tendrá éxito, de otro modo, el puerto resulta inalcanzable. Una ventaja importante de esta técnica es que no resulta necesario tener privilegios especiales. Cualquier usuario en la mayoría de los sistemas UNIX tiene permiso para usar esta llamada.

Este tipo de escaneo resulta fácilmente detectable dado que los registros del servidor de destino muestran un montón de conexiones y mensajes de error para aquellos servicios que accept() (acep- tan) la conexión para luego cerrarla inmediata- mente. Si no se le suministra ningún tipo de scan se

asume por defecto sT.

-sS (Oculta un Poco la IP, Únicamente root puede ejecutarlo) Escaneo TCP SYN: A menudo se denomina a esta

técnica escaneo "half open" (medio abierto), porque no se abre una conexión TCP completa. Se envía un paquete SYN, como si se fuese a abrir una conexión real y se espera que llegue una respuesta. Un SYN|ACK indica que el puerto esta a la escucha. Un RST es indicativo de que el puerto no esta a la

escucha. Si se recibe un SYN|ACK, se envía un RST inmediatamente para cortar la conexión (en realidad es el kernel de nuestro sistema operativo el que hace esto por nosotros). La ventaja principal de esta técnica de escaneo es que será registrada por muchos menos servidores que la anterior. Por des- gracia se necesitan privilegios de root para con- struir estos paquetes SYN modificados.

Puede que al escanear desde Windows a otro Windows, este comando funcione mejor que el -st

-sF -sX -sN Xmas Si lo combinamos con la opción -f mejora la clandestinidad

(el flag -f para utilizar pequeños fragmentos en el scan para hacerlos menos detectables aun. )

(Mas clandestino que los anteriores) (-sN da buenos resultados, por lo menos en windows)

Modos Stealth FIN, Xmas Tree o Nul scan: A veces ni siquiera el escaneo SYN resulta lo suficientemente clandestino. Algunas firewalls y filtros de paque- tes vigilan el envió de paquetes SYN a puertos restringidos, y programas disponibles como Synlog- ger y Courtney detectan este tipo de escaneo. Estos tipos de escaneo avanzado, sin embargo, pueden cruzar estas barreras sin ser detectados.

La idea es que se requiere que los puertos cerrados respondan a nuestro paquete de prueba con un RST, mientras que los puertos abiertos deben ignorar los paquetes en cuestión

*El escaneo FIN utiliza un paquete FIN vacio (sorpresa)

como prueba, mientras que el escaneo Xmas tree activa las flags FIN, URG y PUSH.

*El escaneo NULL desactiva todas las flags. Por desgracia Microsoft (como de costumbre) decidió ignorar el estándar completamente y hacer las cosas a su manera. Debido a esto, este tipo de escaneo no funcionara con sis- temas basados en Windows95/NT. En el lado positivo, esta es una buena manera de distinguir entre las dos plataformas. Si el escaneo encuentra puertos cerrados, probablemente se trate de una maquina UNIX, mientras que todos los puertos abiertos es indicativo de Windows. Excepcionalmente, Cisco, BSDI, HP/UX, MVS, y IRIX también envían RSTs en vez de desechar el paquete

-sU Escaneo Udp: Este método se usa para saber que

puertos UDP (Protocolo de Datagrama de Usuario, RFC 768) están abiertos en un servidor. La técnica con- siste en enviar paquetes UCP de 0 bytes a cada puerto de la maquina objetivo. Si se recibe un men- saje ICMP de puerto no alcanzable, entonces el puerto esta cerrado. De lo contrario, asumimos que esta abierto.

Alguna gente piensa que el escaneo UDP no tiene sentido. Normalmente les recuerdo el reciente agu- jero Solaris rcpbind. Puede encontrarse a rcpbind escondido en un puerto UDP no documentado en algún lugar por encima del 32770. Por lo tanto, no importa que el 111 este bloqueado por la firewall. Pero, cquien puede decir en cual de los mas de 30000 puertos altos se encuentra a la escucha el programa? iCon un escáner UDP se puede! Tenemos también el programa de puerta trasera cDc Back Ori- fice que se oculta en un puerto UDP configurable en las maquinas Windows, por no mencionar los muchos servicios frecuentemente vulnerables que usan UDP como snmp, tftp, NFS, etc.

Por desgracia, el escaneo UDP resulta a veces tremendamente lento debido a que la mayoría de los servidores implementan una sugerencia recogida en el RFC 1812 (sección 4.3.2.8) acerca de la limi- tacion de la frecuencia de mensajes de error ICMP. Por ejemplo, el kernel de Linux (en /ipv4/icmp.h) limita la generación de mensajes de destino inal- canzable a 80 cada cuatro segundos, con una penal- ización de 1/4 de segundo si se rebasa dicha canti- dad. Solaris tiene unos limites mucho mas estrictos (mas o menos 2 mensajes por segundo) y por lo tanto lleva mas tiempo hacerle un escaneo. nmap detecta este limite de frecuencia y se ralentiza en conse- cuencia, en vez de desbordar la red con paquetes inútiles que la maquina destino ignorara.

Como de costumbre, Microsoft ignoro esta sugerencia del RFC y no parece que haya previsto ningún tipo de limite de frecuencia para las maquinas Windows. Debido a esto resulta posible escanear los 65K puertos de una maquina Windows muy rapidamente. ¡Toma!! ya tenemos manera de saber el SO al 80%...XD

-b <ftp relay host> Ataque de rebote FTP: Una caracteristica "intere- sante" del protocolo FTP (FRC 959) es la posibili-

dad de realizar conexiones ftp tipo "proxy". En otras palabras, ime resultaría posible conectarme desde malvado.com al servidor ftp de destino.com y pedirle a ese servidor que enviase un archivo a CUALQUIER PARTE de Internet! Aun asi, esto podría haber funcionado bien en 1985 cuando se escribio el RFC, pero en la Internet actual, no podemos permi- tir que la gente vaya por ahi asaltando servidores ftp y pidiéndoles que escupan sus datos a puntos arbitrarios de Internet. Tal y como escribió *Hob- bit* en 1985, este defecto del protocolo "puede usarse para enviar mensajes de correo y noticias cuyo rastro será virtualmente imposible de seguir, machacar servidores en varios sitios web, llenar discos, tratar de saltarse firewalls y , en gen- eral, resultar molesto y difícil de detectar al mismo tiempo." Nosotros explotaremos este defecto para (sorpresa, sorpresa) escanear puertos TCP desde un servidor ftp "proxy". De este modo nos podríamos conectar a un servidor ftp tras una fire- wall, y luego escanear aquellos puertos que con mas probabilidad se encuentren bloqueados (el 139 es uno bueno). Si el servidor ftp permite la lectura y escritura en algún directorio (como por ejemplo /incoming), se pueden enviar datos arbitrarios a puertos que se encuentren abiertos (aunque nmap no realiza esta función por si mismo).

El argumento que se pasa a la opción 'b' es el host que se pretende usar como proxy, en notación URL estandar. El formato es: nombre_de_usuario:pass- word@servidor:puerto. Todo excepto servidor es opcional. Para determinar que servidores son vul- nerables a este ataque, vease mi articulo en Phrack 51. Se encuentra disponible una versión actualizada en la URL de nmap (http://www.insecure.org/nmap).

-d ip -------------->para mi la mejor. Te dice muchas cosas....

********** Ejemplos explicativos para un mayor entendimiento ****************

Barrido utilizando el three way handshake del TCP (opción -sT)

La forma de barrido mas común que posee es utilizando la opción -sT . Este modo se basa en la metodología de inicio de conexión que posee el

TCP , conocida como three way handshake. Describiéndolo resumidamente sucede la siguiente secuencia [1]a) El servidor tiene que estar preparado para recibir una conexión (en general utilizando las funciones socket , bind y listen)b) El cliente lanza una conexión activa - llama a connect() - Con esto envía un segmento SYN para informarle al server el numero inicial de secuencia para los datos que el cliente va a enviar en la conexión. El SYN normalmente contiene un IP Header - un TCP Header y puede ser algún opción TCPc) El servidor debe dar por conocido el SYN enviando un ACK y a su vez envía un SYN con su número de secuencia (todo en un sólo paquete TCP)d) El cliente debe dar por conocido el SYN enviado con un ACK

Este modo de barrido posee dos ventajas:

* es rápido (incluso el Nmap posee opciones para hacerlo aun mas rápido en conexiones lentas, que no analizaremos) * no se necesitan privilegios especiales para realizarlo en la máquina que lanza el barrido

y posee la gran desventaja que es muy sencillo de detectar y es fácil de filtrar

Se analiza a continuación el proceso que general el nmap con la opción -sT , corriendo el tcpdump en la máquina objetivo. Para ello se ejecuta el Nmap en la máquina 192.168.255.20 y se dirige hacia la máquina casa2.xxx.xxx.xxx, en una red ethernet1) 08:24:18.393108 192.168.255.20.1024 > casa2.xxx.xxx.xxx.653: S 2632227152:2632227152(0) win 16060 <mss 1460,sackOK,timestamp 232602[|tcp]> (DF)2) 08:24:18.393167 casa2.xxx.xxx.xxx.653 > 192.168.255.20.1024: R 0:0(0) ack 2632227153 win 03) 08:24:18.393227 192.168.255.20.1025 > casa2.xxx.xxx.xxx.6141: S 2644226118:2644226118(0) win 16060 <mss 1460,sackOK,timestamp 232602[|tcp]> (DF)4) 08:24:18.393258 casa2.xxx.xxx.xxx.6141 > 192.168.255.20.1025: R 0:0(0) ack 2644226119 win 05) 08:24:18.453343 192.168.255.20.1298 > casa2.xxx.xxx.xxx.pop3: S 2640612362:2640612362(0) win 16060 <mss 1460,sackOK,timestamp 232608[|tcp]> (DF)6) 08:24:18.453542 casa2.xxx.xxx.xxx.pop3 > 192.168.255.20.1298: S 1658259980:1658259980(0) ack 2640612363 win 16060 <mss 1460,sackOK,timestamp 243353[|tcp]> (DF)7) 08:24:18.458667 192.168.255.20.1298 > casa2.xxx.xxx.xxx.pop3: . ack 1 win 16060 <nop,nop,timestamp 232609 243353> (DF)8) 08:24:18.461280 192.168.255.20.1298 > casa2.xxx.xxx.xxx.pop3: F 1:1(0) ack 1 win 16060 <nop,nop,timestamp 232609 243353> (DF)

La numeración de líneas se ha agregado para una mejor explicación:

en la línea 1) la máquina "atacante" 192.168.255.20 lanza desde el puerto 1024 un segmento SYN hacia el puerto 653 de la máquina objetivo casa2.xxx.xxx.xxx . Se reconoce que se trata de un segmento SYN por la S que se observa después del 653. Se estaría hasta allí en el punto b) del three way handshake explicado.en la línea 2) la máquina objetivo responde con un paquete RESET ( nótese la R luego del 1024) indicando esto que no posee un proceso "escuchando" sobre el puerto 653las líneas 3 y 4 son similares a las dos primeras , lo fundamental que varia es que se chequea si hay un proceso en el puerto 6141 de la máquina objetivo, como nuevamente no lo hay , se vuelve a responder con un RESETla línea 5) muestra como la máquina 192.168.255.20 lanza un segmento SYN al puerto pop 3 de la máquina objetivo (puerto 110) , esta vez la máquina objetivo responde con un ACK dando por reconocido el SYN y el número de secuencia enviado ( se envía el numero de secuencia propio de la máquina objetivo , en este caso 1658259980 y el nro de secuencia enviado por la máquina 192.168.255.20 , + 1 es decir 2640612363) . Fíjese que el paquete que responde casa2 posee los bits de control SYN y ACK activos . Esto se observa en la línea 6) y se estaría en el paso c) del three way handshake.La línea 7) muestra el reconocimiento del último paquete recibido en la máquina 192.168.255.20 con un segmento ACK , llegando así al punto d) del handshake . La línea 8) es la finalización de la conexión por parte de 192.168.255.20 , cuestión que se realiza enviando un segmento FIN (nótese la F luego de pop3)

Este proceso permitió al Nmap ejecutado detectar que el puerto 110 (pop3) de casa2 es un puerto activo en dicha máquina

Se mencionó que esta forma de barrido es fácilmente detectable , notese las huellas que dejaron en el archivo /var/log/messages ( esto depende de como esté configurado el syslog.conf) la conexión vista en la línea 5 , 6 , 7 y 8 :

May 6 08:24:01 casa2 in.pop3d[205]: connect from root@192.168.255.20

*Barrido utilizando los segmentos SYN (medio abierto o half open , opción -sS )

Este tipo de barrido se obtiene ejecutando al nmap con la opción -sS . La técnica que utiliza es abrir una "media conexión" , es decir envía un segmento SYN y si recibe un ACK es porque ha detectado un puerto activo en la máquina objetivo , después de lo cual envía un RESET para cortar en forma abrupta la comunicación. Si en vez de un ACK recibe un RST es porque el puerto de la máquina objetivo no se encuentra activo. Este modo de barrido posee la desventaja que se deben tener privilegios

de root para ejecutarlo . Pero posee la ventaja que es de difícil detección en la máquina que es barrida

*Veamos ahora un análisis similar de la tarea desarrollada por el Nmap con esta opción, analizándola con el tcpdump (nuevamente las líneas se numeran por comodidad)1) 22:25:45.856936 192.168.255.20.40175 > casa2.tau.org.ar.946: S 1292785825:1292785825(0) win 30722) 22:25:45.857078 casa2.tau.org.ar.946 > 192.168.255.20.40175: R 0:0(0) ack 1292785826 win 0

las líneas 1) y 2) son muy similares a las líneas 1) y 2) del apartado anterior , simplemente se ve el segmento SYN enviado por la máquina 192.168.255.20 al puerto 946 de la máquina casa2 y la respuesta de esta enviando un RESET por no ser ese un puerto activo de ella

3) 22:25:45.970365 192.168.255.20.40175 > casa2.tau.org.ar.pop3: S 1292785825:1292785825(0) win 30724) 22:25:45.976022 casa2.tau.org.ar.pop3 > 192.168.255.20.40175: S 185944428:185944428(0) ack 1292785826 win 16080 <mss 536> (DF)5) 22:25:45.979578 192.168.255.20.40175 > casa2.tau.org.ar.pop3: R 1292785826:1292785826(0) win 0

las líneas 3) 4) y 5) son obtenidas por el hallazgo exitoso del puerto 110 ( pop3) en la máquina casa2 . Como se mencionó , no se desarrolla completo el three way handshake sino que al recibir el Nmap el reconocimiento de su segmento SYN (mediante el segmento ACK enviado por casa2 , línea 4 ), envía un segmento RESET que fuerza la interrupción de la comunicación.

Este barrido sobre casa2 no dejó huella en el archivo /var/log/messages , tal como se había anticipado

*Barrido utilizando los segmentos FIN

La idea sobre la que se basa este tipo de barrido es que los puertos no activos de la máquina objetivo responden a un paquete FIN con un paquete RST. Los puertos activos, por otra parte ignoran dichos paquetes. Por lo tanto se obtiene la lista interesante de puertos observando cuales son los que no han "contestado". Las máquinas corriendo sistemas operativos Microsoft no son vulnerables a este tipo de barrido, ya que realizan una implementación no Standard de lo que debería ser la forma correcta de operación del TCP.

Hay tres formas de operación del Nmap utilizando técnicas parecidas, ellas se obtienen con las opciones -sF , -sX y -sN.

Analizamos en este articulo el comportamiento bajo la opción -sF. Realizamos para ello un trabajo similar al hecho para las otras opciones

1) 06:50:45.643718 192.168.255.20.35600 > casa2.tau.org.ar.864: F 0:0(0) win 20482) 06:50:45.643865 casa2.tau.org.ar.864 > 192.168.255.20.35600: R 0:0(0) ack 0 win 0

en las líneas 1) y 2) se observa el envío del segmento FIN (nótese la F luego del 864 en la línea 1) a la máquina objetivo y la respuesta de ella con un paquete RST (nótese la R en la línea 2 luego del 35600). Nmap concluye entonces que el puerto 864 de casa2 no se encuentra activo.

3) 06:50:47.933227 192.168.255.20.35600 > casa2.tau.org.ar.pop3: F 0:0(0) win 20484) 06:50:48.251147 192.168.255.20.35601 > casa2.tau.org.ar.pop3: F 0:0(0) win 2048

Las líneas 3) y 4) vuelven a tomar como ejemplo al puerto pop3 de casa2 .En la línea 3 se ve el envío del segmento FIN, segmento que no obtiene respuesta por parte de casa2 . La línea 4) constituyó una sorpresa y debe ser una seguridad que toma el Nmap para puertos que "no contestan", vuelve a enviarle un segmento FIN al cabo de un lapso para ver si realmente ese puerto no esta contestando. En ambos casos, casa2 ignoró los paquetes, mostrándole así al Nmap que su puerto pop3 se encuentra activo.

**********************Opciones Generales********************* No se requiere ninguna pero algunas de ellas pueden resultar de gran utilidad.

-n No hace conversiones DNS para hacer el -sP mas rápido.

-p0 No intenta hacer ping a un servidor antes de escanearlo. Esto permite el escaneo de redes que no permiten que pasen peticiones (o respuestas)de ecos ICMP a través de su firewall. microsoft.com es un ejemplo de una red de este tipo, y, por lo tanto, debería usarse siempre -p0 o -PT80 al escanear microsoft.com.y otros con sistemas de detección

de ataques sensibles asi como los .gov .mil etc.

-PT Usa el ping TCP para determinar que servidores están activos. En vez de enviar paquetes de peticion de ecos ICMP y esperar una respuesta, se lanzan paquetes TCP ACK a través de la red de des- tino (o a una sola maquina) y luego se espera a que lleguen las respuestas. Los servidores activos

responden con un RST. Esta opción mantiene la efi- ciencia de escanear únicamente aquellos servidores que se encuentran activos y la combina con la posi- bilidad de escanear redes/servidores que bloquean los paquetes ping. Para los usuarios no root se usa connect(). Para establecer el puerto de destino de los paquetes de prueba use -PT <numero de puerto). El puerto por defecto es el 80, dado que normal-

mente este puerto no es un puerto filtrado. Para el caso de -sT y -sP esta opción aunque no es suministrada va implícita en el método.

-PS Esta opción usa paquetes SYN (petición de conexión) en vez de los paquetes ACK para usuarios root. Los servidores activos deberian responder con un RST

(o, en raras ocasiones, un SYN|ACK).Utiliza el TCP SYN sweep en lugar de el valor por defecto que es el ack sweep utilizado en el Ping TCP.

-PI Esta opción usa un paquete ping (petición de eco ICMP) verdadero. Encuentra servidores que están activos y también busca direcciones de broadcast dirigidas a subredes en una red. Se trata de direc- ciones IP alcanzables desde el exterior que envian los paquetes IP entrantes a una subred de servi- dores. Estas direcciones deberían eliminarse, si se encontrase alguna, dado que suponen un riesgo ele- vado ante numerosos ataques de denegación de servi- cio (el mas corriente es Smurf).PI Utiliza paquetes icmp

para determinar que hosts están conectados y es especial si deseas hacer un scan a travez de un firewall.

-PB Este es el tipo de ping por defecto. Usa los barridos ACK ( -PT ) e ICMP ( -PI ) en paralelo. De este modo se pueden alcanzar firewalls que filtren

uno de los dos (pero no ambos).Hace la misma función que el barrido (scan) TCP y ICMP, se le puede especificar un puerto destino después de la "B".

-O Esta opción activa la detección remota del sistema operativo por medio de la huella TCP/IP. En otras palabras, usa un punado de tecnicas para detectar sutilezas en la pila de red subyacente del sistema operativo de los servidores que se escanean. Usa esta información para crear una 'huella' que luego compara con una base de datos de huellas de sis- temas operativos conocidas (el archivo Nmap-os-fin-

gerprints) para decidir que tipo de sistema se esta escaneando.

Si encuentra una maquina diagnosticada erróneamente que tenga por lo menos un puerto abierto, me seria de gran utilidad que me enviase los detalles en un e-mail (es decir, se encontró la version xxx de tal cosa y se detecto este u otro sistema operativo..). Si encuentra una maquina con al menos un puerto abierto de la cual Nmap le informe "sistema opera- tivo desconocido",Si no da el SO puede que muestre

la marca del router. le estaría agradecido si me enviase la dirección IP junto con el nombre del sistema operativo y el numero de su versión. Si no me puede enviar la dirección IP, una alternativa seria ejecutar Nmap con la opcion -d y enviarme las tres huellas que obtendría como resultado junto con el nombre del sistema operativo y el numero de version. Al hacer esto, esta contribuyendo a aumen- tar el numero importante de sistemas operativos conocidos por Namp y de este modo el programa resultara mas exacto para todo el mundo.

-R Intenta Convertir utilizando DNS(o sea del ip te muestra el hostname ejm: le das 127.0.0.1 y te muestra que slocalhost.localdomain.

-I Esta opcion activa el escaneo TCP de identificación contraria. Tal y como comenta Dave Goldsmith en un correo Bugtrat de 1996, el protocolo ident (rfc 1413) permite la revelación del nombre del usuario propietario de cualquier proceso conectado vía TCP, incluso aunque ese proceso no haya iniciado la conexión. De este modo se puede, por ejemplo, conectar con el puerto http y luego usar identd para descubrir si el servidor esta ejecutándose como root. Esto solo se puede hacer con una conexion TCP completa con el puerto de destino (o sea, la opción de escaneo -sT). Cuando se usa -I, se consulta al identd del servidor remoto sobre cada uno de los puertos abiertos encontrados en el sistema. Por supuesto, esto no funcionara si el servidor en cuestión no esta ejecutando identd.

-f Esta opción hace que el escaneo solicitado de tipo SYN, FIN, XMAS, o NULL use pequeños paquetes IP fragmentados. La idea consiste en dividir la

cabecera TCP en varios paquetes para ponérselo mas difícil a los filtros de paquetes, sistemas de detección de intrusión y otras inconveniencias por el estilo que tratan de saber lo uno esta haciendo. iTenga cuidado con esto! Algunos programas tienen problemas a la hora de manejar estos paquetes tan pequenos. Mi sniffer favorito produjo un error de segmentación inmediatamente después de recibir el primer fragmento de 36 bytes. iDespues de este viene uno de 24 bytes! Mientras que este método no podra con filtros de paquetes y firewalls que ponen en cola todos los fragmentos IP (como en el caso de la opción CONFIG_IP_ALWAYS_DEFRAG en la configu- ración del kernel de Linux), también es verdad que algunas redes no pueden permitirse el efecto nega- tivo que esta opción causa sobre su rendimiento y por lo tanto la dejan desactivada.

Nótese que no he conseguido que esta opción funcione con todos los sistemas. Funciona bien con mis sis- temas Linux, FreeBSD y OpenBSD y algunas personas han informado de éxitos con otras variantes *NIX.

-v Modo de información ampliada. Esta opción resulta muy recomendable y proporciona gran cantidad de información sobre lo que esta sucediendo. Puede usarla dos veces para un efecto mayor. iUse -d un par veces si lo que quiere es volverse loco haciendo scroll en su pantalla!

-h Esta opción tan practica muestra una pantalla de referencia rápida sobre las opciones de uso de nmap. Quizas haya notado que esta pagina de manual no es precisamente una "referencia rápida" :)

-o <nombre_de_archivo_de_registro> Esta opción guarda los resultados de sus escaneos en forma humanamente inteligible en el archivo especificado como argumento.

-m <nombre_de_archivo_de_registro> Esta opcion guarda los resultados de sus escaneos en un formato comprensible para una maquina en el archivo especificado como argumento.

-i <nombre_de_archivo_de_entrada> Lee especificaciones de servidores o redes de des- tino a partir del archivo especificado en vez de hacerlo de la linea de comandos. El archivo debe contener una lista de expresiones de servidores o

redes separadas por espacios, tabuladores o nuevas lineas. Use un guion (-) como nom- bre_de_archivo_de_entrada si desea que nmap tome las expresiones de servidores de stdin. -p <rango de puertos> Esta opción determina los puertos que se quieren especificar. Por ejemplo, '-p 23' probara solo el puerto 23 del servidor(es) objetivo. '-p 20-30,139,60000-' escanea los puertos del 20 al 30, el puerto 139 y todos los puertos por encima de 60000. Por defecto se escanean todos los puertos entre el 1 y el 1024 así como los que figuran en el archivo /etc/services que podemos mirar en modo txt.

-F Modo de escaneo rápido. Implica que solo se desean escanear aquellos puer- tos que figuran en /etc/services. Obviamente esto resulta mucho mas rápido que escanear cada uno de los 65535 puertos de un servidor.

-D <senuelo1, señuelo2 dir_ip_a_escanear> (combinar con –P0 para mejor resultado). Especifica que se desea efectuar un escaneo con

senuelos, el cual hace que el servidor escaneado piense que la red destino del escaneo esta siendo escaneada tambien por el servidor(es) especificados como senuelos. Asi, sus IDs pueden informar de entre 5 y 10 escaneos procedentes de direcciones IP unicas, pero no sabrán que dirección IP les estaba escaneando realmente y cuales eran senuelos inocentes.

Separe cada servidor senuelo con comas, y puede usar opcionalmente 'ME' como senuelo que representa la posición que quiere que ocupe su dirección IP. ¡Si coloca 'ME' en la sexta posición o superior, es muy poco probable que algunos escáneres de puertos comunes (como el excelente scanlogd de Solar Designer) lleguen incluso a mostrar su dirección IP. Si no se usa 'ME', Nmap le colocara a usted en una posición aleatoria.!

Nótese que aquellos servidores usados como senuelos deben encontrarse activos, o, de lo contrario podria provocar un desbordamiento (flood) SYN en su objetivo. Por otra parte, resultara bastante fácil saber que servidor esta escaneando si únicamente hay uno activo en la red.

Nótese también que algunos (estupidos) "detectores de escáneres de puertos" opondrán una firewall o bien denegaran el rutaje a aquellos servidores que intenten escanear sus puertos. De este modo se podría provocar inadvertidamente que la maquina que se esta intentando escanear perdiese contacto con los servidores usados como senuelos. Esto podría causarles a los servidores escaneados verdaderos problemas si los servidores senuelo fuesen, por ejemplo, su gateway a internet o incluso "local- host". Debería usarse esta opción con extremo cuidado. La verdadera moraleja de este asunto es que un detector de escaneos de puertos que aparenten tener intenciones poco amistosas no debería llevar a cabo acción alguna contra la maquina que aparentemente le esta escaneando. iPodria no ser mas que un senuelo!

Los senuelos se usan tanto en el escaneo ping ini- cial (usando ICMP, SYN, ACK, o lo que sea) como en la fase de escaneo de puertos propiamente dicha. También se usan los senuelos en la fase de detección remota del sistema operativo ( -O ).

Vale la pena destacar que el uso de demasiados senuelos puede ralentizar el proceso de escaneo y, potencialmente, hacer que sea menos exacto. Por otra parte, algunos ISPs filtraran los paquetes manipulados y los desecharan, aunque muchos (actualmente la mayoría) no ponen restricciones a este tipo de paquetes.

-S <Direccion_IP>

Se suele utilizar para ocultar un poco el scan, ideal para hacer"Scan Spoofing". En determinadas circunstancias, es posible que Nmap

no sea capaz de determinar su (de usted) dirección IP de origen (nmap se lo hará saber si este es el caso). En este caso, use -S con su dirección IP (del interfaz a través del cual desea enviar los paquetes).

Otro posible uso de esta opción es el de manipular el escaneo para hacer creer a los servidores de destino que alguien mas les esta escaneando. iImaginese a una compañía escaneada repetidamente por una compañía rival! Esta no es la función para la que se ha diseñado esta opción (ni su proposito principal). Simplemente pienso que revela una posi-

bilidad que la gente debería tener en cuenta antes de acusar a los demás de escanear sus puertos. La opción -e será necesaria en general para este tipo de uso.

-e <interfaz> Le dice a Nmap que interfaz ha de usar para enviar y recibir paquetes. El programa debería detectar esto por si mismo, pero le informara si no es asi.

pueder ser eth0,ppp0,ppp1 etc.Viene bien si tenemos varias tarjetas de red.

-g <numero_de_puerto> Establece el numero de puerto de origen a usar en los escaneos. Muchas instalaciones de firewalls y filtros de paquetes inocentes hacen una excepción en sus reglas para permitir que las atraviesen y establezcan una conexión paquetes DNS (53) o FTP- DATA (20). Evidentemente esto contraviene completa- mente las ventajas en materia de seguridad que com- porta una firewall dado que los intrusos pueden enmascararse como DNS o FTP con una simple modifi- cacion de su puerto de origen. Por supuesto, debería probarse primero con el puerto 53 para un escaneo UDP y los escaneos TCP deberían probar el 20 antes del 53.

Nótese que el uso de esta opción penaliza levemente el rendimiento del escaneo, porque a veces se alma- cena información util en el numero de puerto de origen.

-M <max sockets> Establece el numero máximo de sockets que se usaran en paralelo para un escaneo TCP connect() (escaneo por defecto). Resulta util a la hora de ralentizar ligeramente el proceso de escaneo con el fin de evitar que la maquina de destino se cuelgue. Otra manera de hacerlo es usar -sS, que normalmente les resulta mas facil de asumir a las maquinas de des- tino.

Especificación de Objetivo Cualquier cosa que no es una opción (o el argumento de una opción) en Namp se trata como una especifi- cacion de servidor de destino. El caso mas simple consiste en especificar servidores aislados o direcciones IP en la línea de comandos. Si pretende escanear una subred de direcciones IP, entonces se

puede anadir '/mask' a la dilección IP o al nombre del servidor. mask debe estar entre 0 (escanea toda Internet) y 32 (escanea únicamente el servidor especificado). Use /24 para escanear una dirección de clase 'C' y /16 para la clase 'B'.

Nmap dispone también de una notación mucho mas potente que permite la especificación de direc- ciones IP usando listas/rangos para cada elemento. De este modo, se puede escanear la red de clase 'B' completa 128.210.*.* especificando '128.210.*.*' o '128.210.0-255.0-255' o incluso notación de mascara: '128.210.0.0/16'. Todas ellas son equiva- lentes. Si se usan asteriscos ('*'), ha de tenerse en cuenta que la mayoría de los shells requieren que se salga de ellos con caracteres / o que se les proteja con comillas.

Otra posibilidad interesante consiste en dividir Internet en el otro sentido. En vez de escanear todos los servidores en una clase 'B', se puede escanear '*.*.5.6-7' para escanear todas las direc- ciones IP terminadas en .5.6 o .5.7 Escoja sus pro- pios números. Para mas información sobre la especi- fijación de servidores a escanear, véase la sección ejemplos a continuación.

******************** OPCION: Idlscan *********************

Técnica

Aunque un `idle scanning' es bastante sofisticado en materia de métodos de escaneo de puertos, uno no tiene que ser un experto en TCP/IP para comprenderlo. Sólo se necesita comprender algunas cuestiones básicas:

• La mayoría de los servidores esuchan en puertos de TCP, de la manera en la que los servidores de web escuchan en el puerto 80 y los servidores de correo en el puerto 25. Un puerto es

considerado "abierto" si alguna aplicación está escuchando en ese puerto, si no, está cerrado. • Una manera de determinar si un puerto esta abierto es envia un paqueter con "SYN" (establecimiento de sesión) al puerto. La máquina destino enviará de vuelta un paquete con "SYN|ACK" (reconocimiento de pedido de sesión) si el puerto está abierto, y un paquete con "RST" si el puerto está cerrado. • Una máquina que recibe un paquete con "SYN|ACK" no solicitado previamente responderá con una "RST". Pero un "RST" no solicitado previamente es ignorado. • Cada paquete de IP en Internet tiene un número de "identificación de fragmento". Varios sistemas operativos simplemente incrementan este número por cada paquete que envían. Por lo tanto la observación de este número puede decirle al atacante cuántos paquente han sido enviados desde la última observación.

Al combinar estas características, es posible escanear una red falsificando nuestra identidad para que parezca que una máquina "zombie" inocente realizó el escaneo. Es más fácil describir esta técnica por medio de un diagrama. En la imagen, debajo, un atacante, A, está escaneando una máquina destino, y a la vez culpando del escaneo a algún zombie, Z. Los cuadrados representan máquinas y las líneas representan paquetes. Breves descripciones en castellano de los paquetes están impresas por encima de las líneas, mientras que las "flags" reales de TCP e información distintiva de los paquetes están impresas debajo de ellas:

Como muestra el diagrama, el host destino responde de manera diferente al Zombie dependiendo del estado del puerto. Si el puerto probado está abierto, el destino envía un SYN|ACK al Zombie. El Zombie no esperaba este SYN|ACK, por lo tanto, envía de vuelta un RST. Al enviar este RST, el Zombie hace que se incremente su número de secuencia de IPID. El verdadero atacante detecta esto en el paso 3. Si el puerto está cerrado, el destino envía un RST al Zombie. Los Zombies ignoran este paquete RST no solicitado y no incrementan su número de secuencia de IPID.

Ventajas del Idlescan

Las técnicas de Idlescan ofrecen al atacante muchas ventajas por sobre otros tipos de escaneo populares como los "SYN scans" o los "FIN scans". Es por esto, que recomendamos defensas importantes para ayudar a proteger la red de este ataque. Estas son algunas de las razones, por las cuales los atacantes podrían usar este método de escaneo:

• Porque es el más sigiloso -- Hay muchas técnicas que la gente puede utilizar para camuflar su identidad. Entre ellas, el uso de señuelos (Nmap -D) of escaneos medio-abiertos ("half-open scans", nmap -sS). Pero incluso estas técnicas requieren que el atacante envíe algunos paquetes al destino desde su dirección de IP real. Por otra parte, un Idlescan es completamente invisible -- ningún paquete es enviado al destino desde la verdadera dirección de origen --.

Como conclusión, se tiene que los sistemas de detección de intrusión (IDS), generalmente, ¡indicarán y enviarán alertas diciendo que la máquina Zombie ha lanzado un escaneo hacia ellos!.

• Vencer routers/firewalls que filtran paquetes -- El filtrado por dirección de IP de origen es un mecanismo de seguridad muy común que sirve para limitar las máquinas que pueden conectarse a un host delicado. Por ejemplo, el servidor de base de datos de una compañía quizás admita conexiones sólo desde el servidor público de web que accede a ella. Un usuario desde su casa quizás sólo permita conexiones de `ssh' (login interactivo) desde sus máquinas del trabajo.

Un escenario más perturbador ocurre cuando alguien de peso en alguna compañía demanda que los adminstradores de red abran un agujero en el firewall para que él puede acceder a los recursos de la red interna desde la dirección de IP de su casa. Esto puede pasar cuando los ejecutivos no pueden o no tienen ganas de contemplar una alternativa de VPN (red privada virtual) segura.

El "idle scanning" puede ser utilizado con frecuencia para mapear esas relaciones de confianza. El factor clave es que los resultados de un Idlescan listan los puertos abiertos desde la perspectiva del host zombie. Por lo tanto un escaneo normal sobre el servidor de base de datos mencionado anteriormente podría mostrar que no hay puertos abiertos. Pero al realizar un Idlescan utilizando al servidor de web como zombie podría exponerse la relación de confianza al mostrar abiertos los puertos de servicios relacionados a la base de datos.

Mapear estas relaciones de confianza puede ser muy útil para que los atacantes le den prioridad a algunos destinos. El servidor de web distutido anteriormente puede parece algo normal al atacante hasta que nota su acceso especial a la base de datos.

**********************Ejemplos de uso de Nmap******************

El primer paso es encontrar un host zombie apropiado. El host no debería tener mucho tráfico, (de ahí el nombre Idle, inerte, inactivo ) y debería ofrecer valores de IPID predecibles. Impresoras, máquinas con Windows, hosts con versiones de Linux viejas, FreeBSD, y Mac OS son generalmente útiles. Las últimas versiones de Linux, SOlaris Y OpenBSD son inmunes a ser tratadas como zombies, pero cualquier host puede ser objeto de el escaneo. Una manera de determinar la vulnerabilidad de un host es simplemente probar un Idlescan de Nmap. Nmap comprobará el zombie y reportará si es confiable.

Efectuar estos escaneos es bastante fácil. Simplemente hay que proveer de el nombre del host zombie a la opción -SI y Nmap hace el resto. Este es un ejemplo rápido:

# nmap -P0 -p- -sI kiosk.adobe.com www.riaa.comStarting nmap V. 3.10ALPHA3 ( www.insecure.org/nmap/ )Idlescan using zombie kiosk.adobe.com (192.150.13.111:80); Class: IncrementalInteresting ports on 208.225.90.120:(The 65522 ports scanned but not shown below are in state: closed)Port State Service21/tcp open ftp25/tcp open smtp80/tcp open http111/tcp open sunrpc135/tcp open loc-srv443/tcp open https1027/tcp open IIS1030/tcp open iad12306/tcp open unknown5631/tcp open pcanywheredata7937/tcp open unknown7938/tcp open unknown36890/tcp open unknownNmap run completed -- 1 IP address (1 host up) scanned in 2594.472 seconds

De este escaneo, aprendemos que la RiAA no es muy consciente de la seguridad (se pueden notar abiertos los puertos de "PC Anywhere", "portmapper, Y "Legato nsrexec"). Ya que aparentemente no tienen un firewall, es poco probable que sí tengan un IDS. Pero si lo tienen, mostrará a 'kiosk.adobe.com' como el culpable del escaneo. La opción -P0 previene que Nmap envíe un ping incial a la Máquina de RIAA. Esto disminuye la velocidad del escaneo (hay menos información disponible sobre los tiempos), pero asegura que ningún paquete sea enviado al

destino desde nuestra verdadera dirección de IP. El escaneo tardó un largo tiempo porque se escanearon los 65535 puertos -- hay que saltear la opción "-p-" si sólo se quieren escanear los puertos bastante conocidos ("well know ports") además de los puertos 1-1024 --. Uno tiene que asegurarse de encontrar zombies propios -- Kiosk no es muy confiable y es probable que desaparezca o sea monitoreado de cerca --.

A continuación se muestran algunos ejemplos del uso de Nmap que abarcan desde los usos mas normales y frecuentes a los mas complejos o incluso esotéricos. Nótese que se han incluido direcciones IP y nombres de dominio reales para hacer las cosas mas concretas. Usted debería susti- tuirlos por números y direcciones de su propia red. No creo que escanear otras redes sea ilegal; ni se deberían considerar los escaneos de puertos como ataques. He escaneado cientos de miles de maquinas y tan solo he recibido una queja. Pero no soy abogado y es posible que los intentos de Nmap lleguen a molestar a alguna gente. Obtenga primero el permiso para hacerlo o hagalo bajo su propia responsabilidad.

Ejemplos (No puedo poner el real, no seria ético, por eso lo de XXX)Hagamos un análisis de host www.XXX.ar usaremos un scan simple para ello. Este host tiene mas agujeros que un queso, una recomendación para el administrador seria que dedique un tiempo a revisar su política de seguridad ya que es uno de los sitios mas propensos a ser atacados debido a la lamentable situación del país especialmente a la actitud del partido gobernante en cuanto a educación.

En el segundo ejemplo vamos usar las opciones -O para ver que sistema operativo usa y solo veremos los puertos 79,23,513,514 algunos de los mas interesantes para los hackers. Efectivamente en la Figura 3 vemos que todos estos puertos están disponibles y que el sistema operativo usado es un Linux con Kernel 2.0.35 o 36 por lo que podemos deducir que bien puede usar Red Hat 5.2 o Debian 2.0 entre otros.

Vamos finalmente un scan lo mas furtivo posible para evitar ser detectado, para ello usaremos las opciones -sS y -f ya que el sistema objetivo puede tener instalados logers o métodos de detección de escaneos de puertosEstos ejemplos son solo introductorios obviamente que se pueden usar la otras opciones explicadas arriba y combinaciones de las misma, con lo

que podríamos obtener mayor información sobre los servidores auscultados.

Si deseas ver puertos especificos del ip 200.34.66.78 para ver si estan disponiblessolo haces esto:

$nmap -p 21,23,110,139 200.34.66.78 y de esta manera estaremos haciendo el scan a los puertos que nos interesan ver, en este caso 21,23,110,139.

Si quiero ver el S.0. del host victima que tiene la ip 200.24.56.76 solo tengo quehacer lo sgt:

#nmap -sS -O 200.24.56.76. aca usamos la opcion -sS para que asi no los detecten en la maquina victima al momento de tratar de ver que S.O. corre.

Para determinar si un host victima con el ip 200.11.34.67 es vulnerable al bounceattack tecleamos:

$nmap -b 200.11.34.67 y si el sistema tiene mecanismos sensibles de detección de intrusos lo aremos de la siguiente forma: $nmap -P0 -b200.11.34.67. Asi evitamos dejar algún rastro de nuestro ip.

Mas ejemplos…

* nmap -v objetivo.ejemplo.com

Esta opción escanea todos los puertos TCP reservados en la maquina objetivo.ejemplo.com. La -v implica la activación del modo de información ampliada.

* nmap -sS -O objetivo.ejemplo.com/24

Lanza un escaneo SYN oculto contra cada una de las maquinas activas de las 255 maquinas de la classe 'C' donde se aloja objetivo.ejemplo.com. También trata de determinar el sistema operativo usado en cada una de las maquinas activas. Este escaneo requiere privilegios de root a causa del escaneo SYN y la detección del sistema operativo.

* nmap -sX -p 22,53,110,143 128.210.*.1-127

Envía un escaneo Xmas tree a la primera mitad de cada una de las 255 posibles subredes de 8 bits en el espacio de direcciones clase 'B' 128.210 . Se trata de comprobar si los sistemas ejecutan sshd, DNS, pop3d, imapd o el puerto 4564. Nótese que el escaneo Xmas no funciona contra servi- dores ejecutando cualquier sistema operativo de Microsoft debido a una pila TCP deficiente. Lo mismo se aplica a los sistemas CISCO, IRIX, HP/UX, y BSDI.

* nmap -v -p 80 '*.*.2.3-5'

En vez de centrarse en un rango especifico de direcciones IP, resulta a veces interesante dividir Internet en

porciones y escanear una pequeña muestra de cada porción. Este comando encuentra todos los servidores web en maquinas cuyas direcciones IP terminen en .2.3, .2.4, o .2.5 . Si usted es root podría añadir también -sS. También encontrara maquinas mucho mas interesantes si empieza en 127. asi que es posible que desee usar '127-222' en vez de el primer asterisco dado que esa sección tiene una densi- dad mucho mayor de maquinas interesantes (IMHO).

host -l compania.com | cut '-d ' -f 4 | ./nmap -v -i -

Hace una transferencia de DNS de zona para descubrir los servidores en compania.com y luego pasar las direcciones IP a nmap. Los comandos arriba indicados son para mi sis- tema Linux. Es posible que se necesiten comandos/opciones diferentes para otros sistemas operativos.

***********************SUPER EJEMPLO*********************Microsoft Windows XP [Versión x.x.x](C) Copyright 1985-2001 Microsoft Corp.

Vamos a ver si el Host existe o esta activo…

C:\Documents and Settings\David>ping x.x.x.x

Haciendo ping a x.x.x.x con 32 bytes de datos:

Tiempo de espera agotado para esta solicitud.Tiempo de espera agotado para esta solicitud.Tiempo de espera agotado para esta solicitud.Tiempo de espera agotado para esta solicitud.

Estadísticas de ping para x.x.x.x

Paquetes: enviados = 4, recibidos = 0, perdidos = 4 (100% perdidos),

C:\Documents and Settings\David>ping x.x.x.x

Haciendo ping a x.x.x.x con 32 bytes de datos:

Tiempo de espera agotado para esta solicitud.Tiempo de espera agotado para esta solicitud.Tiempo de espera agotado para esta solicitud.Tiempo de espera agotado para esta solicitud.

Estadísticas de ping para x.x.x.x Paquetes: enviados = 4, recibidos = 0, perdidos = 4 (100% perdidos),

Bien por ahora parece que no existe verdad… Pues mira lo que se puede hacer despues de leer este manual…

C:\Documents and Settings\Busindre>cd..

C:\Documents and Settings>cd..

C:\>cd nmap-3.70

Vamos ya…

C:\nmap-3.70>nmap -sS -f -O x.x.x.xWarning: Packet fragmentation selected on a host other than Linux, OpenBSD, FreeBSD, or NetBSD. This may or may not work.

Starting nmap 3.70 ( http://www.insecure.org/nmap ) at 2004-09-06 04:49 Hora estßndar romanceWarning: OS detection will be MUCH less reliable because we did not find at least 1 open and 1 closed TCP portInteresting ports on x.x.x.x.proxycache.rima-tde.net (x.x.x.x):(The 1657 ports scanned but not shown below are in state: filtered)PORT STATE SERVICE80/tcp open http8081/tcp open blackice-icecap8082/tcp open blackice-alertsDevice type: general purpose|media device|broadband routerRunning: Linux 2.4.X, Pace embedded, Panasonic embeddedOS details: Linux 2.4.6 - 2.4.21, Pace digital cable TV receiver, Panasonic IP Technology Broadband Networking Gateway, KX-HGW200Uptime 6.308 days (since Mon Aug 30 22:11:44 2004)

Nmap run completed -- 1 IP address (1 host up) scanned in 2756.157 seconds

C:\nmap-3.70> Madre mia verdad… Al final resulta que existe algo en esa IP… Le hemos hecho el lio a la protección antiescaneo/ping/… gracias a la gran clandestinidad del NMAP (-f)..XD

Diferencias entre un escaneo de una ip real X.X.X.X con 3 scaners DIFERENTES (No incluido Nmap, que es el mejor):

1-SUPERPUERTOS

125.Red-80-38-202.pooles.rima-tde.net/X.X.X.X smtp Simple Mail Transfer

21 ftp File Transfer [Control]

220 PCJORGE FTP version 1.0 ready at Mon Jan 3 19:01:33 2000

331 Enter PASS command

23 Telnet

80 http World Wide Web HyperText TransferServer: ZyXEL-RomPager/3.02

110 pop3 Post Office Protocol - Version 3

1755 ms-streaming, Windows Media .asf, MS NetShow

4662

2- PORT SCAN

0 :PORTSCAN READY.SCANNING HOST:X.X.X.XSCAN BEGUN ON PORT:1IP:X.X.X.XSCAN HALTED ON PORT:65536

21 :CONNECT

220 PCJORGE FTP version 1.0 ready at Mon Jan 3 16:29:16 2000 CLOSEDEND PORT INFO

23 :CONNECTÿûÿû Password: CLOSED

END PORT INFO

25 :CONNECTCLOSEDEND PORT INFO

80 :CONNECTCLOSEDEND PORT INFO

110 :CONNECTCLOSEDEND PORT INFO

1755 :CONNECTCLOSEDEND PORT INFO

3- SUPERSCAN

TCP Ports (6)21 File Transfer [Control]22 SSH Remote Login Protocol53 Domain Name Server80 World Wide Web HTTP443 HTTP protocol over TLS/SSL1755

**********************Puertos de Interes********************

20 FTP Data CERRADO

Utilizado por FTP para la transmisión de datos en modo pasivo.

21 FTP INVISIBLE

Los servidores FTP tienen muchas vulnerabilidades de seguridad conocidas. Un servidor FTP mal configurado puede permitir a un atacante transferir ficheros, troyanos, programas, etc...

22 SSH CERRADO Secure Shell, un sistema de telnet encriptado. Si no está bien configurado puede permitir ataques por fuerza bruta a la cuenta de

administrador de tu sistema.

23 Telnet INVISIBLE

Telnet proporciona una ventana de comandos para el control remoto de un sistema. Cualquier sistema que aparente tener una conexión Telnet atraerá sin duda la atención de cualquier intruso.

25 SMTP CERRADO

Los servidores SMTP (Simple Mail Transfer Protocol) tienen una larga trayectoria de vulnerabilidades. Cualquier intruso examinará detenidamente este puerto en tu máquina.

53 DNS CERRADO Servicio para traducir los nombres de servidores en direcciones IP.

59 DCC CERRADO

Utilizado principalmente en programas de comunicación para transferir ficheros.

79 Finger CERRADO

El servicio Finger es una antigua fuente de información en Internet. Se usa frecuentemente como un punto de comienzo para un ataque, dado que un Finger algunas veces proporciona al atacante nombres para adivinar contraseñas.

80 HTTP INVISIBLE

Cada día se descubren nuevos fallos de seguridad en los servidores web. Si no usas este servicio en tu máquina es aconsejable que lo desactives.

110 POP3 CERRADO

Este puerto corresponde al servicio de correo POP3. Como cualquier otro puerto abierto supone un riesgo, sobre todo si se usa un servidor POP inseguro.

113 IDENT CERRADO Servicio de

Identificación/Autorización - Los servidores de Internet como POP, IMAP, SMTP e IRC consultan este puerto en respuesta a conexiones de clientes. Nunca debe estar abierto dado que es una fuente tremenda de escape de información. Los cortafuegos tradicionales lo mostrarán cerrado; sólo los más nuevos y sofisticados son capaces de camuflar este puerto contra escaneos aleatorios a la vez que lo muestran cerrado a las peticiones de los servidores válidos.

135 RPC CERRADO

Remote Procedure Call. Este puerto imposible de cerrar aparece en la mayoría de los sistemas Windows. Dado que muchos servicios inseguros de Microsoft utilizan este puerto, nunca debe permanecer abierto al exterior. Dado que es imposible cerrarlo, necesitarás un cortafuegos para bloquearlo de los accesos externos.

139 NetBIOS CERRADO

NetBIOS se utiliza para compartir ficheros a través de tu entorno de red. Si estás conectado a Internet con este puerto abierto, es probable que estés compartiendo los datos de todo tu disco duro con todo el mundo. Ciérralo cuanto antes.

143 IMAP CERRADO El IMAP (Internet Message Access Protocol) es probablemente el puerto más escaneado después del 139 (NetBIOS). IMAP es un sistema relativamente nuevo, y dado que sus

servidores no han tenido tiempo para madurar, este puerto abierto en tu sistema acapara gran atención para los intrusos.

443 HTTPS CERRADO

La presencia de este puerto de web segura en tu sistema implica que tu sistema establece conexiones seguras con los navegadores web. Este puerto no debería estar abierto a menos que realmente lo estés utilizando para comercio seguro via web.

445 MSFT DS CERRADO

Server Message Block. En Windows 2000, Microsoft añadió la posibilidad de ejecutar SMB directamente sobre TCP/IP sin la capa extra de NBT.

1080 Socks INVISIBLE Servicio de proxy.

5000 UPnP INVISIBLE

El Universal Plug'n'Play es un protocolo de Microsoft para permitir a los PC's descubrir y controlar automáticamente un amplio rango de periféricos. Microsoft ha activado este protocolo por defecto (incluso si tu sistema no lo necesita) y tu sistema está expuesto a múltiples vulnerabilidades y ataques remotos. Es muy aconsejable que lo desactives.

8080 WebProxy CERRADO

Este puerto abierto puede permitir a otras personas utilizar tu ordenador para ocultar su IP real a los servidores web.

*************************Listado de Puertos*************************************

Puerto Protocolo Keyword Descripcion

1 tcp tcpmux TCP Port Service Multiplexer [rfc-1078]1 udp Socketsdes Troie [trojan] Sockets des Troie1 udp tcpmux TCP Port Service Multiplexer2 tcp compressnet Management Utility2 tcp Death [trojan] Death2 udp compressnet Management Utility3 tcp compressnet Compression Process3 udp compressnet Compression Process5 tcp rje Remote Job Entry5 udp rje Remote Job Entry7 tcp echo Echo7 udp echo Echo9 tcp discard Discard9 udp discard Discard11 tcp systat Active Users11 udp systat Active Users13 tcp daytime Daytime13 udp daytime Daytime15 tcp netstat Netstat15 tcp B2 [trojan] B217 tcp qotd Quote of the Day17 udp qotd Quote of the Day18 tcp msp Message Send Protocol18 udp msp Message Send Protocol19 tcp chargen Character Generator19 udp chargen Character Generator20 tcp ftp-data File Transfer [Default Data]20 udp ftp-data File Transfer [Default Data]20 tcp SennaSpyFTPserver [trojan] Senna Spy FTP server21 tcp ftp File Transfer [Control]21 udp ftp File Transfer [Control]21 tcp BackConstruction [trojan] Back Construction21 tcp BladeRunner [trojan] BladeRunner21 tcp CattivikFTPServer [trojan] Cattivik FTP Server21 tcp CCInvader [trojan] CC Invader21 tcp DarkFTP [trojan] Dark FTP21 tcp DolyTrojan [trojan] Doly Trojan21 tcp Fore [trojan] Fore21 tcp FreddyK [trojan] FreddyK21 tcp InvisibleFTP [trojan] Invisible FTP21 tcp Juggernaut42 [trojan] Juggernaut 4221 tcp Larva [trojan] Larva21 tcp MotIvFTP [trojan] MotIv FTP21 tcp NetAdministrator [trojan] Net Administrator

21 tcp Ramen [trojan] Ramen21 tcp RTB666 [trojan] RTB 66621 tcp SennaSpyFTPserver [trojan] Senna Spy FTP server21 tcp Traitor21 [trojan] Traitor 2121 tcp [trojan]TheFlu [trojan] The Flu21 tcp WebEx [trojan] WebEx21 tcp WinCrash [trojan] WinCrash21 tcp AudioGalaxy AudioGalaxy file sharing app22 tcp Adoresshd [trojan] Adore sshd22 tcp Shaft [trojan] Shaft22 tcp ssh SSH Remote Login Protocol22 udp pcanywhere PCAnywhere (deprecated)22 udp ssh SSH Remote Login Protocol23 tcp telnet Telnet23 udp telnet Telnet23 tcp ADMworm [trojan] ADM worm23 tcp FireHacKer [trojan] Fire HacKer23 tcp MyVeryOwntrojan [trojan] My Very Own trojan23 tcp RTB666 [trojan] RTB 66623 tcp TelnetPro [trojan] Telnet Pro23 tcp TinyTelnetServer [trojan] Tiny Telnet Server - TTS23 tcp TruvaAtl [trojan] Truva Atl24 tcp BO2KControlPort [trojan] Back Orifice 2000 (BO2K) Control Port24 tcp priv-mail any private mail system24 udp priv-mail any private mail system25 tcp smtp Simple Mail Transfer25 udp smtp Simple Mail Transfer25 tcp Ajan [trojan] Ajan25 tcp Antigen [trojan] Antigen25 tcp Barok [trojan] Barok25 tcp BSE [trojan] BSE25 tcp EmailPasswordSender [trojan] Email Password Sender - EPS25 tcp EPSII [trojan] EPS II25 tcp Gip [trojan] Gip25 tcp Gris [trojan] Gris25 tcp Happy99 [trojan] Happy9925 tcp Hpteammail [trojan] Hpteam mail25 tcp Hybris [trojan] Hybris25 tcp Iloveyou [trojan] I love you25 tcp Kuang2 [trojan] Kuang225 tcp MagicHorse [trojan] Magic Horse25 tcp MBTMailBombingTrojan [trojan] MBT (Mail Bombing Trojan)25 tcp MBT [trojan] MBT (Mail Bombing Trojan)25 tcp MoscowEmailtrojan [trojan] Moscow Email trojan25 tcp Naebi [trojan] Naebi25 tcp NewAptworm [trojan] NewApt worm

25 tcp ProMailtrojan [trojan] ProMail trojan25 tcp Shtirlitz [trojan] Shtirlitz25 tcp Stealth [trojan] Stealth25 tcp Stukach [trojan] Stukach25 tcp Tapiras [trojan] Tapiras25 tcp Terminator [trojan] Terminator25 tcp WinPC [trojan] WinPC25 tcp WinSpy [trojan] WinSpy26 tcp altavista-fw97 AltaVista Firewall9727 tcp altavista-fw97 AltaVista Firewall9727 tcp nsw-fe NSW User System FE27 udp nsw-fe NSW User System FE28 tcp altavista-fw97 AltaVista Firewall9729 tcp altavista-fw97 AltaVista Firewall9729 tcp msg-icp MSG ICP29 udp msg-icp MSG ICP30 tcp Agent40421 [trojan] Agent 4042131 tcp msg-auth MSG Authentication31 udp msg-auth MSG Authentication31 tcp Agent31 [trojan] Agent 3131 tcp Agent31 [trojan] Agent 3131 tcp HackersParadise [trojan] Hackers Paradise31 tcp MastersParadise [trojan] Masters Paradise33 tcp dsp Display Support Protocol33 udp dsp Display Support Protocol35 tcp priv-print any private printer server35 udp priv-print any private printer server37 tcp time Time37 udp time Time38 tcp rap Route Access Protocol38 udp rap Route Access Protocol39 tcp rlp Resource Location Protocol39 udp rlp Resource Location Protocol39 tcp SubSARI [trojan] SubSARI41 tcp graphics Graphics41 udp graphics Graphics41 tcp DeepThroat [trojan] DeepThroat41 tcp DeepThroat [trojan] Deep Throat41 tcp Foreplay [trojan] Foreplay42 tcp name Host Name Server42 udp name Host Name Server43 tcp whois nicname43 udp whois nicname44 tcp mpm-flags MPM FLAGS Protocol44 udp mpm-flags MPM FLAGS Protocol44 tcp Arctic [trojan] Arctic45 tcp mpm Message Processing Module [recv]45 udp mpm Message Processing Module [recv]46 tcp mpm-snd MPM [default send]46 udp mpm-snd MPM [default send]

47 tcp ni-ftp NI FTP47 udp ni-ftp NI FTP48 tcp auditd Digital Audit Daemon48 udp auditd Digital Audit Daemon48 tcp DRAT [trojan] DRAT48 tcp DRAT [trojan] DRAT49 tcp tacacs Login Host Protocol (TACACS)49 udp tacacs Login Host Protocol (TACACS)50 tcp re-mail-ck Remote Mail Checking Protocol50 udp re-mail-ck Remote Mail Checking Protocol50 tcp DRAT [trojan] DRAT50 tcp DRAT [trojan] DRAT51 tcp la-maint IMP Logical Address Maintenance51 udp la-maint IMP Logical Address Maintenance52 tcp xns-time XNS Time Protocol52 udp xns-time XNS Time Protocol53 tcp domain Domain Name Server53 udp domain Domain Name Server53 tcp ADMworm [trojan] ADM worm53 tcp Lion [trojan] Lion54 tcp xns-ch XNS Clearinghouse54 udp xns-ch XNS Clearinghouse55 tcp isi-gl ISI Graphics Language55 udp isi-gl ISI Graphics Language56 tcp xns-auth XNS Authentication56 udp xns-auth XNS Authentication57 tcp priv-term any private terminal access57 udp priv-term any private terminal access57 tcp mtp Mail Transfer Protocol58 tcp xns-mail XNS Mail58 udp xns-mail XNS Mail58 tcp DMSetup [trojan] DMSetup59 tcp priv-file any private file service59 udp priv-file any private file service59 tcp DMSetup [trojan] DMSetup59 tcp DMSetup [trojan] DMSetup61 tcp ni-mail NI MAIL61 udp ni-mail NI MAIL62 tcp acas ACA Services62 udp acas ACA Services63 tcp whois++ whois++63 udp whois++ whois++63 tcp via-ftp VIA Systems - FTP & whois++63 udp via-ftp VIA Systems - FTP & whois++64 tcp covia Communications Integrator (CI)64 udp covia Communications Integrator (CI)65 tcp tacacs-ds TACACS-Database Service65 udp tacacs-ds TACACS-Database Service66 tcp sql*net Oracle SQL*NET66 udp sql*net Oracle SQL*NET

67 tcp bootps Bootstrap Protocol Server67 udp bootps Bootstrap Protocol Server68 tcp bootpc Bootstrap Protocol Client68 udp bootpc Bootstrap Protocol Client69 tcp tftp Trivial File Transfer69 udp tftp Trivial File Transfer69 tcp BackGate [trojan] BackGate70 tcp gopher Gopher70 udp gopher Gopher71 tcp netrjs-1 Remote Job Service71 udp netrjs-1 Remote Job Service72 tcp netrjs-2 Remote Job Service72 udp netrjs-2 Remote Job Service73 tcp netrjs-3 Remote Job Service73 udp netrjs-3 Remote Job Service74 tcp netrjs-4 Remote Job Service74 udp netrjs-4 Remote Job Service75 tcp priv-dial any private dial out service75 udp priv-dial any private dial out service76 tcp deos Distributed External Object Store76 udp deos Distributed External Object Store77 tcp priv-rje any private RJE service netrjs77 udp priv-rje any private RJE service netjrs78 tcp vettcp vettcp78 udp vettcp vettcp79 tcp finger Finger79 udp finger Finger79 tcp BO2KDataPort [trojan] Back Orifice 2000 (BO2K) Data Port79 tcp CDK [trojan] CDK79 tcp Firehotcker [trojan] Firehotcker80 tcp http World Wide Web HTTP80 udp http World Wide Web HTTP80 tcp 711trojan [trojan] 711 trojan (Seven Eleven)80 tcp AckCmd [trojan] AckCmd80 tcp AckCmd [trojan] AckCmd80 tcp BackEnd [trojan] Back End80 tcp BO2000Plug-Ins [trojan] Back Orifice 2000 Plug-Ins80 tcp Cafeini [trojan] Cafeini80 tcp CGIBackdoor [trojan] CGI Backdoor80 tcp Executor [trojan] Executor80 tcp GodMessage4Creator [trojan] God Message 4 Creator80 tcp GodMessage [trojan] God Message80 tcp Hooker [trojan] Hooker80 tcp IISworm [trojan] IISworm80 tcp MTX [trojan] MTX80 tcp NCX [trojan] NCX80 tcp Noob [trojan] Noob

80 tcp Ramen [trojan] Ramen80 tcp ReverseWWWTunnel [trojan] Reverse WWW Tunnel Backdoor80 tcp RingZero [trojan] RingZero80 tcp RTB666 [trojan] RTB 66680 tcp Seeker [trojan] Seeker80 tcp WANRemote [trojan] WAN Remote80 tcp WebDownloader [trojan] WebDownloader80 tcp WebServerCT [trojan] Web Server CT81 tcp hosts2-ns HOSTS2 Name Server81 udp hosts2-ns HOSTS2 Name Server81 tcp RemoConChubo [trojan] RemoConChubo81 tcp RemoConChubo [trojan] RemoConChubo82 tcp xfer XFER Utility82 udp xfer XFER Utility83 tcp mit-ml-dev MIT ML Device83 udp mit-ml-dev MIT ML Device84 tcp ctf Common Trace Facility84 udp ctf Common Trace Facility85 tcp mit-ml-dev MIT ML Device85 udp mit-ml-dev MIT ML Device86 tcp mfcobol Micro Focus Cobol86 udp mfcobol Micro Focus Cobol87 tcp priv-term-l any private terminal link ttylink88 tcp kerberos Kerberos88 udp kerberos Kerberos89 tcp su-mit-tg SU MIT Telnet Gateway89 udp su-mit-tg SU MIT Telnet Gateway90 tcp dnsix DNSIX Securit Attribute Token Map90 udp dnsix DNSIX Securit Attribute Token Map91 tcp mit-dov MIT Dover Spooler91 udp mit-dov MIT Dover Spooler92 tcp npp Network Printing Protocol92 udp npp Network Printing Protocol93 tcp dcp Device Control Protocol93 udp dcp Device Control Protocol94 tcp objcall Tivoli Object Dispatcher94 udp objcall Tivoli Object Dispatcher95 tcp supdup BSD supdupd(8)95 udp supdup BSD supdupd(8)96 tcp dixie DIXIE Protocol Specification96 udp dixie DIXIE Protocol Specification97 tcp swift-rvf Swift Remote Virtural File Protocol97 udp swift-rvf Swift Remote Virtural File Protocol98 tcp linuxconf linuxconf98 tcp tacnews TAC News98 udp tacnews TAC News99 tcp metagram Metagram Relay99 udp metagram Metagram Relay99 tcp HiddenPort [trojan] Hidden Port

99 tcp Hidden [trojan] Hidden99 tcp Mandragore [trojan] Mandragore99 tcp NCX [trojan] NCX100 tcp newacct [unauthorized use]101 tcp hostname NIC Host Name Server101 udp hostname NIC Host Name Server102 tcp iso-tsap ISO Transport Service Access Point102 udp iso-tsap ISO Transport Service Access Point103 tcp gppitnp Genesis Point-to-Point Trans Net103 udp gppitnp Genesis Point-to-Point Trans Net104 tcp acr-nema ACR-NEMA Digital Imag. & Comm. 300104 udp acr-nema ACR-NEMA Digital Imag. & Comm. 300105 tcp csnet-ns Mailbox Name Nameserver105 udp csnet-ns Mailbox Name Nameserver106 tcp 3com-tsmux 3COM-TSMUX106 udp 3com-tsmux 3COM-TSMUX106 tcp pop3pw Eudora compatible PW changer107 tcp rtelnet Remote Telnet107 udp rtelnet Remote Telnet Service108 tcp snagas SNA Gateway Access Server108 udp snagas SNA Gateway Access Server109 tcp pop2 PostOffice V.2109 udp pop2 PostOffice V.2110 tcp pop3 PostOffice V.3110 udp pop3 PostOffice V.3110 tcp ProMailtrojan [trojan] ProMail trojan110 tcp ProMailtrojan [trojan] ProMail trojan111 tcp sunrpc portmapper rpcbind111 udp sunrpc portmapper rpcbind112 tcp mcidas McIDAS Data Transmission Protocol112 udp mcidas McIDAS Data Transmission Protocol113 tcp auth ident Authentication Service113 udp auth ident Authentication Service113 tcp InvisibleIdentdDaemon [trojan] Invisible Identd Daemon113 tcp InvisibleIdentdDeamon [trojan] Invisible Identd Deamon113 tcp Kazimas [trojan] Kazimas114 tcp audionews Audio News Multicast114 udp audionews Audio News Multicast115 tcp sftp Simple File Transfer Protocol115 udp sftp Simple File Transfer Protocol116 tcp ansanotify ANSA REX Notify116 udp ansanotify ANSA REX Notify117 tcp uucp-path UUCP Path Service117 udp uucp-path UUCP Path Service118 tcp sqlserv SQL Services118 udp sqlserv SQL Services119 tcp nntp Network News Transfer Protocol

119 udp nntp Network News Transfer Protocol119 tcp Happy99 [trojan] Happy99 (a.k.a. Ska trojan)120 tcp cfdptkt CFDPTKT120 udp cfdptkt CFDPTKT121 tcp erpc Encore Expedited Remote Pro.Call121 udp erpc Encore Expedited Remote Pro.Call121 tcp AttackBot [trojan] Attack Bot121 tcp GodMessage [trojan] God Message121 tcp JammerKillah [trojan] JammerKillah121 tcp JammerKillah [trojan] Jammer Killah122 tcp smakynet SMAKYNET122 udp smakynet SMAKYNET123 tcp NetController [trojan] Net Controller123 tcp NetController [trojan] Net Controller123 tcp ntp Network Time Protocol123 udp ntp Network Time Protocol124 tcp ansatrader ANSA REX Trader124 udp ansatrader ANSA REX Trader125 tcp locus-map Locus PC-Interface Net Map Ser125 udp locus-map Locus PC-Interface Net Map Ser126 tcp nxedit NXEdit126 udp nxedit NXEdit126 tcp unitary Unisys Unitary Login126 udp unitary Unisys Unitary Login127 tcp locus-con Locus PC-Interface Conn Server127 udp locus-con Locus PC-Interface Conn Server128 tcp gss-xlicen GSS X License Verification128 udp gss-xlicen GSS X License Verification129 tcp pwdgen Password Generator Protocol129 udp pwdgen Password Generator Protocol130 tcp cisco-fna cisco FNATIVE130 udp cisco-fna cisco FNATIVE131 tcp cisco-tna cisco TNATIVE131 udp cisco-tna cisco TNATIVE132 tcp cisco-sys cisco SYSMAINT132 udp cisco-sys cisco SYSMAINT133 tcp statsrv Statistics Service133 udp statsrv Statistics Service133 tcp Farnaz [trojan] Farnaz134 tcp ingres-net INGRES-NET Service134 udp ingres-net INGRES-NET Service135 tcp epmap DCE endpoint resolution135 udp epmap DCE endpoint resolution135 tcp loc-srv NCS Location Service135 udp loc-srv NCS Location Service136 tcp profile PROFILE Naming System136 udp profile PROFILE Naming System137 tcp netbios-ns NETBIOS Name Service137 udp netbios-ns NETBIOS Name Service137 tcp Chode [trojan] Chode

137 tcp Qaz [trojan] Qaz137 udp Msinit [trojan] Msinit138 tcp netbios-dgm NETBIOS Datagram Service138 udp netbios-dgm NETBIOS Datagram Service138 tcp Chode [trojan] Chode139 tcp netbios-ssn NETBIOS Session Service139 udp netbios-ssn NETBIOS Session Service139 tcp Chode [trojan] Chode139 tcp GodMessageworm [trojan] God Message worm139 tcp Msinit [trojan] Msinit139 tcp Netlog [trojan] Netlog139 tcp Network [trojan] Network139 tcp Qaz [trojan] Qaz139 tcp Sadmind [trojan] Sadmind139 tcp SMBRelay [trojan] SMB Relay140 tcp emfis-data EMFIS Data Service140 udp emfis-data EMFIS Data Service141 tcp emfis-cntl EMFIS Control Service141 udp emfis-cntl EMFIS Control Service142 tcp bl-idm Britton-Lee IDM142 udp bl-idm Britton-Lee IDM142 tcp NetTaxi [trojan] NetTaxi143 tcp imap Internet Message Access Protocol143 udp imap Internet Message Access Protocol144 tcp uma Universal Management Architecture144 udp uma Universal Management Architecture144 udp news NewS window system144 tcp news NewS window system145 tcp uaac UAAC Protocol145 udp uaac UAAC Protocol146 tcp iso-tp0 ISO-IP0146 udp iso-tp0 ISO-IP0146 tcp Infector [trojan] Infector146 udp Infector [trojan] Infector147 tcp iso-ip ISO-IP147 udp iso-ip ISO-IP148 tcp jargon Jargon148 udp jargon Jargon148 tcp cronus CRONUS-SUPPORT148 udp cronus CRONUS-SUPPORT149 tcp aed-512 AED 512 Emulation Service149 udp aed-512 AED 512 Emulation Service150 tcp sql-net SQL-NET150 udp sql-net SQL-NET151 tcp hems HEMS151 udp hems HEMS152 tcp bftp Background File Transfer Program152 udp bftp Background File Transfer Program153 tcp sgmp SGMP153 udp sgmp SGMP

154 tcp netsc-prod NETSC154 udp netsc-prod NETSC155 tcp netsc-dev NETSC155 udp netsc-dev NETSC156 tcp sqlsrv SQL Service156 udp sqlsrv SQL Service157 tcp knet-cmp KNET VM Command Message Protocol157 udp knet-cmp KNET VM Command Message Protocol158 tcp pcmail-srv PCMail Server158 udp pcmail-srv PCMail Server159 tcp nss-routing NSS-Routing159 udp nss-routing NSS-Routing160 tcp sgmp-traps SGMP-TRAPS160 udp sgmp-traps SGMP-TRAPS161 tcp snmp SNMP161 udp snmp SNMP162 tcp snmptrap SNMPTRAP162 udp snmptrap SNMPTRAP163 tcp cmip-man CMIP TCP Manager163 udp cmip-man CMIP TCP Manager164 tcp cmip-agent CMIP TCP Agent164 udp smip-agent CMIP TCP Agent165 tcp xns-courier Xerox165 udp xns-courier Xerox166 tcp s-net Sirius Systems166 udp s-net Sirius Systems166 tcp NokNok [trojan] NokNok167 tcp namp NAMP167 udp namp NAMP168 tcp rsvd RSVD168 udp rsvd RSVD169 tcp send SEND169 udp send SEND170 tcp print-srv Network PostScript170 udp print-srv Network PostScript170 tcp A-trojan [trojan] A-trojan171 tcp multiplex Network Innovations Multiplex171 udp multiplex Network Innovations Multiplex172 tcp cl-1 Network Innovations CL 1172 udp cl-1 Network Innovations CL 1173 tcp xyplex-mux Xyplex173 udp xyplex-mux Xyplex174 tcp mailq MAILQ174 udp mailq MAILQ175 tcp vmnet VMNET175 udp vmnet VMNET176 tcp genrad-mux GENRAD-MUX176 udp genrad-mux GENRAD-MUX

177 tcp xdmcp X Display Manager Control Protocol177 udp xdmcp X Display Manager Control Protocol178 tcp nextstep NextStep Window Server178 udp nextstep NextStep Window Server179 tcp bgp Border Gateway Protocol179 udp bgp Border Gateway Protocol180 tcp ris Intergraph180 udp ris Intergraph181 tcp unify Unify181 udp unify Unify182 tcp audit Unisys Audit SITP182 udp audit Unisys Audit SITP183 tcp ocbinder OCBinder183 udp ocbinder OCBinder184 tcp ocserver OCServer184 udp ocserver OCServer185 tcp remote-kis Remote-KIS185 udp remote-kis Remote-KIS186 tcp kis KIS Protocol186 udp kis KIS Protocol187 tcp aci Application Communication Interface187 udp aci Application Communication Interface188 tcp mumps Plus Five's MUMPS188 udp mumps Plus Five's MUMPS189 tcp qft Queued File Transport189 udp qft Queued File Transport190 tcp gacp Gateway Access Control Protocol190 udp gacp Gateway Access Control Protocol191 tcp prospero Prospero Directory Service191 udp prospero Prospero Directory Service192 tcp osu-nms OSU Network Monitoring System192 udp osu-nms OSU Network Monitoring System193 tcp srmp Spider Remote Monitoring Protocol193 udp srmp Spider Remote Monitoring Protocol194 tcp irc Internet Relay Chat Protocol194 udp irc Internet Relay Chat Protocol195 tcp dn6-nlm-aud DNSIX Network Level Module Audit195 udp dn6-nlm-aud DNSIX Network Level Module Audit196 tcp dn6-smm-red DNSIX Session Mgt Module Audit Redir196 udp dn6-smm-red DNSIX Session Mgt Module Audit Redir197 tcp dls Directory Location Service197 udp dls Directory Location Service198 tcp dls-mon Directory Location Service Monitor198 udp dls-mon Directory Location Service Monitor199 tcp smux SMUX199 udp smux SMUX200 tcp src IBM System Resource Controller200 udp src IBM System Resource Controller

201 tcp at-rtmp AppleTalk Routing Maintenance201 udp at-rtmp AppleTalk Routing Maintenance202 tcp at-nbp AppleTalk Name Binding202 udp at-nbp AppleTalk Name Binding203 tcp at-3 AppleTalk Unused203 udp at-3 AppleTalk Unused204 tcp at-echo AppleTalk Echo204 udp at-echo AppleTalk Echo205 tcp at-5 AppleTalk Unused205 udp at-5 AppleTalk Unused206 tcp at-zis AppleTalk Zone Information206 udp at-zis AppleTalk Zone Information207 tcp at-7 AppleTalk Unused207 udp at-7 AppleTalk Unused208 tcp at-8 AppleTalk Unused208 udp at-8 AppleTalk Unused209 tcp qmtp The Quick Mail Transfer Protocol209 udp qmtp The Quick Mail Transfer Protocol209 tcp tam Trivial Authenticated Mail Protocol209 udp tam Trivial Authenticated Mail Protocol210 tcp z39.50 ANSI Z39.50210 udp z39.50 ANSI Z39.50211 tcp 914c Texas Instruments 914C/G Terminal211 udp 914c Texas Instruments 914C/G Terminal212 tcp anet ATEXSSTR212 udp anet ATEXSSTR213 tcp ipx IPX213 udp ipx IPX214 tcp vmpwscs VM PWSCS214 udp vmpwscs VM PWSCS215 tcp softpc Insignia Solutions215 udp softpc Insignia Solutions216 tcp CAIlic Computer Associates Int'l License Server216 udp CAIlic Computer Associates Int'l License Server216 tcp atls Access Technology License Server216 udp atls Access Technology License Server217 tcp dbase dBASE Unix217 udp dbase dBASE Unix218 tcp mpp Netix Message Posting Protocol218 udp mpp Netix Message Posting Protocol219 tcp uarps Unisys ARPs219 udp uarps Unisys ARPs220 tcp imap3 Interactive Mail Access Protocol v3220 udp imap3 Interactive Mail Access Protocol v3221 tcp fln-spx Berkeley rlogind with SPX auth221 udp fln-spx Berkeley rlogind with SPX auth222 tcp rsh-spx Berkeley rshd with SPX auth222 udp rsh-spx Berkeley rshd with SPX auth223 tcp cdc Certificate Distribution Center223 udp cdc Certificate Distribution Center

224 tcp masqdialer masqdialer224 udp masqdialer masqdialer242 tcp direct Direct242 udp direct Direct243 tcp sur-meas Survey Measurement243 udp sur-meas Survey Measurement244 tcp inbusiness inbusiness244 udp inbusiness inbusiness244 tcp dayna Dayna244 udp dayna Dayna245 tcp link LINK245 udp link LINK246 tcp dsp3270 Display Systems Protocol246 udp dsp3270 Display Systems Protocol247 tcp subntbcst_tftp SUBNTBCST_TFTP247 udp subntbcst_tftp SUBNTBCST_TFTP248 tcp bhfhs bhfhs248 udp bhfhs bhfhs256 tcp rap RAP256 udp rap RAP256 tcp fw1-sync Checkpoint Firewall-1 state table sync257 tcp set Secure Electronic Transaction257 udp set Secure Electronic Transaction257 tcp fw1-log Check Point FW-1/VPN-1 log transfer258 tcp yak-chat Yak Winsock Personal Chat258 udp yak-chat Yak Winsock Personal Chat258 tcp fw1-mgmt Check Point FW-1/VPN-1 management259 tcp esro-gen Efficient Short Remote Operations259 udp esro-gen Efficient Short Remote Operations259 tcp fw1-clntauth Check Point FW-1/VPN-1 client auth259 udp fw1-rdp Check Point FW-1/VPN-1 key negotiations over RDP260 tcp openport Openport260 udp openport Openport260 udp fw1-snmp Check Point FW-1/VPN-1 SNMP agent261 tcp nsiiops IIOP Name Service over TLS SSL261 udp nsiiops IIOP Name Service over TLS SSL261 tcp fw1-mgmt Check Point FW-1/VPN-1 Management261 tcp fw-snauth Check Point FW-1/VPN-1 session auth262 tcp arcisdms Arcisdms262 udp arcisdms Arcisdms263 tcp hdap HDAP263 udp hdap HDAP

264 tcp bgmp Border Gateway Multicast Protocol264 udp bgmp Border Gateway Multicast Protocol264 tcp fw1-topo Check Point VPN-1 topology download265 tcp x-bone-ctl X-Bone CTL265 udp x-bone-ctl X-Bone CTL265 tcp fw1-key Check Point VPN-1 public key transfer protocol266 tcp sst SCSI on ST266 udp sst SCSI on ST267 tcp td-service Tobit David Service Layer267 udp td-service Tobit David Service Layer268 tcp td-replica Tobit David Replica268 udp td-replica Tobit David Replica280 tcp http-mgmt http-mgmt280 udp http-mgmt http-mgmt281 tcp personal-link Personal Link281 udp personal-link Personal Link282 tcp cableport-ax Cable Port A X282 udp cableport-ax Cable Port A X283 tcp rescap rescap283 udp rescap rescap284 tcp corerjd corerjd284 udp corerjd corerjd286 tcp fxp-1 FXP-1286 udp fxp-1 FXP-1287 tcp k-block K-BLOCK287 udp k-block K-BLOCK308 tcp novastorbakcup Novastor Backup308 udp novastorbakcup Novastor Backup309 tcp entrusttime EntrustTime309 udp entrusttime EntrustTime310 tcp bhmds bhmds310 udp bhmds bhmds311 tcp asip-webadmin AppleShare IP WebAdmin311 udp asip-webadmin AppleShare IP WebAdmin312 tcp vslmp VSLMP312 udp vslmp VSLMP313 tcp magenta-logic Magenta Logic313 udp magenta-logic Magenta Logic314 tcp opalis-robot Opalis Robot314 udp opalis-robot Opalis Robot315 tcp dpsi DPSI315 udp dpsi DPSI316 tcp decauth decAuth316 udp decauth decAuth317 tcp zannet Zannet317 udp zannet Zannet318 tcp pkix-timestamp PKIX TimeStamp318 udp pkix-timestamp PKIX TimeStamp

319 tcp ptp-event PTP Event319 udp ptp-event PTP Event320 tcp ptp-general PTP General320 udp ptp-general PTP General321 tcp pip PIP321 udp pip PIP322 tcp rtsps RTSPS322 udp rtsps RTSPS333 tcp texar Texar Security Port333 udp texar Texar Security Port334 tcp Backage [trojan] Backage344 tcp pdap Prospero Data Access Protocol344 udp pdap Prospero Data Access Protocol345 tcp pawserv Perf Analysis Workbench345 udp pawserv Perf Analysis Workbench346 tcp zserv Zebra server346 udp zserv Zebra server347 tcp fatserv Fatmen Server347 udp fatserv Fatmen Server348 tcp csi-sgwp Cabletron Management Protocol348 udp csi-sgwp Cabletron Management Protocol349 tcp mftp mftp349 udp mftp mftp350 tcp matip-type-a MATIP Type A350 udp matip-type-a MATIP Type A351 tcp matip-type-b MATIP Type B351 udp matip-type-b MATIP Type B351 tcp bhoetty bhoetty351 udp bhoetty bhoetty352 tcp dtag-ste-sb DTAG352 udp dtag-ste-sb DTAG352 udp bhoedap4 bhoedap4352 tcp bhoedap4 bhoedap4353 tcp ndsauth NDSAUTH353 udp ndsauth NDSAUTH354 tcp bh611 bh611354 udp bh611 bh611355 tcp datex-asn DATEX-ASN355 udp datex-asn DATEX-ASN356 tcp cloanto-net-1 Cloanto Net 1356 udp cloanto-net-1 Cloanto Net 1357 tcp bhevent bhevent357 udp bhevent bhevent358 tcp shrinkwrap Shrinkwrap358 udp shrinkwrap Shrinkwrap359 tcp nsrmp Network Security Risk Management Protocol359 udp nsrmp Network Security Risk Management Protocol359 tcp tenebris_nts Tenebris Network Trace Service

359 udp tenebris_nts Tenebris Network Trace Service360 tcp scoi2odialog scoi2odialog360 udp scoi2odialog scoi2odialog361 tcp semantix Semantix361 udp semantix Semantix362 tcp srssend SRS Send362 udp srssend SRS Send363 tcp rsvp_tunnel RSVP Tunnel363 udp rsvp_tunnel RSVP Tunnel364 tcp aurora-cmgr Aurora CMGR364 udp aurora-cmgr Aurora CMGR365 tcp dtk DTK365 udp dtk DTK366 tcp odmr ODMR366 udp odmr ODMR367 tcp mortgageware MortgageWare367 udp mortgageware MortgageWare368 tcp qbikgdp QbikGDP368 udp qbikgdp QbikGDP369 tcp rpc2portmap rpc2portmap369 udp rpc2portmap rpc2portmap370 tcp codaauth2 codaauth2370 udp codaauth2 codaauth2371 tcp clearcase Clearcase371 udp clearcase Clearcase372 tcp ulistproc ListProcessor372 udp ulistproc ListProcessor373 tcp legent-1 Legent Corporation373 udp legent-1 Legent Corporation374 tcp legent-2 Legent Corporation374 udp legent-2 Legent Corporation375 tcp hassle Hassle375 udp hassle Hassle376 tcp nip Amiga Envoy Network Inquiry Proto376 udp nip Amiga Envoy Network Inquiry Proto377 tcp tnETOS NEC Corporation377 udp tnETOS NEC Corporation378 tcp dsETOS NEC Corporation378 udp dsETOS NEC Corporation379 tcp is99c TIA EIA IS-99 modem client379 udp is99c TIA EIA IS-99 modem client380 tcp is99s TIA EIA IS-99 modem server380 udp is99s TIA EIA IS-99 modem server381 tcp hp-collector hp performance data collector381 udp hp-collector hp performance data collector382 tcp hp-managed-node hp performance data managed node382 udp hp-managed-node hp performance data managed node383 tcp hp-alarm-mgr hp performance data alarm manager383 udp hp-alarm-mgr hp performance data alarm manager384 tcp arns A Remote Network Server System

384 udp arns A Remote Network Server System385 tcp ibm-app IBM Application385 udp ibm-app IBM Application386 tcp asa ASA Message Router Object Def.386 udp asa ASA Message Router Object Def.387 tcp aurp Appletalk Update-Based Routing Pro.387 udp aurp Appletalk Update-Based Routing Pro.388 tcp unidata-ldm Unidata LDM388 udp unidata-ldm Unidata LDM389 tcp ldap Lightweight Directory Access Protocol389 udp ldap Lightweight Directory Access Protocol389 tcp ms-ils Microsoft NetMeeting ILS server default port (for versions older than w2k)390 tcp uis UIS390 udp uis UIS391 tcp synotics-relay SynOptics SNMP Relay Port391 udp synotics-relay SynOptics SNMP Relay Port392 tcp synotics-broker SynOptics Port Broker Port392 udp synotics-broker SynOptics Port Broker Port393 tcp meta5 Meta5393 udp meta5 Meta5393 tcp dis Data Interpretation System393 udp dis Data Interpretation System394 tcp embl-ndt EMBL Nucleic Data Transfer394 udp embl-ndt EMBL Nucleic Data Transfer395 tcp netcp NETscout Control Protocol395 udp netcp NETscout Control Protocol396 tcp netware-ip Novell Netware over IP396 udp netware-ip Novell Netware over IP397 tcp mptn Multi Protocol Trans. Net.397 udp mptn Multi Protocol Trans. Net.398 tcp kryptolan Kryptolan398 udp kryptolan Kryptolan399 tcp iso-tsap-c2 ISO Transport Class 2 Non-Control over TCP399 udp iso-tsap-c2 ISO Transport Class 2 Non-Control over TCP400 tcp work-sol Workstation Solutions400 udp work-sol Workstation Solutions401 tcp ups Uninterruptible Power Supply401 udp ups Uninterruptible Power Supply402 tcp genie Genie Protocol402 udp genie Genie Protocol403 tcp decap decap403 udp decap decap404 tcp nced nced404 udp nced nced405 tcp ncld ncld405 udp ncld ncld406 tcp imsp Interactive Mail Support Protocol

406 udp imsp Interactive Mail Support Protocol407 tcp timbuktu Timbuktu407 udp timbuktu Timbuktu408 tcp prm-sm Prospero Resource Manager Sys. Man.408 udp prm-sm Prospero Resource Manager Sys. Man.409 tcp prm-nm Prospero Resource Manager Node Man.409 udp prm-nm Prospero Resource Manager Node Man.410 tcp decladebug DECLadebug Remote Debug Protocol410 udp decladebug DECLadebug Remote Debug Protocol411 tcp rmt Remote MT Protocol411 udp rmt Remote MT Protocol411 tcp Backage [trojan] Backage412 tcp synoptics-trap Trap Convention Port412 udp synoptics-trap Trap Convention Port413 tcp smsp Storage Management Services Protocol413 udp smsp Storage Management Services Protocol414 tcp infoseek InfoSeek414 udp infoseek InfoSeek415 tcp bnet BNet415 udp bnet BNet416 tcp silverplatter Silverplatter416 udp silverplatter Silverplatter417 tcp onmux Onmux417 udp onmux Onmux418 tcp hyper-g Hyper-G418 udp hyper-g Hyper-G419 tcp ariel1 Ariel419 udp ariel1 Ariel420 tcp smpte SMPTE420 udp smpte SMPTE420 tcp Breach [trojan] Breach420 tcp Incognito [trojan] Incognito421 tcp ariel2 Ariel421 udp ariel2 Ariel421 tcp TCPWrappers [trojan] TCP Wrappers421 tcp TCPWrapperstrojan [trojan] TCP Wrappers trojan422 tcp ariel3 Ariel422 udp ariel3 Ariel423 tcp opc-job-start IBM Operations Planning and Control Start423 udp opc-job-start IBM Operations Planning and Control Start424 tcp opc-job-track IBM Operations Planning and Control Track424 udp opc-job-track IBM Operations Planning and Control Track425 tcp icad-el ICAD425 udp icad-el ICAD426 tcp smartsdp smartsdp

426 udp smartsdp smartsdp427 tcp svrloc Server Location427 udp svrloc Server Location428 tcp ocs_cmu OCS_CMU428 udp ocs_cmu OCS_CMU429 tcp ocs_amu OCS_AMU429 udp ocs_amu OCS_AMU430 tcp utmpsd UTMPSD430 udp utmpsd UTMPSD431 tcp utmpcd UTMPSD431 udp utmpcd UTMPSD432 tcp iasd IASD432 udp iasd IASD433 tcp nnsp Usenet Network News Transfer433 udp nnsp Usenet Network News Transfer434 tcp mobileip-agent MobileIP-Agent434 udp mobileip-agent MobileIP-Agent435 tcp mobilip-mn MobileIP-MN435 udp mobilip-mn MobileIP-MN436 tcp dna-cml DNA-CML436 udp dna-cml DNA-CML437 tcp comscm comscm437 udp comscm comscm438 tcp dsfgw dsfgw438 udp dsfgw dsfgw439 tcp dasp dasp439 udp dasp dasp440 tcp sgcp sgcp440 udp sgcp sgcp441 tcp decvms-sysmgt decvms-sysmgt441 udp decvms-sysmgt decvms-sysmgt442 tcp cvc_hostd cvc_hostd442 udp cvc_hostd cvc_hostd443 tcp https HTTP protocol over TLS/SSL443 udp https HTTP protocol over TLS/SSL444 tcp snpp Simple Network Paging Protocol444 udp snpp Simple Network Paging Protocol445 tcp microsoft-ds Win2k+ Server Message Block445 udp microsoft-ds Win2k+ Server Message Block446 tcp ddm-rdb DDM-RDB446 udp ddm-rdb DDM-RDB447 tcp ddm-dfm DDM-RFM447 udp ddm-dfm DDM-RFM448 tcp ddm-ssl DDM-SSL448 udp ddm-ssl DDM-SSL449 tcp as-servermap AS Server Mapper449 udp as-servermap AS Server Mapper450 tcp tserver Computer Supported Telecommunication Applications

450 udp tserver Computer Supported Telecommunication Applications451 tcp sfs-smp-net Cray Network Semaphore server451 udp sfs-smp-net Cray Network Semaphore server452 tcp sfs-config Cray SFS config server452 udp sfs-config Cray SFS config server453 tcp creativeserver CreativeServer453 udp creativeserver CreativeServer454 tcp contentserver ContentServer454 udp contentserver ContentServer455 tcp creativepartnr CreativePartnr455 udp creativepartnr CreativePartnr455 tcp FatalConnections [trojan] Fatal Connections456 tcp macon-tcp macon-tcp456 udp macon-udp macon-tcp456 tcp HackersParadise [trojan] Hackers Paradise457 tcp scohelp scohelp457 udp scohelp scohelp458 tcp appleqtc apple quick time458 udp appleqtc apple quick time459 tcp ampr-rcmd ampr-rcmd459 udp ampr-rcmd ampr-rcmd460 tcp skronk skronk460 udp skronk skronk461 tcp datasurfsrv DataRampSrv461 udp datasurfsrv DataRampSrv462 tcp datasurfsrvsec DataRampSrvSec462 udp datasurfsrvsec DataRampSrvSec463 tcp alpes alpes463 udp alpes alpes464 tcp kpasswd kpasswd464 udp kpasswd kpasswd465 tcp urd URL Rendesvous Directory for SSM465 udp igmpv3lite IGMP over UDP for SSM465 tcp smtps smtp protocol over TLS/SSL (was ssmtp)465 udp smtps smtp protocol over TLS/SSL (was ssmtp)466 tcp digital-vrc digital-vrc466 udp digital-vrc digital-vrc467 tcp mylex-mapd mylex-mapd467 udp mylex-mapd mylex-mapd468 tcp photuris Photuris Key Management468 udp photuris Photuris Key Management469 tcp rcp Radio Control Protocol469 udp rcp Radio Control Protocol470 tcp scx-proxy scx-proxy470 udp scx-proxy scx-proxy471 tcp mondex Mondex471 udp mondex Mondex472 tcp ljk-login ljk-login

472 udp ljk-login ljk-login473 tcp hybrid-pop hybrid-pop473 udp hybrid-pop hybrid-pop474 tcp tn-tl-w1 tn-t1-w1474 udp tn-tl-w2 tn-t1-w2475 tcp tcpnethaspsrv tcpnethaspsrv475 udp tcpnethaspsrv tcpnethaspsrv476 tcp tn-tl-fd1 tn-t1-fd1476 udp tn-tl-fd1 tn-t1-fd1477 tcp ss7ns ss7ns477 udp ss7ns ss7ns478 tcp spsc spsc478 udp spsc spsc479 tcp iafserver iafserver479 udp iafserver iafserver480 tcp iafdbase iafdbase480 udp iafdbase iafdbase480 tcp loadsrv loadsrv481 tcp ph Ph service481 udp ph Ph service481 tcp dvs dvs482 tcp bgs-nsi bgs-nsi482 udp bgs-nsi bgs-nsi482 udp xlog xlog483 tcp ulpnet ulpnet483 udp ulpnet ulpnet484 tcp integra-sme Integra Software Management Environment484 udp integra-sme Integra Software Management Environment485 tcp powerburst Air Soft Power Burst485 udp powerburst Air Soft Power Burst486 tcp avian avian486 udp avian avian486 tcp sstats sstats487 tcp saft saft Simple Asynchronous File Transfer487 udp saft saft Simple Asynchronous File Transfer488 tcp gss-http gss-http488 udp gss-http gss-http489 tcp nest-protocol nest-protocol489 udp nest-protocol nest-protocol490 tcp micom-pfs micom-pfs490 udp micom-pfs micom-pfs491 tcp go-login go-login491 udp go-login go-login492 tcp ticf-1 Transport Independent Convergence for FNA492 udp ticf-1 Transport Independent Convergence for FNA

493 tcp ticf-2 Transport Independent Convergence for FNA493 udp ticf-2 Transport Independent Convergence for FNA494 tcp pov-ray POV-Ray494 udp pov-ray POV-Ray495 tcp intecourier intecourier495 udp intecourier intecourier496 tcp pim-rp-disc PIM-RP-DISC496 udp pim-rp-disc PIM-RP-DISC497 tcp dantz dantz497 udp dantz dantz498 tcp siam siam498 udp siam siam499 tcp iso-ill ISO ILL Protocol499 udp iso-ill ISO ILL Protocol500 tcp isakmp isakmp500 udp isakmp isakmp501 tcp stmf STMF501 udp stmf STMF502 tcp asa-appl-proto asa-appl-proto502 udp asa-appl-proto asa-appl-proto503 tcp intrinsa Intrinsa503 udp intrinsa Intrinsa504 tcp citadel citadel504 udp citadel citadel505 tcp mailbox-lm mailbox-lm505 udp mailbox-lm mailbox-lm506 tcp ohimsrv ohimsrv506 udp ohimsrv ohimsrv507 tcp crs crs507 udp crs crs508 tcp xvttp xvttp508 udp xvttp xvttp509 tcp snare snare509 udp snare snare510 tcp fcp FirstClass Protocol510 udp fcp FirstClass Protocol510 tcp t0rnkit-sshd [trojan] t0rnkit sshd backdoor511 tcp passgo PassGo511 udp passgo PassGo511 tcp T0rnRootkit [trojan] T0rn Rootkit512 tcp exec BSD rexecd(8)512 udp biff biff512 udp comsat comsat513 tcp login BSD rlogind(8)513 udp who BSD rwhod(8)513 tcp Grlogin [trojan] Grlogin514 tcp shell BSD rshd(8)514 udp syslog syslog

514 tcp RPCBackdoor [trojan] RPC Backdoor515 tcp printer spooler515 udp printer spooler515 tcp lpdw0rm [trojan] lpdw0rm515 tcp Ramen [trojan] Ramen516 tcp videotex videotex516 udp videotex videotex517 tcp talk talk517 udp talk talk518 tcp ntalk ntalk518 udp ntalk ntalk519 tcp utime unixtime519 udp utime unixtime520 tcp efs extended file name server520 udp route router routed -- RIP521 tcp ripng ripng521 udp ripng ripng522 tcp ulp ULP522 udp ulp ULP523 tcp ibm-db2 IBM-DB2523 udp ibm-db2 IBM-DB2524 tcp ncp NCP524 udp ncp NCP525 tcp timed timeserver525 udp timed timeserver526 tcp tempo newdate526 udp tempo newdate527 tcp stx Stock IXChange527 udp stx Stock IXChange528 tcp custix Customer IXChange528 udp custix Customer IXChange529 tcp irc-serv IRC-SERV529 udp irc-serv IRC-SERV530 tcp courier rpc530 udp courier rpc531 tcp conference chat531 udp conference chat531 tcp Net666 [trojan] Net666531 tcp Rasmin [trojan] Rasmin532 tcp netnews readnews532 udp netnews readnews532 tcp ibm-db2 IBM DB2 admin listener533 tcp netwall netwall for emergency broadcasts533 udp netwall netwall for emergency broadcasts534 tcp mm-admin MegaMedia Admin534 udp mm-admin MegaMedia Admin535 tcp iiop iiop535 udp iiop iiop536 tcp opalis-rdv opalis-rdv536 udp opalis-rdv opalis-rdv

537 tcp nmsp Networked Media Streaming Protocol537 udp nmsp Networked Media Streaming Protocol538 tcp gdomap gdomap538 udp gdomap gdomap539 tcp apertus-ldp Apertus Technologies Load Determination539 udp apertus-ldp Apertus Technologies Load Determination540 tcp uucp uucpd540 udp uucp uucpd541 tcp uucp-rlogin uucp-rlogin541 udp uucp-rlogin uucp-rlogin542 tcp commerce commerce542 udp commerce commerce543 tcp klogin klogin543 udp klogin klogin544 tcp kshell krcmd544 udp kshell krcmd545 tcp appleqtcsrvr appleqtcsrvr545 udp appleqtcsrvr appleqtcsrvr545 tcp ekshell Kerberos encrypted remote shell #NAME?546 tcp dhcpv6-client DHCPv6 Client546 udp dhcpv6-client DHCPv6 Client547 tcp dhcpv6-server DHCPv6 Server547 udp dhcpv6-server DHCPv6 Server548 tcp afpovertcp AFP over TCP548 udp afpovertcp AFP over TCP549 tcp idfp IDFP549 udp idfp IDFP550 tcp new-rwho new-who550 udp new-rwho new-who551 tcp cybercash cybercash551 udp cybercash cybercash552 tcp deviceshare deviceshare552 udp deviceshare deviceshare553 tcp pirp pirp553 udp pirp pirp554 tcp rtsp Real Time Stream Control Protocol554 udp rtsp Real Time Stream Control Protocol555 tcp dsf dsf555 udp dsf dsf555 tcp 711trojan [trojan] 711 trojan (Seven Eleven)555 tcp IniKiller [trojan] Ini-Killer555 tcp NetAdministrator [trojan] Net Administrator555 tcp Phase-0 [trojan] Phase-0555 tcp PhaseZero [trojan] Phase Zero555 tcp StealthSpy [trojan] Stealth Spy556 tcp remotefs rfs server Brunhoff remote filesystem556 udp remotefs rfs server Brunhoff remote filesystem

557 tcp openvms-sysipc openvms-sysipc557 udp openvms-sysipc openvms-sysipc558 tcp sdnskmp SDNSKMP558 udp sdnskmp SDNSKMP559 tcp teedtap TEEDTAP559 udp teedtap TEEDTAP560 tcp rmonitor rmonitord560 udp rmonitor rmonitord561 tcp monitor monitor561 udp monitor monitor562 tcp chshell chcmd562 udp chshell chcmd563 tcp nntps nntp protocol over TLS SSL (was snntp)563 udp nntps nntp protocol over TLS SSL (was snntp)563 tcp snews snews563 udp snews snews564 tcp 9pfs plan 9 file service564 udp 9pfs plan 9 file service565 tcp whoami whoami565 udp whoami whoami566 tcp streettalk streettalk566 udp streettalk streettalk567 tcp banyan-rpc banyan-rpc567 udp banyan-rpc banyan-rpc568 tcp ms-shuttle Microsoft shuttle568 udp ms-shuttle Microsoft shuttle569 tcp ms-rome Microsoft rome569 udp ms-rome Microsoft rome570 tcp meter demon570 udp meter demon571 tcp meter udemon571 udp meter udemon572 tcp sonar sonar572 udp sonar sonar573 tcp banyan-vip banyan-vip573 udp banyan-vip banyan-vip574 tcp ftp-agent FTP Software Agent System574 udp ftp-agent FTP Software Agent System575 tcp vemmi vemmi575 udp vemmi vemmi576 tcp ipcd ipcd576 udp ipcd ipcd577 tcp vnas vnas577 udp vnas vnas578 tcp ipdd ipdd578 udp ipdd ipdd579 tcp decbsrv decbsrv579 udp decbsrv decbsrv580 tcp sntp-heartbeat SNTP HEARTBEAT580 udp sntp-heartbeat SNTP HEARTBEAT

581 tcp bdp Bundle Discovery Protocol581 udp bdp Bundle Discovery Protocol582 tcp scc-security SCC Security582 udp scc-security SCC Security583 tcp philips-vc Philips Video-Conferencing583 udp philips-vc Philips Video-Conferencing584 tcp keyserver Key Server584 udp keyserver Key Server585 tcp imap4-ssl IMAP4+SSL585 udp imap4-ssl IMAP4+SSL586 tcp password-chg Password Change586 udp password-chg Password Change587 tcp submission Submission587 udp submission Submission588 tcp cal CAL588 udp cal CAL589 tcp eyelink EyeLink589 udp eyelink EyeLink590 tcp tns-cml TNS CML590 udp tns-cml TNS CML591 tcp http-alt FileMaker Inc. - HTTP Alternate (see Port 80)591 udp http-alt FileMaker Inc. - HTTP Alternate (see Port 80)592 tcp eudora-set Eudora Set592 udp eudora-set Eudora Set593 tcp http-rpc-epmap HTTP RPC Ep Map593 udp http-rpc-epmap HTTP RPC Ep Map594 tcp tpip TPIP594 udp tpip TPIP595 tcp cab-protocol CAB Protocol595 udp cab-protocol CAB Protocol596 tcp smsd SMSD596 udp smsd SMSD597 tcp ptcnameservice PTC Name Service597 udp ptcnameservice PTC Name Service598 tcp sco-websrvrmg3 SCO Web Server Manager 3598 udp sco-websrvrmg3 SCO Web Server Manager 3599 tcp acp Aeolon Core Protocol599 udp acp Aeolon Core Protocol600 tcp ipcserver Sun IPC server600 udp ipcserver Sun IPC server600 tcp Sadmind [trojan] Sadmind605 tcp soap-beep SOAP over BEEP605 udp soap-beep SOAP over BEEP605 tcp SecretService [trojan] Secret Service606 tcp urm Cray Unified Resource Manager606 udp urm Cray Unified Resource Manager607 tcp nqs nqs607 udp nqs nqs

608 tcp sift-uft Sender-Initiated/Unsolicited File Transfer608 udp sift-uft Sender-Initiated/Unsolicited File Transfer609 tcp npmp-trap npmp-trap609 udp npmp-trap npmp-trap610 tcp npmp-local npmp-local610 udp npmp-local npmp-local611 tcp npmp-gui npmp-gui611 udp npmp-gui npmp-gui612 tcp hmmp-ind HMMP Indication612 udp hmmp-ind HMMP Indication613 tcp hmmp-op HMMP Operation613 udp hmmp-op HMMP Operation614 tcp sshell SSLshell614 udp sshell SSLshell615 tcp sco-inetmgr Internet Configuration Manager615 udp sco-inetmgr Internet Configuration Manager616 tcp sco-sysmgr SCO System Administration Server616 udp sco-sysmgr SCO System Administration Server617 tcp sco-dtmgr SCO Desktop Administration Server617 udp sco-dtmgr SCO Desktop Administration Server618 tcp dei-icda DEI-ICDA618 udp dei-icda DEI-ICDA619 tcp compaq-evm Compaq EVM619 udp compaq-evm Compaq EVM620 tcp sco-websrvrmgr SCO WebServer Manager620 udp sco-websrvrmgr SCO WebServer Manager621 tcp escp-ip ESCP621 udp escp-ip ESCP622 tcp collaborator Collaborator622 udp collaborator Collaborator623 tcp asf-rmcp ASF Remote Management and Control Protocol623 udp asf-rmcp ASF Remote Management and Control Protocol623 tcp aux_bus_shunt Aux Bus Shunt623 udp aux_bus_shunt Aux Bus Shunt624 tcp cryptoadmin Crypto Admin624 udp cryptoadmin Crypto Admin625 tcp dec_dlm DEC DLM625 udp dec_dlm DEC DLM626 tcp asia ASIA626 udp asia ASIA627 tcp passgo-tivoli PassGo Tivoli627 udp passgo-tivoli PassGo Tivoli628 tcp qmqp QMQP (qmail)628 udp qmqp QMQP (qmail)629 tcp 3com-amp3 3Com AMP3629 udp 3com-amp3 3Com AMP3630 tcp rda RDA630 udp rda RDA

631 tcp ipp Internet Printing Protocol631 udp ipp Internet Printing Protocol632 tcp bmpp bmpp632 udp bmpp bmpp633 tcp servstat Service Status update (Sterling Software)633 udp servstat Service Status update (Sterling Software)634 tcp ginad ginad634 udp ginad ginad635 tcp rlzdbase RLZ DBase635 udp rlzdbase RLZ DBase635 udp mount NFS Mount Service636 tcp ldaps ldap protocol over TLS/SSL (was sldap)636 udp ldaps ldap protocol over TLS/SSL (was sldap)637 tcp lanserver lanserver637 udp lanserver lanserver638 tcp mcns-sec mcns-sec638 udp mcns-sec mcns-sec639 tcp msdp MSDP639 udp msdp MSDP640 tcp entrust-sps entrust-sps640 udp entrust-sps entrust-sps640 udp pcnfs PC-NFS DOS Authentication641 tcp repcmd repcmd641 udp repcmd repcmd642 tcp esro-emsdp ESRO-EMSDP V1.3642 udp esro-emsdp ESRO-EMSDP V1.3643 tcp sanity SANity643 udp sanity SANity644 tcp dwr dwr644 udp dwr dwr645 tcp pssc PSSC645 udp pssc PSSC646 tcp ldp LDP646 udp ldp LDP647 tcp dhcp-failover DHCP Failover647 udp dhcp-failover DHCP Failover648 tcp rrp Registry Registrar Protocol (RRP)648 udp rrp Registry Registrar Protocol (RRP)649 tcp cadview-3d Cadview-3d - streaming 3d models over the internet649 udp cadview-3d Cadview-3d - streaming 3d models over the internet649 tcp aminet Aminet649 udp aminet Aminet650 tcp obex OBEX650 udp obex OBEX650 udp bwnfs BW-NFS DOS Authentication651 tcp ieee-mms IEEE MMS651 udp ieee-mms IEEE MMS652 tcp hello-port HELLO_PORT

652 udp hello-port HELLO_PORT653 tcp repscmd RepCmd653 udp repscmd RepCmd654 tcp aodv AODV654 udp aodv AODV655 tcp tinc TINC655 udp tinc TINC656 tcp spmp SPMP656 udp spmp SPMP657 tcp rmc RMC657 udp rmc RMC658 tcp tenfold TenFold658 udp tenfold TenFold659 tcp url-rendezvous URL Rendezvous659 udp url-rendezvous URL Rendezvous660 tcp mac-srvr-admin MacOS Server Admin660 udp mac-srvr-admin MacOS Server Admin661 tcp hap HAP661 udp hap HAP661 tcp NokNok [trojan] NokNok662 tcp pftp PFTP662 udp pftp PFTP663 tcp purenoise PureNoise663 udp purenoise PureNoise664 tcp asf-secure-rcmp ASF Secure Remote Management and Control Protocol664 udp asf-secure-rcmp ASF Secure Remote Management and Control Protocol664 tcp secure-aux-bus Secure Aux Bus664 udp secure-aux-bus Secure Aux Bus665 tcp sun-dr Sun DR665 udp sun-dr Sun DR666 tcp mdqs mdqs666 udp mdqs mdqs666 tcp doom doom Id Software666 udp doom doom Id Software666 tcp AttackFTP [trojan] Attack FTP666 tcp BackConstruction [trojan] Back Construction666 tcp BLAtrojan [trojan] BLA trojan666 tcp Cain&Abel [trojan] Cain & Abel666 tcp lpdw0rm [trojan] lpdw0rm666 tcp NokNok [trojan] NokNok666 tcp SatansBackDoor [trojan] Satans Back Door - SBD666 tcp ServU [trojan] ServU666 tcp ShadowPhyre [trojan] Shadow Phyre666 tcp th3r1pp3rz [trojan] th3r1pp3rz (= Therippers)667 tcp disclose campaign contribution disclosures - SDR Technologies

667 udp disclose campaign contribution disclosures - SDR Technologies667 tcp SniperNet [trojan] SniperNet668 tcp mecomm MeComm668 udp mecomm MeComm668 tcp th3r1pp3rz [trojan] th3r1pp3rz (= Therippers)669 tcp meregister MeRegister669 udp meregister MeRegister669 tcp DPtrojan [trojan] DP trojan670 tcp vacdsm-sws VACDSM-SWS670 udp vacdsm-sws VACDSM-SWS671 tcp vacdsm-app VACDSM-APP671 udp vacdsm-app VACDSM-APP672 tcp vpps-qua VPPS-QUA672 udp vpps-qua VPPS-QUA673 tcp cimplex CIMPLEX673 udp cimplex CIMPLEX674 tcp acap ACAP674 udp acap ACAP675 tcp dctp DCTP675 udp dctp DCTP676 tcp vpps-via VPPS Via676 udp vpps-via VPPS Via677 tcp vpp Virtual Presence Protocol677 udp vpp Virtual Presence Protocol678 tcp ggf-ncp GNU Gereration Foundation NCP678 udp ggf-ncp GNU Generation Foundation NCP679 tcp mrm MRM679 udp mrm MRM680 tcp entrust-aaas entrust-aaas680 udp entrust-aaas entrust-aaas681 tcp entrust-aams entrust-aams681 udp entrust-aams entrust-aams682 tcp xfr XFR682 udp xfr XFR683 tcp corba-iiop CORBA IIOP683 udp corba-iiop CORBA IIOP684 tcp corba-iiop-ssl CORBA IIOP SSL684 udp corba-iiop-ssl CORBA IIOP SSL685 tcp mdc-portmapper MDC Port Mapper685 udp mdc-portmapper MDC Port Mapper686 tcp hcp-wismar Hardware Control Protocol Wismar686 udp hcp-wismar Hardware Control Protocol Wismar687 tcp asipregistry asipregistry687 udp asipregistry asipregistry688 tcp realm-rusd REALM-RUSD688 udp realm-rusd REALM-RUSD689 tcp nmap NMAP689 udp nmap NMAP689 tcp SLDAP LDAP over SSL

690 tcp vatp VATP690 udp vatp VATP691 tcp msexch-routing MS Exchange Routing691 udp msexch-routing MS Exchange Routing692 tcp hyperwave-isp Hyperwave-ISP692 udp hyperwave-isp Hyperwave-ISP692 tcp GayOL [trojan] GayOL693 tcp connendp connendp693 udp connendp connendp694 tcp ha-cluster ha-cluster694 udp ha-cluster ha-cluster695 tcp ieee-mms-ssl IEEE-MMS-SSL695 udp ieee-mms-ssl IEEE-MMS-SSL696 tcp rushd RUSHD696 udp rushd RUSHD697 tcp uuidgen UUIDGEN697 udp uuidgen UUIDGEN698 tcp olsr OLSR698 udp olsr OLSR699 tcp accessnetwork Access Network699 udp accessnetwork Access Network704 tcp elcsd errlog copy server daemon704 udp elcsd errlog copy server daemon705 tcp agentx AgentX705 udp agentx AgentX706 tcp silc SILC706 udp silc SILC707 tcp borland-dsj Borland DSJ707 udp borland-dsj Borland DSJ709 tcp entrust-kmsh Entrust Key Management Service Handler709 udp entrust-kmsh Entrust Key Management Service Handler710 tcp entrust-ash Entrust Administration Service Handler710 udp entrust-ash Entrust Administration Service Handler711 tcp cisco-tdp Cisco TDP711 udp cisco-tdp Cisco TDP729 tcp netviewdm1 IBM NetView DM 6000 Server/Client729 udp netviewdm1 IBM NetView DM 6000 Server/Client730 tcp netviewdm2 IBM NetView DM 6000 send/tcp730 udp netviewdm2 IBM NetView DM 6000 send/tcp731 tcp netviewdm3 IBM NetView DM 6000 receive/tcp731 udp netviewdm3 IBM NetView DM 6000 receive/tcp737 udp sometimes-rpc2 Rusersd on my OpenBSD box740 tcp netcp NETscout Control Protocol740 udp netcp NETscout Control Protocol741 tcp netgw netGW741 udp netgw netGW742 tcp netrcs Network based Rev. Cont. Sys.

742 udp netrcs Network based Rev. Cont. Sys.744 tcp flexlm Flexible License Manager744 udp flexlm Flexible License Manager747 tcp fujitsu-dev Fujitsu Device Control747 udp fujitsu-dev Fujitsu Device Control748 tcp ris-cm Russell Info Sci Calendar Manager748 udp ris-cm Russell Info Sci Calendar Manager749 tcp kerberos-adm Kerberos administration749 udp kerberos-adm Kerberos administration750 tcp kerberos-iv Kerberos v4750 udp kerberos-iv Kerberos v4750 tcp rfile rfile750 udp loadav loadav751 tcp pump pump751 udp pump pump751 tcp kerberos_master Kerberos `kadmin' (v4)751 udp kerberos_master Kerberos `kadmin' (v4)752 tcp qrh qrh752 udp qrh qrh753 tcp rrh rrh753 udp rrh rrh754 tcp tell send754 udp tell send754 tcp krb_prop kerberos v5 server propagation758 tcp nlogin nlogin758 udp nlogin nlogin759 tcp con con759 udp con con760 tcp ns ns760 udp ns ns760 tcp krbupdate kreg Kerberos (v4) registration761 tcp rxe rxe761 udp rxe rxe761 tcp kpasswd kpwd Kerberos (v4) passwd762 tcp quotad quotad762 udp quotad quotad763 tcp cycleserv cycleserv763 udp cycleserv cycleserv764 tcp omserv omserv764 udp omserv omserv765 tcp webster webster765 udp webster webster767 tcp phonebook phonebook767 udp phonebook phonebook769 tcp vid vid769 udp vid vid770 tcp cadlock cadlock770 udp cadlock cadlock771 tcp rtip rtip771 udp rtip rtip

772 tcp cycleserv2 cycleserv2772 udp cycleserv2 cycleserv2773 tcp submit submit773 udp notify notify774 tcp rpasswd rpasswd774 udp acmaint_dbd acmaint_dbd775 tcp entomb entomb775 udp acmaint_transd acmaint_transd776 tcp wpages wpages776 udp wpages wpages777 tcp multiling-http Multiling HTTP777 udp multiling-http Multiling HTTP777 tcp AimSpy [trojan] AimSpy777 tcp Undetected [trojan] Undetected780 tcp wpgs wpgs780 udp wpgs wpgs781 tcp hp-collector hp performance data collector781 udp hp-collector hp performance data collector782 tcp hp-managed-node hp performance data managed node782 udp hp-managed-node hp performance data managed node783 tcp hp-alarm-mgr hp performance data alarm manager783 udp hp-alarm-mgr hp performance data alarm manager786 tcp concert concert786 udp concert concert787 tcp qsc QSC787 udp qsc QSC799 tcp controlit controlit800 tcp mdbs_daemon mdbs_daemon800 udp mdbs_daemon mdbs_daemon801 tcp device device801 udp device device808 tcp WinHole [trojan] WinHole810 tcp fcp-udp FCP810 udp fcp-udp FCP Datagram828 tcp itm-mcell-s itm-mcell-s828 udp itm-mcell-s itm-mcell-s829 tcp pkix-3-ca-ra PKIX-3 CA RA829 udp pkix-3-ca-ra PKIX-3 CA RA847 tcp dhcp-failover2 dhcp-failover 2847 udp dhcp-failover2 dhcp-failover 2871 tcp supfilesrv SUP server873 tcp rsync rsync873 udp rsync rsync886 tcp iclcnet-locate ICL coNETion locate server886 udp iclcnet-locate ICL coNETion locate server887 tcp iclcnet_svinfo ICL coNETion server info887 udp iclcnet_svinfo ICL coNETion server info888 tcp accessbuilder AccessBuilder888 udp accessbuilder AccessBuilder888 tcp cddbp CD Database Protocol

900 tcp omginitialrefs OMG Initial Refs900 udp omginitialrefs OMG Initial Refs900 tcp fw1-clntauth-http Check Point FW-1/VPN-1 client auth (http)901 tcp samba-swat Samba SWAT tool901 tcp realsecure RealSecure sensor901 tcp smpnameres SMPNAMERES901 udp smpnameres SMPNAMERES902 tcp ideafarm-chat IDEAFARM-CHAT902 udp ideafarm-chat IDEAFARM-CHAT903 tcp ideafarm-catch IDEAFARM-CATCH903 udp ideafarm-catch IDEAFARM-CATCH911 tcp xact-backup xact-backup911 udp xact-backup xact-backup911 tcp DarkShadow [trojan] Dark Shadow912 tcp apex-mesh APEX relay-relay service912 udp apex-mesh APEX relay-relay service913 tcp apex-edge APEX endpoint-relay service913 udp apex-edge APEX endpoint-relay service953 tcp rndc BIND 9 rndc control socket953 udp rndc BIND 9 rndc control socket (NOTUSED)974 tcp securenetpro SecureNet Pro secure comm to console975 tcp securenetpro SecureNet Pro sensor989 tcp ftps-data ftp data over TLS/SSL989 udp ftps-data ftp data over TLS/SSL990 tcp ftps ftp data over TLS/SSL990 udp ftps ftp data over TLS/SSL991 tcp nas Netnews Administration System991 udp nas Netnews Administration System992 tcp telnets telnet protocol over TLS/SSL992 udp telnets telnet protocol over TLS/SSL993 tcp imaps imap4 protocol over TLS/SSL993 udp imaps imap4 protocol over TLS/SSL994 tcp ircs irc protocol over TLS/SSL994 udp ircs irc protocol over TLS/SSL995 tcp pop3s POP3 protocol over TLS/SSL995 udp pop3s pop3 protocol over TLS/SSL (was spop3)996 tcp vsinet vsinet996 udp vsinet vsinet996 tcp xtreelic XTREE License Server997 tcp maitrd maitrd997 udp maitrd maitrd998 tcp busboy busboy998 udp puparp puparp999 tcp garcon garcon999 udp applix Applix ac999 tcp puprouter puprouter

999 udp puprouter puprouter999 tcp Chatpower [trojan] Chat power999 tcp DeepThroat [trojan] DeepThroat999 tcp Foreplay [trojan] Foreplay999 tcp WinSatan [trojan] WinSatan1000 tcp cadlock2 cadlock21000 udp cadlock2 cadlock21000 tcp Connecter [trojan] Connecter1000 tcp DerSpäher [trojan] Der Späher / Der Spaeher1000 tcp DerSpherDerSpaeher [trojan] Der Späher / Der Spaeher1000 tcp DirectConnection [trojan] Direct Connection1000 tcp InsaneNetwork [trojan] Insane Network1001 tcp sabserv Sabre Desktop Reservation Software for Windows1001 tcp DerSpäher [trojan] Der Späher / Der Spaeher1001 tcp LeGuardien [trojan] Le Guardien1001 tcp Silencer [trojan] Silencer1001 tcp Theef [trojan] Theef1001 tcp WebEx [trojan] WebEx1002 tcp win2k-ils Microsoft NetMeeting ILS server default port (win2k)1005 tcp Theef [trojan] Theef1008 tcp Lion [trojan] Lion1008 tcp ufsd ufsd UFS-aware server1008 udp ufsd ufsd UFS-aware server1010 tcp surf surf1010 udp surf surf1010 tcp DolyTrojan [trojan] Doly Trojan1011 tcp DolyTrojan [trojan] Doly Trojan1012 udp sometimes-rpc1 This is rstatd on my openBSD box box1012 tcp DolyTrojan [trojan] Doly Trojan1015 tcp DolyTrojan [trojan] Doly Trojan1016 tcp DolyTrojan [trojan] Doly Trojan1020 tcp Vampire [trojan] Vampire1023 tcp gs400-nas Linux backend of Gateway GS-400 NAS1024 tcp kdm K Display Manager (KDE version of xdm) xdm)1024 tcp Jade [trojan] Jade1024 tcp Latinus [trojan] Latinus1024 tcp NetSpy [trojan] NetSpy1024 tcp RAT [trojan] Remote Administration Tool - RAT [no 2]1025 tcp blackjack network blackjack1025 udp blackjack network blackjack1025 tcp listen listener RFS remote_file_sharing1025 tcp shoppro ShopPro accounting software1025 tcp FraggleRock [trojan] Fraggle Rock

1025 tcp md5Backdoor [trojan] md5 Backdoor1025 tcp NetSpy [trojan] NetSpy1025 tcp RemoteStorm [trojan] Remote Storm1025 udp RemoteStorm [trojan] Remote Storm1026 tcp nterm remote_login network_terminal1027 tcp ICKiller [trojan] ICKiller1029 tcp ICQNuke98 [trojan] ICQ Nuke 981029 tcp InCommand [trojan] InCommand1030 tcp iad1 BBN IAD1030 udp iad1 BBN IAD1031 tcp iad2 BBN IAD1031 udp iad2 BBN IAD1031 tcp Xanadu [trojan] Xanadu1032 tcp iad3 BBN IAD1032 udp iad3 BBN IAD1035 tcp Multidropper [trojan] Multidropper1040 tcp netarx Netarx1040 udp netarx Netarx1042 tcp BLAtrojan [trojan] BLA trojan1042 udp BLAtrojan [trojan] BLA trojan1045 tcp Rasmin [trojan] Rasmin1047 tcp neod1 Sun's NEO Object Request Broker1047 udp neod1 Sun's NEO Object Request Broker1048 tcp neod2 Sun's NEO Object Request Broker1048 udp neod2 Sun's NEO Object Request Broker1049 tcp sbininitd [trojan] /sbin/initd1049 tcp td-postman Tobit David Postman VPMN1049 udp td-postman Tobit David Postman VPMN1050 tcp cma CORBA Management Agent1050 udp cma CORBA Management Agent1050 tcp MiniCommand [trojan] MiniCommand1051 tcp optima-vnet Optima VNET1051 udp optima-vnet Optima VNET1052 tcp ddt Dynamic DNS Tools1052 udp ddt Dynamic DNS Tools1053 tcp remote-as Remote Assistant (RA)1053 udp remote-as Remote Assistant (RA)1053 tcp TheThief [trojan] The Thief1054 tcp brvread BRVREAD1054 udp brvread BRVREAD1054 tcp AckCmd [trojan] AckCmd1055 tcp ansyslmd ANSYS - License Manager1055 udp ansyslmd ANSYS - License Manager1056 tcp vfo VFO1056 udp vfo VFO1057 tcp startron STARTRON1057 udp startron STARTRON1058 tcp nim nim1058 udp nim nim1059 tcp nimreg nimreg

1059 udp nimreg nimreg1060 tcp polestar POLESTAR1060 udp polestar POLESTAR1061 tcp kiosk KIOSK1061 udp kiosk KIOSK1062 tcp veracity Veracity1062 udp veracity Veracity1063 tcp kyoceranetdev KyoceraNetDev1063 udp kyoceranetdev KyoceraNetDev1064 tcp jstel JSTEL1064 udp jstel JSTEL1065 tcp syscomlan SYSCOMLAN1065 udp syscomlan SYSCOMLAN1066 tcp fpo-fns FPO-FNS1066 udp fpo-fns FPO-FNS1067 tcp instl_boots Installation Bootstrap Proto. Serv.1067 udp instl_boots Installation Bootstrap Proto. Serv.1068 tcp instl_bootc Installation Bootstrap Proto. Cli.1068 udp instl_bootc Installation Bootstrap Proto. Cli.1069 tcp cognex-insight COGNEX-INSIGHT1069 udp cognex-insight COGNEX-INSIGHT1070 tcp gmrupdateserv GMRUpdateSERV1070 udp gmrupdateserv GMRUpdateSERV1071 tcp bsquare-voip BSQUARE-VOIP1071 udp bsquare-voip BSQUARE-VOIP1072 tcp cardax CARDAX1072 udp cardax CARDAX1073 tcp bridgecontrol BridgeControl1073 udp bridgecontrol BridgeControl1074 tcp fastechnologlm FASTechnologies License Manager1074 udp fastechnologlm FASTechnologies License Manager1075 tcp rdrmshc RDRMSHC1075 udp rdrmshc RDRMSHC1076 tcp dab-sti-c DAB STI-C1076 udp dab-sti-c DAB STI-C1077 tcp imgames IMGames1077 udp imgames IMGames1078 tcp emanagecstp eManageCstp1078 udp emanagecstp eManageCstp1079 tcp asprovatalk ASPROVATalk1079 udp asprovatalk ASPROVATalk1080 tcp socks socks1080 udp socks socks1080 tcp SubSeven2.2 [trojan] SubSeven 2.21080 tcp WinHole [trojan] WinHole1081 tcp pvuniwien PVUNIWIEN1081 udp pvuniwien PVUNIWIEN1081 tcp WinHole [trojan] WinHole1082 tcp amt-esd-prot AMT-ESD-PROT1082 udp amt-esd-prot AMT-ESD-PROT

1082 tcp WinHole [trojan] WinHole1083 tcp ansoft-lm-1 Anasoft License Manager1083 udp ansoft-lm-1 Anasoft License Manager1083 tcp WinHole [trojan] WinHole1084 tcp ansoft-lm-2 Anasoft License Manager1084 udp ansoft-lm-2 Anasoft License Manager1085 tcp webobjects Web Objects1085 udp webobjects Web Objects1086 tcp cplscrambler-lg CPL Scrambler Logging1086 udp cplscrambler-lg CPL Scrambler Logging1087 tcp cplscrambler-in CPL Scrambler Internal1087 udp cplscrambler-in CPL Scrambler Internal1088 tcp cplscrambler-al CPL Scrambler Alarm Log1088 udp cplscrambler-al CPL Scrambler Alarm Log1089 tcp ff-annunc FF Annunciation1089 udp ff-annunc FF Annunciation1090 tcp ff-fms FF Fieldbus Message Specification1090 udp ff-fms FF Fieldbus Message Specification1090 tcp Xtreme [trojan] Xtreme1091 tcp ff-sm FF System Management1091 udp ff-sm FF System Management1092 tcp obrpd OBRPD1092 udp obrpd OBRPD1093 tcp proofd PROOFD1093 udp proofd PROOFD1094 tcp rootd ROOTD1094 udp rootd ROOTD1095 tcp nicelink NICELink1095 udp nicelink NICELink1095 tcp RAT [trojan] Remote Administration Tool - RAT1096 tcp cnrprotocol Common Name Resolution Protocol1096 udp cnrprotocol Common Name Resolution Protocol1097 tcp RAT [trojan] Remote Administration Tool - RAT1097 tcp sunclustermgr Sun Cluster Manager1097 udp sunclustermgr Sun Cluster Manager1098 tcp RAT [trojan] Remote Administration Tool - RAT1098 tcp rmiactivation RMI Activation1098 udp rmiactivation RMI Activation1099 tcp rmiregistry RMI Registry1099 udp rmiregistry RMI Registry1099 tcp BloodFestEvolution [trojan] Blood Fest Evolution1099 tcp RAT [trojan] Remote Administration Tool - RAT1100 tcp mctp MCTP1100 udp mctp MCTP1101 tcp pt2-discover PT2-DISCOVER1101 udp pt2-discover PT2-DISCOVER

1102 tcp adobeserver-1 ADOBE SERVER 11102 udp adobeserver-1 ADOBE SERVER 11103 tcp adobeserver-2 ADOBE SERVER 21103 udp adobeserver-2 ADOBE SERVER 21103 tcp xaudio Xaserver X Audio Server1104 tcp xrl XRL1104 udp xrl XRL1104 udp RexxRave [trojan] RexxRave1105 tcp ftranhc FTRANHC1105 udp ftranhc FTRANHC1106 tcp isoipsigport-1 ISOIPSIGPORT-11106 udp isoipsigport-1 ISOIPSIGPORT-11107 tcp isoipsigport-2 ISOIPSIGPORT-21107 udp isoipsigport-2 ISOIPSIGPORT-21108 tcp ratio-adp ratio-adp1108 udp ratio-adp ratio-adp1109 tcp kpop Pop with Kerberos1110 tcp nfsd-status Cluster status info1110 udp nfsd-keepalive Client status info1111 tcp lmsocialserver LM Social Server1111 udp lmsocialserver LM Social Server1112 tcp icp Intelligent Communication Protocol1112 udp icp Intelligent Communication Protocol1112 tcp msql mini-sql server1114 tcp mini-sql Mini SQL1114 udp mini-sql Mini SQL1115 tcp ardus-trns ARDUS Transfer1115 udp ardus-trns ARDUS Transfer1116 tcp ardus-cntl ARDUS Control1116 udp ardus-cntl ARDUS Control1117 tcp ardus-mtrns ARDUS Multicast Transfer1117 udp ardus-mtrns ARDUS Multicast Transfer1122 tcp availant-mgr availant-mgr1122 udp availant-mgr availant-mgr1123 tcp murray Murray1123 udp murray Murray1127 tcp supfiledbg SUP debugging1150 tcp Orion [trojan] Orion1151 tcp Orion [trojan] Orion1155 tcp nfa Network File Access1155 udp nfa Network File Access1161 tcp health-polling Health Polling1161 udp health-polling Health Polling1162 tcp health-trap Health Trap1162 udp health-trap Health Trap1167 udp phone conference calling1169 tcp tripwire TRIPWIRE1169 udp tripwire TRIPWIRE1170 tcp PsyberStreamServer [trojan] Psyber Stream Server - PSS

1170 tcp StreamingAudioServer [trojan] Streaming Audio Server1170 tcp Voice [trojan] Voice1174 tcp DaCryptic [trojan] DaCryptic1178 tcp skkserv SKK (kanji input)1180 tcp mc-client Millicent Client Proxy1180 udp mc-client Millicent Client Proxy1180 tcp Unin68 [trojan] Unin681183 tcp laplink-ssl LapLink Surf-up SSL1184 tcp laplink LapLink Surf-up1185 tcp catchpole Catchpole port1185 udp catchpole Catchpole port1188 tcp hp-webadmin HP Web Admin1188 udp hp-webadmin HP Web Admin1199 tcp dmidi DMIDI1199 udp dmidi DMIDI1200 tcp scol SCOL1200 udp scol SCOL1200 udp NoBackO [trojan] NoBackO1201 tcp nucleus-sand Nucleus Sand1201 udp nucleus-sand Nucleus Sand1201 udp NoBackO [trojan] NoBackO1202 tcp caiccipc caiccipc1202 udp caiccipc caiccipc1203 tcp ssslic-mgr License Validation1203 udp ssslic-mgr License Validation1204 tcp ssslog-mgr Log Request Listener1204 udp ssslog-mgr Log Request Listener1205 tcp accord-mgc Accord-MGC1205 udp accord-mgc Accord-MGC1206 tcp anthony-data Anthony Data1206 udp anthony-data Anthony Data1207 tcp metasage MetaSage1207 udp metasage MetaSage1207 tcp SoftWAR [trojan] SoftWAR1208 tcp seagull-ais SEAGULL AIS1208 udp seagull-ais SEAGULL AIS1208 tcp Infector [trojan] Infector1209 tcp ipcd3 IPCD31209 udp ipcd3 IPCD31210 tcp eoss EOSS1210 udp eoss EOSS1211 tcp groove-dpp Groove DPP1211 udp groove-dpp Groove DPP1212 tcp lupa 1212 udp lupa 1212 tcp Kaos [trojan] Kaos1213 tcp mpc-lifenet MPC LIFENET1213 udp mpc-lifenet MPC LIFENET1214 tcp kazaa KAZAA file sharing app

1214 udp kazaa KAZAA file sharing app1214 tcp Morpheous Morpheous file sharing app1214 udp Morpheous Morpheous file sharing app1214 tcp Grokster Grokster file sharing app1214 udp Grokster Grokster file sharing app1215 tcp scanstat-1 scanSTAT 1.01215 udp scanstat-1 scanSTAT 1.01216 tcp etebac5 ETEBAC 51216 udp etebac5 ETEBAC 51217 tcp hpss-ndapi HPSS-NDAPI1217 udp hpss-ndapi HPSS-NDAPI1218 tcp aeroflight-ads AeroFlight-ADs1218 udp aeroflight-ads AeroFlight-ADs1219 tcp aeroflight-ret AeroFlight-Ret1219 udp aeroflight-ret AeroFlight-Ret1220 tcp qt-serveradmin QT SERVER ADMIN1220 udp qt-serveradmin QT SERVER ADMIN1221 tcp sweetware-apps SweetWARE Apps1221 udp sweetware-apps SweetWARE Apps1222 tcp nerv SNI R&D network1222 udp nerv SNI R&D network1223 tcp tgp TGP1223 udp tgp TGP1224 tcp vpnz VPNz1224 udp vpnz VPNz1225 tcp slinkysearch SLINKYSEARCH1225 udp slinkysearch SLINKYSEARCH1226 tcp stgxfws STGXFWS1226 udp stgxfws STGXFWS1227 tcp dns2go DNS2Go1227 udp dns2go DNS2Go1228 tcp florence FLORENCE1228 udp florence FLORENCE1229 tcp novell-zfs Novell ZFS1229 udp novell-zfs Novell ZFS1230 tcp periscope Periscope1230 udp periscope Periscope1231 tcp menandmice-lpm menandmice-lpm1231 udp menandmice-lpm menandmice-lpm1233 tcp univ-appserver Universal App Server1233 udp univ-appserver Universal App Server1234 tcp search-agent Infoseek Search Agent1234 udp search-agent Infoseek Search Agent1234 tcp hotline HotLine1234 tcp SubSevenJavaclient [trojan] SubSeven Java client1234 tcp UltorsTrojan [trojan] Ultors Trojan1235 tcp mosaicsyssvc1 mosaicsyssvc11235 udp mosaicsyssvc1 mosaicsyssvc11236 tcp bvcontrol bvcontrol1236 udp bvcontrol bvcontrol

1237 tcp tsdos390 tsdos3901237 udp tsdos390 tsdos3901238 tcp hacl-qs hacl-qs1238 udp hacl-qs hacl-qs1239 tcp nmsd NMSD1239 udp nmsd NMSD1240 tcp instantia Instantia1240 udp instantia Instantia1241 tcp msg remote message server1241 tcp nessus nessus1241 udp nessus nessus1242 tcp nmasoverip NMAS over IP1242 udp nmasoverip NMAS over IP1243 tcp BackDoor-G [trojan] BackDoor-G1243 tcp serialgateway SerialGateway1243 udp serialgateway SerialGateway1243 tcp SubSevenApocalypse [trojan] SubSeven Apocalypse1243 tcp SubSeven [trojan] SubSeven1243 tcp Tiles [trojan] Tiles1244 tcp isbconference1 isbconference11244 udp isbconference1 isbconference11245 tcp isbconference2 isbconference21245 udp isbconference2 isbconference21245 tcp VooDooDoll [trojan] VooDoo Doll1246 tcp payrouter payrouter1246 udp payrouter payrouter1247 tcp visionpyramid VisionPyramid1247 udp visionpyramid VisionPyramid1248 tcp hermes hermes1248 udp hermes hermes1249 tcp mesavistaco Mesa Vista Co1249 udp mesavistaco Mesa Vista Co1250 tcp swldy-sias swldy-sias1250 udp swldy-sias swldy-sias1251 tcp servergraph servergraph1251 udp servergraph servergraph1252 tcp bspne-pcc bspne-pcc1252 udp bspne-pcc bspne-pcc1253 tcp q55-pcc q55-pcc1253 udp q55-pcc q55-pcc1254 tcp de-noc de-noc1254 udp de-noc de-noc1255 tcp de-cache-query de-cache-query1255 udp de-cache-query de-cache-query1255 tcp Scarab [trojan] Scarab1256 tcp de-server de-server1256 udp de-server de-server1256 tcp ProjectnEXT [trojan] Project nEXT1256 tcp RexxRave [trojan] RexxRave

1257 tcp shockwave2 Shockwave 21257 udp shockwave2 Shockwave 21258 tcp opennl Open Network Library1258 udp opennl Open Network Library1259 tcp opennl-voice Open Network Library Voice1259 udp opennl-voice Open Network Library Voice1260 tcp ibm-ssd ibm-ssd1260 udp ibm-ssd ibm-ssd1261 tcp mpshrsv mpshrsv1261 udp mpshrsv mpshrsv1262 tcp qnts-orb QNTS-ORB1262 udp qnts-orb QNTS-ORB1263 tcp dka dka1263 udp dka dka1264 tcp prat PRAT1264 udp prat PRAT1265 tcp dssiapi DSSIAPI1265 udp dssiapi DSSIAPI1266 tcp dellpwrappks DELLPWRAPPKS1266 udp dellpwrappks DELLPWRAPPKS1267 tcp pcmlinux pcmlinux1267 udp pcmlinux pcmlinux1268 tcp propel-msgsys PROPEL-MSGSYS1268 udp propel-msgsys PROPEL-MSGSYS1269 tcp watilapp WATiLaPP1269 udp watilapp WATiLaPP1269 tcp Matrix [trojan] Matrix1270 tcp opsman opsman1270 udp opsman opsman1271 tcp dabew Dabew1271 udp dabew Dabew1272 tcp cspmlockmgr CSPMLockMgr1272 udp cspmlockmgr CSPMLockMgr1272 tcp TheMatrix [trojan] The Matrix1273 tcp emc-gateway EMC-Gateway1273 udp emc-gateway EMC-Gateway1274 tcp t1distproc t1distproc1274 udp t1distproc t1distproc1275 tcp ivcollector ivcollector1275 udp ivcollector ivcollector1276 tcp ivmanager ivmanager1276 udp ivmanager ivmanager1277 tcp miva-mqs mqs1277 udp miva-mqs mqs1278 tcp dellwebadmin-1 Dell Web Admin 11278 udp dellwebadmin-1 Dell Web Admin 11279 tcp dellwebadmin-2 Dell Web Admin 21279 udp dellwebadmin-2 Dell Web Admin 21280 tcp pictrography Pictrography1280 udp pictrography Pictrography

1281 tcp healthd healthd1281 udp healthd healthd1282 tcp emperion Emperion1282 udp emperion Emperion1283 tcp productinfo ProductInfo1283 udp productinfo ProductInfo1284 tcp iee-qfx IEE-QFX1284 udp iee-qfx IEE-QFX1285 tcp neoiface neoiface1285 udp neoiface neoiface1286 tcp netuitive netuitive1286 udp netuitive netuitive1288 tcp navbuddy NavBuddy1288 udp navbuddy NavBuddy1289 tcp jwalkserver JWalkServer1289 udp jwalkserver JWalkServer1290 tcp winjaserver WinJaServer1290 udp winjaserver WinJaServer1291 tcp seagulllms SEAGULLLMS1291 udp seagulllms SEAGULLLMS1292 tcp dsdn dsdn1292 udp dsdn dsdn1293 tcp pkt-krb-ipsec PKT-KRB-IPSec1293 udp pkt-krb-ipsec PKT-KRB-IPSec1294 tcp cmmdriver CMMdriver1294 udp cmmdriver CMMdriver1295 tcp ehtp End-by-Hop Transmission Protocol1295 udp ehtp End-by-Hop Transmission Protocol1296 tcp dproxy dproxy1296 udp dproxy dproxy1297 tcp sdproxy sdproxy1297 udp sdproxy sdproxy1298 tcp lpcp lpcp1298 udp lpcp lpcp1299 tcp hp-sci hp-sci1299 udp hp-sci hp-sci1300 tcp h323hostcallsc H323 Host Call Secure1300 udp h323hostcallsc H323 Host Call Secure1301 tcp ci3-software-1 CI3-Software-11301 udp ci3-software-1 CI3-Software-11302 tcp ci3-software-2 CI3-Software-21302 udp ci3-software-2 CI3-Software-21303 tcp sftsrv sftsrv1303 udp sftsrv sftsrv1304 tcp boomerang Boomerang1304 udp boomerang Boomerang1305 tcp pe-mike pe-mike1305 udp pe-mike pe-mike1306 tcp re-conn-proto RE-Conn-Proto1306 udp re-conn-proto RE-Conn-Proto

1307 tcp pacmand Pacmand1307 udp pacmand Pacmand1308 tcp odsi Optical Domain Service Interconnect (ODSI)1308 udp odsi Optical Domain Service Interconnect (ODSI)1309 tcp jtag-server JTAG server1309 udp jtag-server JTAG server1310 tcp husky Husky1310 udp husky Husky1311 tcp rxmon RxMon1311 udp rxmon RxMon1312 tcp sti-envision STI Envision1312 udp sti-envision STI Envision1313 tcp bmc_patroldb BMC_PATROLDB1313 udp bmc_patroldb BMC_PATROLDB1313 tcp NETrojan [trojan] NETrojan1314 tcp pdps Photoscript Distributed Printing System1314 udp pdps Photoscript Distributed Printing System1315 tcp els els1315 udp els els1316 tcp exbit-escp Exbit-ESCP1316 udp exbit-escp Exbit-ESCP1317 tcp vrts-ipcserver vrts-ipcserver1317 udp vrts-ipcserver vrts-ipcserver1318 tcp krb5gatekeeper krb5gatekeeper1318 udp krb5gatekeeper krb5gatekeeper1319 tcp panja-icsp Panja-ICSP1319 udp panja-icsp Panja-ICSP1320 tcp panja-axbnet Panja-AXBNET1320 udp panja-axbnet Panja-AXBNET1321 tcp pip PIP1321 udp pip PIP1322 tcp novation Novation1322 udp novation Novation1323 tcp brcd brcd1323 udp brcd brcd1324 tcp delta-mcp delta-mcp1324 udp delta-mcp delta-mcp1325 tcp dx-instrument DX-Instrument1325 udp dx-instrument DX-Instrument1326 tcp wimsic WIMSIC1326 udp wimsic WIMSIC1327 tcp ultrex Ultrex1327 udp ultrex Ultrex1328 tcp ewall EWALL1328 udp ewall EWALL1329 tcp netdb-export netdb-export1329 udp netdb-export netdb-export1330 tcp streetperfect StreetPerfect

1330 udp streetperfect StreetPerfect1331 tcp intersan intersan1331 udp intersan intersan1332 tcp pcia-rxp-b PCIA RXP-B1332 udp pcia-rxp-b PCIA RXP-B1333 tcp passwrd-policy Password Policy1333 udp passwrd-policy Password Policy1334 tcp writesrv writesrv1334 udp writesrv writesrv1335 tcp digital-notary Digital Notary Protocol1335 udp digital-notary Digital Notary Protocol1336 tcp ischat Instant Service Chat1336 udp ischat Instant Service Chat1337 tcp menandmice-dns menandmice DNS1337 tcp Shadyshell [trojan] Shadyshell1337 udp menandmice-dns menandmice DNS1338 tcp wmc-log-svc WMC-log-svr1338 udp wmc-log-svc WMC-log-svr1338 tcp MillenniumWorm [trojan] Millennium Worm1339 tcp kjtsiteserver kjtsiteserver1339 udp kjtsiteserver kjtsiteserver1340 tcp naap NAAP1340 udp naap NAAP1341 tcp qubes QuBES1341 udp qubes QuBES1342 tcp esbroker ESBroker1342 udp esbroker ESBroker1343 tcp re101 re1011343 udp re101 re1011344 tcp icap ICAP1344 udp icap ICAP1345 tcp vpjp VPJP1345 udp vpjp VPJP1345 udp ghost-server Symantec Ghost multicast (server)1346 tcp alta-ana-lm Alta Analytics License Manager1346 udp alta-ana-lm Alta Analytics License Manager1346 udp ghost-client Symantec Ghost multicast (client)1347 tcp bbn-mmc multi media conferencing1347 udp bbn-mmc multi media conferencing1348 tcp bbn-mmx multi media conferencing1348 udp bbn-mmx multi media conferencing1349 tcp sbook Registration Network Protocol1349 udp sbook Registration Network Protocol1349 tcp BODLL [trojan] BO DLL1349 udp BODLL [trojan] BO DLL1350 tcp editbench Registration Network Protocol1350 udp editbench Registration Network Protocol1351 tcp equationbuilder Digital Tool Works (MIT)1351 udp equationbuilder Digital Tool Works (MIT)1352 tcp lotusnote Lotus Note

1352 udp lotusnote Lotus Note1353 tcp relief Relief Consulting1353 udp relief Relief Consulting1354 tcp rightbrain RightBrain Software1354 udp rightbrain RightBrain Software1355 tcp intuitive-edge Intuitive Edge1355 udp intuitive-edge Intuitive Edge1356 tcp cuillamartin CuillaMartin Company1356 udp cuillamartin CuillaMartin Company1357 tcp pegboard Electronic PegBoard1357 udp pegboard Electronic PegBoard1358 tcp connlcli CONNLCLI1358 udp connlcli CONNLCLI1359 tcp ftsrv FTSRV1359 udp ftsrv FTSRV1360 tcp mimer MIMER1360 udp mimer MIMER1361 tcp linx LinX1361 udp linx LinX1362 tcp timeflies TimeFlies1362 udp timeflies TimeFlies1363 tcp ndm-requester Network DataMover Requester1363 udp ndm-requester Network DataMover Requester1364 tcp ndm-server Network DataMover Server1364 udp ndm-server Network DataMover Server1365 tcp adapt-sna Network Software Associates1365 udp adapt-sna Network Software Associates1366 tcp netware-csp Novell NetWare Comm Service Platform1366 udp netware-csp Novell NetWare Comm Service Platform1367 tcp dcs DCS1367 udp dcs DCS1368 tcp screencast ScreenCast1368 udp screencast ScreenCast1369 tcp gv-us GlobalView to Unix Shell1369 udp gv-us GlobalView to Unix Shell1370 tcp us-gv Unix Shell to GlobalView1370 udp us-gv Unix Shell to GlobalView1371 tcp fc-cli Fujitsu Config Protocol1371 udp fc-cli Fujitsu Config Protocol1372 tcp fc-ser Fujitsu Config Protocol1372 udp fc-ser Fujitsu Config Protocol1373 tcp chromagrafx Chromagrafx1373 udp chromagrafx Chromagrafx1374 tcp molly EPI Software Systems1374 udp molly EPI Software Systems1375 tcp bytex Bytex1375 udp bytex Bytex1376 tcp ibm-pps IBM Person to Person Software

1376 udp ibm-pps IBM Person to Person Software1377 tcp cichlid Cichlid License Manager1377 udp cichlid Cichlid License Manager1378 tcp elan Elan License Manager1378 udp elan Elan License Manager1379 tcp dbreporter Integrity Solutions1379 udp dbreporter Integrity Solutions1380 tcp telesis-licman Telesis Network License Manager1380 udp telesis-licman Telesis Network License Manager1381 tcp apple-licman Apple Network License Manager1381 udp apple-licman Apple Network License Manager1382 tcp udt_os udt_os1382 udp udt_os udt_os1383 tcp gwha GW Hannaway Network License Manager1383 udp gwha GW Hannaway Network License Manager1384 tcp os-licman Objective Solutions License Manager1384 udp os-licman Objective Solutions License Manager1385 tcp atex_elmd Atex Publishing License Manager1385 udp atex_elmd Atex Publishing License Manager1386 tcp checksum CheckSum License Manager1386 tcp Dagger [trojan] Dagger1386 udp checksum CheckSum License Manager1387 tcp cadsi-lm Computer Aided Design Software Inc LM1387 udp cadsi-lm Computer Aided Design Software Inc LM1388 tcp objective-dbc Objective Solutions DataBase Cache1388 udp objective-dbc Objective Solutions DataBase Cache1389 tcp iclpv-dm Document Manager1389 udp iclpv-dm Document Manager1390 tcp iclpv-sc Storage Controller1390 udp iclpv-sc Storage Controller1391 tcp iclpv-sas Storage Access Server1391 udp iclpv-sas Storage Access Server1392 tcp iclpv-pm Print Manager1392 udp iclpv-pm Print Manager1393 tcp iclpv-nls Network Log Server1393 udp iclpv-nls Network Log Server1394 tcp iclpv-nlc Network Log Client1394 udp iclpv-nlc Network Log Client1394 tcp GoFriller [trojan] GoFriller1395 tcp iclpv-wsm PC Workstation Manager software1395 udp iclpv-wsm PC Workstation Manager software1396 tcp dvl-activemail DVL Active Mail1396 udp dvl-activemail DVL Active Mail1397 tcp audio-activmail Audio Active Mail1397 udp audio-activmail Audio Active Mail1398 tcp video-activmail Video Active Mail

1398 udp video-activmail Video Active Mail1399 tcp cadkey-licman Cadkey License Manager1399 udp cadkey-licman Cadkey License Manager1400 tcp cadkey-tablet Cadkey Tablet Daemon1400 udp cadkey-tablet Cadkey Tablet Daemon1401 tcp goldleaf-licman Goldleaf License Manager1401 udp goldleaf-licman Goldleaf License Manager1402 tcp prm-sm-np Prospero Resource Manager1402 udp prm-sm-np Prospero Resource Manager1403 tcp prm-nm-np Prospero Resource Manager1403 udp prm-nm-np Prospero Resource Manager1404 tcp igi-lm Infinite Graphics License Manager1404 udp igi-lm Infinite Graphics License Manager1405 tcp ibm-res IBM Remote Execution Starter1405 udp ibm-res IBM Remote Execution Starter1406 tcp netlabs-lm NetLabs License Manager1406 udp netlabs-lm NetLabs License Manager1407 tcp dbsa-lm DBSA License Manager1407 udp dbsa-lm DBSA License Manager1408 tcp sophia-lm Sophia License Manager1408 udp sophia-lm Sophia License Manager1409 tcp here-lm Here License Manager1409 udp here-lm Here License Manager1410 tcp hiq HiQ License Manager1410 udp hiq HiQ License Manager1411 tcp af AudioFile1411 udp af AudioFile1412 tcp innosys InnoSys1412 udp innosys InnoSys1413 tcp innosys-acl InnoSys-ACL1413 udp innosys-acl InnoSys-ACL1414 tcp ibm-mqseries IBM MQSeries1414 udp ibm-mqseries IBM MQSeries1415 tcp dbstar DBStar1415 udp dbstar DBStar1416 tcp novell-lu6.2 Novell LU6.21416 udp novell-lu6.2 Novell LU6.21417 tcp timbuktu-srv1 Timbuktu Service 1 Port1417 udp timbuktu-srv1 Timbuktu Service 1 Port1418 tcp timbuktu-srv2 Timbuktu Service 2 Port1418 udp timbuktu-srv2 Timbuktu Service 2 Port1419 tcp timbuktu-srv3 Timbuktu Service 3 Port1419 udp timbuktu-srv3 Timbuktu Service 3 Port1420 tcp timbuktu-srv4 Timbuktu Service 4 Port1420 udp timbuktu-srv4 Timbuktu Service 4 Port1421 tcp gandalf-lm Gandalf License Manager1421 udp gandalf-lm Gandalf License Manager1422 tcp autodesk-lm Autodesk License Manager1422 udp autodesk-lm Autodesk License Manager1423 tcp essbase Essbase Arbor Software

1423 udp essbase Essbase Arbor Software1424 tcp hybrid Hybrid Encryption Protocol1424 udp hybrid Hybrid Encryption Protocol1425 tcp zion-lm Zion Software License Manager1425 udp zion-lm Zion Software License Manager1426 tcp sais Satellite-data Acquisition System 11426 udp sais Satellite-data Acquisition System 11427 tcp mloadd mloadd monitoring tool1427 udp mloadd mloadd monitoring tool1428 tcp informatik-lm Informatik License Manager1428 udp informatik-lm Informatik License Manager1429 tcp nms Hypercom NMS1429 udp nms Hypercom NMS1430 tcp tpdu Hypercom TPDU1430 udp tpdu Hypercom TPDU1431 tcp rgtp Reverse Gossip Transport1431 udp rgtp Reverse Gossip Transport1432 tcp blueberry-lm Blueberry Software License Manager1432 udp blueberry-lm Blueberry Software License Manager1433 tcp ms-sql-s Microsoft-SQL-Server1433 udp ms-sql-s Microsoft-SQL-Server1434 tcp ms-sql-m Microsoft-SQL-Monitor1434 udp ms-sql-m Microsoft-SQL-Monitor1435 tcp ibm-cics IBM CICS1435 udp ibm-cics IBM CICS1436 tcp saism Satellite-data Acquisition System 21436 udp saism Satellite-data Acquisition System 21437 tcp tabula Tabula1437 udp tabula Tabula1438 tcp eicon-server Eicon Security Agent Server1438 udp eicon-server Eicon Security Agent Server1439 tcp eicon-x25 Eicon X25 SNA Gateway1439 udp eicon-x25 Eicon X25 SNA Gateway1440 tcp eicon-slp Eicon Service Location Protocol1440 udp eicon-slp Eicon Service Location Protocol1441 tcp cadis-1 Cadis License Management1441 udp cadis-1 Cadis License Management1441 tcp RemoteStorm [trojan] Remote Storm1442 tcp cadis-2 Cadis License Management1442 udp cadis-2 Cadis License Management1443 tcp ies-lm Integrated Engineering Software1443 udp ies-lm Integrated Engineering Software1444 tcp marcam-lm Marcam License Management1444 udp marcam-lm Marcam License Management1445 tcp proxima-lm Proxima License Manager1445 udp proxima-lm Proxima License Manager1446 tcp ora-lm Optical Research Associates License Manager1446 udp ora-lm Optical Research Associates License Manager

1447 tcp apri-lm Applied Parallel Research LM1447 udp apri-lm Applied Parallel Research LM1448 tcp oc-lm OpenConnect License Manager1448 udp oc-lm OpenConnect License Manager1449 tcp peport PEport1449 udp peport PEport1450 tcp dwf Tandem Distributed Workbench Facility1450 udp dwf Tandem Distributed Workbench Facility1451 tcp infoman IBM Information Management1451 udp infoman IBM Information Management1452 tcp gtegsc-lm GTE Government Systems License Man1452 udp gtegsc-lm GTE Government Systems License Man1453 tcp genie-lm Genie License Manager1453 udp genie-lm Genie License Manager1454 tcp interhdl_elmd interHDL License Manager1454 udp interhdl_elmd interHDL License Manager1455 tcp esl-lm ESL License Manager1455 udp esl-lm ESL License Manager1456 tcp dca DCA1456 udp dca DCA1457 tcp valisys-lm Valisys License Manager1457 udp valisys-lm Valisys License Manager1458 tcp nrcabq-lm Nichols Research Corp.1458 udp nrcabq-lm Nichols Research Corp.1459 tcp proshare1 Proshare Notebook Application1459 udp proshare1 Proshare Notebook Application1460 tcp proshare2 Proshare Notebook Application1460 udp proshare2 Proshare Notebook Application1461 tcp ibm_wrless_lan IBM Wireless LAN1461 udp ibm_wrless_lan IBM Wireless LAN1462 tcp world-lm World License Manager1462 udp world-lm World License Manager1463 tcp nucleus Nucleus1463 udp nucleus Nucleus1464 tcp msl_lmd MSL License Manager1464 udp msl_lmd MSL License Manager1465 tcp pipes Pipes Platform1465 udp pipes Pipes Platform1466 tcp oceansoft-lm Ocean Software License Manager1466 udp oceansoft-lm Ocean Software License Manager1467 tcp csdmbase CSDMBASE1467 udp csdmbase CSDMBASE1468 tcp csdm CSDM1468 udp csdm CSDM1469 tcp aal-lm Active Analysis Limited License Manager1469 udp aal-lm Active Analysis Limited License Manager

1470 tcp uaiact Universal Analytics1470 udp uaiact Universal Analytics1471 tcp csdmbase CSDMBASE1471 udp csdmbase CSDMBASE1472 tcp csdm CSDM1472 udp csdm CSDM1473 tcp openmath OpenMath1473 udp openmath OpenMath1474 tcp telefinder Telefinder1474 udp telefinder Telefinder1475 tcp taligent-lm Taligent License Manager1475 udp taligent-lm Taligent License Manager1476 tcp clvm-cfg clvm-cfg1476 udp clvm-cfg clvm-cfg1477 tcp ms-sna-server ms-sna-server1477 udp ms-sna-server ms-sna-server1478 tcp ms-sna-base ms-sna-base1478 udp ms-sna-base ms-sna-base1479 tcp dberegister dberegister1479 udp dberegister dberegister1480 tcp pacerforum PacerForum1480 udp pacerforum PacerForum1481 tcp airs AIRS1481 udp airs AIRS1482 tcp miteksys-lm Miteksys License Manager1482 udp miteksys-lm Miteksys License Manager1483 tcp afs AFS License Manager1483 udp afs AFS License Manager1484 tcp confluent Confluent License Manager1484 udp confluent Confluent License Manager1485 tcp lansource LANSource1485 udp lansource LANSource1486 tcp nms_topo_serv nms_topo_serv1486 udp nms_topo_serv nms_topo_serv1487 tcp localinfosrvr LocalInfoSrvr1487 udp localinfosrvr LocalInfoSrvr1488 tcp docstor DocStor1488 udp docstor DocStor1489 tcp dmdocbroker dmdocbroker1489 udp dmdocbroker dmdocbroker1490 tcp insitu-conf insitu-conf1490 udp insitu-conf insitu-conf1491 tcp anynetgateway anynetgateway1491 udp anynetgateway anynetgateway1492 tcp stone-design-1 stone-design-11492 udp stone-design-1 stone-design-11492 tcp FTP99CMP [trojan] FTP99CMP1493 tcp netmap_lm netmap_lm1493 udp netmap_lm netmap_lm1494 tcp citrix-ica ica

1494 udp citrix-ica ica1494 tcp winframe WinFrame server1495 tcp cvc cvc1495 udp cvc cvc1496 tcp liberty-lm liberty-lm1496 udp liberty-lm liberty-lm1497 tcp rfx-lm rfx-lm1497 udp rfx-lm rfx-lm1498 tcp sybase-sqlany Sybase SQL Any1498 udp sybase-sqlany Sybase SQL Any1498 tcp watcom-sql watcom-sql1498 udp watcom-sql watcom-sql1499 tcp fhc Federico Heinz Consultora1499 udp fhc Federico Heinz Consultora1500 tcp vlsi-lm VLSI License Manager1500 udp vlsi-lm VLSI License Manager1501 tcp saiscm Satellite-data Acquisition System 31501 udp saiscm Satellite-data Acquisition System 31502 tcp shivadiscovery Shiva1502 udp shivadiscovery Shiva1503 tcp imtc-mcs Databeam1503 tcp Netmeeting Microsoft Netmeeting1503 udp imtc-mcs Databeam1504 tcp evb-elm EVB Software Engineering License Manager1504 udp evb-elm EVB Software Engineering License Manager1505 tcp funkproxy Funk Software Inc.1505 udp funkproxy Funk Software Inc.1506 tcp utcd Universal Time daemon (utcd)1506 udp utcd Universal Time daemon (utcd)1507 tcp symplex symplex1507 udp symplex symplex1508 tcp diagmond diagmond1508 udp diagmond diagmond1509 tcp robcad-lm Robcad Ltd. License Manager1509 udp robcad-lm Robcad Ltd. License Manager1509 tcp PsyberStreamingServer [trojan] Psyber StreamingServer1510 tcp mvx-lm Midland Valley Exploration Ltd. Lic. Man.1510 udp mvx-lm Midland Valley Exploration Ltd. Lic. Man.1511 tcp 3l-l1 3l-l11511 udp 3l-l1 3l-l11512 tcp wins Microsoft's Windows Internet Name Service1512 udp wins Microsoft's Windows Internet Name Service1513 tcp fujitsu-dtc Fujitsu Systems Business of America Inc

1513 udp fujitsu-dtc Fujitsu Systems Business of America Inc1514 tcp fujitsu-dtcns Fujitsu Systems Business of America Inc1514 udp fujitsu-dtcns Fujitsu Systems Business of America Inc1515 tcp ifor-protocol ifor-protocol1515 udp ifor-protocol ifor-protocol1516 tcp vpad Virtual Places Audio data1516 udp vpad Virtual Places Audio data1517 tcp vpac Virtual Places Audio control1517 udp vpac Virtual Places Audio control1518 tcp vpvd Virtual Places Video data1518 udp vpvd Virtual Places Video data1519 tcp vpvc Virtual Places Video control1519 udp vpvc Virtual Places Video control1520 tcp atm-zip-office atm zip office1520 udp atm-zip-office atm zip office1521 tcp ncube-lm nCube License Manager1521 tcp oracle Oracle 8 SQL (default)1521 tcp oracle-tns TNS Listener1521 udp ncube-lm nCube License Manager1522 tcp ricardo-lm Ricardo North America License Manager1522 udp ricardo-lm Ricardo North America License Manager1523 tcp cichild-lm cichild-lm1523 udp cichild-lm cichild-lm1524 tcp ingreslock ingres1524 udp ingreslock ingres1524 tcp Trinoo [trojan] Trinoo1525 tcp orasrv oracle1525 tcp prospero-np Prospero Directory Service non-priv1525 udp prospero-np Prospero Directory Service non-priv1525 udp orasrv oracle1526 tcp pdap-np Prospero Data Access Prot non-priv1526 udp pdap-np Prospero Data Access Prot non-priv1527 tcp tlisrv oracle1527 udp tlisrv oracle1528 tcp mciautoreg mciautoreg1528 udp mciautoreg mciautoreg1529 tcp support prmsd gnatsd cygnus bug tracker1529 tcp coauthor oracle1529 udp coauthor oracle1530 tcp rap-service rap-service1530 udp rap-service rap-service1531 tcp rap-listen rap-listen1531 udp rap-listen rap-listen1532 tcp miroconnect microconnect1532 udp miroconnect microconnect

1533 tcp virtual-places Virtual Places Software1533 udp virtual-places Virtual Places Software1534 tcp micromuse-lm micromuse-lm1534 udp micromuse-lm micromuse-lm1535 tcp ampr-info ampr-info1535 udp ampr-info ampr-info1536 tcp ampr-inter ampr-inter1536 udp ampr-inter ampr-inter1536 tcp W32bckdr W32bckdr -- Open Source Windows backdoor1537 tcp sdsc-lm isi-lm1537 udp sdsc-lm isi-lm1538 tcp 3ds-lm 3ds-lm1538 udp 3ds-lm 3ds-lm1539 tcp intellistor-lm Intellistor License Manager1539 udp intellistor-lm Intellistor License Manager1540 tcp rds rds1540 udp rds rds1541 tcp rds2 rds21541 udp rds2 rds21542 tcp gridgen-elmd gridgen-elmd1542 udp gridgen-elmd gridgen-elmd1543 tcp simba-cs simba-cs1543 udp simba-cs simba-cs1544 tcp aspeclmd aspeclmd1544 udp aspeclmd aspeclmd1545 tcp vistium-share vistium-share1545 udp vistium-share vistium-share1546 tcp abbaccuray abbaccuray1546 udp abbaccuray abbaccuray1547 tcp laplink laplink1547 udp laplink laplink1548 tcp axon-lm Axon License Manager1548 udp axon-lm Axon License Manager1549 tcp shivahose Shiva Hose1549 udp shivasound Shiva Sound1550 tcp 3m-image-lm Image Storage license manager 3M Company1550 udp 3m-image-lm Image Storage license manager 3M Company1551 tcp hecmtl-db HECMTL-DB1551 udp hecmtl-db HECMTL-DB1552 tcp pciarray pciarray1552 udp pciarray pciarray1553 tcp sna-cs sna-cs1553 udp sna-cs sna-cs1554 tcp caci-lm CACI Products Company License Manager1554 udp caci-lm CACI Products Company License Manager

1555 tcp livelan livelan1555 udp livelan livelan1556 tcp ashwin AshWin CI Tecnologies1556 udp ashwin AshWin CI Tecnologies1557 tcp arbortext-lm ArborText License Manager1557 udp arbortext-lm ArborText License Manager1558 tcp xingmpeg xingmpeg1558 udp xingmpeg xingmpeg1559 tcp web2host web2host1559 udp web2host web2host1560 tcp asci-val asci-val1560 udp asci-val asci-val1561 tcp facilityview facilityview1561 udp facilityview facilityview1562 tcp pconnectmgr pconnectmgr1562 udp pconnectmgr pconnectmgr1563 tcp cadabra-lm Cadabra License Manager1563 udp cadabra-lm Cadabra License Manager1564 tcp pay-per-view Pay-Per-View1564 udp pay-per-view Pay-Per-View1565 tcp winddlb WinDD1565 udp winddlb WinDD1566 tcp corelvideo CORELVIDEO1566 udp corelvideo CORELVIDEO1567 tcp jlicelmd jlicelmd1567 udp jlicelmd jlicelmd1568 tcp tsspmap tsspmap1568 udp tsspmap tsspmap1568 tcp RemoteHack [trojan] Remote Hack1569 tcp ets ets1569 udp ets ets1570 tcp orbixd Orbix1570 udp orbixd Orbix1571 tcp rdb-dbs-disp Oracle Remote Data Base1571 udp rdb-dbs-disp Oracle Remote Data Base1572 tcp chip-lm Chipcom License Manager1572 udp chip-lm Chipcom License Manager1573 tcp itscomm-ns itscomm-ns1573 udp itscomm-ns itscomm-ns1574 tcp mvel-lm mvel-lm1574 udp mvel-lm mvel-lm1575 tcp oraclenames oraclenames1575 udp oraclenames oraclenames1576 tcp moldflow-lm moldflow-lm1576 udp moldflow-lm moldflow-lm1577 tcp hypercube-lm hypercube-lm1577 udp hypercube-lm hypercube-lm1578 tcp jacobus-lm Jacobus License Manager1578 udp jacobus-lm Jacobus License Manager1579 tcp ioc-sea-lm ioc-sea-lm

1579 udp ioc-sea-lm ioc-sea-lm1580 tcp tn-tl-r1 tn-tl-r11580 udp tn-tl-r2 tn-tl-r21581 tcp mil-2045-47001 MIL-2045-470011581 udp mil-2045-47001 MIL-2045-470011582 tcp msims MSIMS1582 udp msims MSIMS1583 tcp simbaexpress simbaexpress1583 udp simbaexpress simbaexpress1584 tcp tn-tl-fd2 tn-tl-fd21584 udp tn-tl-fd2 tn-tl-fd21585 tcp intv intv1585 udp intv intv1586 tcp ibm-abtact ibm-abtact1586 udp ibm-abtact ibm-abtact1587 tcp pra_elmd pra_elmd1587 udp pra_elmd pra_elmd1588 tcp triquest-lm triquest-lm1588 udp triquest-lm triquest-lm1589 tcp vqp VQP1589 udp vqp VQP1590 tcp gemini-lm gemini-lm1590 udp gemini-lm gemini-lm1591 tcp ncpm-pm ncpm-pm1591 udp ncpm-pm ncpm-pm1592 tcp commonspace commonspace1592 udp commonspace commonspace1593 tcp mainsoft-lm mainsoft-lm1593 udp mainsoft-lm mainsoft-lm1594 tcp sixtrak sixtrak1594 udp sixtrak sixtrak1595 tcp radio radio1595 udp radio radio1596 tcp radio-sm radio-sm1596 udp radio-bc radio-bc1597 tcp orbplus-iiop orbplus-iiop1597 udp orbplus-iiop orbplus-iiop1598 tcp picknfs picknfs1598 udp picknfs picknfs1599 tcp simbaservices simbaservices1599 udp simbaservices simbaservices1600 tcp issd issd1600 udp issd issd1600 tcp DirectConnection [trojan] Direct Connection1600 tcp ShivkaBurka [trojan] Shivka-Burka1601 tcp aas aas1601 udp aas aas1602 tcp inspect inspect1602 udp inspect inspect1603 tcp picodbc pickodbc

1603 udp picodbc pickodbc1604 tcp icabrowser icabrowser1604 udp icabrowser icabrowser1605 tcp slp Salutation Manager (Salutation Protocol)1605 udp slp Salutation Manager (Salutation Protocol)1606 tcp slm-api Salutation Manager (SLM-API)1606 udp slm-api Salutation Manager (SLM-API)1607 tcp stt stt1607 udp stt stt1608 tcp smart-lm Smart Corp. License Manager1608 udp smart-lm Smart Corp. License Manager1609 tcp isysg-lm isysg-lm1609 udp isysg-lm isysg-lm1610 tcp taurus-wh taurus-wh1610 udp taurus-wh taurus-wh1611 tcp ill Inter Library Loan1611 udp ill Inter Library Loan1612 tcp netbill-trans NetBill Transaction Server1612 udp netbill-trans NetBill Transaction Server1613 tcp netbill-keyrep NetBill Key Repository1613 udp netbill-keyrep NetBill Key Repository1614 tcp netbill-cred NetBill Credential Server1614 udp netbill-cred NetBill Credential Server1615 tcp netbill-auth NetBill Authorization Server1615 udp netbill-auth NetBill Authorization Server1616 tcp netbill-prod NetBill Product Server1616 udp netbill-prod NetBill Product Server1617 tcp nimrod-agent Nimrod Inter-Agent Communication1617 udp nimrod-agent Nimrod Inter-Agent Communication1618 tcp skytelnet skytelnet1618 udp skytelnet skytelnet1619 tcp xs-openstorage xs-openstorage1619 udp xs-openstorage xs-openstorage1620 tcp faxportwinport faxportwinport1620 udp faxportwinport faxportwinport1621 tcp softdataphone softdataphone1621 udp softdataphone softdataphone1622 tcp ontime ontime1622 udp ontime ontime1623 tcp jaleosnd jaleosnd1623 udp jaleosnd jaleosnd1624 tcp udp-sr-port udp-sr-port1624 udp udp-sr-port udp-sr-port1625 tcp svs-omagent svs-omagent1625 udp svs-omagent svs-omagent1626 tcp shockwave Shockwave1626 udp shockwave Shockwave1627 tcp t128-gateway T.128 Gateway1627 udp t128-gateway T.128 Gateway1628 tcp lontalk-norm LonTalk normal

1628 udp lontalk-norm LonTalk normal1629 tcp lontalk-urgnt LonTalk urgent1629 udp lontalk-urgnt LonTalk urgent1630 tcp oraclenet8cman Oracle Net8 Cman1630 udp oraclenet8cman Oracle Net8 Cman1631 tcp visitview Visit view1631 udp visitview Visit view1632 tcp pammratc PAMMRATC1632 udp pammratc PAMMRATC1633 tcp pammrpc PAMMRPC1633 udp pammrpc PAMMRPC1634 tcp loaprobe Log On America Probe1634 udp loaprobe Log On America Probe1635 tcp edb-server1 EDB Server 11635 udp edb-server1 EDB Server 11636 tcp cncp CableNet Control Protocol1636 udp cncp CableNet Control Protocol1637 tcp cnap CableNet Admin Protocol1637 udp cnap CableNet Admin Protocol1638 tcp cnip CableNet Info Protocol1638 udp cnip CableNet Info Protocol1639 tcp cert-initiator cert-initiator1639 udp cert-initiator cert-initiator1640 tcp cert-responder cert-responder1640 udp cert-responder cert-responder1641 tcp invision InVision1641 udp invision InVision1642 tcp isis-am isis-am1642 udp isis-am isis-am1643 tcp isis-ambc isis-ambc1643 udp isis-ambc isis-ambc1644 tcp saiseh Satellite-data Acquisition System 41645 tcp datametrics datametrics1645 udp datametrics datametrics1645 udp radius radius authentication1646 tcp sa-msg-port sa-msg-port1646 udp radacct radius accounting1646 udp sa-msg-port sa-msg-port1647 tcp rsap rsap1647 udp rsap rsap1648 tcp concurrent-lm concurrent-lm1648 udp concurrent-lm concurrent-lm1649 tcp kermit kermit1649 udp kermit kermit1650 tcp nkd nkd1650 udp nkd nkd1651 tcp shiva_confsrvr shiva_confsrvr1651 udp shiva_confsrvr shiva_confsrvr1652 tcp xnmp xnmp1652 udp xnmp xnmp

1653 tcp alphatech-lm alphatech-lm1653 udp alphatech-lm alphatech-lm1654 tcp stargatealerts stargatealerts1654 udp stargatealerts stargatealerts1655 tcp dec-mbadmin dec-mbadmin1655 udp dec-mbadmin dec-mbadmin1656 tcp dec-mbadmin-h dec-mbadmin-h1656 udp dec-mbadmin-h dec-mbadmin-h1657 tcp fujitsu-mmpdc fujitsu-mmpdc1657 udp fujitsu-mmpdc fujitsu-mmpdc1658 tcp sixnetudr sixnetudr1658 udp sixnetudr sixnetudr1659 tcp sg-lm Silicon Grail License Manager1659 udp sg-lm Silicon Grail License Manager1660 tcp skip-mc-gikreq skip-mc-gikreq1660 udp skip-mc-gikreq skip-mc-gikreq1661 tcp netview-aix-1 netview-aix-11661 udp netview-aix-1 netview-aix-11662 tcp netview-aix-2 netview-aix-21662 udp netview-aix-2 netview-aix-21663 tcp netview-aix-3 netview-aix-31663 udp netview-aix-3 netview-aix-31664 tcp netview-aix-4 netview-aix-41664 udp netview-aix-4 netview-aix-41665 tcp netview-aix-5 netview-aix-51665 udp netview-aix-5 netview-aix-51666 tcp netview-aix-6 netview-aix-61666 udp netview-aix-6 netview-aix-61667 tcp netview-aix-7 netview-aix-71667 udp netview-aix-7 netview-aix-71668 tcp netview-aix-8 netview-aix-81668 udp netview-aix-8 netview-aix-81669 tcp netview-aix-9 netview-aix-91669 udp netview-aix-9 netview-aix-91670 tcp netview-aix-10 netview-aix-101670 udp netview-aix-10 netview-aix-101671 tcp netview-aix-11 netview-aix-111671 udp netview-aix-11 netview-aix-111672 tcp netview-aix-12 netview-aix-121672 udp netview-aix-12 netview-aix-121673 tcp proshare-mc-1 Intel Proshare Multicast1673 udp proshare-mc-1 Intel Proshare Multicast1674 tcp proshare-mc-2 Intel Proshare Multicast1674 udp proshare-mc-2 Intel Proshare Multicast1675 tcp pdp Pacific Data Products1675 udp pdp Pacific Data Products1676 tcp netcomm1 netcomm11676 udp netcomm2 netcomm21677 tcp groupwise groupwise1677 udp groupwise groupwise

1678 tcp prolink prolink1678 udp prolink prolink1679 tcp darcorp-lm darcorp-lm1679 udp darcorp-lm darcorp-lm1680 tcp carboncopy Carbon Copy1680 tcp microcom-sbp microcom-sbp1680 udp microcom-sbp microcom-sbp1681 tcp sd-elmd sd-elmd1681 udp sd-elmd sd-elmd1682 tcp lanyon-lantern lanyon-lantern1682 udp lanyon-lantern lanyon-lantern1683 tcp ncpm-hip ncpm-hip1683 udp ncpm-hip ncpm-hip1684 tcp snaresecure SnareSecure1684 udp snaresecure SnareSecure1685 tcp n2nremote n2nremote1685 udp n2nremote n2nremote1686 tcp cvmon cvmon1686 udp cvmon cvmon1687 tcp nsjtp-ctrl nsjtp-ctrl1687 udp nsjtp-ctrl nsjtp-ctrl1688 tcp nsjtp-data nsjtp-data1688 udp nsjtp-data nsjtp-data1689 tcp firefox firefox1689 udp firefox firefox1690 tcp ng-umds ng-umds1690 udp ng-umds ng-umds1691 tcp empire-empuma empire-empuma1691 udp empire-empuma empire-empuma1692 tcp sstsys-lm sstsys-lm1692 udp sstsys-lm sstsys-lm1693 tcp rrirtr rrirtr1693 udp rrirtr rrirtr1694 tcp rrimwm rrimwm1694 udp rrimwm rrimwm1695 tcp rrilwm rrilwm1695 udp rrilwm rrilwm1696 tcp rrifmm rrifmm1696 udp rrifmm rrifmm1697 tcp rrisat rrisat1697 udp rrisat rrisat1698 tcp rsvp-encap-1 RSVP-ENCAPSULATION-11698 udp rsvp-encap-1 RSVP-ENCAPSULATION-11699 tcp rsvp-encap-2 RSVP-ENCAPSULATION-21699 udp rsvp-encap-2 RSVP-ENCAPSULATION-21700 tcp mps-raft mps-raft1700 udp mps-raft mps-raft1701 tcp l2f l2f1701 udp l2f l2f1702 tcp deskshare deskshare

1702 udp deskshare deskshare1703 tcp Exploiter [trojan] Exploiter1703 tcp hb-engine hb-engine1703 udp hb-engine hb-engine1704 tcp bcs-broker bcs-broker1704 udp bcs-broker bcs-broker1705 tcp slingshot slingshot1705 udp slingshot slingshot1706 tcp jetform jetform1706 udp jetform jetform1707 tcp vdmplay vdmplay1707 udp vdmplay vdmplay1708 tcp gat-lmd gat-lmd1708 udp gat-lmd gat-lmd1709 tcp centra centra1709 udp centra centra1710 tcp impera impera1710 udp impera impera1711 tcp pptconference pptconference1711 udp pptconference pptconference1712 tcp registrar resource monitoring service1712 udp registrar resource monitoring service1713 tcp conferencetalk ConferenceTalk1713 udp conferencetalk ConferenceTalk1714 tcp sesi-lm sesi-lm1714 udp sesi-lm sesi-lm1715 tcp houdini-lm houdini-lm1715 udp houdini-lm houdini-lm1716 tcp xmsg xmsg1716 udp xmsg xmsg1717 tcp fj-hdnet fj-hdnet1717 udp fj-hdnet fj-hdnet1717 udp convoy Convoy MSCS Windows Load Balancing Service1718 tcp h323gatedisc h323gatedisc1718 udp h323gatedisc h323gatedisc1719 tcp h323gatestat h323gatestat1719 udp h323gatestat h323gatestat1720 tcp h323hostcall h323hostcall1720 udp h323hostcall h323hostcall1721 tcp caicci caicci1721 udp caicci caicci1722 tcp hks-lm HKS License Manager1722 udp hks-lm HKS License Manager1723 tcp pptp Point-to-point tunnelling protocol1723 udp pptp pptp1724 tcp csbphonemaster csbphonemaster1724 udp csbphonemaster csbphonemaster1725 tcp iden-ralp iden-ralp1725 udp iden-ralp iden-ralp

1726 tcp iberiagames IBERIAGAMES1726 udp iberiagames IBERIAGAMES1727 tcp winddx winddx1727 udp winddx winddx1728 tcp telindus TELINDUS1728 udp telindus TELINDUS1729 tcp citynl CityNL License Management1729 udp citynl CityNL License Management1730 tcp roketz roketz1730 udp roketz roketz1731 tcp msiccp MSICCP1731 udp msiccp MSICCP1732 tcp proxim proxim1732 udp proxim proxim1733 tcp siipat SIMS - SIIPAT Protocol for Alarm Transmission1733 udp siipat SIMS - SIIPAT Protocol for Alarm Transmission1734 tcp cambertx-lm Camber Corporation License Management1734 udp cambertx-lm Camber Corporation License Management1735 tcp privatechat PrivateChat1735 udp privatechat PrivateChat1736 tcp street-stream street-stream1736 udp street-stream street-stream1737 tcp ultimad ultimad1737 udp ultimad ultimad1738 tcp gamegen1 GameGen11738 udp gamegen1 GameGen11739 tcp webaccess webaccess1739 udp webaccess webaccess1740 tcp encore encore1740 udp encore encore1741 tcp cisco-net-mgmt cisco-net-mgmt1741 udp cisco-net-mgmt cisco-net-mgmt1742 tcp 3Com-nsd 3Com-nsd1742 udp 3Com-nsd 3Com-nsd1743 tcp cinegrfx-lm Cinema Graphics License Manager1743 udp cinegrfx-lm Cinema Graphics License Manager1744 tcp ncpm-ft ncpm-ft1744 udp ncpm-ft ncpm-ft1745 tcp remote-winsock remote-winsock1745 udp remote-winsock remote-winsock1746 tcp ftrapid-1 ftrapid-11746 udp ftrapid-1 ftrapid-11747 tcp ftrapid-2 ftrapid-21747 udp ftrapid-2 ftrapid-21748 tcp oracle-em1 oracle-em11748 udp oracle-em1 oracle-em1

1749 tcp aspen-services aspen-services1749 udp aspen-services aspen-services1750 tcp sslp Simple Socket Library's PortMaster1750 udp sslp Simple Socket Library's PortMaster1751 tcp swiftnet SwiftNet1751 udp swiftnet SwiftNet1752 tcp lofr-lm Leap of Faith Research License Manager1752 udp lofr-lm Leap of Faith Research License Manager1753 tcp translogic-lm Translogic License Manager1753 udp translogic-lm Translogic License Manager1754 tcp oracle-em2 oracle-em21754 udp oracle-em2 oracle-em21755 tcp ms-streaming NetShow (MS streaming)1755 udp ms-streaming NetShow (MS streaming)1756 tcp capfast-lmd capfast-lmd1756 udp capfast-lmd capfast-lmd1757 tcp cnhrp cnhrp1757 udp cnhrp cnhrp1758 tcp tftp-mcast tftp-mcast1758 udp tftp-mcast tftp-mcast1759 tcp spss-lm SPSS License Manager1759 udp spss-lm SPSS License Manager1760 tcp www-ldap-gw www-ldap-gw1760 udp www-ldap-gw www-ldap-gw1761 tcp sms Microsoft System Management Server (rights verification; remote reboot and execute)1761 tcp cft-0 cft-01761 udp cft-0 cft-01762 tcp sms Microsoft System Management Server (remote control)1762 tcp cft-1 cft-11762 udp cft-1 cft-11763 tcp sms Microsoft System Management Server (remote chat)1763 tcp cft-2 cft-21763 udp cft-2 cft-21764 tcp sms Microsoft System Management Server (file transfer)1764 tcp cft-3 cft-31764 udp cft-3 cft-31765 tcp cft-4 cft-41765 udp cft-4 cft-41766 tcp cft-5 cft-51766 udp cft-5 cft-61767 udp cft-6 cft-61768 tcp cft-7 cft-71768 udp cft-7 cft-71769 tcp bmc-net-adm bmc-net-adm1769 udp bmc-net-adm bmc-net-adm

1770 tcp bmc-net-svc bmc-net-svc1770 udp bmc-net-svc bmc-net-svc1771 tcp vaultbase vaultbase1771 udp vaultbase vaultbase1772 tcp essweb-gw EssWeb Gateway1772 udp essweb-gw EssWeb Gateway1773 tcp kmscontrol KMSControl1773 udp kmscontrol KMSControl1774 tcp global-dtserv global-dtserv1774 udp global-dtserv global-dtserv1776 tcp femis Federal Emergency Management Information System1776 udp femis Federal Emergency Management Information System1777 tcp powerguardian powerguardian1777 udp powerguardian powerguardian1777 tcp Scarab [trojan] Scarab1778 tcp prodigy-intrnet prodigy-internet1778 udp prodigy-intrnet prodigy-internet1779 tcp pharmasoft pharmasoft1779 udp pharmasoft pharmasoft1780 tcp dpkeyserv dpkeyserv1780 udp dpkeyserv dpkeyserv1781 tcp answersoft-lm answersoft-lm1781 udp answersoft-lm answersoft-lm1782 tcp hp-hcip hp-hcip1782 udp hp-hcip hp-hcip1784 tcp finle-lm Finle License Manager1784 udp finle-lm Finle License Manager1785 tcp windlm Wind River Systems License Manager1785 udp windlm Wind River Systems License Manager1786 tcp funk-logger funk-logger1786 udp funk-logger funk-logger1787 tcp funk-license funk-license1787 udp funk-license funk-license1788 tcp psmond psmond1788 udp psmond psmond1789 tcp hello hello1789 udp hello hello1790 tcp nmsp Narrative Media Streaming Protocol1790 udp nmsp Narrative Media Streaming Protocol1791 tcp ea1 EA11791 udp ea1 EA11792 tcp ibm-dt-2 ibm-dt-21792 udp ibm-dt-2 ibm-dt-21793 tcp rsc-robot rsc-robot1793 udp rsc-robot rsc-robot1794 tcp cera-bcm cera-bcm1794 udp cera-bcm cera-bcm1795 tcp dpi-proxy dpi-proxy

1795 udp dpi-proxy dpi-proxy1796 tcp vocaltec-admin Vocaltec Server Administration1796 udp vocaltec-admin Vocaltec Server Administration1797 tcp uma UMA1797 udp uma UMA1798 tcp etp Event Transfer Protocol1798 udp etp Event Transfer Protocol1799 tcp netrisk NETRISK1799 udp netrisk NETRISK1800 tcp ansys-lm ANSYS-License manager1800 udp ansys-lm ANSYS-License manager1801 tcp msmq Microsoft Message Que1801 udp msmq Microsoft Message Que1802 tcp concomp1 ConComp11802 udp concomp1 ConComp11803 tcp hp-hcip-gwy HP-HCIP-GWY1803 udp hp-hcip-gwy HP-HCIP-GWY1804 tcp enl ENL1804 udp enl ENL1805 tcp enl-name ENL-Name1805 udp enl-name ENL-Name1806 tcp musiconline Musiconline1806 udp musiconline Musiconline1807 tcp fhsp Fujitsu Hot Standby Protocol1807 udp fhsp Fujitsu Hot Standby Protocol1807 tcp SpySender [trojan] SpySender1808 tcp oracle-vp2 Oracle-VP21808 udp oracle-vp2 Oracle-VP21809 tcp oracle-vp1 Oracle-VP11809 udp oracle-vp1 Oracle-VP11810 tcp jerand-lm Jerand License Manager1810 udp jerand-lm Jerand License Manager1811 tcp scientia-sdb Scientia-SDB1811 udp scientia-sdb Scientia-SDB1812 tcp radius RADIUS1812 udp radius RADIUS1813 tcp radius-acct RADIUS Accounting1813 udp radacct RADIUS accounting protocol (RFC 2139)1814 tcp tdp-suite TDP Suite1814 udp tdp-suite TDP Suite1815 tcp mmpft MMPFT1815 udp mmpft MMPFT1816 tcp harp HARP1816 udp harp HARP1817 tcp rkb-oscs RKB-OSCS1817 udp rkb-oscs RKB-OSCS1818 tcp etftp Enhanced Trivial File Transfer Protocol1818 udp etftp Enhanced Trivial File Transfer Protocol1819 tcp plato-lm Plato License Manager

1819 udp plato-lm Plato License Manager1820 tcp mcagent mcagent1820 udp mcagent mcagent1821 tcp donnyworld donnyworld1821 udp donnyworld donnyworld1822 tcp es-elmd es-elmd1822 udp es-elmd es-elmd1823 tcp unisys-lm Unisys Natural Language License Manager1823 udp unisys-lm Unisys Natural Language License Manager1824 tcp metrics-pas metrics-pas1824 udp metrics-pas metrics-pas1825 tcp direcpc-video DirecPC Video1825 udp direcpc-video DirecPC Video1826 tcp ardt ARDT1826 udp ardt ARDT1826 tcp Glacier [trojan] Glacier1827 tcp asi ASI1827 udp asi ASI1827 tcp pcm PCM Agent (AutoSecure Policy Compliance Manager1828 tcp itm-mcell-u itm-mcell-u1828 udp itm-mcell-u itm-mcell-u1829 tcp optika-emedia Optika eMedia1829 udp optika-emedia Optika eMedia1830 tcp net8-cman Oracle Net8 CMan Admin1830 udp net8-cman Oracle Net8 CMan Admin1831 tcp myrtle Myrtle1831 udp myrtle Myrtle1832 tcp tht-treasure ThoughtTreasure1832 udp tht-treasure ThoughtTreasure1833 tcp udpradio udpradio1833 udp udpradio udpradio1834 tcp ardusuni ARDUS Unicast1834 udp ardusuni ARDUS Unicast1835 tcp ardusmul ARDUS Multicast1835 udp ardusmul ARDUS Multicast1836 tcp ste-smsc ste-smsc1836 udp ste-smsc ste-smsc1837 tcp csoft1 csoft11837 udp csoft1 csoft11838 tcp talnet TALNET1838 udp talnet TALNET1839 tcp netopia-vo1 netopia-vo11839 udp netopia-vo1 netopia-vo11840 tcp netopia-vo2 netopia-vo21840 udp netopia-vo2 netopia-vo21841 tcp netopia-vo3 netopia-vo31841 udp netopia-vo3 netopia-vo3

1842 tcp netopia-vo4 netopia-vo41842 udp netopia-vo4 netopia-vo41843 tcp netopia-vo5 netopia-vo51843 udp netopia-vo5 netopia-vo51844 tcp direcpc-dll DirecPC-DLL1844 udp direcpc-dll DirecPC-DLL1844 tcp tbroker HPUX Task Broker Service1844 udp tbroker HPUX Task Broker Service1845 tcp altalink altalink1845 udp altalink altalink1846 tcp tunstall-pnc Tunstall PNC1846 udp tunstall-pnc Tunstall PNC1847 tcp slp-notify SLP Notification1847 udp slp-notify SLP Notification1848 tcp fjdocdist fjdocdist1848 udp fjdocdist fjdocdist1849 tcp alpha-sms ALPHA-SMS1849 udp alpha-sms ALPHA-SMS1850 tcp gsi GSI1850 udp gsi GSI1851 tcp ctcd ctcd1851 udp ctcd ctcd1852 tcp virtual-time Virtual Time1852 udp virtual-time Virtual Time1853 tcp vids-avtp VIDS-AVTP1853 udp vids-avtp VIDS-AVTP1854 tcp buddy-draw Buddy Draw1854 udp buddy-draw Buddy Draw1855 tcp fiorano-rtrsvc Fiorano RtrSvc1855 udp fiorano-rtrsvc Fiorano RtrSvc1856 tcp fiorano-msgsvc Fiorano MsgSvc1856 udp fiorano-msgsvc Fiorano MsgSvc1857 tcp datacaptor DataCaptor1857 udp datacaptor DataCaptor1858 tcp privateark PrivateArk1858 udp privateark PrivateArk1859 tcp gammafetchsvr Gamma Fetcher Server1859 udp gammafetchsvr Gamma Fetcher Server1860 tcp sunscalar-svc SunSCALAR Services1860 udp sunscalar-svc SunSCALAR Services1861 tcp lecroy-vicp LeCroy VICP1861 udp lecroy-vicp LeCroy VICP1862 tcp techra-server techra-server1862 udp techra-server techra-server1863 tcp msnp MSN Messenger Protocol1863 udp msnp MSN Messenger Protocol1864 tcp paradym-31port Paradym 31 Port1864 udp paradym-31port Paradym 31 Port1865 tcp entp ENTP1865 udp entp ENTP

1866 tcp swrmi swrmi1866 udp swrmi swrmi1867 tcp udrive UDRIVE1867 udp udrive UDRIVE1868 tcp viziblebrowser VizibleBrowser1868 udp viziblebrowser VizibleBrowser1869 tcp yestrader YesTrader1869 udp yestrader YesTrader1870 tcp sunscalar-dns SunSCALAR DNS Service1870 udp sunscalar-dns SunSCALAR DNS Service1871 tcp canocentral0 Cano Central 01871 udp canocentral0 Cano Central 01872 tcp canocentral1 Cano Central 11872 udp canocentral1 Cano Central 11873 tcp fjmpjps Fjmpjps1873 udp fjmpjps Fjmpjps1874 tcp fjswapsnp Fjswapsnp1874 udp fjswapsnp Fjswapsnp1875 tcp westell-stats westell stats1875 udp westell-stats westell stats1876 tcp ewcappsrv ewcappsrv1876 udp ewcappsrv ewcappsrv1877 tcp hp-webqosdb hp-webqosdb1877 udp hp-webqosdb hp-webqosdb1878 tcp drmsmc drmsmc1878 udp drmsmc drmsmc1879 tcp nettgain-nms NettGain NMS1879 udp nettgain-nms NettGain NMS1880 tcp vsat-control Gilat VSAT Control1880 udp vsat-control Gilat VSAT Control1881 tcp ibm-mqseries2 IBM MQSeries1881 udp ibm-mqseries2 IBM MQSeries1882 tcp ecsqdmn ecsqdmn1882 udp ecsqdmn ecsqdmn1883 tcp ibm-mqisdp IBM MQSeries SCADA1883 udp ibm-mqisdp IBM MQSeries SCADA1884 tcp idmaps Internet Distance Map Svc1884 udp idmaps Internet Distance Map Svc1885 tcp vrtstrapserver Veritas Trap Server1885 udp vrtstrapserver Veritas Trap Server1886 tcp leoip Leonardo over IP1886 udp leoip Leonardo over IP1887 tcp filex-lport FileX Listening Port1887 udp filex-lport FileX Listening Port1888 tcp ncconfig NC Config Port1888 udp ncconfig NC Config Port1889 tcp unify-adapter Unify Web Adapter Service1889 udp unify-adapter Unify Web Adapter Service1890 tcp wilkenlistener wilkenListener1890 udp wilkenlistener wilkenListener

1891 tcp childkey-notif ChildKey Notification1891 udp childkey-notif ChildKey Notification1892 tcp childkey-ctrl ChildKey Control1892 udp childkey-ctrl ChildKey Control1893 tcp elad ELAD Protocol1893 udp elad ELAD Protocol1894 tcp o2server-port O2Server Port1894 udp o2server-port O2Server Port1896 tcp b-novative-ls b-novative license server1896 udp b-novative-ls b-novative license server1897 tcp metaagent MetaAgent1897 udp metaagent MetaAgent1898 tcp cymtec-port Cymtec secure management1898 udp cymtec-port Cymtec secure management1899 tcp mc2studios MC2Studios1899 udp mc2studios MC2Studios1900 tcp ssdp SSDP1900 udp ssdp SSDP1901 tcp fjicl-tep-a Fujitsu ICL Terminal Emulator Program A1901 udp fjicl-tep-a Fujitsu ICL Terminal Emulator Program A1902 tcp fjicl-tep-b Fujitsu ICL Terminal Emulator Program B1902 udp fjicl-tep-b Fujitsu ICL Terminal Emulator Program B1903 tcp linkname Local Link Name Resolution1903 udp linkname Local Link Name Resolution1904 tcp fjicl-tep-c Fujitsu ICL Terminal Emulator Program C1904 udp fjicl-tep-c Fujitsu ICL Terminal Emulator Program C1905 tcp sugp Secure UP.Link Gateway Protocol1905 udp sugp Secure UP.Link Gateway Protocol1906 tcp tpmd TPortMapperReq1906 udp tpmd TPortMapperReq1907 tcp intrastar IntraSTAR1907 udp intrastar IntraSTAR1908 tcp dawn Dawn1908 udp dawn Dawn1909 tcp global-wlink Global World Link1909 udp global-wlink Global World Link1910 tcp ultrabac ultrabac1910 udp ultrabac ultrabac1911 tcp mtp Starlight Networks Multimedia Transport Protocol1911 udp mtp Starlight Networks Multimedia Transport Protocol1912 tcp rhp-iibp rhp-iibp1912 udp rhp-iibp rhp-iibp

1913 tcp armadp armadp1913 udp armadp armadp1914 tcp elm-momentum Elm-Momentum1914 udp elm-momentum Elm-Momentum1915 tcp facelink FACELINK1915 udp facelink FACELINK1916 tcp persona Persoft Persona1916 udp persona Persoft Persona1917 tcp noagent nOAgent1917 udp noagent nOAgent1918 tcp can-nds Candle Directory Service - NDS1918 udp can-nds Candle Directory Service - NDS1919 tcp can-dch Candle Directory Service - DCH1919 udp can-dch Candle Directory Service - DCH1920 tcp can-ferret Candle Directory Service - FERRET1920 udp can-ferret Candle Directory Service - FERRET1921 tcp noadmin NoAdmin1921 udp noadmin NoAdmin1922 tcp tapestry Tapestry1922 udp tapestry Tapestry1923 tcp spice SPICE1923 udp spice SPICE1924 tcp xiip XIIP1924 udp xiip XIIP1925 tcp discovery-port Surrogate Discovery Port1925 udp discovery-port Surrogate Discovery Port1926 tcp egs Evolution Game Server1926 udp egs Evolution Game Server1927 tcp videte-cipc Videte CIPC Port1927 udp videte-cipc Videte CIPC Port1928 tcp emsd-port Expnd Maui Srvr Dscovr1928 udp emsd-port Expnd Maui Srvr Dscovr1929 tcp bandwiz-system Bandwiz System - Server1929 udp bandwiz-system Bandwiz System - Server1930 tcp driveappserver Drive AppServer1930 udp driveappserver Drive AppServer1931 tcp amdsched AMD SCHED1931 udp amdsched AMD SCHED1932 tcp ctt-broker CTT Broker1932 udp ctt-broker CTT Broker1933 tcp xmapi IBM LM MT Agent1933 udp xmapi IBM LM MT Agent1934 tcp xaapi IBM LM Appl Agent1934 udp xaapi IBM LM Appl Agent1935 tcp tincan TinCan1935 udp tincan TinCan1936 tcp jetcmeserver JetCmeServer Server Port1936 udp jetcmeserver JetCmeServer Server Port1937 tcp jwserver JetVWay Server Port1937 udp jwserver JetVWay Server Port

1938 tcp jwclient JetVWay Client Port1938 udp jwclient JetVWay Client Port1939 tcp jvserver JetVision Server Port1939 udp jvserver JetVision Server Port1940 tcp jvclient JetVision Client Port1940 udp jvclient JetVision Client Port1941 tcp dic-aida DIC-Aida1941 udp dic-aida DIC-Aida1942 tcp res Real Enterprise Service1942 udp res Real Enterprise Service1943 tcp beeyond-media Beeyond Media1943 udp beeyond-media Beeyond Media1944 tcp close-combat close-combat1944 udp close-combat close-combat1945 tcp dialogic-elmd dialogic-elmd1945 udp dialogic-elmd dialogic-elmd1946 tcp tekpls tekpls1946 udp tekpls tekpls1947 tcp hlserver hlserver1947 udp hlserver hlserver1948 tcp eye2eye eye2eye1948 udp eye2eye eye2eye1949 tcp ismaeasdaqlive ISMA Easdaq Live1949 udp ismaeasdaqlive ISMA Easdaq Live1950 tcp ismaeasdaqtest ISMA Easdaq Test1950 udp ismaeasdaqtest ISMA Easdaq Test1951 tcp bcs-lmserver bcs-lmserver1951 udp bcs-lmserver bcs-lmserver1952 tcp mpnjsc mpnjsc1952 udp mpnjsc mpnjsc1953 tcp rapidbase Rapid Base1953 udp rapidbase Rapid Base1954 tcp abr-basic ABR-Basic Data1954 udp abr-basic ABR-Basic Data1955 tcp abr-secure ABR-Secure Data1955 udp abr-secure ABR-Secure Data1956 tcp vrtl-vmf-ds Vertel VMF DS1956 udp vrtl-vmf-ds Vertel VMF DS1957 tcp unix-status unix-status1957 udp unix-status unix-status1958 tcp dxadmind CA Administration Daemon1958 udp dxadmind CA Administration Daemon1959 tcp simp-all SIMP Channel1959 udp simp-all SIMP Channel1960 tcp nasmanager Merit DAC NASmanager1960 udp nasmanager Merit DAC NASmanager1961 tcp bts-appserver BTS APPSERVER1961 udp bts-appserver BTS APPSERVER1962 tcp biap-mp BIAP-MP1962 udp biap-mp BIAP-MP

1963 tcp webmachine WebMachine1963 udp webmachine WebMachine1964 tcp solid-e-engine SOLID E ENGINE1964 udp solid-e-engine SOLID E ENGINE1965 tcp tivoli-npm Tivoli NPM1965 udp tivoli-npm Tivoli NPM1966 tcp slush Slush1966 udp slush Slush1966 tcp FakeFTP [trojan] Fake FTP1967 tcp sns-quote SNS Quote1967 udp sns-quote SNS Quote1967 tcp WMFTPServer [trojan] WM FTP Server1967 tcp ForYourEyesOnly [trojan] For Your Eyes Only - FYEO1968 tcp lipsinc LIPSinc1968 udp lipsinc LIPSinc1969 tcp lipsinc1 LIPSinc 11969 udp lipsinc1 LIPSinc 11969 tcp OpCBO [trojan] OpC BO1970 tcp netop-rc NetOp Remote Control1970 udp netop-rc NetOp Remote Control1971 tcp netop-school NetOp School1971 udp netop-school NetOp School1972 tcp intersys-cache Cache1972 udp intersys-cache Cache1973 tcp dlsrap Data Link Switching Remote Access Protocol1973 udp dlsrap Data Link Switching Remote Access Protocol1974 tcp drp DRP1974 udp drp DRP1975 tcp Aureate Aureate / Radiate spyware servers1975 tcp tcoflashagent TCO Flash Agent1975 udp tcoflashagent TCO Flash Agent1976 tcp tcoregagent TCO Reg Agent1976 udp tcoregagent TCO Reg Agent1977 tcp tcoaddressbook TCO Address Book1977 udp tcoaddressbook TCO Address Book1978 tcp unisql UniSQL1978 udp unisql UniSQL1979 tcp unisql-java UniSQL Java1979 udp unisql-java UniSQL Java1980 tcp pearldoc-xact PearlDoc XACT1980 udp pearldoc-xact PearlDoc XACT1981 tcp p2pq p2pQ1981 udp p2pq p2pQ1981 tcp Shockrave [trojan] Shockrave1981 tcp Bowl [trojan] Bowl1982 tcp estamp Evidentiary Timestamp

1982 udp estamp Evidentiary Timestamp1983 tcp lhtp Loophole Test Protocol1983 udp lhtp Loophole Test Protocol1984 tcp bb BB1984 udp bb BB1985 tcp hsrp Hot Standby Router Protocol1985 udp hsrp Hot Standby Router Protocol1986 tcp licensedaemon cisco license management1986 udp licensedaemon cisco license management1987 tcp tr-rsrb-p1 cisco RSRB Priority 1 port1987 udp tr-rsrb-p1 cisco RSRB Priority 1 port1988 tcp tr-rsrb-p2 cisco RSRB Priority 2 port1988 udp tr-rsrb-p2 cisco RSRB Priority 2 port1989 tcp mshnet MHSnet system1989 tcp tr-rsrb-p3 cisco RSRB Priority 3 port1989 udp mshnet MHSnet system1989 udp tr-rsrb-p3 cisco RSRB Priority 3 port1990 tcp stun-p1 cisco STUN Priority 1 port1990 udp stun-p1 cisco STUN Priority 1 port1991 tcp stun-p2 cisco STUN Priority 2 port1991 udp stun-p2 cisco STUN Priority 2 port1991 tcp PitFall [trojan] PitFall1992 tcp ipsendmsg IPsendmsg1992 tcp stun-p3 cisco STUN Priority 3 port1992 udp ipsendmsg IPsendmsg1992 udp stun-p3 cisco STUN Priority 3 port1993 tcp snmp-tcp-port cisco SNMP TCP port1993 udp snmp-tcp-port cisco SNMP TCP port1994 tcp stun-port cisco serial tunnel port1994 udp stun-port cisco serial tunnel port1995 tcp perf-port cisco perf port1995 udp perf-port cisco perf port1996 tcp tr-rsrb-port cisco Remote SRB port1996 udp tr-rsrb-port cisco Remote SRB port1997 tcp gdp-port cisco Gateway Discovery Protocol1997 udp gdp-port cisco Gateway Discovery Protocol1998 tcp x25-svc-port cisco X.25 service (XOT)1998 udp x25-svc-port cisco X.25 service (XOT)1999 tcp tcp-id-port cisco identification port1999 udp tcp-id-port cisco identification port1999 tcp TransScout [trojan] TransScout1999 tcp BackDoor [trojan] Back Door1999 tcp SubSeven [trojan] SubSeven2000 tcp callbook callbook2000 udp callbook callbook2000 tcp openwindows OpenWindows2000 tcp DerSpäher [trojan] Der Späher / Der Spaeher2000 tcp InsaneNetwork [trojan] Insane Network2000 tcp Last2000 [trojan] Last 2000

2000 tcp RemoteExplorer2000 [trojan] Remote Explorer 20002000 tcp SennaSpyTrojanGenerator [trojan] Senna Spy Trojan Generator2001 tcp dc dc2001 tcp DerSpäher [trojan] Der Späher / Der Spaeher2001 tcp TrojanCow [trojan] Trojan Cow2001 udp wizard curry2002 tcp globe globe2002 udp globe globe2002 tcp milan Digi MiLAN print server admin port2002 udp slapper [trojan] Peer-to-peer UDP DDoS (PUD) (used by OpenSSL/Apache "Slapper" worm)2002 tcp TransScout [trojan] TransScout2003 tcp cfingerd GNU finger2003 tcp TransScout [trojan] TransScout2004 tcp mailbox mailbox2004 udp emce CCWS mm conf2004 udp eDonkey2000 eDonkey2000 unknown/unlisted port2004 tcp TransScout [trojan] TransScout2005 tcp berknet berknet2005 udp oracle oracle2005 tcp deslogin encrypted symmetric telnet login2005 tcp TransScout [trojan] TransScout2006 tcp invokator 2006 udp raid-cc raid2007 tcp dectalk 2007 udp raid-am 2008 tcp conf 2008 udp terminaldb 2009 tcp news 2009 udp whosockami 2010 tcp nfr Network Flight Recorder sensor2010 tcp search 2010 udp pipe_server 2011 tcp raid-cc raid2011 udp servserv 2012 tcp ttyinfo 2012 udp raid-ac 2013 tcp raid-am 2013 udp raid-cd 2014 tcp troff 2014 udp raid-sf 2015 tcp cypress 2015 udp raid-cs 2016 tcp bootserver 2016 udp bootserver 2017 tcp cypress-stat

2017 udp bootclient 2018 tcp terminaldb 2018 udp rellpack 2019 tcp whosockami 2019 udp about 2020 tcp xinupageserver 2020 udp xinupageserver 2021 tcp servexec 2021 udp xinuexpansion1 2022 tcp down 2022 udp xinuexpansion2 2023 tcp RipperPro [trojan] Ripper Pro2023 tcp Ripper [trojan] Ripper2023 tcp xinuexpansion3 2023 udp xinuexpansion3 2024 tcp xinuexpansion4 2024 udp xinuexpansion4 2025 tcp ellpack 2025 udp xribs 2026 tcp scrabble 2026 udp scrabble 2027 tcp shadowserver 2027 udp shadowserver 2028 tcp submitserver 2028 udp submitserver 2030 tcp device2 2030 udp device2 2032 tcp blackboard 2032 udp blackboard 2033 tcp glogger 2033 udp glogger 2034 tcp scoremgr 2034 udp scoremgr 2035 tcp imsldoc 2035 udp imsldoc 2038 tcp objectmanager 2038 udp objectmanager 2040 tcp lam 2040 udp lam 2041 tcp interbase 2041 udp interbase 2042 tcp isis 2042 udp isis 2043 tcp isis-bcast 2043 udp isis-bcast 2044 tcp rimsl 2044 udp rimsl 2045 tcp cdfunc 2045 udp cdfunc 2046 tcp sdfunc

2046 udp sdfunc 2047 tcp dls 2047 udp dls 2048 tcp dls-monitor 2048 udp dls-monitor 2049 tcp nfs Network File System2049 udp nfs Network File System2049 tcp shilp 2049 udp shilp 2050 tcp av-emb-config Avaya EMB Config Port2050 udp av-emb-config Avaya EMB Config Port2050 tcp blazix-ejb Blazix java webserver2051 tcp epnsdp EPNSDP2051 udp epnsdp EPNSDP2052 tcp clearvisn clearVisn Services Port2052 udp clearvisn clearVisn Services Port2053 tcp lot105-ds-upd Lot105 DSuper Updates2053 udp lot105-ds-upd Lot105 DSuper Updates2054 tcp weblogin Weblogin Port2054 udp weblogin Weblogin Port2055 tcp iop Iliad-Odyssey Protocol2055 udp iop Iliad-Odyssey Protocol2056 tcp omnisky OmniSky Port2056 udp omnisky OmniSky Port2057 tcp rich-cp Rich Content Protocol2057 udp rich-cp Rich Content Protocol2058 tcp newwavesearch NewWaveSearchables RMI2058 udp newwavesearch NewWaveSearchables RMI2059 tcp bmc-messaging BMC Messaging Service2059 udp bmc-messaging BMC Messaging Service2060 tcp teleniumdaemon Telenium Daemon IF2060 udp teleniumdaemon Telenium Daemon IF2061 tcp netmount NetMount2061 udp netmount NetMount2062 tcp icg-swp ICG SWP Port2062 udp icg-swp ICG SWP Port2063 tcp icg-bridge ICG Bridge Port2063 udp icg-bridge ICG Bridge Port2064 tcp distrib-netassholes A group of lamers working on a silly closed-source client2064 tcp icg-iprelay ICG IP Relay Port2064 udp icg-iprelay ICG IP Relay Port2065 tcp dlsrpn Data Link Switch Read Port Number2065 udp dlsrpn Data Link Switch Read Port Number2067 tcp dlswpn Data Link Switch Write Port Number2067 udp dlswpn Data Link Switch Write Port Number2068 tcp avauthsrvprtcl Avocent AuthSrv Protocol2068 udp avauthsrvprtcl Avocent AuthSrv Protocol2069 tcp event-port HTTP Event Port2069 udp event-port HTTP Event Port

2070 tcp ah-esp-encap AH and ESP Encapsulated in UDP packet2070 udp ah-esp-encap AH and ESP Encapsulated in UDP packet2071 tcp acp-port Axon Control Protocol2071 udp acp-port Axon Control Protocol2072 tcp msync GlobeCast mSync2072 udp msync GlobeCast mSync2073 tcp vbs-data-port Variable Block Socket2073 udp vbs-data-port Variable Block Socket2074 tcp vrtl-vmf-sa Vertel VMF SA2074 udp vrtl-vmf-sa Vertel VMF SA2075 tcp newlixengine Newlix ServerWare Engine2075 udp newlixengine Newlix ServerWare Engine2076 tcp newlixconfig Newlix JSPConfig2076 udp newlixconfig Newlix JSPConfig2077 tcp trellisagt TrelliSoft Agent2077 udp trellisagt TrelliSoft Agent2078 tcp trellissvr TrelliSoft Server2078 udp trellissvr TrelliSoft Server2079 tcp idware-router IDWARE Router Port2079 udp idware-router IDWARE Router Port2080 tcp autodesk-nlm Autodesk NLM (FLEXlm)2080 tcp WinHole [trojan] WinHole2080 tcp WinHole [trojan] WinHole2080 udp autodesk-nlm Autodesk NLM (FLEXlm)2081 tcp kme-trap-port KME PRINTER TRAP PORT2081 udp kme-trap-port KME PRINTER TRAP PORT2087 tcp eli ELI - Event Logging Integration2087 udp eli ELI - Event Logging Integration2089 tcp sep Security Encapsulation Protocol - SEP2089 udp sep Security Encapsulation Protocol - SEP2090 tcp lrp Load Report Protocol2090 udp lrp Load Report Protocol2091 tcp prp PRP2091 udp prp PRP2092 tcp descent3 Descent 32092 udp descent3 Descent 32093 tcp nbx-cc NBX CC2093 udp nbx-cc NBX CC2094 tcp nbx-au NBX AU2094 udp nbx-au NBX AU2095 tcp nbx-ser NBX SER2095 udp nbx-ser NBX SER2096 tcp nbx-dir NBX DIR2096 udp nbx-dir NBX DIR2097 tcp jetformpreview Jet Form Preview2097 udp jetformpreview Jet Form Preview2098 tcp dialog-port Dialog Port2098 udp dialog-port Dialog Port

2099 tcp h2250-annex-g H.225.0 Annex G2099 udp h2250-annex-g H.225.0 Annex G2100 tcp amiganetfs amiganetfs2100 udp amiganetfs amiganetfs2101 tcp rtcm-sc104 rtcm-sc1042101 udp rtcm-sc104 rtcm-sc1042102 tcp zephyr-srv Zephyr server2102 udp zephyr-srv Zephyr server2103 tcp zephyr-clt Zephyr serv-hm connection2103 udp zephyr-clt Zephyr serv-hm connection2104 tcp zephyr-hm Zephyr hostmanager2104 udp zephyr-hm Zephyr hostmanager2105 tcp eklogin Kerberos (v4) encrypted rlogin2105 tcp minipay MiniPay2105 udp eklogin Kerberos (v4) encrypted rlogin2105 udp minipay MiniPay2106 tcp ekshell Kerberos (v4) encrypted rshell2106 tcp mzap MZAP2106 udp ekshell Kerberos (v4) encrypted rshell2106 udp mzap MZAP2107 tcp bintec-admin BinTec Admin2107 udp bintec-admin BinTec Admin2108 tcp comcam Comcam2108 tcp rkinit Kerberos (v4) remote initialization2108 udp comcam Comcam2108 udp rkinit Kerberos (v4) remote initialization2109 tcp ergolight Ergolight2109 udp ergolight Ergolight2110 tcp umsp UMSP2110 udp umsp UMSP2111 tcp dsatp DSATP2111 tcp kx X over kerberos2111 udp dsatp DSATP2112 tcp idonix-metanet Idonix MetaNet2112 udp idonix-metanet Idonix MetaNet2112 tcp kip IP over kerberos2112 tcp pos-partner Vital Processing Services POS partner 20002113 tcp hsl-storm HSL StoRM2113 udp hsl-storm HSL StoRM2114 tcp newheights NEWHEIGHTS2114 udp newheights NEWHEIGHTS2115 tcp Bugs [trojan] Bugs2115 tcp Bugs [trojan] Bugs2115 tcp kdm KDM2115 udp kdm KDM2116 tcp ccowcmr CCOWCMR2116 udp ccowcmr CCOWCMR2117 tcp mentaclient MENTACLIENT2117 udp mentaclient MENTACLIENT

2118 tcp mentaserver MENTASERVER2118 udp mentaserver MENTASERVER2119 tcp gsigatekeeper GSIGATEKEEPER2119 udp gsigatekeeper GSIGATEKEEPER2120 tcp kauth Remote kauth2120 tcp qencp Quick Eagle Networks CP2120 udp qencp Quick Eagle Networks CP2121 tcp scientia-ssdb SCIENTIA-SSDB2121 udp scientia-ssdb SCIENTIA-SSDB2122 tcp caupc-remote CauPC Remote Control2122 udp caupc-remote CauPC Remote Control2123 tcp gtp-control GTP-Control Plane (3GPP)2123 udp gtp-control GTP-Control Plane (3GPP)2124 tcp elatelink ELATELINK2124 udp elatelink ELATELINK2125 tcp lockstep LOCKSTEP2125 udp lockstep LOCKSTEP2126 tcp pktcable-cops PktCable-COPS2126 udp pktcable-cops PktCable-COPS2127 tcp index-pc-wb INDEX-PC-WB2127 udp index-pc-wb INDEX-PC-WB2128 tcp net-steward Net Steward Control2128 udp net-steward Net Steward Control2129 tcp cs-live cs-live.com2129 udp cs-live cs-live.com2130 tcp swc-xds SWC-XDS2130 udp MiniBacklash [trojan] Mini Backlash2130 udp swc-xds SWC-XDS2131 tcp avantageb2b Avantageb2b2131 udp avantageb2b Avantageb2b2132 tcp avail-epmap AVAIL-EPMAP2132 udp avail-epmap AVAIL-EPMAP2133 tcp zymed-zpp ZYMED-ZPP2133 udp zymed-zpp ZYMED-ZPP2134 tcp avenue AVENUE2134 udp avenue AVENUE2135 tcp gris Grid Resource Information Server2135 udp gris Grid Resource Information Server2136 tcp appworxsrv APPWORXSRV2136 udp appworxsrv APPWORXSRV2137 tcp connect CONNECT2137 udp connect CONNECT2138 tcp unbind-cluster UNBIND-CLUSTER2138 udp unbind-cluster UNBIND-CLUSTER2139 tcp ias-auth IAS-AUTH2139 udp ias-auth IAS-AUTH2140 tcp Foreplay [trojan] Foreplay or Reduced Foreplay2140 tcp ias-reg IAS-REG2140 tcp TheInvasor [trojan] The Invasor

2140 udp DeepThroat [trojan] Deep Throat2140 udp DeepThroat [trojan] Deep Throat2140 udp Foreplay [trojan] Foreplay2140 udp ias-reg IAS-REG2141 tcp ias-admind IAS-ADMIND2141 udp ias-admind IAS-ADMIND2142 tcp tdm-over-ip TDM-OVER-IP2142 udp tdm-over-ip TDM-OVER-IP2143 tcp lv-jc Live Vault Job Control2143 udp lv-jc Live Vault Job Control2144 tcp lv-ffx Live Vault Fast Object Transfer2144 udp lv-ffx Live Vault Fast Object Transfer2145 tcp lv-pici Live Vault Remote Diagnostic Console Support2145 udp lv-pici Live Vault Remote Diagnostic Console Support2146 tcp lv-not Live Vault Admin Event Notification2146 udp lv-not Live Vault Admin Event Notification2147 tcp lv-auth Live Vault Authentication2147 udp lv-auth Live Vault Authentication2148 tcp veritas-ucl VERITAS UNIVERSAL COMMUNICATION LAYER2148 udp veritas-ucl VERITAS UNIVERSAL COMMUNICATION LAYER2149 tcp acptsys ACPTSYS2149 udp acptsys ACPTSYS2150 tcp dynamic3d DYNAMIC3D2150 udp dynamic3d DYNAMIC3D2151 tcp docent DOCENT2151 udp docent DOCENT2152 tcp gtp-user GTP-User Plane (3GPP)2152 udp gtp-user GTP-User Plane (3GPP)2155 tcp IllusionMailer [trojan] Illusion Mailer2155 tcp IllusionMailer [trojan] Illusion Mailer2160 tcp apc-cms APC Central Mgmt Server2160 udp apc-cms APC Central Mgmt Server2165 tcp x-bone-api X-Bone API2165 udp x-bone-api X-Bone API2166 tcp iwserver IWSERVER2166 udp iwserver IWSERVER2180 tcp mc-gt-srv Millicent Vendor Gateway Server2180 udp mc-gt-srv Millicent Vendor Gateway Server2181 tcp eforward eforward2181 udp eforward eforward2200 tcp ici ICI2200 udp ici ICI2201 tcp ats Advanced Training System Program2201 udp ats Advanced Training System Program2202 tcp imtc-map Int. Multimedia Teleconferencing Cosortium

2202 udp imtc-map Int. Multimedia Teleconferencing Cosortium2213 tcp kali Kali2213 udp kali Kali2220 tcp netiq NetIQ Pegasus2220 udp netiq NetIQ Pegasus2221 tcp rockwell-csp1 Rockwell CSP12221 udp rockwell-csp1 Rockwell CSP12222 tcp AMD [trojan] Rootshell left by AMD exploit2222 tcp rockwell-csp2 Rockwell CSP22222 udp rockwell-csp2 Rockwell CSP22223 tcp rockwell-csp3 Rockwell CSP32223 udp rockwell-csp3 Rockwell CSP32232 tcp ivs-video IVS Video default2232 udp ivs-video IVS Video default2233 tcp infocrypt INFOCRYPT2233 udp infocrypt INFOCRYPT2234 tcp directplay DirectPlay2234 udp directplay DirectPlay2235 tcp sercomm-wlink Sercomm-WLink2235 udp sercomm-wlink Sercomm-WLink2236 tcp nani Nani2236 udp nani Nani2237 tcp optech-port1-lm Optech Port1 License Manager2237 udp optech-port1-lm Optech Port1 License Manager2238 tcp aviva-sna AVIVA SNA SERVER2238 udp aviva-sna AVIVA SNA SERVER2239 tcp imagequery Image Query2239 udp imagequery Image Query2240 tcp recipe RECIPe2240 udp recipe RECIPe2241 tcp ivsd IVS Daemon2241 udp ivsd IVS Daemon2242 tcp foliocorp Folio Remote Server2242 udp foliocorp Folio Remote Server2243 tcp magicom Magicom Protocol2243 udp magicom Magicom Protocol2244 tcp nmsserver NMS Server2244 udp nmsserver NMS Server2245 tcp hao HaO2245 udp hao HaO2250 tcp remote-collab remote-collab2250 udp remote-collab remote-collab2255 tcp Nirvana [trojan] Nirvana2255 tcp Nirvana [trojan] Nirvana2255 tcp vrtp VRTP - ViRtue Transfer Protocol2255 udp vrtp VRTP - ViRtue Transfer Protocol2279 tcp xmquery xmquery2279 udp xmquery xmquery

2280 tcp lnvpoller LNVPOLLER2280 udp lnvpoller LNVPOLLER2281 tcp lnvconsole LNVCONSOLE2281 udp lnvconsole LNVCONSOLE2282 tcp lnvalarm LNVALARM2282 udp lnvalarm LNVALARM2283 tcp HVLRat5 [trojan] HVL Rat52283 tcp HvlRAT [trojan] Hvl RAT2283 tcp lnvstatus LNVSTATUS2283 udp lnvstatus LNVSTATUS2284 tcp lnvmaps LNVMAPS2284 udp lnvmaps LNVMAPS2285 tcp lnvmailmon LNVMAILMON2285 udp lnvmailmon LNVMAILMON2286 tcp nas-metering NAS-Metering2286 udp nas-metering NAS-Metering2287 tcp dna DNA2287 udp dna DNA2288 tcp netml NETML2288 udp netml NETML2294 tcp konshus-lm Konshus License Manager (FLEX)2294 udp konshus-lm Konshus License Manager (FLEX)2295 tcp advant-lm Advant License Manager2295 udp advant-lm Advant License Manager2296 tcp theta-lm Theta License Manager (Rainbow)2296 udp theta-lm Theta License Manager (Rainbow)2297 tcp d2k-datamover1 D2K DataMover 12297 udp d2k-datamover1 D2K DataMover 12298 tcp d2k-datamover2 D2K DataMover 22298 udp d2k-datamover2 D2K DataMover 22299 tcp pc-telecommute PC Telecommute2299 udp pc-telecommute PC Telecommute2300 tcp cvmmon CVMMON2300 tcp Xplorer [trojan] Xplorer2300 tcp Xplorer [trojan] Xplorer2300 udp cvmmon CVMMON2301 tcp compaqdiag Compaq remote diagnostic management2301 udp cpq-wbem Compaq HTTP2302 tcp binderysupport Bindery Support2302 udp binderysupport Bindery Support2303 tcp proxy-gateway Proxy Gateway2303 udp proxy-gateway Proxy Gateway2304 tcp attachmate-uts Attachmate UTS2304 udp attachmate-uts Attachmate UTS2305 tcp mt-scaleserver MT ScaleServer2305 udp mt-scaleserver MT ScaleServer2306 tcp tappi-boxnet TAPPI BoxNet2306 udp tappi-boxnet TAPPI BoxNet2307 tcp pehelp

2307 udp pehelp 2308 tcp sdhelp sdhelp2308 udp sdhelp sdhelp2309 tcp sdserver SD Server2309 udp sdserver SD Server2310 tcp sdclient SD Client2310 udp sdclient SD Client2311 tcp messageservice Message Service2311 tcp Studio54 [trojan] Studio 542311 udp messageservice Message Service2313 tcp iapp IAPP (Inter Access Point Protocol)2313 udp iapp IAPP (Inter Access Point Protocol)2314 tcp cr-websystems CR WebSystems2314 udp cr-websystems CR WebSystems2315 tcp precise-sft Precise Sft.2315 udp precise-sft Precise Sft.2316 tcp sent-lm SENT License Manager2316 udp sent-lm SENT License Manager2317 tcp attachmate-g32 Attachmate G322317 udp attachmate-g32 Attachmate G322318 tcp cadencecontrol Cadence Control2318 udp cadencecontrol Cadence Control2319 tcp infolibria InfoLibria2319 udp infolibria InfoLibria2320 tcp siebel-ns Siebel NS2320 udp siebel-ns Siebel NS2321 tcp rdlap RDLAP over UDP2321 udp rdlap RDLAP2322 tcp ofsd ofsd2322 udp ofsd ofsd2323 tcp 3d-nfsd 3d-nfsd2323 udp 3d-nfsd 3d-nfsd2324 tcp cosmocall Cosmocall2324 udp cosmocall Cosmocall2325 tcp designspace-lm Design Space License Management2325 udp designspace-lm Design Space License Management2326 tcp idcp IDCP2326 udp idcp IDCP2327 tcp xingcsm xingcsm2327 udp xingcsm xingcsm2328 tcp netrix-sftm Netrix SFTM2328 udp netrix-sftm Netrix SFTM2329 tcp nvd NVD2329 udp nvd NVD2330 tcp IRCContact [trojan] IRC Contact2330 tcp tscchat TSCCHAT2330 udp tscchat TSCCHAT2331 tcp agentview AGENTVIEW2331 tcp IRCContact [trojan] IRC Contact2331 udp agentview AGENTVIEW

2332 tcp IRCContact [trojan] IRC Contact2332 tcp rcc-host RCC Host2332 udp rcc-host RCC Host2333 tcp IRCContact [trojan] IRC Contact2333 tcp snapp SNAPP2333 udp snapp SNAPP2334 tcp ace-client ACE Client Auth2334 tcp IRCContact [trojan] IRC Contact2334 udp ace-client ACE Client Auth2335 tcp ace-proxy ACE Proxy2335 tcp IRCContact [trojan] IRC Contact2335 udp ace-proxy ACE Proxy2336 tcp appleugcontrol Apple UG Control2336 tcp IRCContact [trojan] IRC Contact2336 udp appleugcontrol Apple UG Control2337 tcp ideesrv ideesrv2337 tcp IRCContact [trojan] IRC Contact2337 udp ideesrv ideesrv2338 tcp IRCContact [trojan] IRC Contact2338 tcp norton-lambert Norton Lambert2338 udp norton-lambert Norton Lambert2339 tcp 3com-webview 3Com WebView2339 tcp IRCContact [trojan] IRC Contact2339 tcp VoiceSpyOBS [trojan] Voice Spy - OBS!!!2339 tcp VoiceSpy [trojan] Voice Spy2339 udp 3com-webview 3Com WebView2339 udp VoiceSpyOBS [trojan] Voice Spy - OBS!!!2339 udp VoiceSpy [trojan] Voice Spy2340 tcp wrs_registry WRS Registry2340 udp wrs_registry WRS Registry2341 tcp xiostatus XIO Status2341 udp xiostatus XIO Status2342 tcp manage-exec Seagate Manage Exec2342 udp manage-exec Seagate Manage Exec2343 tcp nati-logos nati logos2343 udp nati-logos nati logos2344 tcp fcmsys fcmsys2344 udp fcmsys fcmsys2345 tcp dbm dbm2345 tcp DolyTrojan [trojan] Doly Trojan2345 tcp DolyTrojan [trojan] Doly Trojan2345 udp dbm dbm2346 tcp redstorm_join Game Connection Port2346 udp redstorm_join Game Connection Port2347 tcp redstorm_find Game Announcement and Location2347 udp redstorm_find Game Announcement and Location2348 tcp redstorm_info Information to query for game status2348 udp redstorm_info Information to query for game status2349 tcp redstorm_diag Diagnostics Port2349 udp redstorm_diag Disgnostics Port

2350 tcp psbserver psbserver2350 udp psbserver psbserver2351 tcp psrserver psrserver2351 udp psrserver psrserver2352 tcp pslserver pslserver2352 udp pslserver pslserver2353 tcp pspserver pspserver2353 udp pspserver pspserver2354 tcp psprserver psprserver2354 udp psprserver psprserver2355 tcp psdbserver psdbserver2355 udp psdbserver psdbserver2356 tcp gxtelmd GXT License Managemant2356 udp gxtelmd GXT License Managemant2357 tcp unihub-server UniHub Server2357 udp unihub-server UniHub Server2358 tcp futrix Futrix2358 udp futrix Futrix2359 tcp flukeserver FlukeServer2359 udp flukeserver FlukeServer2360 tcp nexstorindltd NexstorIndLtd2360 udp nexstorindltd NexstorIndLtd2361 tcp tl1 TL12361 udp tl1 TL12362 tcp digiman digiman2362 udp digiman digiman2363 tcp mediacntrlnfsd Media Central NFSD2363 udp mediacntrlnfsd Media Central NFSD2364 tcp oi-2000 OI-20002364 udp oi-2000 OI-20002365 tcp dbref dbref2365 udp dbref dbref2366 tcp qip-login qip-login2366 udp qip-login qip-login2367 tcp service-ctrl Service Control2367 udp service-ctrl Service Control2368 tcp opentable OpenTable2368 udp opentable OpenTable2369 tcp acs2000-dsp ACS2000 DSP2369 udp acs2000-dsp ACS2000 DSP2370 tcp compaq-econnect Worldwire Compaq eConnect Secure Remote Support2370 tcp l3-hbmon L3-HBMon2370 udp l3-hbmon L3-HBMon2381 tcp compaq-https Compaq HTTPS2381 udp compaq-https Compaq HTTPS2382 tcp ms-olap3 Microsoft OLAP2382 udp ms-olap3 Microsoft OLAP2383 tcp ms-olap4 Microsoft OLAP2383 udp ms-olap4 Microsoft OLAP

2384 tcp sd-request SD-REQUEST2384 udp sd-request SD-REQUEST2389 tcp ovsessionmgr OpenView Session Mgr2389 udp ovsessionmgr OpenView Session Mgr2390 tcp rsmtp RSMTP2390 udp rsmtp RSMTP2391 tcp 3com-net-mgmt 3COM Net Management2391 udp 3com-net-mgmt 3COM Net Management2392 tcp tacticalauth Tactical Auth2392 udp tacticalauth Tactical Auth2393 tcp ms-olap1 MS OLAP 12393 udp ms-olap1 MS OLAP 12394 tcp ms-olap2 MS OLAP 22394 udp ms-olap2 MA OLAP 22395 tcp lan900_remote LAN900 Remote2395 udp lan900_remote LAN900 Remote2396 tcp wusage Wusage2396 udp wusage Wusage2397 tcp ncl NCL2397 udp ncl NCL2398 tcp orbiter Orbiter2398 udp orbiter Orbiter2399 tcp fmpro-fdal FileMaker Inc. - Data Access Layer2399 udp fmpro-fdal FileMaker Inc. - Data Access Layer2400 tcp opequus-server OpEquus Server2400 tcp Portd [trojan] Portd2400 udp opequus-server OpEquus Server2401 tcp cvspserver CVS network server2401 udp cvspserver CVS network server2402 tcp taskmaster2000 TaskMaster 2000 Server2402 udp taskmaster2000 TaskMaster 2000 Server2403 tcp taskmaster2000 TaskMaster 2000 Web2403 udp taskmaster2000 TaskMaster 2000 Web2404 tcp iec870-5-104 IEC870-5-1042404 udp iec870-5-104 IEC870-5-1042405 tcp trc-netpoll TRC Netpoll2405 udp trc-netpoll TRC Netpoll2406 tcp jediserver JediServer2406 udp jediserver JediServer2407 tcp orion Orion2407 udp orion Orion2408 tcp optimanet OptimaNet2408 udp optimanet OptimaNet2409 tcp sns-protocol SNS Protocol2409 udp sns-protocol SNS Protocol2410 tcp vrts-registry VRTS Registry2410 udp vrts-registry VRTS Registry2411 tcp netwave-ap-mgmt Netwave AP Management2411 udp netwave-ap-mgmt Netwave AP Management2412 tcp cdn CDN

2412 udp cdn CDN2413 tcp orion-rmi-reg orion-rmi-reg2413 udp orion-rmi-reg orion-rmi-reg2414 tcp beeyond Beeyond2414 udp beeyond Beeyond2415 tcp comtest COMTEST2415 udp comtest COMTEST2416 tcp rmtserver RMT Server2416 udp rmtserver RMT Server2417 tcp composit-server Composit Server2417 udp composit-server Composit Server2418 tcp cas cas2418 udp cas cas2419 tcp attachmate-s2s Attachmate S2S2419 udp attachmate-s2s Attachmate S2S2420 tcp dslremote-mgmt DSL Remote Management2420 udp dslremote-mgmt DSL Remote Management2421 tcp g-talk G-Talk2421 udp g-talk G-Talk2422 tcp crmsbits CRMSBITS2422 udp crmsbits CRMSBITS2423 tcp rnrp RNRP2423 udp rnrp RNRP2424 tcp kofax-svr KOFAX-SVR2424 udp kofax-svr KOFAX-SVR2425 tcp fjitsuappmgr Fujitsu App Manager2425 udp fjitsuappmgr Fujitsu App Manager2426 tcp applianttcp Appliant TCP2426 udp appliantudp Appliant UDP2427 tcp mgcp-gateway Media Gateway Control Protocol Gateway2427 udp mgcp-gateway Media Gateway Control Protocol Gateway2428 tcp ott One Way Trip Time2428 udp ott One Way Trip Time2429 tcp ft-role FT-ROLE2429 udp ft-role FT-ROLE2430 tcp venus venus2430 udp venus venus2431 tcp venus-se venus-se2431 udp venus-se venus-se2432 tcp codasrv codasrv2432 udp codasrv codasrv2433 tcp codasrv-se codasrv-se2433 udp codasrv-se codasrv-se2434 tcp pxc-epmap pxc-epmap2434 udp pxc-epmap pxc-epmap2435 tcp optilogic OptiLogic2435 udp optilogic OptiLogic2436 tcp topx TOP X

2436 udp topx TOP X2437 tcp unicontrol UniControl2437 udp unicontrol UniControl2438 tcp msp MSP2438 udp msp MSP2439 tcp sybasedbsynch SybaseDBSynch2439 udp sybasedbsynch SybaseDBSynch2440 tcp spearway Spearway Lockers2440 udp spearway Spearway Lockser2441 tcp pvsw-inet pvsw-inet2441 udp pvsw-inet pvsw-inet2442 tcp netangel Netangel2442 udp netangel Netangel2443 tcp powerclientcsf PowerClient Central Storage Facility2443 udp powerclientcsf PowerClient Central Storage Facility2444 tcp btpp2sectrans BT PP2 Sectrans2444 udp btpp2sectrans BT PP2 Sectrans2445 tcp dtn1 DTN12445 udp dtn1 DTN12446 tcp bues_service bues_service2446 udp bues_service bues_service2447 tcp ovwdb OpenView NNM daemon2447 udp ovwdb OpenView NNM daemon2448 tcp hpppssvr hpppsvr2448 udp hpppssvr hpppsvr2449 tcp ratl RATL2449 udp ratl RATL2450 tcp netadmin netadmin2450 udp netadmin netadmin2451 tcp netchat netchat2451 udp netchat netchat2452 tcp snifferclient SnifferClient2452 udp snifferclient SnifferClient2453 tcp madge-om madge-om2453 udp madge-om madge-om2454 tcp indx-dds IndX-DDS2454 udp indx-dds IndX-DDS2455 tcp wago-io-system WAGO-IO-SYSTEM2455 udp wago-io-system WAGO-IO-SYSTEM2456 tcp altav-remmgt altav-remmgt2456 udp altav-remmgt altav-remmgt2457 tcp rapido-ip Rapido_IP2457 udp rapido-ip Rapido_IP2458 tcp griffin griffin2458 udp griffin griffin2459 tcp community Community2459 udp community Community2460 tcp ms-theater ms-theater2460 udp ms-theater ms-theater2461 tcp qadmifoper qadmifoper

2461 udp qadmifoper qadmifoper2462 tcp qadmifevent qadmifevent2462 udp qadmifevent qadmifevent2463 tcp symbios-raid Symbios Raid2463 udp symbios-raid Symbios Raid2464 tcp direcpc-si DirecPC SI2464 udp direcpc-si DirecPC SI2465 tcp lbm Load Balance Management2465 udp lbm Load Balance Management2466 tcp lbf Load Balance Forwarding2466 udp lbf Load Balance Forwarding2467 tcp high-criteria High Criteria2467 udp high-criteria High Criteria2468 tcp qip-msgd qip_msgd2468 udp qip-msgd qip_msgd2469 tcp mti-tcs-comm MTI-TCS-COMM2469 udp mti-tcs-comm MTI-TCS-COMM2470 tcp taskman-port taskman port2470 udp taskman-port taskman port2471 tcp seaodbc SeaODBC2471 udp seaodbc SeaODBC2472 tcp c3 C32472 udp c3 C32473 tcp aker-cdp Aker-cdp2473 udp aker-cdp Aker-cdp2474 tcp vitalanalysis Vital Analysis2474 udp vitalanalysis Vital Analysis2475 tcp ace-server ACE Server2475 udp ace-server ACE Server2476 tcp ace-svr-prop ACE Server Propagation2476 udp ace-svr-prop ACE Server Propagation2477 tcp ssm-cvs SecurSight Certificate Valifation Service2477 udp ssm-cvs SecurSight Certificate Valifation Service2478 tcp ssm-cssps SecurSight Authentication Server (SLL)2478 udp ssm-cssps SecurSight Authentication Server (SSL)2479 tcp ssm-els SecurSight Event Logging Server (SSL)2479 udp ssm-els SecurSight Event Logging Server (SSL)2480 tcp lingwood Lingwood's Detail2480 udp lingwood Lingwood's Detail2481 tcp giop Oracle GIOP2481 udp giop Oracle GIOP2482 tcp giop-ssl Oracle GIOP SSL2483 tcp ttc Oracle TTC2483 udp ttc Oracel TTC2484 tcp ttc-ssl Oracle TTC SSL2485 tcp netobjects1 Net Objects1

2485 udp netobjects1 Net Objects12486 tcp netobjects2 Net Objects22486 udp netobjects2 Net Objects22487 tcp pns Policy Notice Service2487 udp pns Policy Notice Service2488 tcp moy-corp Moy Corporation2488 udp moy-corp Moy Corporation2489 tcp tsilb TSILB2489 udp tsilb TSILB2490 tcp qip-qdhcp qip_qdhcp2490 udp qip-qdhcp qip_qdhcp2491 tcp conclave-cpp Conclave CPP2491 udp conclave-cpp Conclave CPP2492 tcp groove GROOVE2492 udp groove GROOVE2493 tcp talarian-mqs Talarian MQS2493 udp talarian-mqs Talarian MQS2494 tcp bmc-ar BMC AR2494 udp bmc-ar BMC AR2495 tcp fast-rem-serv Fast Remote Services2495 udp fast-rem-serv Fast Remote Services2496 tcp dirgis DIRGIS2496 udp dirgis DIRGIS2497 tcp quaddb Quad DB2497 udp quaddb Quad DB2498 tcp odn-castraq ODN-CasTraq2498 udp odn-castraq ODN-CasTraq2499 tcp unicontrol UniControl2499 udp unicontrol UniControl2500 tcp rtsserv Resource Tracking system server2500 udp rtsserv Resource Tracking system server2501 tcp rtsclient Resource Tracking system client2501 udp rtsclient Resource Tracking system client2502 tcp kentrox-prot Kentrox Protocol2502 udp kentrox-prot Kentrox Protocol2503 tcp nms-dpnss NMS-DPNSS2503 udp nms-dpnss NMS-DPNSS2504 tcp wlbs WLBS2504 udp wlbs WLBS2505 tcp torque-traffic torque-traffic2505 udp torque-traffic torque-traffic2506 tcp jbroker jbroker2506 udp jbroker jbroker2506 tcp jana Jana Proxy Server admin port2507 tcp spock spock2507 udp spock spock2508 tcp jdatastore JDataStore2508 udp jdatastore JDataStore2509 tcp fjmpss fjmpss2509 udp fjmpss fjmpss

2510 tcp fjappmgrbulk fjappmgrbulk2510 udp fjappmgrbulk fjappmgrbulk2511 tcp metastorm Metastorm2511 udp metastorm Metastorm2512 tcp citrixima Citrix IMA2512 udp citrixima Citrix IMA2513 tcp citrixadmin Citrix ADMIN2513 udp citrixadmin Citrix ADMIN2514 tcp facsys-ntp Facsys NTP2514 udp facsys-ntp Facsys NTP2515 tcp facsys-router Facsys Router2515 udp facsys-router Facsys Router2516 tcp maincontrol Main Control2516 udp maincontrol Main Control2517 tcp call-sig-trans H.323 Annex E call signaling transport2517 udp call-sig-trans H.323 Annex E call signaling transport2518 tcp willy Willy2518 udp willy Willy2519 tcp globmsgsvc globmsgsvc2519 udp globmsgsvc globmsgsvc2520 tcp pvsw pvsw2520 udp pvsw pvsw2521 tcp adaptecmgr Adaptec Manager2521 udp adaptecmgr Adaptec Manager2522 tcp windb WinDb2522 udp windb WinDb2523 tcp qke-llc-v3 Qke LLC V.32523 udp qke-llc-v3 Qke LLC V.32524 tcp optiwave-lm Optiwave License Management2524 udp optiwave-lm Optiwave License Management2525 tcp ms-v-worlds MS V-Worlds2525 udp ms-v-worlds MS V-Worlds2526 tcp ema-sent-lm EMA License Manager2526 udp ema-sent-lm EMA License Manager2527 tcp iqserver IQ Server2527 udp iqserver IQ Server2528 tcp ncr_ccl NCR CCL2528 udp ncr_ccl NCR CCL2529 tcp utsftp UTS FTP2529 udp utsftp UTS FTP2530 tcp vrcommerce VR Commerce2530 udp vrcommerce VR Commerce2531 tcp ito-e-gui ITO-E GUI2531 udp ito-e-gui ITO-E GUI2532 tcp ovtopmd OVTOPMD2532 udp ovtopmd OVTOPMD2533 tcp snifferserver SnifferServer2533 udp snifferserver SnifferServer2534 tcp combox-web-acc Combox Web Access2534 udp combox-web-acc Combox Web Access

2535 tcp madcap MADCAP2535 udp madcap MADCAP2536 tcp btpp2audctr1 btpp2audctr12536 udp btpp2audctr1 btpp2audctr12537 tcp upgrade Upgrade Protocol2537 udp upgrade Upgrade Protocol2538 tcp vnwk-prapi vnwk-prapi2538 udp vnwk-prapi vnwk-prapi2539 tcp vsiadmin VSI Admin2539 udp vsiadmin VSI Admin2540 tcp lonworks LonWorks2540 udp lonworks LonWorks2541 tcp lonworks2 LonWorks22541 udp lonworks2 LonWorks22542 tcp davinci daVinci2542 udp davinci daVinci2543 tcp reftek REFTEK2543 udp reftek REFTEK2544 tcp novell-zen Novell ZEN2545 tcp sis-emt sis-emt2545 udp sis-emt sis-emt2546 tcp vytalvaultbrtp vytalvaultbrtp2546 udp vytalvaultbrtp vytalvaultbrtp2547 tcp vytalvaultvsmp vytalvaultvsmp2547 udp vytalvaultvsmp vytalvaultvsmp2548 tcp vytalvaultpipe vytalvaultpipe2548 udp vytalvaultpipe vytalvaultpipe2549 tcp ipass IPASS2549 udp ipass IPASS2550 tcp ads ADS2550 udp ads ADS2551 tcp isg-uda-server ISG UDA Server2551 udp isg-uda-server ISG UDA Server2552 tcp call-logging Call Logging2552 udp call-logging Call Logging2553 tcp efidiningport efidiningport2553 udp efidiningport efidiningport2554 tcp vcnet-link-v10 VCnet-Link v102554 udp vcnet-link-v10 VCnet-Link v102555 tcp compaq-wcp Compaq WCP2555 tcp Lion [trojan] Lion2555 tcp T0rnRootkit [trojan] T0rn Rootkit2555 udp compaq-wcp Compaq WCP2556 tcp nicetec-nmsvc nicetec-nmsvc2556 udp nicetec-nmsvc nicetec-nmsvc2557 tcp nicetec-mgmt nicetec-mgmt2557 udp nicetec-mgmt nicetec-mgmt2558 tcp pclemultimedia PCLE Multi Media2558 udp pclemultimedia PCLE Multi Media2559 tcp lstp LSTP

2559 udp lstp LSTP2560 tcp labrat labrat2560 udp labrat labrat2561 tcp mosaixcc MosaixCC2561 udp mosaixcc MosaixCC2562 tcp delibo Delibo2562 udp delibo Delibo2563 tcp cti-redwood CTI Redwood2563 udp cti-redwood CTI Redwood2564 tcp hp-3000-telnet HP 3000 NS VT block mode telnet2565 tcp coord-svr Coordinator Server2565 tcp Striker [trojan] Striker2565 tcp Strikertrojan [trojan] Striker trojan2565 udp coord-svr Coordinator Server2566 tcp pcs-pcw pcs-pcw2566 udp pcs-pcw pcs-pcw2567 tcp clp Cisco Line Protocol2567 udp clp Cisco Line Protocol2568 tcp spamtrap SPAM TRAP2568 udp spamtrap SPAM TRAP2569 tcp sonuscallsig Sonus Call Signal2569 udp sonuscallsig Sonus Call Signal2570 tcp hs-port HS Port2570 udp hs-port HS Port2571 tcp cecsvc CECSVC2571 udp cecsvc CECSVC2572 tcp ibp IBP2572 udp ibp IBP2573 tcp trustestablish Trust Establish2573 udp trustestablish Trust Establish2574 tcp blockade-bpsp Blockade BPSP2574 udp blockade-bpsp Blockade BPSP2575 tcp hl7 HL72575 udp hl7 HL72576 tcp tclprodebugger TCL Pro Debugger2576 udp tclprodebugger TCL Pro Debugger2577 tcp scipticslsrvr Scriptics Lsrvr2577 udp scipticslsrvr Scriptics Lsrvr2578 tcp rvs-isdn-dcp RVS ISDN DCP2578 udp rvs-isdn-dcp RVS ISDN DCP2579 tcp mpfoncl mpfoncl2579 udp mpfoncl mpfoncl2580 tcp tributary Tributary2580 udp tributary Tributary2581 tcp argis-te ARGIS TE2581 udp argis-te ARGIS TE2582 tcp argis-ds ARGIS DS2582 udp argis-ds ARGIS DS2583 tcp mon MON2583 tcp WinCrash [trojan] WinCrash

2583 tcp WinCrash [trojan] WinCrash2583 udp mon MON2584 tcp cyaserv cyaserv2584 udp cyaserv cyaserv2585 tcp netx-server NETX Server2585 udp netx-server NETX Server2586 tcp netx-agent NETX Agent2586 udp netx-agent NETX Agent2587 tcp masc MASC2587 udp masc MASC2588 tcp privilege Privilege2588 udp privilege Privilege2589 tcp Dagger [trojan] Dagger2589 tcp quartus-tcl quartus tcl2589 udp quartus-tcl quartus tcl2590 tcp idotdist idotdist2590 udp idotdist idotdist2591 tcp maytagshuffle Maytag Shuffle2591 udp maytagshuffle Maytag Shuffle2592 tcp netrek netrek2592 udp netrek netrek2593 tcp mns-mail MNS Mail Notice Service2593 udp mns-mail MNS Mail Notice Service2594 tcp dts Data Base Server2594 udp dts Data Base Server2595 tcp worldfusion1 World Fusion 12595 udp worldfusion1 World Fusion 12596 tcp worldfusion2 World Fusion 22596 udp worldfusion2 World Fusion 22597 tcp homesteadglory Homestead Glory2597 udp homesteadglory Homestead Glory2598 tcp citriximaclient Citrix MA Client2598 udp citriximaclient Citrix MA Client2599 tcp meridiandata Meridian Data2599 udp meridiandata Meridian Data2600 tcp DigitalRootBeer [trojan] Digital RootBeer2600 tcp DigitalRootBeer [trojan] Digital RootBeer2600 tcp hpstgmgr HPSTGMGR2600 tcp zebrasrv zebra service2600 udp hpstgmgr HPSTGMGR2601 tcp discp-client discp client2601 tcp zebra zebra vty2601 udp discp-client discp client2602 tcp discp-server discp server2602 tcp ripd RIPd vty2602 udp discp-server discp server2603 tcp ripngd RIPngd vty2603 tcp servicemeter Service Meter2603 udp servicemeter Service Meter2604 tcp nsc-ccs NSC CCS

2604 tcp ospfd OSPFd vty2604 udp nsc-ccs NSC CCS2605 tcp bgpd BGPd vty2605 tcp nsc-posa NSC POSA2605 udp nsc-posa NSC POSA2606 tcp netmon Dell Netmon2606 udp netmon Dell Netmon2607 tcp connection Dell Connection2607 udp connection Dell Connection2608 tcp wag-service Wag Service2608 udp wag-service Wag Service2609 tcp system-monitor System Monitor2609 udp system-monitor System Monitor2610 tcp versa-tek VersaTek2610 udp versa-tek VersaTek2611 tcp lionhead LIONHEAD2611 udp lionhead LIONHEAD2612 tcp qpasa-agent Qpasa Agent2612 udp qpasa-agent Qpasa Agent2613 tcp smntubootstrap SMNTUBootstrap2613 udp smntubootstrap SMNTUBootstrap2614 tcp neveroffline Never Offline2614 udp neveroffline Never Offline2615 tcp firepower firepower2615 udp firepower firepower2616 tcp appswitch-emp appswitch-emp2616 udp appswitch-emp appswitch-emp2617 tcp cmadmin Clinical Context Managers2617 udp cmadmin Clinical Context Managers2618 tcp priority-e-com Priority E-Com2618 udp priority-e-com Priority E-Com2619 tcp bruce bruce2619 udp bruce bruce2620 tcp lpsrecommender LPSRecommender2620 udp lpsrecommender LPSRecommender2621 tcp miles-apart Miles Apart Jukebox Server2621 udp miles-apart Miles Apart Jukebox Server2622 tcp metricadbc MetricaDBC2622 udp metricadbc MetricaDBC2623 tcp lmdp LMDP2623 udp lmdp LMDP2624 tcp aria Aria2624 udp aria Aria2625 tcp blwnkl-port Blwnkl Port2625 udp blwnkl-port Blwnkl Port2626 tcp gbjd816 gbjd8162626 udp gbjd816 gbjd8162626 tcp ap-defender AP Defender2627 tcp moshebeeri Moshe Beeri2627 tcp webster Network dictionary

2627 udp moshebeeri Moshe Beeri2627 udp webster Network dictionary2628 tcp dict DICT2628 udp dict DICT2629 tcp sitaraserver Sitara Server2629 udp sitaraserver Sitara Server2630 tcp sitaramgmt Sitara Management2630 udp sitaramgmt Sitara Management2631 tcp sitaradir Sitara Dir2631 udp sitaradir Sitara Dir2632 tcp irdg-post IRdg Post2632 udp irdg-post IRdg Post2633 tcp interintelli InterIntelli2633 udp interintelli InterIntelli2634 tcp pk-electronics PK Electronics2634 udp pk-electronics PK Electronics2635 tcp backburner Back Burner2635 udp backburner Back Burner2636 tcp solve Solve2636 udp solve Solve2637 tcp imdocsvc Import Document Service2637 udp imdocsvc Import Document Service2638 tcp sybase Sybase database2638 udp sybaseanywhere Sybase Anywhere2639 tcp aminet AMInet2639 udp aminet AMInet2640 tcp sai_sentlm Sabbagh Associates Licence Manager2640 udp sai_sentlm Sabbagh Associates Licence Manager2641 tcp hdl-srv HDL Server2641 udp hdl-srv HDL Server2642 tcp tragic Tragic2642 udp tragic Tragic2643 tcp gte-samp GTE-SAMP2643 udp gte-samp GTE-SAMP2644 tcp travsoft-ipx-t Travsoft IPX Tunnel2644 udp travsoft-ipx-t Travsoft IPX Tunnel2645 tcp novell-ipx-cmd Novell IPX CMD2645 udp novell-ipx-cmd Novell IPX CMD2646 tcp and-lm AND Licence Manager2646 udp and-lm AND License Manager2647 tcp syncserver SyncServer2647 udp syncserver SyncServer2648 tcp upsnotifyprot Upsnotifyprot2648 udp upsnotifyprot Upsnotifyprot2649 tcp vpsipport VPSIPPORT2649 udp vpsipport VPSIPPORT2650 tcp eristwoguns eristwoguns2650 udp eristwoguns eristwoguns2651 tcp ebinsite EBInSite2651 udp ebinsite EBInSite

2652 tcp interpathpanel InterPathPanel2652 udp interpathpanel InterPathPanel2653 tcp sonus Sonus2653 udp sonus Sonus2654 tcp corel_vncadmin Corel VNC Admin2654 udp corel_vncadmin Corel VNC Admin2655 tcp unglue UNIX Nt Glue2655 udp unglue UNIX Nt Glue2656 tcp kana Kana2656 udp kana Kana2657 tcp sns-dispatcher SNS Dispatcher2657 udp sns-dispatcher SNS Dispatcher2658 tcp sns-admin SNS Admin2658 udp sns-admin SNS Admin2659 tcp sns-query SNS Query2659 udp sns-query SNS Query2660 tcp gcmonitor GC Monitor2660 udp gcmonitor GC Monitor2661 tcp olhost OLHOST2661 udp olhost OLHOST2662 tcp bintec-capi BinTec-CAPI2662 udp bintec-capi BinTec-CAPI2663 tcp bintec-tapi BinTec-TAPI2663 udp bintec-tapi BinTec-TAPI2664 tcp patrol-mq-gm Patrol for MQ GM2664 udp patrol-mq-gm Patrol for MQ GM2665 tcp patrol-mq-nm Patrol for MQ NM2665 udp patrol-mq-nm Patrol for MQ NM2666 tcp extensis extensis2666 udp extensis extensis2667 tcp alarm-clock-s Alarm Clock Server2667 udp alarm-clock-s Alarm Clock Server2668 tcp alarm-clock-c Alarm Clock Client2668 udp alarm-clock-c Alarm Clock Client2669 tcp toad TOAD2669 udp toad TOAD2670 tcp tve-announce TVE Announce2670 udp tve-announce TVE Announce2671 tcp newlixreg newlixreg2671 udp newlixreg newlixreg2672 tcp nhserver nhserver2672 udp nhserver nhserver2673 tcp firstcall42 First Call 422673 udp firstcall42 First Call 422674 tcp ewnn ewnn2674 udp ewnn ewnn2675 tcp ttc-etap TTC ETAP2675 udp ttc-etap TTC ETAP2676 tcp simslink SIMSLink2676 udp simslink SIMSLink

2677 tcp gadgetgate1way Gadget Gate 1 Way2677 udp gadgetgate1way Gadget Gate 1 Way2678 tcp gadgetgate2way Gadget Gate 2 Way2678 udp gadgetgate2way Gadget Gate 2 Way2679 tcp syncserverssl Sync Server SSL2680 tcp pxc-sapxom pxc-sapxom2680 udp pxc-sapxom pxc-sapxom2681 tcp mpnjsomb mpnjsomb2681 udp mpnjsomb mpnjsomb2682 tcp srsp SRSP2682 udp srsp SRSP2683 tcp ncdloadbalance NCDLoadBalance2683 udp ncdloadbalance NCDLoadBalance2684 tcp mpnjsosv mpnjsosv2684 udp mpnjsosv mpnjsosv2685 tcp mpnjsocl mpnjsocl2685 udp mpnjsocl mpnjsocl2686 tcp mpnjsomg mpnjsomg2686 udp mpnjsomg mpnjsomg2687 tcp pq-lic-mgmt pq-lic-mgmt2687 udp pq-lic-mgmt pq-lic-mgmt2688 tcp md-cg-http md-cf-http2688 udp md-cg-http md-cf-http2689 tcp fastlynx FastLynx2689 udp fastlynx FastLynx2690 tcp hp-nnm-data HP NNM Embedded Database2690 udp hp-nnm-data HP NNM Embedded Database2691 tcp itinternet IT Internet2691 udp itinternet IT Internet2692 tcp admins-lms Admins LMS2692 udp admins-lms Admins LMS2693 tcp belarc-http belarc-http2693 udp belarc-http belarc-http2694 tcp pwrsevent pwrsevent2694 udp pwrsevent pwrsevent2695 tcp vspread VSPREAD2695 udp vspread VSPREAD2696 tcp unifyadmin Unify Admin2696 udp unifyadmin Unify Admin2697 tcp oce-snmp-trap Oce SNMP Trap Port2697 udp oce-snmp-trap Oce SNMP Trap Port2698 tcp mck-ivpip MCK-IVPIP2698 udp mck-ivpip MCK-IVPIP2699 tcp csoft-plusclnt Csoft Plus Client2699 udp csoft-plusclnt Csoft Plus Client2700 tcp tqdata tqdata2700 udp tqdata tqdata2701 tcp sms-rcinfo SMS RCINFO2701 udp sms-rcinfo SMS RCINFO2702 tcp BlackDiver [trojan] Black Diver

2702 tcp sms-xfer SMS XFER2702 udp sms-xfer SMS XFER2703 tcp sms-chat SMS CHAT2703 udp sms-chat SMS CHAT2704 tcp sms-remctrl SMS REMCTRL2704 udp sms-remctrl SMS REMCTRL2705 tcp sds-admin SDS Admin2705 udp sds-admin SDS Admin2706 tcp ncdmirroring NCD Mirroring2706 udp ncdmirroring NCD Mirroring2707 tcp emcsymapiport EMCSYMAPIPORT2707 udp emcsymapiport EMCSYMAPIPORT2708 tcp banyan-net Banyan-Net2708 udp banyan-net Banyan-Net2709 tcp supermon Supermon2709 udp supermon Supermon2710 tcp sso-service SSO Service2710 udp sso-service SSO Service2711 tcp sso-control SSO Control2711 udp sso-control SSO Control2712 tcp aocp Axapta Object Communication Protocol2712 udp aocp Axapta Object Communication Protocol2713 tcp raven1 Raven12713 udp raven1 Raven12714 tcp raven2 Raven22715 tcp hpstgmgr2 HPSTGMGR22715 udp hpstgmgr2 HPSTGMGR22716 tcp inova-ip-disco Inova IP Disco2716 tcp ThePrayer [trojan] The Prayer2716 tcp ThePrayer [trojan] The Prayer2716 udp inova-ip-disco Inova IP Disco2717 tcp pn-requester PN REQUESTER2717 udp pn-requester PN REQUESTER2718 tcp pn-requester2 PN REQUESTER 22718 udp pn-requester2 PN REQUESTER 22719 tcp scan-change Scan & Change2719 udp scan-change Scan & Change2720 tcp wkars wkars2720 udp wkars wkars2721 tcp smart-diagnose Smart Diagnose2721 udp smart-diagnose Smart Diagnose2722 tcp proactivesrvr Proactive Server2722 udp proactivesrvr Proactive Server2723 tcp watchdognt WatchDog NT2723 udp watchdognt WatchDog NT2724 tcp qotps qotps2724 udp qotps qotps2725 tcp msolap-ptp2 MSOLAP PTP22725 udp msolap-ptp2 MSOLAP PTP22726 tcp tams TAMS

2726 udp tams TAMS2727 tcp mgcp-callagent Media Gateway Control Protocol Call Agent2727 udp mgcp-callagent Media Gateway Control Protocol Call Agent2728 tcp sqdr SQDR2728 udp sqdr SQDR2729 tcp tcim-control TCIM Control2729 udp tcim-control TCIM Control2730 tcp nec-raidplus NEC RaidPlus2730 udp nec-raidplus NEC RaidPlus2731 tcp netdragon-msngr NetDragon Messanger2731 udp netdragon-msngr NetDragon Messanger2732 tcp g5m G5M2732 udp g5m G5M2733 tcp signet-ctf Signet CTF2733 udp signet-ctf Signet CTF2734 tcp ccs-software CCS Software2734 udp ccs-software CCS Software2735 tcp netiq-mc NetIQ Monitor Console2735 udp netiq-mc NetIQ Monitor Console2736 tcp radwiz-nms-srv RADWIZ NMS SRV2736 udp radwiz-nms-srv RADWIZ NMS SRV2737 tcp srp-feedback SRP Feedback2737 udp srp-feedback SRP Feedback2738 tcp ndl-tcp-ois-gw NDL TCP-OSI Gateway2738 udp ndl-tcp-ois-gw NDL TCP-OSI Gateway2739 tcp tn-timing TN Timing2739 udp tn-timing TN Timing2740 tcp alarm Alarm2740 udp alarm Alarm2741 tcp tsb TSB2741 udp tsb TSB2742 tcp tsb2 TSB22742 udp tsb2 TSB22743 tcp murx murx2743 udp murx murx2744 tcp honyaku honyaku2744 udp honyaku honyaku2745 tcp urbisnet URBISNET2745 udp urbisnet URBISNET2746 tcp cpudpencap CPUDPENCAP2746 udp cpudpencap CPUDPENCAP2747 tcp fjippol-swrly 2747 udp fjippol-swrly 2748 tcp fjippol-polsvr 2748 udp fjippol-polsvr 2749 tcp fjippol-cnsl 2749 udp fjippol-cnsl 2750 tcp fjippol-port1

2750 udp fjippol-port1 2751 tcp fjippol-port2 2751 udp fjippol-port2 2752 tcp rsisysaccess RSISYS ACCESS2752 udp rsisysaccess RSISYS ACCESS2753 tcp de-spot de-spot2753 udp de-spot de-spot2754 tcp apollo-cc APOLLO CC2754 udp apollo-cc APOLLO CC2755 tcp expresspay Express Pay2755 udp expresspay Express Pay2756 tcp simplement-tie simplement-tie2756 udp simplement-tie simplement-tie2757 tcp cnrp CNRP2757 udp cnrp CNRP2758 tcp apollo-status APOLLO Status2758 udp apollo-status APOLLO Status2759 tcp apollo-gms APOLLO GMS2759 udp apollo-gms APOLLO GMS2760 tcp sabams Saba MS2760 udp sabams Saba MS2761 tcp dicom-iscl DICOM ISCL2761 udp dicom-iscl DICOM ISCL2762 tcp dicom-tls DICOM TLS2762 udp dicom-tls DICOM TLS2763 tcp desktop-dna Desktop DNA2763 udp desktop-dna Desktop DNA2764 tcp data-insurance Data Insurance2764 udp data-insurance Data Insurance2765 tcp qip-audup qip-audup2765 udp qip-audup qip-audup2766 tcp compaq-scp Compaq SCP2766 tcp listen System V listener port2766 tcp nlps Solaris Print Services2766 udp compaq-scp Compaq SCP2767 tcp uadtc UADTC2767 udp uadtc UADTC2768 tcp uacs UACS2768 udp uacs UACS2769 tcp singlept-mvs Single Point MVS2769 udp singlept-mvs Single Point MVS2770 tcp veronica Veronica2770 udp veronica Veronica2771 tcp vergencecm Vergence CM2771 udp vergencecm Vergence CM2772 tcp auris auris2772 udp auris auris2773 tcp pcbakcup1 PC Backup2773 tcp SubSeven2.1Gold [trojan] SubSeven 2.1 Gold2773 tcp SubSeven [trojan] SubSeven

2773 tcp SubSeven [trojan] SubSeven2773 udp pcbakcup1 PC Backup2774 tcp pcbakcup2 PC Backup2774 tcp SubSeven2.1Gold [trojan] SubSeven 2.1 Gold2774 tcp SubSeven [trojan] SubSeven2774 udp pcbakcup2 PC Backup2775 tcp smpp SMMP2775 udp smpp SMMP2776 tcp ridgeway1 Ridgeway Systems & Software2776 udp ridgeway1 Ridgeway Systems & Software2777 tcp ridgeway2 Ridgeway Systems & Software2777 udp ridgeway2 Ridgeway Systems & Software2778 tcp gwen-sonya Gwen-Sonya2778 udp gwen-sonya Gwen-Sonya2779 tcp lbc-sync LBC Sync2779 udp lbc-sync LBC Sync2780 tcp lbc-control LBC Control2780 udp lbc-control LBC Control2781 tcp whosells ResolveNet IOM whosells2781 udp whosells ResolveNet IOM whosells2782 tcp everydayrc everydayrc2782 udp everydayrc everydayrc2783 tcp aises AISES2783 udp aises AISES2784 tcp www-dev world wide web - development2784 udp www-dev world wide web - development2785 tcp aic-np aic-np2785 udp aic-np aic-np2786 tcp aic-oncrpc aic-oncrpc - Destiny MCD database2786 udp aic-oncrpc aic-oncrpc - Destiny MCD database2787 tcp piccolo piccolo - Cornerstone Software2787 udp piccolo piccolo - Cornerstone Software2788 tcp fryeserv NetWare Loadable Module - Seagate Software2788 udp fryeserv NetWare Loadable Module - Seagate Software2789 tcp media-agent Media Agent2789 udp media-agent Media Agent2790 tcp plgproxy PLG Proxy2790 udp plgproxy PLG Proxy2791 tcp mtport-regist MT Port Registrator2791 udp mtport-regist MT Port Registrator2792 tcp f5-globalsite f5-globalsite2792 udp f5-globalsite f5-globalsite2793 tcp initlsmsad initlsmsad2793 udp initlsmsad initlsmsad2794 tcp aaftp aaftp2794 udp aaftp aaftp2795 tcp livestats LiveStats2795 udp livestats LiveStats

2796 tcp ac-tech ac-tech2796 udp ac-tech ac-tech2797 tcp esp-encap esp-encap2797 udp esp-encap esp-encap2798 tcp tmesis-upshot TMESIS-UPShot2798 udp tmesis-upshot TMESIS-UPShot2799 tcp icon-discover ICON Discover2799 udp icon-discover ICON Discover2800 tcp acc-raid ACC RAID2800 udp acc-raid ACC RAID2801 tcp igcp IGCP2801 tcp PhineasPhucker [trojan] Phineas Phucker2801 tcp PhineasPhucker [trojan] Phineas Phucker2801 udp igcp IGCP2802 tcp veritas-tcp1 Veritas TCP12802 udp veritas-udp1 Veritas UDP12803 tcp btprjctrl btprjctrl2803 udp btprjctrl btprjctrl2804 tcp telexis-vtu Telexis VTU2804 udp telexis-vtu Telexis VTU2805 tcp wta-wsp-s WTA WSP-S2805 udp wta-wsp-s WTA WSP-S2806 tcp cspuni cspuni2806 udp cspuni cspuni2807 tcp cspmulti cspmulti2807 udp cspmulti cspmulti2808 tcp j-lan-p J-LAN-P2808 udp j-lan-p J-LAN-P2809 tcp corbaloc CORBA LOC2809 udp corbaloc CORBA LOC2810 tcp netsteward Active Net Steward2810 udp netsteward Active Net Steward2811 tcp gsiftp GSI FTP2811 udp gsiftp GSI FTP2812 tcp atmtcp atmtcp2812 udp atmtcp atmtcp2813 tcp llm-pass llm-pass2813 udp llm-pass llm-pass2814 tcp llm-csv llm-csv2814 udp llm-csv llm-csv2815 tcp lbc-measure LBC Measurement2815 udp lbc-measure LBC Measurement2816 tcp lbc-watchdog LBC Watchdog2816 udp lbc-watchdog LBC Watchdog2817 tcp nmsigport NMSig Port2817 udp nmsigport NMSig Port2818 tcp rmlnk rmlnk2818 udp rmlnk rmlnk2819 tcp fc-faultnotify FC Fault Notification2819 udp fc-faultnotify FC Fault Notification

2820 tcp univision UniVision2820 udp univision UniVision2821 tcp vml-dms vml_dms2821 udp vml-dms vml_dms2822 tcp ka0wuc ka0wuc2822 udp ka0wuc ka0wuc2823 tcp cqg-netlan CQG Net LAN2823 udp cqg-netlan CQG Net LAN2824 tcp cqg-netlan-1 CQG Net LAN 12824 udp cqg-netlan-1 CQG Net Lan 12826 tcp slc-systemlog slc systemlog2826 udp slc-systemlog slc systemlog2827 tcp slc-ctrlrloops slc ctrlrloops2827 udp slc-ctrlrloops slc ctrlrloops2828 tcp itm-lm ITM License Manager2828 udp itm-lm ITM License Manager2829 tcp silkp1 silkp12829 udp silkp1 silkp12830 tcp silkp2 silkp22830 udp silkp2 silkp22831 tcp silkp3 silkp32831 udp silkp3 silkp32832 tcp silkp4 silkp42832 udp silkp4 silkp42833 tcp glishd glishd2833 udp glishd glishd2834 tcp evtp EVTP2834 udp evtp EVTP2835 tcp evtp-data EVTP-DATA2835 udp evtp-data EVTP-DATA2836 tcp catalyst catalyst2836 udp catalyst catalyst2837 tcp repliweb Repliweb2837 udp repliweb Repliweb2838 tcp starbot Starbot2838 udp starbot Starbot2839 tcp nmsigport NMSigPort2839 udp nmsigport NMSigPort2840 tcp l3-exprt l3-exprt2840 udp l3-exprt l3-exprt2841 tcp l3-ranger l3-ranger2841 udp l3-ranger l3-ranger2842 tcp l3-hawk l3-hawk2842 udp l3-hawk l3-hawk2843 tcp pdnet PDnet2843 udp pdnet PDnet2844 tcp bpcp-poll BPCP POLL2844 udp bpcp-poll BPCP POLL2845 tcp bpcp-trap BPCP TRAP2845 udp bpcp-trap BPCP TRAP

2846 tcp aimpp-hello AIMPP Hello2846 udp aimpp-hello AIMPP Hello2847 tcp aimpp-port-req AIMPP Port Req2847 udp aimpp-port-req AIMPP Port Req2848 tcp amt-blc-port AMT-BLC-PORT2848 udp amt-blc-port AMT-BLC-PORT2849 tcp fxp FXP2849 udp fxp FXP2850 tcp metaconsole MetaConsole2850 udp metaconsole MetaConsole2851 tcp webemshttp webemshttp2851 udp webemshttp webemshttp2852 tcp bears-01 bears-012852 udp bears-01 bears-012853 tcp ispipes ISPipes2853 udp ispipes ISPipes2854 tcp infomover InfoMover2854 udp infomover InfoMover2856 tcp cesdinv cesdinv2856 udp cesdinv cesdinv2857 tcp simctlp SimCtIP2857 udp simctlp SimCtIP2858 tcp ecnp ECNP2858 udp ecnp ECNP2859 tcp activememory Active Memory2859 udp activememory Active Memory2860 tcp dialpad-voice1 Dialpad Voice 12860 udp dialpad-voice1 Dialpad Voice 12861 tcp dialpad-voice2 Dialpad Voice 22861 udp dialpad-voice2 Dialpad Voice 22862 tcp ttg-protocol TTG Protocol2862 udp ttg-protocol TTG Protocol2863 tcp sonardata Sonar Data2863 udp sonardata Sonar Data2864 tcp astromed-main main 5001 cmd2864 udp astromed-main main 5001 cmd2865 tcp pit-vpn pit-vpn2865 udp pit-vpn pit-vpn2866 tcp lwlistener lwlistener2866 udp lwlistener lwlistener2867 tcp esps-portal esps-portal2867 udp esps-portal esps-portal2868 tcp npep-messaging NPEP Messaging2868 udp npep-messaging NPEP Messaging2869 tcp icslap ICSLAP2869 udp icslap ICSLAP2870 tcp daishi daishi2870 udp daishi daishi2871 tcp msi-selectplay MSI Select Play2871 udp msi-selectplay MSI Select Play

2872 tcp contract CONTRACT2872 udp contract CONTRACT2873 tcp paspar2-zoomin PASPAR2 ZoomIn2873 udp paspar2-zoomin PASPAR2 ZoomIn2874 tcp dxmessagebase1 dxmessagebase12874 udp dxmessagebase1 dxmessagebase12875 tcp dxmessagebase2 dxmessagebase22875 udp dxmessagebase2 dxmessagebase22876 tcp sps-tunnel SPS Tunnel2876 udp sps-tunnel SPS Tunnel2877 tcp bluelance BLUELANCE2877 udp bluelance BLUELANCE2878 tcp aap AAP2878 udp aap AAP2879 tcp ucentric-ds ucentric-ds2879 udp ucentric-ds ucentric-ds2880 tcp synapse synapse2880 udp synapse synapse2881 tcp ndsp NDSP2881 udp ndsp NDSP2882 tcp ndtp NDTP2882 udp ndtp NDTP2883 tcp ndnp NDNP2883 udp ndnp NDNP2884 tcp flashmsg Flash Msg2884 udp flashmsg Flash Msg2885 tcp topflow TopFlow2885 udp topflow TopFlow2886 tcp responselogic RESPONSELOGIC2886 udp responselogic RESPONSELOGIC2887 tcp aironetddp aironet2887 udp aironetddp aironet2888 tcp spcsdlobby SPCSDLOBBY2888 udp spcsdlobby SPCSDLOBBY2889 tcp rsom RSOM2889 udp rsom RSOM2890 tcp cspclmulti CSPCLMULTI2890 udp cspclmulti CSPCLMULTI2891 tcp cinegrfx-elmd CINEGRFX-ELMD License Manager2891 udp cinegrfx-elmd CINEGRFX-ELMD License Manager2892 tcp snifferdata SNIFFERDATA2892 udp snifferdata SNIFFERDATA2893 tcp vseconnector VSECONNECTOR2893 udp vseconnector VSECONNECTOR2894 tcp abacus-remote ABACUS-REMOTE2894 udp abacus-remote ABACUS-REMOTE2895 tcp natuslink NATUS LINK2895 udp natuslink NATUS LINK2896 tcp ecovisiong6-1 ECOVISIONG6-1

2896 udp ecovisiong6-1 ECOVISIONG6-12897 tcp citrix-rtmp Citrix RTMP2897 udp citrix-rtmp Citrix RTMP2898 tcp appliance-cfg APPLIANCE-CFG2898 udp appliance-cfg APPLIANCE-CFG2899 tcp powergemplus POWERGEMPLUS2899 udp powergemplus POWERGEMPLUS2900 tcp quicksuite QUICKSUITE2900 udp quicksuite QUICKSUITE2901 tcp allstorcns ALLSTORCNS2901 udp allstorcns ALLSTORCNS2902 tcp netaspi NET ASPI2902 udp netaspi NET ASPI2903 tcp suitcase SUITCASE2903 udp suitcase SUITCASE2904 tcp m2ua M2UA2904 udp m2ua M2UA2905 tcp m3ua M3UA2905 udp m3ua M3UA2906 tcp caller9 CALLER92906 udp caller9 CALLER92907 tcp webmethods-b2b WEBMETHODS B2B2907 udp webmethods-b2b WEBMETHODS B2B2908 tcp mao mao2908 udp mao mao2909 tcp funk-dialout Funk Dialout2909 udp funk-dialout Funk Dialout2910 tcp tdaccess TDAccess2910 udp tdaccess TDAccess2911 tcp blockade Blockade2911 udp blockade Blockade2912 tcp epicon Epicon2912 udp epicon Epicon2913 tcp boosterware Booster Ware2913 udp boosterware Booster Ware2914 tcp gamelobby Game Lobby2914 udp gamelobby Game Lobby2915 tcp tksocket TK Socket2915 udp tksocket TK Socket2916 tcp elvin_server Elvin Server2916 udp elvin_server Elvin Server2917 tcp elvin_client Elvin Client2917 udp elvin_client Elvin Client2918 tcp kastenchasepad Kasten Chase Pad2918 udp kastenchasepad Kasten Chase Pad2919 tcp roboer ROBOER2919 udp roboer ROBOER2920 tcp roboeda ROBOEDA2920 udp roboeda ROBOEDA2921 tcp cesdcdman CESD Contents Delivery Management

2921 udp cesdcdman CESD Contents Delivery Management2922 tcp cesdcdtrn CESD Contents Delivery Data Transfer2922 udp cesdcdtrn CESD Contents Delivery Data Transfer2923 tcp wta-wsp-wtp-s WTA-WSP-WTP-S2923 udp wta-wsp-wtp-s WTA-WSP-WTP-S2924 tcp precise-vip PRECISE-VIP2924 udp precise-vip PRECISE-VIP2926 tcp mobile-file-dl MOBILE-FILE-DL2926 udp mobile-file-dl MOBILE-FILE-DL2927 tcp unimobilectrl UNIMOBILECTRL2927 udp unimobilectrl UNIMOBILECTRL2928 tcp redstone-cpss REDSTONE-CPSS2928 udp redstone-cpss REDSONTE-CPSS2929 tcp Konik [trojan] Konik2929 tcp panja-webadmin PANJA-WEBADMIN2929 udp panja-webadmin PANJA-WEBADMIN2930 tcp panja-weblinx PANJA-WEBLINX2930 udp panja-weblinx PANJA-WEBLINX2931 tcp circle-x Circle-X2931 udp circle-x Circle-X2932 tcp incp INCP2932 udp incp INCP2933 tcp 4-tieropmgw 4-TIER OPM GW2933 udp 4-tieropmgw 4-TIER OPM GW2934 tcp 4-tieropmcli 4-TIER OPM CLI2934 udp 4-tieropmcli 4-TIER OPM CLI2935 tcp qtp QTP2935 udp qtp QTP2936 tcp otpatch OTPatch2936 udp otpatch OTPatch2937 tcp pnaconsult-lm PNACONSULT-LM2937 udp pnaconsult-lm PNACONSULT-LM2938 tcp sm-pas-1 SM-PAS-12938 udp sm-pas-1 SM-PAS-12939 tcp sm-pas-2 SM-PAS-22939 udp sm-pas-2 SM-PAS-22940 tcp sm-pas-3 SM-PAS-32940 udp sm-pas-3 SM-PAS-32941 tcp sm-pas-4 SM-PAS-42941 udp sm-pas-4 SM-PAS-42942 tcp sm-pas-5 SM-PAS-52942 udp sm-pas-5 SM-PAS-52943 tcp ttnrepository TTNRepository2943 udp ttnrepository TTNRepository2944 tcp megaco-h248 Megaco H-2482944 udp megaco-h248 Megaco H-2482945 tcp h248-binary H248 Binary2945 udp h248-binary H248 Binary2946 tcp fjsvmpor FJSVmpor

2946 udp fjsvmpor FJSVmpor2947 tcp gpsd GPSD2947 udp gpsd GPSD2948 tcp wap-push WAP PUSH2948 udp wap-push WAP PUSH2949 tcp wap-pushsecure WAP PUSH SECURE2949 udp wap-pushsecure WAP PUSH SECURE2950 tcp esip ESIP2950 udp esip ESIP2951 tcp ottp OTTP2951 udp ottp OTTP2952 tcp mpfwsas MPFWSAS2952 udp mpfwsas MPFWSAS2953 tcp ovalarmsrv OVALARMSRV2953 udp ovalarmsrv OVALARMSRV2954 tcp ovalarmsrv-cmd OVALARMSRV-CMD2954 udp ovalarmsrv-cmd OVALARMSRV-CMD2955 tcp csnotify CSNOTIFY2955 udp csnotify CSNOTIFY2956 tcp ovrimosdbman OVRIMOSDBMAN2956 udp ovrimosdbman OVRIMOSDBMAN2957 tcp jmact5 JAMCT52957 udp jmact5 JAMCT52958 tcp jmact6 JAMCT62958 udp jmact6 JAMCT62959 tcp rmopagt RMOPAGT2959 udp rmopagt RMOPAGT2960 tcp dfoxserver DFOXSERVER2960 udp dfoxserver DFOXSERVER2961 tcp boldsoft-lm BOLDSOFT-LM2961 udp boldsoft-lm BOLDSOFT-LM2962 tcp iph-policy-cli IPH-POLICY-CLI2962 udp iph-policy-cli IPH-POLICY-CLI2963 tcp iph-policy-adm IPH-POLICY-ADM2963 udp iph-policy-adm IPH-POLICY-ADM2964 tcp bullant-srap BULLANT SRAP2964 udp bullant-srap BULLANT SRAP2965 tcp bullant-rap BULLANT RAP2965 udp bullant-rap BULLANT RAP2966 tcp idp-infotrieve IDP-INFOTRIEVE2966 udp idp-infotrieve IDP-INFOTRIEVE2967 tcp ssc-agent SSC-AGENT2967 udp ssc-agent SSC-AGENT2968 tcp enpp ENPP2968 udp enpp ENPP2969 tcp essp ESSP2969 udp essp ESSP2970 tcp index-net INDEX-NET2970 udp index-net INDEX-NET2971 tcp netclip Net Clip

2971 udp netclip Net Clip2972 tcp pmsm-webrctl PMSM Webrctl2972 udp pmsm-webrctl PMSM Webrctl2973 tcp svnetworks SV Networks2973 udp svnetworks SV Networks2974 tcp signal Signal2974 udp signal Signal2975 tcp fjmpcm Fujitsu Configuration Management Service2975 udp fjmpcm Fujitsu Configuration Management Service2976 tcp cns-srv-port CNS Server Port2976 udp cns-srv-port CNS Server Port2977 tcp ttc-etap-ns TTCs Enterprise Test Access Protocol - NS2977 udp ttc-etap-ns TTCs Enterprise Test Access Protocol - NS2978 tcp ttc-etap-ds TTCs Enterprise Test Access Protocol - DS2978 udp ttc-etap-ds TTCs Enterprise Test Access Protocol - DS2979 tcp h263-video H.263 Video Streaming2979 udp h263-video H.263 Video Streaming2980 tcp wimd Instant Messaging Service2980 udp wimd Instant Messaging Service2981 tcp mylxamport MYLXAMPORT2981 udp mylxamport MYLXAMPORT2982 tcp iwb-whiteboard IWB-WHITEBOARD2982 udp iwb-whiteboard IWB-WHITEBOARD2983 tcp netplan NETPLAN2983 udp netplan NETPLAN2984 tcp hpidsadmin HPIDSADMIN2984 udp hpidsadmin HPIDSADMIN2985 tcp hpidsagent HPIDSAGENT2985 udp hpidsagnet HPIDSAGENT2986 tcp stonefalls STONEFALLS2986 udp stonefalls STONEFALLS2987 tcp identify ResolveNet IOM IDENTIFY2987 udp identify ResolveNet IOM IDENTIFY2988 tcp classify ResolveNet IOM CLASSIFY2988 udp classify ResolveNet IOM CLASSIFY2989 tcp zarkov ZARKOV2989 udp RAT [trojan] RAT2989 udp RAT [trojan] Remote Administration Tool - RAT2989 udp zarkov ZARKOV2990 tcp boscap BOSCAP2990 udp boscap BOSCAP2991 tcp wkstn-mon WKSTN-MON2991 udp wkstn-mon WKSTN-MON

2992 tcp itb301 ITB3012992 udp itb301 ITB3012993 tcp veritas-vis1 VERITAS VIS12993 udp veritas-vis1 VERITAS VIS12994 tcp veritas-vis2 VERITAS VIS22994 udp veritas-vis2 VERITAS VIS22995 tcp idrs IDRS2995 udp idrs IDRS2996 tcp vsixml vsixml2996 udp vsixml vsixml2997 tcp rebol REBOL2997 udp rebol REBOL2998 tcp realsecure Real Secure sensor2998 udp realsecure Real Secure2999 tcp remoteware-un RemoteWare Unassigned2999 udp remoteware-un RemoteWare Unassigned3000 tcp hbci HBCI3000 tcp InetSpy [trojan] InetSpy3000 tcp ppp User-level ppp daemon3000 tcp RemoteShut [trojan] Remote Shut3000 tcp RemoteShut [trojan] Remote Shut3000 tcp remoteware-cl RemoteWare Client3000 udp hbci HBCI3000 udp remoteware-cl RemoteWare Client3001 tcp nessusd Nessus Security Scanner (www.nessus.org) Daemon3001 tcp redwood-broker Redwood Broker3001 udp redwood-broker Redwood Broker3002 tcp exlm-agent EXLM Agent3002 tcp remoteware-srv RemoteWare Server3002 udp exlm-agent EXLM Agent3002 udp remoteware-srv RemoteWare Server3003 tcp cgms CGMS3003 udp cgms CGMS3004 tcp csoftragent Csoft Agent3004 udp csoftragent Csoft Agent3005 tcp deslogin encrypted symmetric telnet login3005 tcp geniuslm Genius License Manager3005 udp geniuslm Genius License Manager3006 tcp deslogind 3006 tcp ii-admin Instant Internet Admin3006 udp ii-admin Instant Internet Admin3007 tcp lotusmtap Lotus Mail Tracking Agent Protocol3007 udp lotusmtap Lotus Mail Tracking Agent Protocol3008 tcp midnight-tech Midnight Technologies3008 udp midnight-tech Midnight Technologies3009 tcp pxc-ntfy PXC-NTFY3009 udp pxc-ntfy PXC-NTFY3010 tcp gw Telerate Workstation3010 udp ping-pong Telerate Workstation

3010 tcp blazix-adm Blazix webserver administration port3011 tcp trusted-web Trusted Web3011 udp trusted-web Trusted Web3012 tcp twsdss Trusted Web Client3012 udp twsdss Trusted Web Client3013 tcp gilatskysurfer Gilat Sky Surfer3013 udp gilatskysurfer Gilat Sky Surfer3014 tcp broker_service Broker Service3014 udp broker_service Broker Service3015 tcp nati-dstp NATI DSTP3015 udp nati-dstp NATI DSTP3016 tcp notify_srvr Notify Server3016 udp notify_srvr Notify Server3017 tcp event_listener Event Listener3017 udp event_listener Event Listener3018 tcp srvc_registry Service Registry3018 udp srvc_registry Service Registry3019 tcp resource_mgr Resource Manager3019 udp resource_mgr Resource Manager3020 tcp cifs CIFS3020 udp cifs CIFS3021 tcp agriserver AGRI Server3021 udp agriserver AGRI Server3022 tcp csregagent CSREGAGENT3022 udp csregagent CSREGAGENT3023 tcp magicnotes magicnotes3023 udp magicnotes magicnotes3024 tcp nds_sso NDS_SSO3024 tcp WinCrash [trojan] WinCrash3024 tcp WinCrash [trojan] WinCrash3024 udp nds_sso NDS_SSO3025 tcp arepa-raft Arepa Raft3025 udp arepa-raft Arepa Raft3026 tcp agri-gateway AGRI Gateway3026 udp agri-gateway AGRI Gateway3027 tcp LiebDevMgmt_C LiebDevMgmt_C3027 udp LiebDevMgmt_C LiebDevMgmt_C3028 tcp LiebDevMgmt_DM LiebDevMgmt_DM3028 udp LiebDevMgmt_DM LiebDevMgmt_DM3029 tcp LiebDevMgmt_A LiebDevMgmt_A3029 udp LiebDevMgmt_A LiebDevMgmt_A3030 tcp arepa-cas Arepa Cas3030 udp arepa-cas Arepa Cas3031 tcp agentvu AgentVU3031 tcp Microspy [trojan] Microspy3031 udp agentvu AgentVU3032 tcp redwood-chat Redwood Chat3032 udp redwood-chat Redwood Chat3033 tcp pdb PDB

3033 udp pdb PDB3034 tcp osmosis-aeea Osmosis AEEA3034 udp osmosis-aeea Osmosis AEEA3035 tcp fjsv-gssagt FJSV gssagt3035 udp fjsv-gssagt FJSV gssagt3036 tcp hagel-dump Hagel DUMP3036 udp hagel-dump Hagel DUMP3037 tcp hp-san-mgmt HP SAN Mgmt3037 udp hp-san-mgmt HP SAN Mgmt3038 tcp santak-ups Santak UPS3038 udp santak-ups Santak UPS3039 tcp cogitate Cogitate Inc.3039 udp cogitate Cogitate Inc.3040 tcp tomato-springs Tomato Springs3040 udp tomato-springs Tomato Springs3041 tcp di-traceware di-traceware3041 udp di-traceware di-traceware3042 tcp journee journee3042 udp journee journee3043 tcp brp BRP3043 udp brp BRP3044 tcp epp EndPoint Protocol3044 udp epp EndPoint Protocol3045 tcp responsenet ResponseNet3045 udp responsenet ResponseNet3046 tcp di-ase di-ase3046 udp di-ase di-ase3047 tcp hlserver Fast Security HL Server3047 udp hlserver Fast Security HL Server3048 tcp pctrader Sierra Net PC Trader3048 udp pctrader Sierra Net PC Trader3049 tcp cfs cryptographic file system (uses nfs)3049 tcp nsws NSWS3049 udp cfs cryptographic file system (uses nfs)3049 udp nsws NSWS3050 tcp gds_db gds_db3050 udp gds_db gds_db3051 tcp galaxy-server Galaxy Server3051 udp galaxy-server Galaxy Server3052 tcp apcpcns APCPCNS3052 udp apcpcns APCPCNS3053 tcp dsom-server dsom-server3053 udp dsom-server dsom-server3054 tcp amt-cnf-prot AMT CNF PROT3054 udp amt-cnf-prot AMT CNF PROT3055 tcp policyserver Policy Server3055 udp policyserver Policy Server3056 tcp cdl-server CDL Server3056 udp cdl-server CDL Server3057 tcp goahead-fldup GoAhead FldUp

3057 udp goahead-fldup GoAhead FldUp3058 tcp videobeans videobeans3058 udp videobeans videobeans3059 tcp qsoft qsoft3060 tcp interserver interserver3060 udp interserver interserver3061 tcp cautcpd cautcpd3061 udp cautcpd cautcpd3062 tcp ncacn-ip-tcp ncacn-ip-tcp3062 udp ncacn-ip-tcp ncacn-ip-tcp3063 tcp ncadg-ip-udp ncadg-ip-udp3063 udp ncadg-ip-udp ncadg-ip-udp3064 tcp distrib-net-proxy Stupid closed source distributed.net project proxy port3064 tcp rprt Remote Port Redirector3064 udp rprt Remote Port Redirector3065 tcp slinterbase slinterbase3065 udp slinterbase slinterbase3066 tcp netattachsdmp NETATTACHSDMP3066 udp netattachsdmp NETATTACHSDMP3067 tcp fjhpjp FJHPJP3067 udp fjhpjp FJHPJP3068 tcp ls3bcast ls3 Broadcast3068 udp ls3bcast ls3 Broadcast3069 tcp ls3 ls33069 udp ls3 ls33070 tcp mgxswitch MGXSWITCH3070 udp mgxswitch MGXSWITCH3071 tcp csd-mgmt-port ContinuStor Manager Port3071 udp csd-mgmt-port ContinuStor Manager Port3072 tcp csd-monitor ContinuStor Monitor Port3072 udp csd-monitor ContinuStor Monitor Port3073 tcp vcrp Very simple chatroom prot3073 udp vcrp Very simple chatroom prot3074 tcp xbox-live XBox LIVE service3075 tcp orbix-locator Orbix 2000 Locator3075 udp orbix-locator Orbix 2000 Locator3076 tcp orbix-config Orbix 2000 Config3076 udp orbix-config Orbix 2000 Config3077 tcp orbix-loc-ssl Orbix 2000 Locator SSL3078 tcp orbix-cfg-ssl Orbix 2000 Locator SSL3079 tcp lv-frontpanel LV Front Panel3079 udp lv-frontpanel LV Front Panel3080 tcp stm_pproc stm_pproc3080 udp stm_pproc stm_pproc3081 tcp tl1-lv TL1-LV3081 udp tl1-lv TL1-LV3082 tcp tl1-raw TL1-RAW3082 udp tl1-raw TL1-RAW3083 tcp tl1-telnet TL1-TELNET

3083 udp tl1-telnet TL1-TELNET3084 tcp itm-mccs ITM-MCCS3084 udp itm-mccs ITM-MCCS3085 tcp pcihreq PCIHReq3085 udp pcihreq PCIHReq3086 tcp jdl-dbkitchen JDL-DBKitchen3086 tcp sj3 SJ3 (kanji input)3086 udp jdl-dbkitchen JDL-DBKitchen3087 tcp asoki-sma Asoki SMA3087 udp asoki-sma Asoki SMA3088 tcp xdtp eXtensible Data Transfer Protocol3088 udp xdtp eXtensible Data Transfer Protocol3089 tcp ptk-alink ParaTek Agent Linking3089 udp ptk-alink ParaTek Agent Linking3090 tcp rtss Rappore Session Services3090 udp rtss Rappore Session Services3092 tcp njfss Netware sync services3092 udp njfss Netware sync services3093 tcp rapidmq-center Jiiva RapidMQ Center3093 udp rapidmq-center Jiiva RapidMQ Center3094 tcp rapidmq-reg Jiiva RapidMQ Registry3094 udp rapidmq-reg Jiiva RapidMQ Registry3095 tcp panasas Panasas rendevous port3095 udp panasas Panasas rendevous port3096 tcp ndl-aps Active Print Server Port3096 udp ndl-aps Active Print Server Port3097 sctp ituq2150-3-stc ITU Q.2150.3 STC3098 tcp umm-port Universal Message Manager3098 udp umm-port Universal Message Manager3099 tcp chmd CHIPSY Machine Daemon3099 udp chmd CHIPSY Machine Daemon3100 tcp opcon-xps OpCon xps3100 udp opcon-xps OpCon xps3101 tcp hp-pxpib HP PolicyXpert PIB Server3101 udp hp-pxpib HP PolicyXpert PIB Server3102 tcp slslavemon SoftlinK Slave Mon Port3102 udp slslavemon SoftlinK Slave Mon Port3103 tcp autocuesmi Autocue SMI Protocol3103 udp autocuesmi Autocue SMI Protocol3104 tcp autocuelog Autocue Logger Protocol3104 udp autocuetime Autocue Time Service3105 tcp cardbox Cardbox3105 udp cardbox Cardbox3106 tcp cardbox-http Cardbox HTTP3106 udp cardbox-http Cardbox HTTP3107 tcp rdi-business RDI Business protocol3107 udp rdi-business RDI Business protocol3108 tcp rdi-geolocate RDI Geolocate protocol3108 udp rdi-geolocate RDI Geolocate protocol3109 tcp rdi-personnel RDI Personnel protocol

3109 udp rdi-personnel RDI Personnel protocol3110 tcp sim-control simulator control port3110 udp sim-control simulator control port3111 tcp wsynch Web Synchronous Services3111 udp wsynch Web Synchronous Services3128 tcp ReverseWWWTunnel [trojan] Reverse WWW Tunnel Backdoor3128 tcp RingZero [trojan] RingZero3128 tcp RingZero [trojan] RingZero3128 tcp squid-http 3129 tcp MastersParadise [trojan] Masters Paradise3129 tcp MastersParadise [trojan] Masters Paradise3130 tcp icpv2 ICPv23130 udp icpv2 ICPv23130 udp squid-ipc 3131 tcp netbookmark Net Book Mark3131 tcp SubSARI [trojan] SubSARI3131 udp netbookmark Net Book Mark3141 tcp vmodem 3141 udp vmodem 3142 tcp rdc-wh-eos RDC WH EOS3142 udp rdc-wh-eos RDC WH EOS3143 tcp seaview Sea View3143 udp seaview Sea View3144 tcp tarantella Tarantella3144 udp tarantella Tarantella3145 tcp csi-lfap CSI-LFAP3145 udp csi-lfap CSI-LFAP3147 tcp rfio RFIO3147 udp rfio RFIO3148 tcp nm-game-admin NetMike Game Administrator3148 udp nm-game-admin NetMike Game Administrator3149 tcp nm-game-server NetMike Game Server3149 udp nm-game-server NetMike Game Server3150 tcp Foreplay [trojan] Foreplay3150 tcp Foreplay [trojan] Foreplay or Reduced Foreplay3150 tcp MiniBacklash [trojan] Mini Backlash3150 tcp nm-asses-admin NetMike Assessor Administrator3150 tcp TheInvasor [trojan] The Invasor3150 udp DeepThroat [trojan] Deep Throat3150 udp DeepThroat [trojan] Deep Throat3150 udp nm-asses-admin NetMike Assessor Administrator3151 tcp nm-assessor NetMike Assessor3151 udp nm-assessor NetMike Assessor3180 tcp mc-brk-srv Millicent Broker Server3180 udp mc-brk-srv Millicent Broker Server3181 tcp bmcpatrolagent BMC Patrol Agent3181 udp bmcpatrolagent BMC Patrol Agent3182 tcp bmcpatrolrnvu BMC Patrol Rendezvous

3182 udp bmcpatrolrnvu BMC Patrol Rendezvous3200 tcp sap-app SAP R/3 application server3201 tcp cpq-tasksmart CPQ-TaskSmart3201 udp cpq-tasksmart CPQ-TaskSmart3262 tcp necp NECP3262 udp necp NECP3264 tcp ccmail cc:mail lotus3264 udp ccmail cc:mail lotus3265 tcp altav-tunnel Altav Tunnel3265 udp altav-tunnel Altav Tunnel3266 tcp ns-cfg-server NS CFG Server3266 udp ns-cfg-server NS CFG Server3267 tcp ibm-dial-out IBM Dial Out3267 udp ibm-dial-out IBM Dial Out3268 tcp msft-gc Microsoft Global Catalog3268 udp msft-gc Microsoft Global Catalog3269 tcp msft-gc-ssl Microsoft Global Catalog with LDAP SSL3270 tcp verismart Verismart3270 udp verismart Verismart3271 tcp csoft-prev CSoft Prev Port3271 udp csoft-prev CSoft Prev Port3272 tcp user-manager Fujitsu User Manager3272 udp user-manager Fujitsu User Manager3273 tcp sxmp Simple Extensible Multiplexed Protocol3273 udp sxmp Simple Extensible Multiplexed Protocol3274 tcp ordinox-server Ordinox Server3274 udp ordinox-server Ordinox Server3275 tcp samd SAMD3275 udp samd SAMD3276 tcp maxim-asics Maxim ASICs3276 udp maxim-asics Maxim ASICs3277 tcp awg-proxy AWG Proxy3277 udp awg-proxy AWG Proxy3278 tcp lkcmserver LKCM Server3278 udp lkcmserver LKCM Server3279 tcp admind admind3279 udp admind admind3280 tcp vs-server VS Server3280 udp vs-server VS Server3281 tcp sysopt SYSOPT3281 udp sysopt SYSOPT3282 tcp datusorb Datusorb3282 udp datusorb Datusorb3283 tcp net-assistant Net Assistant3283 udp net-assistant Net Assistant3284 tcp 4talk 4Talk3284 udp 4talk 4Talk3285 tcp plato Plato3285 udp plato Plato

3286 tcp e-net E-Net3286 udp e-net E-Net3287 tcp directvdata DIRECTVDATA3287 udp directvdata DIRECTVDATA3288 tcp cops COPS3288 udp cops COPS3289 tcp enpc ENPC3289 udp enpc ENPC3290 tcp caps-lm CAPS LOGISTICS TOOLKIT - LM3290 udp caps-lm CAPS LOGISTICS TOOLKIT - LM3291 tcp sah-lm S A Holditch & Associates - LM3291 udp sah-lm S A Holditch & Associates - LM3292 tcp cart-o-rama Cart O Rama3292 udp cart-o-rama Cart O Rama3293 tcp fg-fps fg-fps3293 udp fg-fps fg-fps3294 tcp fg-gip fg-gip3294 udp fg-gip fg-gip3295 tcp dyniplookup Dynamic IP Lookup3295 udp dyniplookup Dynamic IP Lookup3296 tcp rib-slm Rib License Manager3296 udp rib-slm Rib License Manager3297 tcp cytel-lm Cytel License Manager3297 udp cytel-lm Cytel License Manager3298 tcp transview Transview3298 udp transview Transview3299 tcp pdrncs pdrncs3299 udp pdrncs pdrncs3300 tcp sap-gw SAP Gateway Server3302 tcp mcs-fastmail MCS Fastmail3302 udp mcs-fastmail MCS Fastmail3303 tcp opsession-clnt OP Session Client3303 udp opsession-clnt OP Session Client3304 tcp opsession-srvr OP Session Server3304 udp opsession-srvr OP Session Server3305 tcp odette-ftp ODETTE-FTP3305 udp odette-ftp ODETTE-FTP3306 tcp mysql MySQL3306 udp mysql MySQL3307 tcp opsession-prxy OP Session Proxy3307 udp opsession-prxy OP Session Proxy3308 tcp tns-server TNS Server3308 udp tns-server TNS Server3309 tcp tns-adv TNS ADV3309 udp tns-adv TND ADV3310 tcp dyna-access Dyna Access3310 udp dyna-access Dyna Access3311 tcp mcns-tel-ret MCNS Tel Ret3311 udp mcns-tel-ret MCNS Tel Ret3312 tcp appman-server Application Management Server

3312 udp appman-server Application Management Server3313 tcp uorb Unify Object Broker3313 udp uorb Unify Object Broker3314 tcp uohost Unify Object Host3314 udp uohost Unify Object Host3315 tcp cdid CDID3315 udp cdid CDID3316 tcp aicc-cmi AICC CMI3316 udp aicc-cmi AICC CMI3317 tcp vsaiport VSAI PORT3317 udp vsaiport VSAI PORT3318 tcp ssrip Swith to Swith Routing Information Protocol3318 udp ssrip Swith to Swith Routing Information Protocol3319 tcp sdt-lmd SDT License Manager3319 udp sdt-lmd SDT License Manager3320 tcp officelink2000 Office Link 20003320 udp officelink2000 Office Link 20003321 tcp vnsstr VNSSTR3321 udp vnsstr VNSSTR3322 tcp active-net Active Networks3323 udp active-net Active Networks3324 tcp active-net Active Networks3325 udp active-net Active Networks3326 tcp sftu SFTU3326 udp sftu SFTU3327 tcp bbars BBARS3327 udp bbars BBARS3328 tcp egptlm Eaglepoint License Manager3328 udp egptlm Eaglepoint License Manager3329 tcp hp-device-disc HP Device Disc3329 udp hp-device-disc HP Device Disc3330 tcp mcs-calypsoicf MCS Calypso ICF3330 udp mcs-calypsoicf MCS Calypso ICF3331 tcp mcs-messaging MCS Messaging3331 udp mcs-messaging MCS Messaging3332 tcp mcs-mailsvr MCS Mail Server3332 udp mcs-mailsvr MCS Mail Server3333 tcp dec-notes DEC Notes3333 udp dec-notes DEC Notes3334 tcp directv-web Direct TV Webcasting3334 udp directv-web Direct TV Webcasting3335 tcp directv-soft Direct TV Software Updates3335 udp directv-soft Direct TV Software Updates3336 tcp directv-tick Direct TV Tickers3336 udp directv-tick Direct TV Tickers3337 tcp directv-catlg Direct TV Data Catalog3337 udp directv-catlg Direct TV Data Catalog3338 tcp anet-b OMF data b

3338 udp anet-b OMF data b3339 tcp anet-l OMF data l3339 udp anet-l OMF data l3340 tcp anet-m OMF data m3340 udp anet-m OMF data m3341 tcp anet-h OMF data h3341 udp anet-h OMF data h3342 tcp webtie WebTIE3342 udp webtie WebTIE3343 tcp ms-cluster-net MS Cluster Net3343 udp ms-cluster-net MS Cluster Net3344 tcp bnt-manager BNT Manager3344 udp bnt-manager BNT Manager3345 tcp influence Influence3345 udp influence Influence3346 tcp trnsprntproxy Trnsprnt Proxy3346 udp trnsprntproxy Trnsprnt Proxy3347 tcp phoenix-rpc Phoenix RPC3347 udp phoenix-rpc Phoenix RPC3348 tcp pangolin-laser Pangolin Laser3348 udp pangolin-laser Pangolin Laser3349 tcp chevinservices Chevin Services3349 udp chevinservices Chevin Services3350 tcp findviatv FINDVIATV3350 udp findviatv FINDVIATV3351 tcp btrieve BTRIEVE3351 udp btrieve BTRIEVE3352 tcp ssql SSQL3352 udp ssql SSQL3353 tcp fatpipe FATPIPE3353 udp fatpipe FATPIPE3354 tcp suitjd SUITJD3354 udp suitjd SUITJD3355 tcp ordinox-dbase Ordinox Dbase3355 udp ordinox-dbase Ordinox Dbase3356 tcp upnotifyps UPNOTIFYPS3356 udp upnotifyps UPNOTIFYPS3357 tcp adtech-test Adtech Test IP3357 udp adtech-test Adtech Test IP3358 tcp mpsysrmsvr Mp Sys Rmsvr3358 udp mpsysrmsvr Mp Sys Rmsvr3359 tcp wg-netforce WG NetForce3359 udp wg-netforce WG NetForce3360 tcp kv-server KV Server3360 udp kv-server KV Server3361 tcp kv-agent KV Agent3361 udp kv-agent KV Agent3362 tcp dj-ilm DJ ILM3362 udp dj-ilm DJ ILM3363 tcp nati-vi-server NATI Vi Server

3363 udp nati-vi-server NATI Vi Server3364 tcp creativeserver Creative Server3364 udp creativeserver Creative Server3365 tcp contentserver Content Server3365 udp contentserver Content Server3366 tcp creativepartnr Creative Partner3366 udp creativepartnr Creative Partner3367 ? satvid-datalnk Video Data Link3368 ? satvid-datalnk Video Data Link3369 ? satvid-datalnk Video Data Link3370 ? satvid-datalnk Video Data Link3371 ? satvid-datalnk Video Data Link3372 tcp tip2 TIP 23372 udp tip2 TIP 23373 tcp lavenir-lm Lavenir License Manager3373 udp lavenir-lm Lavenir License Manager3374 tcp cluster-disc Cluster Disc3374 udp cluster-disc Cluster Disc3375 tcp vsnm-agent VSNM Agent3375 udp vsnm-agent VSNM Agent3376 tcp cdborker CD Broker3376 udp cdbroker CD Broker3377 tcp cogsys-lm Cogsys Network License Manager3377 udp cogsys-lm Cogsys Network License Manager3378 tcp wsicopy WSICOPY3378 udp wsicopy WSICOPY3379 tcp socorfs SOCORFS3379 udp socorfs SOCORFS3380 tcp sns-channels SNS Channels3380 udp sns-channels SNS Channels3381 tcp geneous Geneous3381 udp geneous Geneous3382 tcp fujitsu-neat Fujitsu Network Enhanced Antitheft function3382 udp fujitsu-neat Fujitsu Network Enhanced Antitheft function3383 tcp esp-lm Enterprise Software Products License Manager3383 udp esp-lm Enterprise Software Products License Manager3384 tcp hp-clic Cluster Management Services3384 udp hp-clic Hardware Management3385 tcp qnxnetman qnxnetman3385 udp qnxnetman qnxnetman3386 tcp gprs-data GPRS Data3386 udp gprs-sig GPRS SIG3387 tcp backroomnet Back Room Net3387 udp backroomnet Back Room Net3388 tcp cbserver CB Server3388 udp cbserver CB Server

3389 tcp ms-term-services MS Terminal Services3389 udp ms-term-services MS Terminal Services3390 tcp dsc Distributed Service Coordinator3390 udp dsc Distributed Service Coordinator3391 tcp savant SAVANT3391 udp savant SAVANT3392 tcp efi-lm EFI License Management3392 udp efi-lm EFI License Management3393 tcp d2k-tapestry1 D2K Tapestry Client to Server3393 udp d2k-tapestry1 D2K Tapestry Client to Server3394 tcp d2k-tapestry2 D2K Tapestry Server to Server3394 udp d2k-tapestry2 D2K Tapestry Server to Server3395 tcp dyna-lm Dyna License Manager (Elam)3395 udp dyna-lm Dyna License Manager (Elam)3396 tcp printer_agent Printer Agent3396 udp printer_agent Printer Agent3397 tcp cloanto-lm Cloanto License Manager3397 udp cloanto-lm Cloanto License Manager3398 tcp mercantile Mercantile3398 udp mercantile Mercantile3399 tcp csms CSMS3399 udp csms CSMS3400 tcp csms2 CSMS23400 udp csms2 CSMS23401 tcp filecast filecast3401 udp filecast filecast3421 tcp bmap Bull Apprise portmapper3421 udp bmap Bull Apprise portmapper3454 tcp mira Apple Remote Access Protocol3455 tcp prsvp RSVP Port3455 udp prsvp RSVP Port3456 tcp Terrortrojan [trojan] Terror trojan3456 tcp Terrortrojan [trojan] Terror trojan3456 tcp vat VAT default data3456 udp vat VAT default data3457 tcp vat-control VAT default control3457 udp vat-control VAT default control3458 tcp d3winosfi D3WinOsfi3458 udp d3winosfi DsWinOSFI3459 tcp Eclipse2000 [trojan] Eclipse 20003459 tcp Eclipse2000 [trojan] Eclipse 20003459 tcp integral TIP Integral3459 tcp Sanctuary [trojan] Sanctuary3459 udp integral TIP Integral3460 tcp edm-manager EDM Manger3460 udp edm-manager EDM Manger3461 tcp edm-stager EDM Stager3461 udp edm-stager EDM Stager3462 tcp edm-std-notify EDM STD Notify3462 tcp track software distribution

3462 udp edm-std-notify EDM STD Notify3463 tcp edm-adm-notify EDM ADM Notify3463 udp edm-adm-notify EDM ADM Notify3464 tcp edm-mgr-sync EDM MGR Sync3464 udp edm-mgr-sync EDM MGR Sync3465 tcp edm-mgr-cntrl EDM MGR Cntrl3465 udp edm-mgr-cntrl EDM MGR Cntrl3466 tcp workflow WORKFLOW3466 udp workflow WORKFLOW3467 tcp rcst RCST3467 udp rcst RCST3468 tcp ttcmremotectrl TTCM Remote Controll3468 udp ttcmremotectrl TTCM Remote Controll3469 tcp pluribus Pluribus3469 udp pluribus Pluribus3470 tcp jt400 jt4003470 udp jt400 jt4003471 tcp jt400-ssl jt400-ssl3527 udp ms-mmq Microsoft Message Que3535 tcp ms-la MS-LA3535 udp ms-la MS-LA3563 tcp watcomdebug Watcom Debug3563 udp watcomdebug Watcom Debug3600 tcp sap-msg SAP R/3 Message Server3603 tcp polycom-vvws Polycom ViaVideo video conferencing web interface3672 tcp harlequinorb harlequinorb3672 udp harlequinorb harlequinorb3700 tcp PortalofDoom [trojan] Portal of Doom3700 tcp PortalofDoom [trojan] Portal of Doom3709 tcp ca-idms CA-IDMS Server3709 udp ca-idms CA-IDMS Server3777 tcp PsychWard [trojan] PsychWard3782 tcp rwbs Roger Wilco voice chat server3783 udp rwbs Roger Wilco voice chat server3783 tcp game-voice-chat GameSpy Arcade voice chat3791 tcp Eclypse [trojan] Eclypse3791 tcp TotalSolarEclypse [trojan] Total Solar Eclypse3801 tcp TotalSolarEclypse [trojan] Total Solar Eclypse3801 tcp TotalSolarEclypse [trojan] Total Solar Eclypse3801 udp Eclypse [trojan] Eclypse3802 tcp vhd VHD3802 udp vhd VHD3845 tcp v-one-spp V-ONE Single Port Proxy3845 udp v-one-spp V-ONE Single Port Proxy3862 tcp giga-pocket GIGA-POCKET3862 udp giga-pocket GIGA-POCKET3875 tcp pnbscada PNBSCADA3875 udp pnbscada PNBSCADA3900 tcp udt_os Unidata UDT OS

3900 udp udt_os Unidata UDT OS3984 tcp mapper-nodemgr MAPPER network node manager3984 udp mapper-nodemgr MAPPER network node manager3985 tcp mapper-mapethd MAPPER TCP IP server3985 udp mapper-mapethd MAPPER TCP IP server3986 tcp mapper-ws_ethd MAPPER workstation server3986 udp mapper-ws_ethd MAPPER workstation server3987 tcp centerline Centerline3987 udp centerline Centerline4000 tcp terabase Terabase4000 udp terabase Terabase4000 tcp circlemud CircleMUD default server port4000 udp icq ICQ server port4000 tcp Connect-BackBackdoor [trojan] Connect-Back Backdoor4000 tcp SkyDance [trojan] SkyDance4001 tcp newoak NewOak4001 udp newoak NewOak4002 tcp pxc-spvr-ft pxc-spvr-ft4002 udp pxc-spvr-ft pxc-spvr-ft4003 tcp pxc-splr-ft pxc-splr-ft4003 udp pxc-splr-ft pxc-splr-ft4004 tcp pxc-roid pxc-roid4004 udp pxc-roid pxc-roid4005 tcp pxc-pin pxc-pin4005 udp pxc-pin pxc-pin4006 tcp pxc-spvr pxc-spvr4006 udp pxc-spvr pxc-spvr4007 tcp pxc-splr pxc-splr4007 udp pxc-splr pxc-splr4008 tcp netcheque NetCheque accounting4008 udp netcheque NetCheque accounting4009 tcp chimera-hwm Chimera HWM4009 udp chimera-hwm Chimera HWM4010 tcp samsung-unidex Samsung Unidex4010 udp samsung-unidex Samsung Unidex4011 tcp altserviceboot Alternate Service Boot4011 udp altserviceboot Alternate Service Boot4012 tcp pda-gate PDA Gate4012 udp pda-gate PDA Gate4013 tcp acl-manager ACL Manager4013 udp acl-manager ACL Manager4014 tcp taiclock TAICLOCK4014 udp taiclock TAICLOCK4015 tcp talarian-mcast1 Talarian Mcast4015 udp talarian-mcast1 Talarian Mcast4016 tcp talarian-mcast2 Talarian Mcast4016 udp talarian-mcast2 Talarian Mcast4017 tcp talarian-mcast3 Talarian Mcast4017 udp talarian-mcast3 Talarian Mcast

4018 tcp talarian-mcast4 Talarian Mcast4018 udp talarian-mcast4 Talarian Mcast4019 tcp talarian-mcast5 Talarian Mcast4019 udp talarian-mcast5 Talarian Mcast4040 tcp CIPHERim CIPHERim client4042 tcp ldxp LDXP4042 udp ldxp LDXP4045 tcp lockd 4045 udp lockd NFS lock daemon manager4092 tcp WinCrash [trojan] WinCrash4092 tcp WinCrash [trojan] WinCrash4096 tcp bre BRE (Bridge Relay Element)4096 udp bre BRE (Bridge Relay Element)4097 tcp patrolview Patrol View4097 udp patrolview Patrol View4098 tcp drmsfsd drmsfsd4098 udp drmsfsd drmsfsd4099 tcp dpcp DPCP4099 udp dpcp DPCP4132 tcp nuts_dem NUTS Daemon4132 udp nuts_dem NUTS Daemon4133 tcp nuts_bootp NUTS Bootp Server4133 udp nuts_bootp NUTS Bootp Server4134 tcp nifty-hmi NIFTY-Serve HMI protocol4134 udp nifty-hmi NIFTY-Serve HMI protocol4141 tcp oirtgsvc Workflow Server4141 udp oirtgsvc Workflow Server4142 tcp oidocsvc Document Server4142 udp oidocsvc Document Server4143 tcp oidsr Document Replication4143 udp oidsr Document Replication4144 tcp wincim pc windows compuserve.com protocol4160 tcp jini-discovery Jini Discovery4160 udp jini-discovery Jini Discovery4199 tcp eims-admin EIMS ADMIN4199 udp eims-admin EIMS ADMIN4200 vrml vrml-multi-use Multi User Systems4201 tcp Wartrojan [trojan] War trojan4201 vrml vrml-multi-use Multi User Systems4202 vrml vrml-multi-use Multi User Systems4203 vrml vrml-multi-use Multi User Systems4204 vrml vrml-multi-use Multi User Systems4205 vrml vrml-multi-use Multi User Systems4206 vrml vrml-multi-use Multi User Systems4207 vrml vrml-multi-use Multi User Systems4208 vrml vrml-multi-use Multi User Systems4209 vrml vrml-multi-use Multi User Systems4210 vrml vrml-multi-use Multi User Systems4211 vrml vrml-multi-use Multi User Systems4212 vrml vrml-multi-use Multi User Systems

4213 vrml vrml-multi-use Multi User Systems4214 vrml vrml-multi-use Multi User Systems4215 vrml vrml-multi-use Multi User Systems4216 vrml vrml-multi-use Multi User Systems4217 vrml vrml-multi-use Multi User Systems4218 vrml vrml-multi-use Multi User Systems4219 vrml vrml-multi-use Multi User Systems4220 vrml vrml-multi-use Multi User Systems4221 vrml vrml-multi-use Multi User Systems4222 vrml vrml-multi-use Multi User Systems4223 vrml vrml-multi-use Multi User Systems4224 vrml vrml-multi-use Multi User Systems4225 vrml vrml-multi-use Multi User Systems4226 vrml vrml-multi-use Multi User Systems4227 vrml vrml-multi-use Multi User Systems4228 vrml vrml-multi-use Multi User Systems4229 vrml vrml-multi-use Multi User Systems4230 vrml vrml-multi-use Multi User Systems4231 vrml vrml-multi-use Multi User Systems4232 vrml vrml-multi-use Multi User Systems4233 vrml vrml-multi-use Multi User Systems4234 vrml vrml-multi-use Multi User Systems4235 vrml vrml-multi-use Multi User Systems4236 vrml vrml-multi-use Multi User Systems4237 vrml vrml-multi-use Multi User Systems4238 vrml vrml-multi-use Multi User Systems4239 vrml vrml-multi-use Multi User Systems4240 vrml vrml-multi-use Multi User Systems4241 vrml vrml-multi-use Multi User Systems4242 tcp VirtualHackingMachine [trojan] Virtual Hacking Machine - VHM4242 tcp VirtualHackingMachine [trojan] Virtual Hacking Machine - VHM4242 vrml vrml-multi-use Multi User Systems4243 vrml vrml-multi-use Multi User Systems4244 vrml vrml-multi-use Multi User Systems4245 vrml vrml-multi-use Multi User Systems4246 vrml vrml-multi-use Multi User Systems4247 vrml vrml-multi-use Multi User Systems4248 vrml vrml-multi-use Multi User Systems4249 vrml vrml-multi-use Multi User Systems4250 vrml vrml-multi-use Multi User Systems4251 vrml vrml-multi-use Multi User Systems4252 vrml vrml-multi-use Multi User Systems4253 vrml vrml-multi-use Multi User Systems4254 vrml vrml-multi-use Multi User Systems4255 vrml vrml-multi-use Multi User Systems4256 vrml vrml-multi-use Multi User Systems4257 vrml vrml-multi-use Multi User Systems4258 vrml vrml-multi-use Multi User Systems

4259 vrml vrml-multi-use Multi User Systems4260 vrml vrml-multi-use Multi User Systems4261 vrml vrml-multi-use Multi User Systems4262 vrml vrml-multi-use Multi User Systems4263 vrml vrml-multi-use Multi User Systems4264 vrml vrml-multi-use Multi User Systems4265 vrml vrml-multi-use Multi User Systems4266 vrml vrml-multi-use Multi User Systems4267 vrml vrml-multi-use Multi User Systems4268 vrml vrml-multi-use Multi User Systems4269 vrml vrml-multi-use Multi User Systems4270 vrml vrml-multi-use Multi User Systems4271 vrml vrml-multi-use Multi User Systems4272 vrml vrml-multi-use Multi User Systems4273 vrml vrml-multi-use Multi User Systems4274 vrml vrml-multi-use Multi User Systems4275 vrml vrml-multi-use Multi User Systems4276 vrml vrml-multi-use Multi User Systems4277 vrml vrml-multi-use Multi User Systems4278 vrml vrml-multi-use Multi User Systems4279 vrml vrml-multi-use Multi User Systems4280 vrml vrml-multi-use Multi User Systems4281 vrml vrml-multi-use Multi User Systems4282 vrml vrml-multi-use Multi User Systems4283 vrml vrml-multi-use Multi User Systems4284 vrml vrml-multi-use Multi User Systems4285 vrml vrml-multi-use Multi User Systems4286 vrml vrml-multi-use Multi User Systems4287 vrml vrml-multi-use Multi User Systems4288 vrml vrml-multi-use Multi User Systems4289 vrml vrml-multi-use Multi User Systems4290 vrml vrml-multi-use Multi User Systems4291 vrml vrml-multi-use Multi User Systems4292 vrml vrml-multi-use Multi User Systems4293 vrml vrml-multi-use Multi User Systems4294 vrml vrml-multi-use Multi User Systems4295 vrml vrml-multi-use Multi User Systems4296 vrml vrml-multi-use Multi User Systems4297 vrml vrml-multi-use Multi User Systems4298 vrml vrml-multi-use Multi User Systems4299 vrml vrml-multi-use Multi User Systems4300 tcp corelccam Corel CCam4300 udp corelccam Corel CCam4321 tcp BoBo [trojan] BoBo4321 tcp BoBo [trojan] BoBo4321 tcp rwhois Remote Who Is4321 udp rwhois Remote Who Is4329 tcp iMesh iMesh File sharing app4333 tcp msql mini-sql server4343 tcp unicall

4343 udp unicall 4344 tcp vinainstall VinaInstall4344 udp vinainstall VinaInstall4345 tcp m4-network-as Macro 4 Network AS4345 udp m4-network-as Macro 4 Network AS4346 tcp elanlm ELAN LM4346 udp elanlm ELAN LM4347 tcp lansurveyor LAN Surveyor4347 udp lansurveyor LAN Surveyor4348 tcp itose ITOSE4348 udp itose ITOSE4349 tcp fsportmap File System Port Map4349 udp fsportmap File System Port Map4350 tcp net-device Net Device4350 udp net-device Net Device4351 tcp plcy-net-svcs PLCY Net Services4351 udp plcy-net-svcs PLCY Net Services4353 tcp f5-iquery F5 iQuery4353 udp f5-iquery F5 iQuery4442 tcp saris Saris4442 udp saris Saris4443 tcp pharos Pharos4443 udp pharos Pharos4444 tcp CrackDown [trojan] CrackDown4444 tcp krb524 KRB5244444 tcp nv-video NV Video default4444 tcp Prosiak [trojan] Prosiak4444 tcp Prosiak [trojan] Prosiak4444 tcp SwiftRemote [trojan] Swift Remote4444 udp krb524 4444 udp nv-video NV Video default4445 tcp upnotifyp UPNOTIFYP4445 udp upnotifyp UPNOTIFYP4446 tcp n1-fwp N1-FWP4446 udp n1-fwp N1-FWP4447 tcp n1-rmgmt N1-RMGMT4447 udp n1-rmgmt N1-RMGMT4448 tcp asc-slmd ASC Licence Manager4448 udp asc-slmd ASC Licence Manager4449 tcp privatewire PrivateWire4449 udp privatewire PrivateWire4450 tcp camp Camp4450 udp camp Camp4451 tcp ctisystemmsg CTI System Msg4451 udp ctisystemmsg CTI System Msg4452 tcp ctiprogramload CTI Program Load4452 udp ctiprogramload CTI Program Load4453 tcp nssalertmgr NSS Alert Manager4453 udp nssalertmgr NSS Alert Manager4454 tcp nssagentmgr NSS Agent Manager

4454 udp nssagentmgr NSS Agent Manager4455 tcp prchat-user PR Chat User4455 udp prchat-user PR Chat User4456 tcp prchat-server PR Chat Server4456 udp prchat-server PR Chat Server4457 tcp prRegister PR Register4457 udp prRegister PR Register4480 tcp proxyplus ProxyPlus proxy4488 tcp EventHorizon [trojan] Event Horizon4500 tcp sae-urn 4500 udp sae-urn 4501 tcp urn-x-cdchoice urn-x-cdchoice4501 udp urn-x-cdchoice urn-x-cdchoice4523 tcp Celine [trojan] Celine4545 tcp InternalRevise [trojan] Internal Revise4545 tcp worldscores WorldScores4545 udp worldscores WorldScores4546 tcp sf-lm SF License Manager (Sentinel)4546 udp sf-lm SF License Manager (Sentinel)4547 tcp lanner-lm Lanner License Manager4547 udp lanner-lm Lanner License Manager4555 tcp rsip RSIP Port4555 udp rsip RSIP Port4557 tcp fax FlexFax FAX transmission service4559 tcp hylafax HylaFAX client-server protocol4567 tcp FileNail [trojan] File Nail4567 tcp FileNail [trojan] File Nail4567 tcp tram TRAM4567 udp tram TRAM4568 tcp bmc-reporting BMC Reporting4568 udp bmc-reporting BMC Reporting4590 tcp ICQTrojan [trojan] ICQ Trojan4590 tcp ICQTrojan [trojan] ICQ Trojan4600 tcp piranha1 Piranha14600 udp piranha1 Piranha14601 tcp piranha2 Piranha24601 udp piranha2 Piranha24653 tcp Cero [trojan] Cero4661 tcp eDonkey2000 eDonkey2000 Server Default Port4662 tcp eDonkey2000 eDonkey2000 Server Default Port4662 tcp overnet Overnet P2P Server Default Port4663 tcp eDonkey2000 eDonkey2000 Command Line Client4665 udp eDonkey2000 eDonkey2000 Server Messaging Default Port4666 tcp Mneah [trojan] Mneah4672 tcp rfa remote file access server4672 udp rfa remote file access server4800 tcp iims Icona Instant Messenging System

4800 udp iims Icona Instant Messenging System4801 tcp iwec Icona Web Embedded Chat4801 udp iwec Icona Web Embedded Chat4802 tcp ilss Icona License System Server4802 udp ilss Icona License System Server4827 tcp htcp HTCP4827 udp htcp HTCP4837 tcp varadero-0 Varadero-04837 udp varadero-0 Varadero-04838 tcp varadero-1 Varadero-14838 udp varadero-1 Varadero-14839 udp varadero-2 Varadero-24868 tcp phrelay Photon Relay4868 udp phrelay Photon Relay4869 tcp phrelaydbg Photon Relay Debug4869 udp phrelaydbg Photon Relay Debug4885 tcp abbs ABBS4885 udp abbs ABBS4899 tcp radmin Remote Administrator default port4950 tcp ICQTrogenLm [trojan] ICQ Trogen (Lm)4950 tcp ICQTrogen(Lm) [trojan] ICQ Trogen (Lm)4983 tcp att-intercom AT&T Intercom4983 udp att-intercom AT&T Intercom4987 tcp smar-se-port1 SMAR Ethernet Port 14987 udp smar-se-port1 SMAR Ethernet Port 14988 tcp smar-se-port2 SMAR Ethernet Port 24988 udp smar-se-port2 SMAR Ethernet Port 25000 tcp BackDoorSetup [trojan] Back Door Setup5000 tcp BackDoorSetup [trojan] Back Door Setup5000 tcp BioNetLite [trojan] BioNet Lite5000 tcp Blazer5 [trojan] Blazer55000 tcp Bubbel [trojan] Bubbel5000 tcp commplex-main 5000 tcp fics Free Internet Chess Server5000 tcp ICKiller [trojan] ICKiller5000 tcp pitou Pitou P2 CAM Emulator5000 tcp Ra1d [trojan] Ra1d5000 tcp SocketsdesTroie [trojan] Sockets des Troie5000 tcp upnp Universal Plug and Play5000 udp commplex-main 5001 tcp BackDoorSetup [trojan] Back Door Setup5001 tcp BackDoorSetup [trojan] Back Door Setup5001 tcp commplex-link 5001 tcp SocketsdesTroie [trojan] Sockets des Troie5001 udp commplex-link 5002 tcp cd00r [trojan] cd00r5002 tcp LinuxRootkitIV(4) [trojan] Linux Rootkit IV (4)5002 tcp rfe Radio Free Ethernet5002 tcp Shaft [trojan] Shaft5002 tcp Shaft [trojan] Shaft

5002 udp rfe Radio Free Ethernet5003 tcp fmpro-internal FileMaker Inc. - Proprietary transport5003 udp fmpro-internal FileMaker Inc. - Proprietary name binding5004 tcp avt-profile-1 avt-profile-15004 udp avt-profile-1 avt-profile-15005 tcp Aladino [trojan] Aladino5005 tcp avt-profile-2 avt-profile-25005 udp avt-profile-2 avt-profile-25006 tcp wsm-server wsm server5006 udp wsm-server wsm server5007 tcp wsm-server-ssl wsm server ssl5010 tcp Solo [trojan] Solo5010 tcp Solo [trojan] Solo5010 tcp telelpathstart 5010 tcp yahoo Yahoo! Messenger5010 udp telelpathstart 5011 tcp modified [trojan] modified5011 tcp OneoftheLastTrojans [trojan] One of the Last Trojans (OOTLT)5011 tcp telelpathattack 5011 udp telelpathattack 5020 tcp zenginkyo-1 zenginkyo-15020 udp zenginkyo-1 zenginkyo-15021 tcp zenginkyo-2 zenginkyo-25021 udp zenginkyo-2 zenginkyo-25025 tcp WMRemoteKeyLogger [trojan] WM Remote KeyLogger5025 tcp WMRemoteKeyLogger [trojan] WM Remote KeyLogger5031 tcp NetMetropolitan [trojan] Net Metropolitan5031 tcp NetMetropolitan [trojan] Net Metropolitan5032 tcp NetMetropolitan [trojan] Net Metropolitan5032 tcp NetMetropolitan [trojan] Net Metropolitan5042 tcp asnaacceler8db asnaacceler8db5042 udp asnaacceler8db asnaacceler8db5050 tcp mmcc multimedia conference control tool5050 udp mmcc multimedia conference control tool5050 tcp yahoo-server Yahoo Messenger Server (default port)5051 tcp ita-agent ITA Agent5051 udp ita-agent ITA Agent5052 tcp ita-manager ITA Manager5052 udp ita-manager ITA Manager5055 tcp unot UNOT5055 udp unot UNOT5056 tcp intecom-ps1 Intecom PS 15056 udp intecom-ps1 Intecom PS 15057 tcp intecom-ps2 Intecom PS 25057 udp intecom-ps2 Intecom PS 2

5060 tcp sip SIP5060 udp sip SIP5061 tcp sip-tls SIP-TLS5061 udp sip-tls SIP-TLS5066 tcp stanag-5066 STANAG-5066-SUBNET-INTF5066 udp stanag-5066 STANAG-5066-SUBNET-INTF5069 tcp i-net-2000-npr I Net 2000-NPR5069 udp i-net-2000-npr I Net 2000-NPR5071 tcp powerschool PowerSchool5071 udp powerschool PowerSchool5093 tcp sentinel-lm Sentinel LM5093 udp sentinel-lm Sentinel LM5099 tcp sentlm-srv2srv SentLM Srv2Srv5099 udp sentlm-srv2srv SentLM Srv2Srv5100 tcp cobalt-raq ChiliSoft ASP manager for Cobalt RaQ5101 tcp yahoo-peer Yahoo Messenger Peer-to-Peer Listener (default port)5130 udp sgi-dogfight SGI Dogfight demo/game5131 udp sgi-arena SGI Arena demo/game5133 udp sgi-bznet SGI BZ demo port5135 udp sgi-objectserver SGI ObjectServer5136 udp sgi-directoryserver SGI DirectoryServer5137 udp sgi-oortnet SGI Oort demo port5138 udp sgi-vroom-server SGI Vroom demo/game server5139 udp sgi-vroom-client SGI Vroom demo/game client5140 udp sgi-mekton SGI Mekton game5141 udp sgi-mekton SGI Mekton game5142 udp sgi-mekton SGI Mekton game5143 udp sgi-mekton SGI Mekton game5144 udp sgi-mekton SGI Mekton game5145 tcp rmonitor_secure 5145 udp rmonitor_secure 5145 udp sgi-mekton SGI Mekton game5146 udp sgi-mekton SGI Mekton game5147 udp sgi-mekton SGI Mekton game5150 tcp atmp Ascend Tunnel Management Protocol5150 udp atmp Ascend Tunnel Management Protocol5150 udp sgi-pointblank SGI Pointblank game/demo5151 tcp esri_sde ESRI SDE Instance5151 udp esri_sde ESRI SDE Remote Start5152 tcp sde-discovery ESRI SDE Instance Discovery5152 udp sde-discovery ESRI SDE Instance Discovery5165 tcp ife_icorp ife_1corp5165 udp ife_icorp ife_1corp5190 tcp aim America Online Instant Messenger5191 tcp aim America Online Instant Messenger5192 tcp aim America Online Instant Messenger5193 tcp aim America Online Instant Messenger5200 tcp targus-getdata TARGUS GetData

5200 udp targus-getdata TARGUS GetData5201 tcp targus-getdata1 TARGUS GetData 15201 udp targus-getdata1 TARGUS GetData 15202 tcp targus-getdata2 TARGUS GetData 25202 udp targus-getdata2 TARGUS GetData 25203 tcp targus-getdata3 TARGUS GetData 35203 udp targus-getdata3 TARGUS GetData 35232 tcp sgi-dgl SGI Distributed Graphics5236 tcp padl2sim 5236 udp padl2sim 5272 tcp pk PK5272 udp pk PK5300 tcp hacl-hb 5300 udp hacl-hb 5301 tcp hacl-gs 5301 udp hacl-gs 5302 tcp hacl-cfg 5302 udp hacl-cfg 5303 tcp hacl-probe 5303 udp hacl-probe 5304 tcp hacl-local 5304 udp hacl-local 5305 tcp hacl-test 5305 udp hacl-test 5306 tcp sun-mc-grp Sun MC Group5306 udp sun-mc-grp Sun MC Group5307 tcp sco-aip SCO AIP5307 udp sco-aip SCO AIP5308 tcp cfengine 5308 udp cfengine 5309 tcp jprinter J Printer5309 udp jprinter J Printer5310 tcp outlaws Outlaws5310 udp outlaws Outlaws5311 tcp tmlogin TM Login5311 udp tmlogin TM Login5314 tcp opalis-rbt-ipc opalis-rbt-ipc5314 udp opalis-rbt-ipc opalis-rbt-ipc5315 tcp hacl-poll HA Cluster UDP Polling5315 udp hacl-poll HA Cluster UDP Polling5321 tcp Firehotcker [trojan] Firehotcker5321 tcp Firehotcker [trojan] Firehotcker5333 tcp Backage [trojan] Backage5333 tcp NetDemon [trojan] NetDemon5343 tcp WCRat [trojan] wCrat - WC Remote Administration Tool5343 tcp wCrat [trojan] WC Remote Administration Tool5400 tcp BackConstruction [trojan] Back Construction5400 tcp BackConstruction [trojan] Back Construction

5400 tcp BladeRunner [trojan] Blade Runner5400 tcp excerpt Excerpt Search5400 udp excerpt Excerpt Search5401 tcp BackConstruction [trojan] Back Construction5401 tcp BackConstruction [trojan] Back Construction5401 tcp BladeRunner [trojan] Blade Runner5401 tcp excerpts Excerpt Search Secure5401 tcp Mneah [trojan] Mneah5401 udp excerpts Excerpt Search Secure5402 tcp BackConstruction [trojan] Back Construction5402 tcp BackConstruction [trojan] Back Construction5402 tcp BladeRunner [trojan] Blade Runner5402 tcp mftp MFTP5402 tcp Mneah [trojan] Mneah5402 udp mftp MFTP5403 tcp hpoms-ci-lstn HPOMS-CI-LSTN5403 udp hpoms-ci-lstn HPOMS-CI-LSTN5404 tcp hpoms-dps-lstn HPOMS-DPS-LSTN5404 udp hpoms-dps-lstn HPOMS-DPS-LSTN5405 tcp netsupport NetSupport5405 udp netsupport NetSupport5405 tcp PcDuo PcDuo remote control5406 tcp systemics-sox Systemics Sox5406 udp systemics-sox Systemics Sox5407 tcp foresyte-clear Foresyte-Clear5407 udp foresyte-clear Foresyte-Clear5408 tcp foresyte-sec Foresyte-Sec5408 udp foresyte-sec Foresyte-Sec5409 tcp salient-dtasrv Salient Data Server5409 udp salient-dtasrv Salient Data Server5410 tcp salient-usrmgr Salient User Manager5410 udp salient-usrmgr Salient User Manager5411 tcp actnet ActNet5411 udp actnet ActNet5412 tcp continuus Continuus5412 udp continuus Continuus5413 tcp wwiotalk WWIOTALK5413 udp wwiotalk WWIOTALK5414 tcp statusd StatusD5414 udp statusd StatusD5415 tcp ns-server NS Server5415 udp ns-server NS Server5416 tcp sns-gateway SNS Gateway5416 udp sns-gateway SNS Gateway5417 tcp sns-agent SNS Agent5417 udp sns-agent SNS Agent5418 tcp mcntp MCNTP5418 udp mcntp MCNTP5419 tcp dj-ice DJ-ICE5419 udp dj-ice DJ-ICE

5420 tcp cylink-c Cylink-C5420 udp cylink-c Cylink-C5421 tcp netsupport2 Net Support 25421 udp netsupport2 Net Support 25422 tcp salient-mux Salient MUX5422 udp salient-mux Salient MUX5423 tcp virtualuser VIRTUALUSER5423 udp virtualuser VIRTUALUSER5426 tcp devbasic DEVBASIC5426 udp devbasic DEVBASIC5427 tcp sco-peer-tta SCO-PEER-TTA5427 udp sco-peer-tta SCO-PEER-TTA5428 tcp telaconsole TELACONSOLE5428 udp telaconsole TELACONSOLE5429 tcp base Billing and Accounting System Exchange5429 udp base Billing and Accounting System Exchange5430 tcp radec-corp RADEC CORP5430 udp radec-corp RADEC CORP5431 tcp park-agent PARK AGENT5431 udp park-agnet PARK AGENT5432 tcp postgres postgres database server5434 tcp sgi-arrayd SGI Array Services Daemon5435 tcp dttl Data Tunneling Transceiver Linking (DTTL)5435 udp dttl Data Tunneling Transceiver Linking (DTTL)5454 tcp apc-tcp-udp-4 apc-tcp-udp-45454 udp apc-tcp-udp-4 apc-tcp-udp-45455 tcp apc-tcp-udp-5 apc-tcp-udp-55455 udp apc-tcp-udp-5 apc-tcp-udp-55456 tcp apc-tcp-udp-6 apc-tcp-udp-65456 udp apc-tcp-udp-6 apc-tcp-udp-65461 tcp silkmeter SILKMETER5461 udp silkmeter SILKMETER5462 tcp ttl-publisher TTL Publisher5462 udp ttl-publisher TTL Publisher5465 tcp netops-broker NETOPS-BROKER5465 udp netops-broker NETOPS-BROKER5498 tcp hotline Hotline Tracker5499 udp hotline Hotline Server Locator5500 tcp fcp-addr-srvr1 fcp-addr-srvr15500 tcp hotline Hotline server5500 udp fcp-addr-srvr1 fcp-addr-srvr15500 udp securid SecurID5501 tcp fcp-addr-srvr2 fcp-addr-srvr25501 tcp hotline Hotline server5501 udp fcp-addr-srvr2 fcp-addr-srvr25502 tcp fcp-srvr-inst1 fcp-srvr-inst15502 udp fcp-srvr-inst1 fcp-srvr-inst1

5503 tcp fcp-srvr-inst2 fcp-srvr-inst25503 udp fcp-srvr-inst2 fcp-srvr-inst25504 tcp fcp-cics-gw1 fcp-cics-gw15504 udp fcp-cics-gw1 fcp-cics-gw15510 tcp secureidprop ACE Server services5512 tcp IllusionMailer [trojan] Illusion Mailer5517 tcp setiqueue SetiQueue (default port)5520 tcp sdlog ACE Server services5530 tcp sdserv ACE Server services5534 tcp TheFlu [trojan] The Flu5540 tcp sdreport ACE Server services5540 udp sdxauthd ACE Server services5550 tcp sdadmind ACE Server services5550 tcp Xtcp [trojan] Xtcp5550 tcp Xtcp [trojan] Xtcp5554 tcp sgi-esphttp SGI ESP HTTP5554 udp sgi-esphttp SGI ESP HTTP5555 udp rplay 5555 tcp personal-agent Personal Agent5555 udp personal-agent Personal Agent5555 udp sbm-comm SGI Space Boulders game5555 tcp ServeMe [trojan] ServeMe5556 tcp BOFacil [trojan] BO Facil5556 tcp BOFacil [trojan] BO Facil5557 tcp BOFacil [trojan] BO Facil5557 tcp BOFacil [trojan] BO Facil5566 tcp udpplus UDPPlus5566 udp udpplus UDPPlus5569 tcp RoboHack [trojan] Robo-Hack5569 tcp Robo-Hack [trojan] Robo-Hack5599 tcp esinstall Enterprise Security Remote Install5599 udp esinstall Enterprise Security Remote Install5600 tcp esmmanager Enterprise Security Manager5600 udp esmmanager Enterprise Security Manager5601 tcp esmagent Enterprise Security Agent5601 udp esmagent Enterprise Security Agent5602 tcp a1-msc A1-MSC5602 udp a1-msc A1-MSC5603 tcp a1-bs A1-BS5603 udp a1-bs A1-BS5604 tcp a3-sdunode A3-SDUNode5604 udp a3-sdunode A3-SDUNode5605 tcp a4-sdunode A4-SDUNode5605 udp a4-sdunode A4-SDUNode5631 tcp pcanywheredata 5631 udp pcanywheredata 5632 tcp pcanywherestat 5632 udp pcanywherestat 5636 tcp PCCrasher [trojan] PC Crasher5637 tcp PCCrasher [trojan] PC Crasher

5638 tcp PCCrasher [trojan] PC Crasher5678 tcp rrac Remote Replication Agent Connection5678 udp rrac Remote Replication Agent Connection5679 tcp dccm Direct Cable Connect Manager5679 udp dccm Direct Cable Connect Manager5680 tcp canna Canna (Japanese Input)5713 tcp proshareaudio proshare conf audio5713 udp proshareaudio proshare conf audio5714 tcp prosharevideo proshare conf video5714 udp prosharevideo proshare conf video5715 tcp prosharedata proshare conf data5715 udp prosharedata proshare conf data5716 tcp prosharerequest proshare conf request5716 udp prosharerequest proshare conf request5717 tcp prosharenotify proshare conf notify5717 udp prosharenotify proshare conf notify5729 tcp openmail Openmail User Agent Layer5729 udp openmail Openmail User Agent Layer5730 tcp unieng Steltor's calendar access5730 udp unieng Steltor's calendar access5741 tcp ida-discover1 IDA Discover Port 15741 udp ida-discover1 IDA Discover Port 15742 tcp ida-discover2 IDA Discover Port 25742 tcp WinCrash [trojan] WinCrash5742 tcp WinCrash [trojan] WinCrash5742 udp ida-discover2 IDA Discover Port 25745 tcp fcopy-server fcopy-server5745 udp fcopy-server fcopy-server5746 tcp fcopys-server fcopys-server5746 udp fcopys-server fcopys-server5755 tcp openmailg OpenMail Desk Gateway server5755 udp openmailg OpenMail Desk Gateway server5757 tcp x500ms OpenMail X.500 Directory Server5757 udp x500ms OpenMail X.500 Directory Server5760 tcp PortmapRemoteRoot [trojan] Portmap Remote Root Linux Exploit5760 tcp PRRLE [trojan] Portmap Remote Root Linux Exploit5766 tcp openmailns OpenMail NewMail Server5766 udp openmailns OpenMail NewMail Server5767 tcp s-openmail OpenMail Suer Agent Layer (Secure)5767 udp s-openmail OpenMail Suer Agent Layer (Secure)5768 tcp openmailpxy OpenMail CMTS Server5768 udp openmailpxy OpenMail CMTS Server5771 tcp netagent NetAgent5771 udp netagent NetAgent5800 tcp vnc 5801 tcp vnc 5802 tcp Y3KRAT [trojan] Y3K RAT5813 tcp icmpd ICMPD

5813 udp icmpd ICMPD5859 tcp wherehoo WHEREHOO5859 udp wherehoo WHEREHOO5873 tcp SubSeven2.2 [trojan] SubSeven 2.25880 tcp Y3KRAT [trojan] Y3K RAT5882 tcp Y3KRAT [trojan] Y3K RAT5882 udp Y3KRAT [trojan] Y3K RAT5882 udp Y3KRAT [trojan] Y3K RAT5888 tcp Y3KRAT [trojan] Y3K RAT5888 tcp Y3KRAT [trojan] Y3K RAT5888 udp Y3KRAT [trojan] Y3K RAT5889 tcp Y3KRAT [trojan] Y3K RAT5900 tcp vnc Virtual Network Computer5901 tcp vnc-1 Virtual Network Computer Display :15902 tcp vnc-2 Virtual Network Computer Display :25968 tcp mppolicy-v5 mppolicy-v55968 udp mppolicy-v5 mppolicy-v55969 tcp mppolicy-mgr mppolicy-mgr5969 udp mppolicy-mgr mppolicy-mgr5977 tcp ncd-pref-tcp NCD preferences tcp port5978 tcp ncd-diag-tcp NCD diagnostic tcp port5979 tcp ncd-conf-tcp NCD configuration tcp port5987 tcp wbem-rmi WBEM RMI5987 udp wbem-rmi WBEM RMI5988 tcp wbem-http WBEM HTTP5988 udp wbem-http WBEM HTTP5989 tcp wbem-https WBEM HTTPS5989 udp wbem-https WBEM HTTPS5997 tcp ncd-pref NCD preferences telnet port5998 tcp ncd-diag NCD diagnostic telnet port5999 tcp cvsup CVSup5999 tcp ncd-conf NCD configuration telnet port5999 udp cvsup CVSup6000 tcp x11 X Window System6000 udp x11 X Window System6000 tcp TheThing [trojan] The Thing6001 tcp x11 X Window System6001 udp x11 X Window System6002 tcp x11 X Window System6002 udp x11 X Window System6003 tcp x11 X Window System6003 udp x11 X Window System6004 tcp x11 X Window System6004 udp x11 X Window System6005 tcp x11 X Window System6005 udp x11 X Window System6006 tcp x11 X Window System6006 udp x11 X Window System6006 tcp BadBlood [trojan] Bad Blood6007 tcp x11 X Window System

6007 udp x11 X Window System6008 tcp x11 X Window System6008 udp x11 X Window System6009 tcp x11 X Window System6009 udp x11 X Window System6010 tcp x11 X Window System6010 udp x11 X Window System6011 tcp x11 X Window System6011 udp x11 X Window System6012 tcp x11 X Window System6012 udp x11 X Window System6013 tcp x11 X Window System6013 udp x11 X Window System6014 tcp x11 X Window System6014 udp x11 X Window System6015 tcp x11 X Window System6015 udp x11 X Window System6015 tcp sunONE-doc Sun ONE Starter Kit documentation via ASTAWare SearchDisk6016 tcp x11 X Window System6016 udp x11 X Window System6016 tcp sunONE-doc Sun ONE Starter Kit documentation via ASTAWare SearchDisk6017 tcp x11 X Window System6017 udp x11 X Window System6017 tcp sunONE-doc Sun ONE Starter Kit documentation via ASTAWare SearchDisk6018 tcp x11 X Window System6018 udp x11 X Window System6018 tcp sunONE-doc Sun ONE Starter Kit documentation via ASTAWare SearchDisk6019 tcp x11 X Window System6019 udp x11 X Window System6020 tcp x11 X Window System6020 udp x11 X Window System6021 tcp x11 X Window System6021 udp x11 X Window System6022 tcp x11 X Window System6022 udp x11 X Window System6023 tcp x11 X Window System6023 udp x11 X Window System6024 tcp x11 X Window System6024 udp x11 X Window System6025 tcp x11 X Window System6025 udp x11 X Window System6026 tcp x11 X Window System6026 udp x11 X Window System6027 tcp x11 X Window System6027 udp x11 X Window System6028 tcp x11 X Window System

6028 udp x11 X Window System6029 tcp x11 X Window System6029 udp x11 X Window System6030 tcp x11 X Window System6030 udp x11 X Window System6031 tcp x11 X Window System6031 udp x11 X Window System6032 tcp x11 X Window System6032 udp x11 X Window System6033 tcp x11 X Window System6033 udp x11 X Window System6034 tcp x11 X Window System6034 udp x11 X Window System6035 tcp x11 X Window System6035 udp x11 X Window System6036 tcp x11 X Window System6036 udp x11 X Window System6037 tcp x11 X Window System6037 udp x11 X Window System6038 tcp x11 X Window System6038 udp x11 X Window System6039 tcp x11 X Window System6039 udp x11 X Window System6040 tcp x11 X Window System6040 udp x11 X Window System6041 tcp x11 X Window System6041 udp x11 X Window System6042 tcp x11 X Window System6042 udp x11 X Window System6043 tcp x11 X Window System6043 udp x11 X Window System6044 tcp x11 X Window System6044 udp x11 X Window System6045 tcp x11 X Window System6045 udp x11 X Window System6046 tcp x11 X Window System6046 udp x11 X Window System6047 tcp x11 X Window System6047 udp x11 X Window System6048 tcp x11 X Window System6048 udp x11 X Window System6049 tcp x11 X Window System6049 udp x11 X Window System6050 tcp x11 X Window System6050 udp x11 X Window System6051 tcp x11 X Window System6051 udp x11 X Window System6052 tcp x11 X Window System6052 udp x11 X Window System6053 tcp x11 X Window System

6053 udp x11 X Window System6054 tcp x11 X Window System6054 udp x11 X Window System6055 tcp x11 X Window System6055 udp x11 X Window System6056 tcp x11 X Window System6056 udp x11 X Window System6057 tcp x11 X Window System6057 udp x11 X Window System6058 tcp x11 X Window System6058 udp x11 X Window System6059 tcp x11 X Window System6059 udp x11 X Window System6060 tcp x11 X Window System6060 udp x11 X Window System6061 tcp x11 X Window System6061 udp x11 X Window System6062 tcp x11 X Window System6062 udp x11 X Window System6063 tcp x11 X Window System6063 udp x11 X Window System6064 tcp ndl-ahp-svc NDL-AHP-SVC6064 udp ndl-ahp-svc NDL-AHP-SVC6065 tcp winpharaoh WinPharaoh6065 udp winpharaoh WinPharaoh6066 tcp ewctsp EWCTSP6066 udp ewctsp EWCTSP6067 tcp srb SRB6067 udp srb SRB6068 tcp gsmp GSMP6068 udp gsmp GSMP6069 tcp trip TRIP6069 udp trip TRIP6070 tcp messageasap Messageasap6070 udp messageasap Messageasap6071 tcp ssdtp SSDTP6071 udp ssdtp SSDTP6072 tcp diagnose-proc DIAGNOSE-PROC6072 udp diagmose-proc DIAGNOSE-PROC6073 tcp directplay8 DirectPlay86073 udp directplay8 DirectPlay86100 tcp synchronet-db SynchroNet-db6100 udp synchronet-db SynchroNet-db6101 tcp synchronet-rtc SynchroNet-rtc6101 udp synchronet-rtc SynchroNet-rtc6101 tcp backupexec Veritas Backup Exec Advertiser6102 tcp synchronet-upd SynchroNet-upd6102 udp synchronet-upd SynchroNet-upd6102 tcp backupexec Veritas Backup Exec Client6103 tcp rets RETS

6103 udp rets RETS6103 tcp backupexec Veritas Backup Exec Remote Agent6104 tcp dbdb DBDB6104 udp dbdb DBDB6105 tcp primaserver Prima Server6105 udp primaserver Prima Server6106 tcp mpsserver MPS Server6106 udp mpsserver MPS Server6107 tcp etc-control ETC Control6107 udp etc-control ETC Control6108 tcp sercomm-scadmin Sercomm-SCAdmin6108 udp sercomm-scadmin Sercomm-SCAdmin6109 tcp globecast-id GLOBECAST-ID6109 udp globecast-id GLOBECAST-ID6110 tcp softcm HP SoftBench CM6110 udp softcm HP SoftBench CM6111 tcp spc HP SoftBench Sub-Process Control6111 udp spc HP SoftBench Sub-Process Control6112 tcp dtspc CDE subprocess control6112 tcp fsgs FSGS (game)6112 udp dtspcd dtspcd6112 udp fsgs FSGS (game)6123 tcp backup-express Backup Express6123 udp backup-express Backup Express6129 tcp DameWare DameWare remote control agent6141 tcp meta-corp Meta Corporation License Manager6141 udp meta-corp Meta Corporation License Manager6142 tcp aspentec-lm Aspen Technology License Manager6142 udp aspentec-lm Aspen Technology License Manager6143 tcp watershed-lm Watershed License Manager6143 udp watershed-lm Watershed License Manager6144 tcp statsci1-lm StatSci License Manager - 16144 udp statsci1-lm StatSci License Manager - 16145 tcp statsci2-lm StatSci License Manager - 26145 udp statsci2-lm StatSci License Manager - 26146 tcp lonewolf-lm Lone Wolf Systems License Manager6146 udp lonewolf-lm Lone Wolf Systems License Manager6147 tcp montage-lm Montage License Manager6147 udp montage-lm Montage License Manager6148 tcp ricardo-lm Ricardo North America License Manager6148 udp ricardo-lm Ricardo North America License Manager6149 tcp tal-pod tal-pod6149 udp tal-pod tal-pod6253 tcp crip CRIP6253 udp crip CRIP6257 udp WinMX WinMX file sharing app6272 tcp SecretService [trojan] Secret Service6272 tcp SecretService [trojan] Secret Service

6300 tcp bmc-grx BMC GRX6300 udp bmc-grx BMC GRX6321 tcp emp-server1 Empress Software Connectivity Server 16321 udp emp-server1 Empress Software Connectivity Server 16322 tcp emp-server2 Empress Software Connectivity Server 26322 udp emp-server2 Empress Software Connectivity Server 26346 tcp gnutella gnutella (bearshare, limewire, etc.)6346 udp gnutella gnutella (bearshare, limewire, etc.)6347 tcp gnutella gnutella (bearshare, limewire, etc.)6347 udp gnutella gnutella (bearshare, limewire, etc.)6348 tcp gnutella gnutella (bearshare, limewire, etc.)6348 udp gnutella gnutella (bearshare, limewire, etc.)6389 tcp clariion-evr01 clariion-evr016389 udp clariion-evr01 clariion-evr016400 tcp info-aps 6400 tcp TheThing [trojan] The Thing6401 tcp info-was 6402 tcp info-eventsvr 6403 tcp info-cachesvr 6404 tcp info-filesvr 6405 tcp info-pagesvr 6406 tcp info-processvr 6407 n/a reserved1 6408 n/a reserved2 6409 n/a reserved3 6410 n/a reserved4 6455 tcp skip-cert-recv SKIP Certificate Receive6456 tcp skip-cert-send SKIP Certificate Send6471 tcp lvision-lm LVision License Manager6471 udp lvision-lm LVision License Manager6499 tcp is411 IS4116500 tcp boks BoKS Master6500 udp boks BoKS Master6500 tcp game-query GameSpy Arcade query port6501 tcp boks_servc BoKS Servc6501 udp boks_servc BoKS Servc6502 tcp boks_servm BoKS Servm6502 udp boks_servm BoKS Servm6503 tcp boks_clntd BoKS Clntd6503 udp boks_clntd BoKS Clntd6505 tcp badm_priv BoKS Admin Private Port6505 udp badm_priv BoKS Admin Private Port6506 tcp badm_pub BoKS Admin Public Port6506 udp badm_pub BoKS Admin Public Port6507 tcp bdir_priv BoKS Dir Server Private Port6507 udp bdir_priv BoKS Dir Server Private Port

6508 tcp bdir_pub BoKS Dir Server Public Port6508 udp bdir_pub BoKS Dir Server Public Port6515 tcp McAfee-http McAfee ASap Virusscan agent6515 udp game-play GameSpy Arcade game data6547 tcp apc-tcp-udp-1 apc-tcp-udp-16547 udp apc-tcp-udp-1 apc-tcp-udp-16548 tcp apc-tcp-udp-2 apc-tcp-udp-26548 udp apc-tcp-udp-2 apc-tcp-udp-26549 tcp apc-tcp-udp-3 apc-tcp-udp-36549 udp apc-tcp-udp-3 apc-tcp-udp-36550 tcp fg-sysupdate fg-sysupdate6550 udp fg-sysupdate fg-sysupdate6558 tcp xdsxdm 6558 udp xdsxdm 6580 tcp parsec-master Parsec Masterserver6580 udp parsec-master Parsec Masterserver6581 tcp parsec-peer Parsec Peer-to-Peer6581 udp parsec-peer Parsec Peer-to-Peer6582 tcp parsec-game Parsec Gameserver6582 udp parsec-game Parsec Gameserver6588 tcp analogx-proxy AnalogX Proxy Server6661 tcp TEMan [trojan] TEMan6661 tcp Weia-Meia [trojan] Weia-Meia6665 tcp ircu IRCU6666 tcp DarkConnectionInside [trojan] Dark Connection Inside6666 tcp DarkConnection [trojan] Dark Connection6666 tcp irc-serv internet relay chat server6666 tcp ircu IRCU6666 tcp NetBusworm [trojan] NetBus worm6666 tcp TCPShell.c [trojan] TCPShell.c6667 tcp DarkFTP [trojan] Dark FTP6667 tcp EGO [trojan] EGO6667 tcp irc Internet Relay Chat6667 tcp ircu IRCU6667 tcp kaitex Kaitex Trojan6667 tcp Maniacrootkit [trojan] Maniac rootkit6667 tcp Moses [trojan] Moses6667 tcp ScheduleAgent [trojan] ScheduleAgent6667 tcp ScheduleAgent [trojan] ScheduleAgent6667 tcp Subseven2.1.4DefCon8 [trojan] Subseven 2.1.4 DefCon 86667 tcp SubSeven [trojan] SubSeven6667 tcp TheThing [trojan] The Thing (modified)6667 tcp Trinity [trojan] Trinity6667 tcp WinSatan [trojan] WinSatan6668 tcp irc Internet Relay Chat6668 tcp ircu IRCU6669 tcp HostControl [trojan] Host Control6669 tcp HostControl [trojan] Host Control

6669 tcp ircu IRCU6669 tcp Vampire [trojan] Vampire6670 tcp BackWebServer [trojan] BackWeb Server6670 tcp BackWebServer [trojan] BackWeb Server6670 tcp DeepThroat [trojan] Deep Throat6670 tcp DeepThroat [trojan] DeepThroat6670 tcp Foreplay [trojan] Foreplay6670 tcp vocaltec-gold Vocaltec Global Online Directory6670 tcp WinNukeeXtreame [trojan] WinNuke eXtreame6670 udp vocaltec-gold Vocaltec Global Online Directory6671 tcp DeepThroat [trojan] DeepThroat v3.16672 tcp vision_server vision_server6672 udp vision_server vision_server6673 tcp vision_elmd vision_elmd6673 udp vision_elmd vision_elmd6699 tcp napster Napster Music Sharing Client6699 tcp WinMX WinMX file sharing app6701 tcp kti-icad-srvr KTI ICAD Nameserver6701 udp kti-icad-srvr KTI ICAD Nameserver6711 tcp BackDoorG [trojan] BackDoor-G6711 tcp BackDoor-G [trojan] BackDoor-G6711 tcp SubSARI [trojan] SubSARI6711 tcp SubSeven [trojan] SubSeven6711 tcp VPKiller [trojan] VP Killer6712 tcp Funnytrojan [trojan] Funny trojan6712 tcp Funnytrojan [trojan] Funny trojan6712 tcp SubSeven [trojan] SubSeven6713 tcp SubSeven [trojan] SubSeven6713 tcp SubSeven [trojan] SubSeven6714 tcp ibprotocol Internet Backplane Protocol6714 udp ibprotocol Internet Backplane Protocol6723 tcp Mstream [trojan] Mstream6723 tcp Mstream [trojan] Mstream6767 tcp bmc-perf-agent BMC PERFORM AGENT6767 tcp UandMe [trojan] UandMe6767 udp bmc-perf-agent BMC PERFORM AGENT6768 tcp bmc-perf-mgrd BMC PERFORM MGRD6768 udp bmc-perf-mgrd BMC PERFORM MGRD6771 tcp DeepThroat [trojan] Deep Throat6771 tcp Foreplay [trojan] Foreplay6776 tcp 2000Cracks [trojan] 2000 Cracks6776 tcp 2000Cracks [trojan] 2000 Cracks6776 tcp BackDoor-G [trojan] BackDoor-G6776 tcp SubSeven [trojan] SubSeven6776 tcp VPKiller [trojan] VP Killer6789 tcp ibm-db2-admin dB2 Web Control Center6790 tcp hnmp HNMP6790 udp hnmp HNMP6831 tcp ambit-lm ambit-lm6831 udp ambit-lm ambit-lm

6838 udp Mstream [trojan] Mstream6838 udp Mstream [trojan] Mstream6841 tcp netmo-default Netmo Default6841 udp netmo-default Netmo Default6842 tcp netmo-http Netmo HTTP6842 udp netmo-http Netmo HTTP6850 tcp iccrushmore ICCRUSHMORE6850 udp iccrushmore ICCRUSHMORE6883 tcp DeltaSourceDarkStar [trojan] Delta Source DarkStar (??)6883 tcp DeltaSourceDarkStar [trojan] Delta Source DarkStar6888 tcp muse MUSE6888 udp muse MUSE6912 tcp ShitHeep [trojan] Shit Heep6912 tcp ShitHeep [trojan] Shit Heep6939 tcp Indoctrination [trojan] Indoctrination6939 tcp Indoctrination [trojan] Indoctrination6961 tcp jmact3 JMACT36961 udp jmact3 JMACT36962 tcp jmevt2 jmevt26962 udp jmevt2 jmevt26963 tcp swismgr1 swismgr16963 udp swismgr1 swismgr16964 tcp swismgr2 swismgr26964 udp swismgr2 swismgr26965 tcp swistrap swistrap6965 udp swistrap swistrap6966 tcp swispol swispol6966 udp swispol swispol6969 tcp 2000Cracks [trojan] 2000 Cracks6969 tcp acmsoda 6969 tcp Danton [trojan] Danton6969 tcp GateCrasher [trojan] GateCrasher6969 tcp GateCrasher [trojan] GateCrasher6969 tcp IRC3 [trojan] IRC 36969 tcp NetController [trojan] Net Controller6969 tcp Priority [trojan] Priority6969 udp acmsoda 6970 tcp GateCrasher [trojan] GateCrasher6970 tcp GateCrasher [trojan] GateCrasher6998 tcp iatp-highpri IATP-highPri6998 udp iatp-highpri IATP-highPri6999 tcp iatp-normalpri IATP-normalPri6999 udp iatp-normalpri IATP-normalPri7000 tcp afs3-fileserver file server itself7000 udp afs3-fileserver file server itself7000 tcp irc2 IRC27000 tcp ExploitTranslation [trojan] Exploit Translation Server7000 tcp Kazimas [trojan] Kazimas7000 tcp RemoteGrab [trojan] Remote Grab

7000 tcp SubSeven2.1Gold [trojan] SubSeven 2.1 Gold7000 tcp SubSeven [trojan] SubSeven7001 tcp afs3-callback callbacks to cache managers7001 tcp Freak2k [trojan] Freak2k7001 tcp Freak88 [trojan] Freak887001 tcp Freak88 [trojan] Freak887001 tcp NetSnooperGold [trojan] NetSnooper Gold7001 udp afs3-callback callbacks to cache managers7002 tcp afs3-prserver users & groups database7002 udp afs3-prserver users & groups database7003 tcp afs3-vlserver volume location database7003 udp afs3-vlserver volume location database7004 tcp afs3-kaserver AFS Kerberos authentication service7004 udp afs3-kaserver AFS Kerberos authentication service7005 tcp afs3-volser volume managment server7005 udp afs3-volser volume managment server7006 tcp afs3-errors error interpretation service7006 udp afs3-errors error interpretation service7007 tcp afs3-bos basic overseer process7007 udp afs3-bos basic overseer process7008 tcp afs3-update server-to-server updater7008 udp afs3-update server-to-server updater7009 tcp afs3-rmtsys remote cache manager service7009 udp afs3-rmtsys remote cache manager service7010 tcp ups-onlinet onlinet uninterruptable power supplies7010 udp ups-onlinet onlinet uninterruptable power supplies7011 tcp talon-disc Talon Discovery Port7011 udp talon-disc Talon Discovery Port7012 tcp talon-engine Talon Engine7012 udp talon-engine Talon Engine7013 tcp microtalon-dis Microtalon Discovery7013 udp microtalon-dis Microtalon Discovery7014 tcp microtalon-com Microtalon Communications7014 udp microtalon-com Microtalon Communications7015 tcp talon-webserver Talon Webserver7015 udp talon-webserver Talon Webserver7020 tcp dpserve DP Serve7020 udp dpserve DP Serve7021 tcp dpserveadmin DP Serve Admin7021 udp dpserveadmin DP Serve Admin7070 tcp arcp ARCP7070 udp arcp ARCP7070 tcp real Real Audio7099 tcp lazy-ptop lazy-ptop7099 udp lazy-ptop lazy-ptop7100 tcp font-service X Font Service7100 udp font-service X Font Service7121 tcp virprot-lm Virtual Prototypes License Manager7121 udp virprot-lm Virtual Prototypes License Manager7158 tcp Lohoboyshik [trojan] Lohoboyshik

7174 tcp clutild Clutild7174 udp clutild Clutild7200 tcp fodms FODMS FLIP7200 udp fodms FODMS FLIP7201 tcp dlip 7201 udp dlip 7215 tcp SubSeven2.1Gold [trojan] SubSeven 2.1 Gold7215 tcp SubSeven [trojan] SubSeven7215 tcp SubSeven [trojan] SubSeven7280 tcp itactionserver1 ITACTIONSERVER 17280 udp itactionserver1 ITACTIONSERVER 17281 tcp itactionserver2 ITACTIONSERVER 27281 udp itactionserver2 ITACTIONSERVER 27300 tcp NetMonitor [trojan] NetMonitor7300 tcp NetMonitor [trojan] NetMonitor7300 tcp ODD ODD Packet - Remote Grab7300 tcp swx Swiss Exchange7301 tcp NetMonitor [trojan] NetMonitor7301 tcp NetMonitor [trojan] NetMonitor7301 tcp swx Swiss Exchange7302 tcp swx Swiss Exchange7303 tcp swx Swiss Exchange7304 tcp swx Swiss Exchange7305 tcp swx Swiss Exchange7306 tcp NetMonitor [trojan] NetMonitor7306 tcp NetMonitor [trojan] NetMonitor7306 tcp swx Swiss Exchange7307 tcp NetMonitor [trojan] NetMonitor7307 tcp NetMonitor [trojan] NetMonitor7307 tcp RemoteProcessMonitor [trojan] Remote Process Monitor7307 tcp swx Swiss Exchange7308 tcp NetMonitor [trojan] NetMonitor7308 tcp NetMonitor [trojan] NetMonitor7308 tcp swx Swiss Exchange7308 tcp XSpy [trojan] X Spy7309 tcp swx Swiss Exchange7310 tcp swx Swiss Exchange7311 tcp swx Swiss Exchange7312 tcp swx Swiss Exchange7313 tcp swx Swiss Exchange7314 tcp swx Swiss Exchange7315 tcp swx Swiss Exchange7316 tcp swx Swiss Exchange7317 tcp swx Swiss Exchange7318 tcp swx Swiss Exchange7319 tcp swx Swiss Exchange7320 tcp swx Swiss Exchange7321 tcp swx Swiss Exchange7322 tcp swx Swiss Exchange

7323 tcp swx Swiss Exchange7323 tcp sygate Sygate Management Console7324 tcp swx Swiss Exchange7325 tcp swx Swiss Exchange7326 tcp icb Internet Citizen's Band7326 tcp swx Swiss Exchange7327 tcp swx Swiss Exchange7328 tcp swx Swiss Exchange7329 tcp swx Swiss Exchange7330 tcp swx Swiss Exchange7331 tcp swx Swiss Exchange7332 tcp swx Swiss Exchange7333 tcp swx Swiss Exchange7334 tcp swx Swiss Exchange7335 tcp swx Swiss Exchange7336 tcp swx Swiss Exchange7337 tcp swx Swiss Exchange7338 tcp swx Swiss Exchange7339 tcp swx Swiss Exchange7340 tcp swx Swiss Exchange7341 tcp swx Swiss Exchange7342 tcp swx Swiss Exchange7343 tcp swx Swiss Exchange7344 tcp swx Swiss Exchange7345 tcp swx Swiss Exchange7346 tcp swx Swiss Exchange7347 tcp swx Swiss Exchange7348 tcp swx Swiss Exchange7349 tcp swx Swiss Exchange7350 tcp swx Swiss Exchange7351 tcp swx Swiss Exchange7352 tcp swx Swiss Exchange7353 tcp swx Swiss Exchange7354 tcp swx Swiss Exchange7355 tcp swx Swiss Exchange7356 tcp swx Swiss Exchange7357 tcp swx Swiss Exchange7358 tcp swx Swiss Exchange7359 tcp swx Swiss Exchange7360 tcp swx Swiss Exchange7361 tcp swx Swiss Exchange7362 tcp swx Swiss Exchange7363 tcp swx Swiss Exchange7364 tcp swx Swiss Exchange7365 tcp swx Swiss Exchange7366 tcp swx Swiss Exchange7367 tcp swx Swiss Exchange7368 tcp swx Swiss Exchange7369 tcp swx Swiss Exchange7370 tcp swx Swiss Exchange

7371 tcp swx Swiss Exchange7372 tcp swx Swiss Exchange7373 tcp swx Swiss Exchange7374 tcp swx Swiss Exchange7375 tcp swx Swiss Exchange7376 tcp swx Swiss Exchange7377 tcp swx Swiss Exchange7378 tcp swx Swiss Exchange7379 tcp swx Swiss Exchange7380 tcp swx Swiss Exchange7381 tcp swx Swiss Exchange7382 tcp swx Swiss Exchange7383 tcp swx Swiss Exchange7384 tcp swx Swiss Exchange7385 tcp swx Swiss Exchange7386 tcp swx Swiss Exchange7387 tcp swx Swiss Exchange7388 tcp swx Swiss Exchange7389 tcp swx Swiss Exchange7390 tcp swx Swiss Exchange7391 tcp mindfilesys mind-file system server7391 udp mindfilesys mind-file system server7392 tcp mrssrendezvous mrss-rendezvous server7392 udp mrssrendezvous mrss-rendezvous server7395 tcp winqedit winqedit7395 udp winqedit winqedit7424 tcp HostControl [trojan] Host Control7424 tcp HostControl [trojan] Host Control7424 udp HostControl [trojan] Host Control7426 tcp pmdmgr OpenView DM Postmaster Manager7426 udp pmdmgr OpenView DM Postmaster Manager7427 tcp oveadmgr OpenView DM Event Agent Manager7427 udp oveadmgr OpenView DM Event Agent Manager7428 tcp ovladmgr OpenView DM Log Agent Manager7428 udp ovladmgr OpenView DM Log Agent Manager7429 tcp opi-sock OpenView DM rqt communication7429 udp opi-sock OpenView DM rqt communication7430 tcp xmpv7 OpenView DM xmpv7 api pipe7430 udp xmpv7 OpenView DM xmpv7 api pipe7431 tcp pmd OpenView DM ovc xmpv3 api pipe7431 udp pmd OpenView DM ovc xmpv3 api pipe7437 tcp faximum Faximum7437 udp faximum Faximum7491 tcp telops-lmd telops-lmd7491 udp telops-lmd telops-lmd7511 tcp pafec-lm pafec-lm7511 udp pafec-lm pafec-lm7544 tcp nta-ds FlowAnalyzer DisplayServer7544 udp nta-ds FlowAnalyzer DisplayServer7545 tcp nta-us FlowAnalyzer UtilityServer

7545 udp nta-us FlowAnalyzer UtilityServer7566 tcp vsi-omega VSI Omega7566 udp vsi-omega VSI Omega7570 tcp aries-kfinder Aries Kfinder7570 udp aries-kfinder Aries Kfinder7575 tcp dungeon-keeper Dungeon Keeper 2 game server7588 tcp sun-lm Sun License Manager7588 udp sun-lm Sun License Manager7597 tcp Qaz [trojan] Qaz7626 tcp Binghe [trojan] Binghe7626 tcp Glacier [trojan] Glacier7626 tcp Hyne [trojan] Hyne7633 tcp pmdfmgt PMDF Management7633 udp pmdfmgt PMDF Management7648 udp cucme-1 cucme live video audio server7649 udp cucme-2 cucme live video audio server7650 udp cucme-3 cucme live video audio server7651 udp cucme-4 cucme live video audio server7718 tcp Glacier [trojan] Glacier7755 udp RedFaction Red Faction game server7777 tcp cbt cbt7777 tcp FWTK-authsvr FWTK-Gauntlet authentication server7777 tcp GodMessage [trojan] God Message7777 tcp oracle-portal Oracle 9i Portal - Apache HTTP (default)7777 tcp TheThing(modified) [trojan] The Thing (modified)7777 tcp Tini [trojan] Tini7777 tcp Tini [trojan] Tini7777 udp cbt cbt7778 tcp interwise Interwise7778 udp interwise Interwise7778 tcp UnReal_UT UnReal_UT (game)7778 udp UnReal_UT UnReal_UT (game)7778 tcp Oracle9iAS-OJSP Oracle 9i Application Server Oracle Java Server Pages7779 tcp vstat VSTAT7779 udp vstat VSTAT7781 tcp accu-lmgr accu-lmgr7781 udp accu-lmgr accu-lmgr7786 tcp minivend MINIVEND7786 udp minivend MINIVEND7789 tcp BackDoorSetup [trojan] Back Door Setup7789 tcp BackDoorSetup [trojan] Back Door Setup7789 tcp ICKiller [trojan] ICKiller7789 tcp Mozilla [trojan] Mozilla7826 tcp Oblivion [trojan] Oblivion7891 tcp TheReVeNgEr [trojan] The ReVeNgEr7913 tcp qo-secure QuickObjects secure port

7913 udp qo-secure QuickObjects secure port7932 tcp t2-drm Tier 2 Data Resource Manager7932 udp t2-drm Tier 2 Data Resource Manager7933 tcp t2-brm Tier 2 Business Rules Manager7933 udp t2-brm Tier 2 Business Rules Manager7937 tcp lgtonsrexecd Legato NetWorker nsrexecd listen port7938 udp lgtomapper Legato NetWorker portmapper7967 tcp supercell Supercell7967 udp supercell Supercell7979 tcp micromuse-ncps Micromuse-ncps7979 udp micromuse-ncps Micromuse-ncps7980 tcp quest-vista Quest Vista7980 udp quest-vista Quest Vista7983 tcp Mstream [trojan] Mstream7983 tcp Mstream [trojan] Mstream7999 tcp irdmi2 iRDMI27999 udp irdmi2 iRDMI28000 tcp irdmi iRDMI8000 udp irdmi iRDMI8001 tcp vcom-tunnel VCOM Tunnel8001 udp vcom-tunnel VCOM Tunnel8002 tcp teradataordbms Teradata ORDBMS8002 udp teradataordbms Teradata ORDBMS8008 tcp http-alt HTTP Alternate8008 tcp novell-http Novell Netware Management Protocol8008 udp http-alt HTTP Alternate8009 tcp netware-rmgr Novell Netware Remote Manager8010 tcp wingate wingate protocol8022 tcp oa-system oa-system8022 udp oa-system oa-system8023 tcp cisco-net-mgmt SN 5420 Router8032 tcp pro-ed ProEd8032 udp pro-ed ProEd8033 tcp mindprint MindPrint8033 udp mindprint MindPrint8074 tcp gadu-gadu Polish Instant Messanger8080 tcp BrownOrifice [trojan] Brown Orifice8080 tcp BrownOrifice [trojan] Brown Orifice8080 tcp Genericbackdoor [trojan] Generic backdoor8080 tcp http-alt HTTP Alternate (see port 80)8080 tcp RemoConChubo [trojan] RemoConChubo8080 tcp ReverseWWWTunnel [trojan] Reverse WWW Tunnel Backdoor8080 tcp RingZero [trojan] RingZero8080 udp http-alt HTTP Alternate (see port 80)8081 tcp blackice BlackICE ICEcap8081 tcp nai-epolicy NAI McAfee EPO ePolicy Orchestrator HTTP

8082 tcp blackice BlackICE ICEcap8100 tcp xprint-server Xprint Server8100 udp xprint-server Xprint Server8116 tcp cp-cluster Check Point Clustering8116 udp cp-cluster Check Point Clustering8130 tcp indigo-vrmi INDIGO-VRMI8130 udp indigo-vrmi INDIGO-VRMI8131 tcp indigo-vbcp INDIGO-VBCP8131 udp indigo-vbcp INDIGO-VBCP8132 tcp dbabble dbabble8132 udp dbabble dbabble8160 tcp patrol Patrol8160 udp patrol Patrol8161 tcp patrol-snmp Patrol SNMP8161 udp patrol-snmp Patrol SNMP8192 tcp snapstream SnapStream PVS8200 tcp trivnet1 TRIVNET8200 udp trivnet1 TRIVNET8201 tcp trivnet2 TRIVNET8201 udp trivnet2 TRIVNET8204 tcp lm-perfworks LM Perfworks8204 udp lm-perfworks LM Perfworks8205 tcp lm-instmgr LM Instmgr8205 udp lm-instmgr LM Instmgr8206 tcp lm-dta LM Dta8206 udp lm-dta LM Dta8207 tcp lm-sserver LM SServer8207 udp lm-sserver LM SServer8208 tcp lm-webwatcher LM Webwatcher8208 udp lm-webwatcher LM Webwatcher8292 tcp Bloomberg Bloomberg8351 tcp server-find Server Find8351 udp server-find Server Find8376 tcp cruise-enum Cruise ENUM8376 udp cruise-enum Cruise ENUM8377 tcp cruise-swroute Cruise SWROUTE8377 udp cruise-swroute Cruise SWROUTE8378 tcp cruise-config Cruise CONFIG8378 udp cruise-config Cruise CONFIG8379 tcp cruise-diags Cruise DIAGS8379 udp cruise-diags Cruise DIAGS8380 tcp cruise-update Cruise UPDATE8380 udp cruise-update Cruise UPDATE8383 tcp imail-http IPSwitch IMail http frontend8400 tcp cvd cvd8400 udp cvd cvd8401 tcp sabarsd sabarsd8401 udp sabarsd sabarsd8402 tcp abarsd abarsd8402 udp abarsd abarsd

8403 tcp admind admind8403 udp admind admind8443 tcp pcsync-ssl PCSync SSL8444 tcp pcsync PCSync8450 tcp npmp npmp8450 udp npmp npmp8473 tcp vp2p Virtual Point to Point8473 udp vp2p Virtual Point to Point8554 tcp rtsp-alt RTSP Alternate (see port 554)8554 udp rtsp-alt RTSP Alternate (see port 554)8685 tcp Unin68 [trojan] Unin688733 tcp ibus iBus8733 udp ibus iBus8763 tcp mc-appserver MC-APPSERVER8763 udp mc-appserver MC-APPSERVER8764 tcp openqueue OPENQUEUE8764 udp openqueue OPENQUEUE8765 tcp ultraseek-http Ultraseek HTTP8765 udp ultraseek-http Ultraseek HTTP8778 tcp wn-http SGI WhatsNew http protocol8787 tcp BackOrifice2000 [trojan] Back Orifice 20008787 tcp BO2K [trojan] Back Orifice 20008804 tcp truecm truecm8804 udp truecm truecm8812 tcp FraggleRockLite [trojan] FraggleRock Lite8880 tcp cddbp-alt CDDBP8880 udp cddbp-alt CDDBP8888 tcp ddi-tcp-1 NewsEDGE server TCP (TCP 1)8888 tcp sun-answerbook Sun Answerbook HTTP server8888 udp ddi-udp-1 NewsEDGE server UDP (UDP 1)8889 tcp ddi-tcp-2 Desktop Data TCP 18889 udp ddi-udp-2 NewsEDGE server broadcast8890 tcp ddi-tcp-3 Desktop Data TCP 28890 udp ddi-udp-3 NewsEDGE client broadcast8891 tcp ddi-tcp-4 Desktop Data TCP 3:00 NESS application8891 udp ddi-udp-4 Desktop Data UDP 3:00 NESS application8892 tcp ddi-tcp-5 Desktop Data TCP 4:00 FARM product8892 tcp seosload From the new Computer Associates eTrust ACX ACX8892 udp ddi-udp-5 Desktop Data UDP 4:00 FARM product8893 tcp ddi-tcp-6 Desktop Data TCP 5:00 NewsEDGE Web application8893 udp ddi-udp-6 Desktop Data UDP 5:00 NewsEDGE Web application8894 tcp ddi-tcp-7 Desktop Data TCP 6:00 COAL application

8894 udp ddi-udp-7 Desktop Data UDP 6:00 COAL application8900 tcp jmb-cds1 JMB-CDS 18900 udp jmb-cds1 JMB-CDS 18901 tcp jmb-cds2 JMB-CDS 28901 udp jmb-cds2 JMB-CDS 28988 tcp BacHack [trojan] BacHack8988 tcp BacHack [trojan] BacHack8989 tcp Rcon [trojan] Rcon8989 tcp Rcon [trojan] Rcon8989 tcp Recon [trojan] Recon8989 tcp Xcon [trojan] Xcon9000 tcp cslistener CSlistener9000 tcp Netministrator [trojan] Netministrator9000 tcp Netministrator [trojan] Netministrator9000 udp cslistener CSlistener9002 tcp WapPush WAP Push9003 tcp sidewinder-admin Secure Computing Sidewinder Remote Administration9084 udp webphone PC-Telephone Webphone9090 tcp websm WebSM9090 tcp zeus-admin Zeus admin server9090 udp websm WebSM9091 tcp xmltec-xmlmail xmltec-xmlmail9091 udp xmltec-xmlmail xmltec-xmlmail9099 tcp jetdirect HP JetDirect9100 tcp jetdirect HP JetDirect9111 tcp dragon Dragon console9160 tcp netlock1 NetLOCK19160 udp netlock1 NetLOCK19161 tcp netlock2 NetLOCK29161 udp netlock2 NetLOCK29162 tcp netlock3 NetLOCK39162 udp netlock3 NetLOCK39163 tcp netlock4 NetLOCK49163 udp netlock4 NetLOCK49164 tcp netlock5 NetLOCK59164 udp netlock5 NetLOCK59200 tcp wap-wsp WAP connectionless session service9200 udp wap-wsp WAP connectionless session service9201 tcp wap-wsp-wtp WAP session service9201 udp wap-wsp-wtp WAP session service9202 tcp wap-wsp-s WAP secure connectionless session service9202 udp wap-wsp-s WAP secure connectionless session service9203 tcp wap-wsp-wtp-s WAP secure session service9203 udp wap-wsp-wtp-s WAP secure session service9204 tcp wap-vcard WAP vCard9204 udp wap-vcard WAP vCard

9205 tcp wap-vcal WAP vCal9205 udp wap-vcal WAP vCal9206 tcp wap-vcard-s WAP vCard Secure9206 udp wap-vcard-s WAP vCard Secure9207 tcp wap-vcal-s WAP vCal Secure9207 udp wap-vcal-s WAP vCal Secure9283 tcp callwaveiam CallWaveIAM9283 udp callwaveiam CallWaveIAM9292 tcp armtechdaemon ArmTech Daemon9292 udp armtechdaemon ArmTech Daemon9321 tcp guibase guibase9321 udp guibase guibase9325 udp Mstream [trojan] Mstream9325 udp Mstream [trojan] Mstream9343 tcp mpidcmgr MpIdcMgr9343 udp mpidcmgr MpIdcMgr9344 tcp mphlpdmc Mphlpdmc9344 udp mphlpdmc Mphlpdmc9346 tcp ctechlicensing C Tech Licensing9346 udp ctechlicensing C Tech Licensing9374 tcp fjdmimgr fjdmimgr9374 udp fjdmimgr fjdmimgr9396 tcp fjinvmgr fjinvmgr9396 udp fjinvmgr fjinvmgr9397 tcp mpidcagt MpIdcAgt9397 udp mpidcagt MpIdcAgt9400 tcp InCommand [trojan] InCommand9400 tcp InCommand [trojan] InCommand9500 tcp ismserver ismserver9500 udp ismserver ismserver9535 tcp man 9535 udp man 9594 tcp msgsys Message System9594 udp msgsys Message System9595 tcp pds Ping Discovery Service9595 udp pds Ping Discovery Service9600 tcp micromuse-ncpw MICROMUSE-NCPW9600 udp micromuse-ncpw MICROMUSE-NCPW9753 tcp rasadv rasadv9753 udp rasadv rasadv9797 tcp lcfd Tivoli lcfd daemon9870 tcp RemoteComputerControl [trojan] Remote Computer Control Center9872 tcp PortalofDoom [trojan] Portal of Doom9872 tcp PortalofDoom [trojan] Portal of Doom9873 tcp PortalofDoom [trojan] Portal of Doom9873 tcp PortalofDoom [trojan] Portal of Doom9874 tcp PortalofDoom [trojan] Portal of Doom9874 tcp PortalofDoom [trojan] Portal of Doom9875 tcp PortalofDoom [trojan] Portal of Doom

9875 tcp PortalofDoom [trojan] Portal of Doom9876 tcp CyberAttacker [trojan] Cyber Attacker9876 tcp CyberAttacker [trojan] Cyber Attacker9876 tcp Rux [trojan] Rux9876 tcp sd Session Director9876 udp sd Session Director9878 tcp TransScout [trojan] TransScout9878 tcp TransScout [trojan] TransScout9888 tcp cyborg-systems CYBORG Systems9888 udp cyborg-systems CYBORG Systems9898 tcp monkeycom MonkeyCom9898 udp monkeycom MonkeyCom9899 tcp sctp-tunneling SCTP TUNNELING9899 udp sctp-tunneling SCTP TUNNELING9900 tcp iua IUA9900 udp iua IUA9909 tcp domaintime domaintime9909 udp domaintime domaintime9950 tcp apcpcpluswin1 APCPCPLUSWIN19950 udp apcpcpluswin1 APCPCPLUSWIN19951 tcp apcpcpluswin2 APCPCPLUSWIN29951 udp apcpcpluswin2 APCPCPLUSWIN29952 tcp apcpcpluswin3 APCPCPLUSWIN39952 udp apcpcpluswin3 APCPCPLUSWIN39989 tcp IniKiller [trojan] Ini-Killer9989 tcp Ini-Killer [trojan] Ini-Killer9990 tcp realsecure RealSecure ISS system scanner9991 tcp realsecure RealSecure ISS system scanner9992 tcp palace-1 OnLive-19992 tcp realsecure RealSecure ISS system scanner9992 udp palace-1 OnLive-19993 tcp palace-2 OnLive-29993 udp palace-2 OnLive-29994 tcp palace-3 OnLive-39994 udp palace-3 OnLive-39995 tcp palace-4 Palace-49995 udp palace-4 Palace-49996 tcp palace-5 Palace-59996 udp palace-5 Palace-59997 tcp palace-6 Palace-69997 udp palace-6 Palace-69998 tcp distinct32 Distinct329998 udp distinct32 Distinct329999 tcp distinct distinct9999 tcp ThePrayer [trojan] The Prayer9999 tcp ThePrayer [trojan] The Prayer9999 udp distinct distinct10000 tcp ndmp Network Data Management Protocol10000 udp ndmp Network Data Management Protocol

10000 tcp webmin Webmin (http://www.webmin.com)10000 tcp securenetpro-mgmt SecureNet Pro IDS Management10000 tcp OpwinTRojan [trojan] OpwinTRojan10005 tcp OpwinTRojan [trojan] OpwinTRojan10005 tcp stel Secure telnet10007 tcp mvs-capacity MVS Capacity10007 udp mvs-capacity MVS Capacity10008 tcp Cheeseworm [trojan] Cheese worm10008 tcp Lion [trojan] Lion10008 tcp LionWorm [trojan] Lion Worm (exploits Solaris saadmind) 10067 udp PortalofDoomPOD [trojan] Portal of Doom - POD10067 udp PortalofDoom [trojan] Portal of Doom10080 tcp amanda Amanda10080 udp amanda Amanda10082 tcp amandaidx Amanda indexing10083 tcp amidxtape Amanda tape indexing10085 tcp Syphillis [trojan] Syphillis10085 tcp Syphillis [trojan] Syphillis10086 tcp Syphillis [trojan] Syphillis10086 tcp Syphillis [trojan] Syphillis10100 tcp ControlTotal [trojan] Control Total10100 tcp GiFttrojan [trojan] GiFt trojan10101 tcp BrainSpy [trojan] BrainSpy10101 tcp BrainSpy [trojan] BrainSpy10101 tcp Silencer [trojan] Silencer10113 tcp netiq-endpoint NetIQ Endpoint10113 udp netiq-endpoint NetIQ Endpoint10114 tcp netiq-qcheck NetIQ Qcheck10114 udp netiq-qcheck NetIQ Qcheck10115 tcp netiq-endpt NetIQ Endpoint10115 udp netiq-endpt NetIQ Endpoint10128 tcp bmc-perf-sd BMC-PERFORM-SERVICE DAEMON10128 udp bmc-perf-sd BMC-PERFORM-SERVICE DAEMON10167 udp PortalofDoomPOD [trojan] Portal of Doom - POD10167 udp PortalofDoom [trojan] Portal of Doom10288 tcp blocks Blocks10288 udp blocks Blocks10520 tcp AcidShivers [trojan] Acid Shivers10520 tcp AcidShivers [trojan] Acid Shivers10528 tcp HostControl [trojan] Host Control10528 tcp HostControl [trojan] Host Control10607 tcp Coma [trojan] Coma10607 tcp Coma [trojan] Coma10666 udp Ambush [trojan] Ambush10666 udp Ambush [trojan] Ambush

11000 tcp SennaSpyTrojanGenerator [trojan] Senna Spy Trojan Generator11000 tcp SennaSpy [trojan] Senna Spy11000 udp irisa IRISA11001 tcp metasys Metasys11001 udp metasys Metasys11050 tcp HostControl [trojan] Host Control11050 tcp HostControl [trojan] Host Control11051 tcp HostControl [trojan] Host Control11051 tcp HostControl [trojan] Host Control11111 tcp vce Viral Computing Environment (VCE)11111 udp vce Viral Computing Environment (VCE)11201 tcp smsqp smsqp11201 udp smsqp smsqp11223 tcp Progenictrojan [trojan] Progenic trojan11223 tcp Progenictrojan [trojan] Progenic trojan11223 tcp SecretAgent [trojan] Secret Agent11319 tcp imip IMIP11319 udp imip IMIP11367 tcp atm-uhas ATM UHAS11367 udp atm-uhas ATM UHAS11371 tcp pksd PGP Public Key Server11600 tcp tempest-port Tempest Protocol Port11600 udp tempest-port Tempest Protocol Port11720 tcp h323callsigalt h323 Call Signal Alternate11720 udp h323callsigalt h323 Call Signal Alternate11831 tcp Latinus [trojan] Latinus11999 tcp yahoo-games Yahoo Games12000 tcp entextxid IBM Enterprise Extender SNA XID Exchange12000 udp entextxid IBM Enterprise Extender SNA XID Exchange12001 tcp entextnetwk IBM Enterprise Extender SNA COS Network Priority12001 udp entextnetwk IBM Enterprise Extender SNA COS Network Priority12002 tcp entexthigh IBM Enterprise Extender SNA COS High Priority12002 udp entexthigh IBM Enterprise Extender SNA COS High Priority12003 tcp entextmed IBM Enterprise Extender SNA COS Medium Priority12003 udp entextmed IBM Enterprise Extender SNA COS Medium Priority12004 tcp entextlow IBM Enterprise Extender SNA COS Low Priority12004 udp entextlow IBM Enterprise Extender SNA COS Low Priority12076 tcp Gjamer [trojan] Gjamer12076 tcp Gjamer [trojan] Gjamer

12172 tcp hivep HiveP12172 udp hivep HiveP12223 tcp Hack99KeyLogger [trojan] Hack¦99 KeyLogger12223 tcp Hack´99KeyLogger [trojan] Hack´99 KeyLogger12310 tcp PreCursor [trojan] PreCursor12345 tcp Adoresshd [trojan] Adore sshd12345 tcp Ashley [trojan] Ashley12345 tcp cron/crontab [trojan] cron / crontab12345 tcp FatBitchtrojan [trojan] Fat Bitch trojan12345 tcp GabanBus [trojan] GabanBus12345 tcp icmp_client.c [trojan] icmp_client.c12345 tcp icmp_pipe.c [trojan] icmp_pipe.c12345 tcp Mypic [trojan] Mypic12345 tcp NetBusToy [trojan] NetBus Toy12345 tcp NetBus [trojan] NetBus12345 tcp NetBus [trojan] NetBus backdoor trojan12345 tcp NetBusworm [trojan] NetBus worm12345 tcp PieBillGates [trojan] Pie Bill Gates12345 tcp TMListen TrendMicro OfficeScan TMListen12345 tcp ValvNet [trojan] ValvNet12345 tcp WhackJob [trojan] Whack Job12345 tcp X-bill [trojan] X-bill12346 tcp FatBitchtrojan [trojan] Fat Bitch trojan12346 tcp GabanBus [trojan] GabanBus12346 tcp NetBus [trojan] NetBus12346 tcp NetBus [trojan] NetBus backdoor trojan12346 tcp X-bill [trojan] X-bill12348 tcp BioNet [trojan] BioNet12349 tcp BioNet [trojan] BioNet12349 tcp BioNet [trojan] BioNet12349 tcp Webhead [trojan] Webhead12361 tcp Whackamole [trojan] Whack-a-mole12361 tcp Whack-a-mole [trojan] Whack-a-mole12362 tcp Whackamole [trojan] Whack-a-mole12362 tcp Whack-a-mole [trojan] Whack-a-mole12363 tcp Whack-a-mole [trojan] Whack-a-mole12468 tcp webtheater WebTheater12469 tcp webtheater WebTheater12623 udp DUNControl [trojan] DUN Control12623 udp DUNControl [trojan] DUN Control12624 tcp ButtMan [trojan] ButtMan12624 tcp ButtMan [trojan] ButtMan12631 tcp WhackJob [trojan] Whack Job12631 tcp WhackJob [trojan] Whack Job12701 tcp Eclipse2000 [trojan] Eclipse 200012753 tcp tsaf tsaf port12753 udp tsaf tsaf port12754 tcp Mstream [trojan] Mstream12754 tcp Mstream [trojan] Mstream

12973 tcp Backdoor-QR [trojan] QR keylogger/remote access12975 tcp Backdoor-QR [trojan] QR keylogger/remote access13000 tcp SennaSpy [trojan] Senna Spy13010 tcp BitchController [trojan] BitchController13010 tcp HackerBrasilHBR [trojan] Hacker Brasil - HBR13010 tcp HackerBrasil [trojan] Hacker Brasil - HBR13013 tcp PsychWard [trojan] PsychWard13014 tcp PsychWard [trojan] PsychWard13139 udp game-ping GameSpy Arcade custom udp pings13160 tcp i-zipqd I-ZIPQD13160 udp i-zipqd I-ZIPQD13223 tcp Hack´99KeyLogger [trojan] Hack´99 KeyLogger13223 tcp powwow-client PowWow Client13223 udp powwow-client PowWow Client13224 tcp powwow-server PowWow Server13224 udp powwow-server PowWow Server13473 tcp Chupacabra [trojan] Chupacabra13720 tcp bprd BPRD Protocol (VERITAS NetBackup)13720 udp bprd BPRD Protocol (VERITAS NetBackup)13721 tcp bpbrm BPBRM Protocol (VERITAS NetBackup)13721 udp bpbrm BPBRM Protocol (VERITAS NetBackup)13722 tcp bpjava-msvc BP Java MSVC Protocol13722 udp bpjava-msvc BP Java MSVC Protocol13724 tcp vnetd Veritas Network Utility13724 udp vnetd Veritas Network Utility13782 tcp bpcd VERITAS NetBackup13782 udp bpcd VERITAS NetBackup13783 tcp vopied VOPIED Protnocol13783 udp vopied VOPIED Protocol13818 tcp dsmcc-config DSMCC Config13818 udp dsmcc-config DSMCC Config13819 tcp dsmcc-session DSMCC Session Messages13819 udp dsmcc-session DSMCC Session Messages13820 tcp dsmcc-passthru DSMCC Pass-Thru Messages13820 udp dsmcc-passthru DSMCC Pass-Thru Messages13821 tcp dsmcc-download DSMCC Download Protocol13821 udp dsmcc-download DSMCC Download Protocol13822 tcp dsmcc-ccp DSMCC Channel Change Protocol13822 udp dsmcc-ccp DSMCC Channel Change Protocol14001 tcp itu-sccp-ss7 ITU SCCP (SS7)14001 udp itu-sccp-ss7 ITU SCCP (SS7)14002 tcp tanne Tanne Daemon14237 tcp palm-hotsync Palm HotSync14238 tcp palm-hotsync-manage Palm HotSync Manager14238 udp palm-hotsync Palm HotSync14500 tcp PCInvader [trojan] PC Invader

14500 tcp PCInvader [trojan] PC Invader14501 tcp PCInvader [trojan] PC Invader14502 tcp PCInvader [trojan] PC Invader14503 tcp PCInvader [trojan] PC Invader14936 tcp hde-lcesrvr-1 hde-lcesrvr-114936 udp hde-lcesrvr-1 hde-lcesrvr-114937 tcp hde-lcesrvr-2 hde-lcesrvr-214937 udp hde-lcesrvr-2 hde-lcesrvr-215000 tcp hydap Hypack Data Aquisition15000 tcp NetDemon [trojan] NetDemon15000 udp hydap Hypack Data Aquisition15077 tcp enterasys-mpoa Enterasys ATM MPOA server15078 tcp enterasys-mpoa Enterasys ATM MPOA server15092 tcp HostControl [trojan] Host Control15092 tcp HostControl [trojan] Host Control15104 tcp Mstream [trojan] Mstream15104 tcp Mstream [trojan] Mstream15163 tcp PCAudit PCAudit Activity Monitor 200215164 tcp PCAudit PCAudit Activity Monitor 200215164 udp PCAudit PCAudit Activity Monitor 200215165 tcp PCAudit PCAudit Activity Monitor 200215166 tcp PCAudit PCAudit Activity Monitor 200215166 udp PCAudit PCAudit Activity Monitor 200215345 tcp xpilot XPilot Contact Port15345 udp xpilot XPilot Contact Port15382 tcp SubZero [trojan] SubZero15858 tcp CDK [trojan] CDK15858 tcp CDK [trojan] CDK15871 tcp websense-msg Websense Server Blocked Page Message port16360 tcp netserialext1 netserialext116360 udp netserialext1 netserialext116361 tcp netserialext2 netserialext216361 udp netserialext2 netserialext216367 tcp netserialext3 netserialext316367 udp netserialext3 netserialext316368 tcp netserialext4 netserialext416368 udp netserialext4 netserialext416384 tcp connected-online ConnectedOnline16484 tcp Mosucker [trojan] Mosucker16660 tcp Stacheldraht [trojan] Stacheldraht16772 tcp ICQRevenge [trojan] ICQ Revenge

16959 tcp SubSeven [trojan] SubSeven16969 tcp Priority [trojan] Priority16991 tcp intel-rci-mp INTEL-RCI-MP16991 udp intel-rci-mp INTEL-RCI-MP17007 tcp isode-dua 17007 udp isode-dua 17166 tcp Mosaic [trojan] Mosaic17185 tcp soundsvirtual Sounds Virtual17185 udp soundsvirtual Sounds Virtual17219 tcp chipper Chipper17219 udp chipper Chipper17300 tcp Kuang2TheVirus [trojan] Kuang2 The Virus17300 tcp Kuang2thevirus [trojan] Kuang2 the virus17449 tcp KidTerror [trojan] Kid Terror17449 tcp KidTerror [trojan] Kid Terror17499 tcp CrazzyNet [trojan] CrazzyNet17499 tcp CrazzyNet [trojan] CrazzyNet17500 tcp CrazzyNet [trojan] CrazzyNet17569 tcp Infector [trojan] Infector17593 tcp AudioDoor [trojan] AudioDoor17777 tcp Nephron [trojan] Nephron17777 tcp Nephron [trojan] Nephron18000 tcp biimenu Beckman Instruments Inc.18000 udp biimenu Beckman Instruments Inc.18009 tcp http_rwbs HTTP Server by Roger Wilco voice chat server18080 tcp puremessage PureMessage Manager18181 tcp opsec-cvp Check Point OPSEC Content Vectoring Protocol18181 udp opsec-cvp Check Point OPSEC Content Vectoring Protocol18182 tcp opsec-ufp Check Point OPSEC URL Filtering Protocol18182 udp opsec-ufp Check Point OPSEC URL Filtering Protocol18183 tcp opsec-sam Check Point OPSEC Suspicious Activity Monitor API18183 udp opsec-sam Check Point OPSEC Suspicious Activity Monitor API18184 tcp opsec-lea Check Point OPSEC Log Export API18184 udp opsec-lea Check Point OPSEC Log Export API18185 tcp opsec-omi Check Point OPSEC Objects Management Interface18185 udp opsec-omi Check Point OPSEC Objects Management Interface18187 tcp opsec-ela Check Point OPSEC ELA18187 udp opsec-ela Check Point OPSEC ELA18207 tcp fw1-pslogon Check Point Policy Server Logon Protocol18463 tcp ac-cluster AC Cluster

18463 udp ac-cluster AC Cluster18667 tcp Knark [trojan] Knark18753 udp Shaft [trojan] Shaft18753 udp Shaft [trojan] Shaft18888 tcp apc-necmp APCNECMP18888 udp apc-necmp APCNECMP19191 tcp opsec-uaa opsec-uaa19191 udp opsec-uaa opsec-uaa19283 tcp keysrvr Key Server for SASSAFRAS19283 udp keysrvr Key Server for SASSAFRAS19315 tcp keyshadow Key Shadow for SASSAFRAS19315 udp keyshadow Key Shadow for SASSAFRAS19398 tcp mtrgtrans mtrgtrans19398 udp mtrgtrans mtrgtrans19410 tcp hp-sco hp-sco19410 udp hp-sco hp-sco19411 tcp hp-sca hp-sca19411 udp hp-sca hp-sca19412 tcp hp-sessmon HP-SESSMON19412 udp hp-sessmon HP-SESSMON19541 tcp jcp JCP Client19541 udp jcp JCP Client19864 tcp ICQRevenge [trojan] ICQ Revenge19864 tcp ICQRevenge [trojan] ICQ Revenge20000 tcp Millenium [trojan] Millenium20000 tcp Millenium [trojan] Millenium20000 udp dnp DNP20001 tcp Insect [trojan] Insect20001 tcp Millenium(Lm) [trojan] Millenium (Lm)20001 tcp Millenium [trojan] Millenium20001 tcp Millenium [trojan] Millenium20002 tcp AcidkoR [trojan] AcidkoR20002 tcp AcidkoR [trojan] AcidkoR20005 tcp btx xcept4 (Interacts with German Telekom's CEPT videotext service)20005 tcp Mosucker [trojan] Mosucker20023 tcp VPKiller [trojan] VP Killer20023 tcp VPKiller [trojan] VP Killer20034 tcp NetBus2.0ProHidden [trojan] NetBus 2.0 Pro Hidden20034 tcp NetBus2.0Pro [trojan] NetBus 2.0 Pro20034 tcp NetBus2Pro [trojan] NetBus 2 Pro20034 tcp NetRex [trojan] NetRex20034 tcp WhackJob [trojan] Whack Job20139 tcp Aristotle [trojan] #skanbotz IRC-SubSeven Trojan20203 tcp Chupacabra [trojan] Chupacabra20222 tcp ipulse-ics iPulse-ICS20222 udp ipulse-ics iPulse-ICS20331 tcp BLAtrojan [trojan] BLA trojan20331 tcp BLAtrojan [trojan] BLA trojan

20432 tcp Shaft [trojan] Shaft20432 tcp Shaft [trojan] Shaft20433 udp Shaft [trojan] Shaft20433 udp Shaft [trojan] Shaft20670 tcp track Track20670 udp track Track20999 tcp athand-mmp At Hand MMP20999 udp athand-mmp AT Hand MMP21544 tcp GirlFriend [trojan] GirlFriend21544 tcp GirlFriend [trojan] GirlFriend21544 tcp KidTerror [trojan] Kid Terror21544 tcp Matrix [trojan] Matrix21554 tcp Exploiter [trojan] Exploiter21554 tcp FreddyK [trojan] FreddyK21554 tcp KidTerror [trojan] Kid Terror21554 tcp Schwindler [trojan] Schwindler21554 tcp Schwindler [trojan] Schwindler21554 tcp Winsp00fer [trojan] Winsp00fer21579 tcp Breach [trojan] Breach21590 tcp vofr-gateway VoFR Gateway21590 udp vofr-gateway VoFR Gateway21845 tcp webphone webphone21845 udp webphone webphone21846 tcp netspeak-is NetSpeak Corp. Directory Services21846 udp netspeak-is NetSpeak Corp. Directory Services21847 tcp netspeak-cs NetSpeak Corp. Connection Services21847 udp netspeak-cs NetSpeak Corp. Connection Services21848 tcp netspeak-acd NetSpeak Corp. Automatic Call Distribution21848 udp netspeak-acd NetSpeak Corp. Automatic Call Distribution21849 tcp netspeak-cps NetSpeak Corp. Credit Processing System21849 udp netspeak-cps NetSpeak Corp. Credit Processing System21957 tcp Latinus [trojan] Latinus22000 tcp snapenetio SNAPenetIO22000 udp snapenetio SNAPenetIO22001 tcp optocontrol OptoControl22001 udp optocontrol OptoControl22222 tcp DonaldDick [trojan] Donald Dick22222 tcp DonaldDick [trojan] Donald Dick22222 tcp Prosiak [trojan] Prosiak22222 tcp Ruler [trojan] Ruler22222 tcp RUXTheTIc.K [trojan] RUX The TIc.K22273 tcp wnn6 Wnn6 (Japanese input)22273 udp wnn6 wnn622289 tcp wnn6_Cn Wnn6 (Chinese input)22305 tcp wnn6_Kr Wnn6 (Korean input)22321 tcp wnn6_Tw Wnn6 (Taiwanse input)

22450 tcp SiN SiN (game)22450 udp SiN SiN (game)22555 tcp vocaltec-wconf Vocaltec Web Conference22555 udp vocaltec-phone Vocaltec Internet Phone22800 tcp aws-brf Telerate Information Platform LAN22800 udp aws-brf Telerate Information Platform LAN22951 tcp brf-gw Telerate Information Platform WAN22951 udp brf-gw Telerate Information Platform WAN23005 tcp NetTrash [trojan] NetTrash23005 tcp NetTrash [trojan] NetTrash23005 tcp Olive [trojan] Olive23005 tcp Oxon [trojan] Oxon23006 tcp NetTrash [trojan] NetTrash23023 tcp Logged [trojan] Logged23023 tcp Logged [trojan] Logged23032 tcp Amanda [trojan] Amanda23032 tcp Amanda [trojan] Amanda23321 tcp Konik [trojan] Konik23432 tcp Asylum [trojan] Asylum23432 tcp Asylum [trojan] Asylum23456 tcp EvilFTP [trojan] Evil FTP23456 tcp EvilFTP [trojan] Evil FTP23456 tcp UglyFTP [trojan] Ugly FTP23456 tcp WhackJob [trojan] Whack Job23476 tcp DonaldDick [trojan] Donald Dick23476 tcp DonaldDick [trojan] Donald Dick23476 udp DonaldDick [trojan] Donald Dick23476 udp DonaldDick [trojan] Donald Dick23477 tcp DonaldDick [trojan] Donald Dick23477 tcp DonaldDick [trojan] Donald Dick23777 tcp InetSpy [trojan] InetSpy24000 tcp Infector [trojan] Infector24000 tcp med-ltp med-ltp24000 udp med-ltp med-ltp24001 tcp med-fsp-rx med-fsp-rx24001 udp med-fsp-rx med-fsp-rx24002 tcp med-fsp-tx med-fsp-tx24002 udp med-fsp-tx med-fsp-tx24003 tcp med-supp med-supp24003 udp med-supp med-supp24004 tcp med-ovw med-ovw24004 udp med-ovw med-ovw24005 tcp med-ci med-ci24005 udp med-ci med-ci24006 tcp med-net-svc med-net-svc24006 udp med-net-svc med-net-svc24242 tcp filesphere fileSphere24242 udp filesphere fileSphere24249 tcp vista-4gl Vista 4GL24249 udp vista-4gl Vista 4GL

24289 tcp Latinus [trojan] Latinus24386 tcp intel_rci Intel RCI24386 udp intel_rci Intel RCI24554 tcp binkp BINKP24554 udp binkp BINKP24677 tcp flashfiler FlashFiler24677 udp flashfiler FlashFiler25000 tcp icl-twobase1 icl-twobase125000 udp icl-twobase1 icl-twobase125001 tcp icl-twobase2 icl-twobase225001 udp icl-twobase2 icl-twobase225002 tcp icl-twobase3 icl-twobase325002 udp icl-twobase3 icl-twobase325003 tcp icl-twobase4 icl-twobase425003 udp icl-twobase4 icl-twobase425004 tcp icl-twobase5 icl-twobase525004 udp icl-twobase5 icl-twobase525005 tcp icl-twobase6 icl-twobase625005 udp icl-twobase6 icl-twobase625006 tcp icl-twobase7 icl-twobase725006 udp icl-twobase7 icl-twobase725007 tcp icl-twobase8 icl-twobase825007 udp icl-twobase8 icl-twobase825008 tcp icl-twobase9 icl-twobase925008 udp icl-twobase9 icl-twobase925009 tcp icl-twobase10 icl-twobase1025009 udp icl-twobase10 icl-twobase1025123 tcp Goy'ZTroJan [trojan] Goy'Z TroJan25555 tcp FreddyK [trojan] FreddyK25685 tcp MoonPie [trojan] MoonPie25686 tcp MoonPie [trojan] MoonPie25793 tcp vocaltec-hos Vocaltec Address Server25793 udp vocaltec-hos Vocaltec Address Server25901 tcp niobserver NIObserver25901 udp niobserver NIObserver25903 tcp niprobe NIProbe25903 udp niprobe NIProbe25982 tcp MoonPie [trojan] MoonPie26000 tcp quakeworld QuakeWorld Master Server26000 udp quakeworld QuakeWorld Master Server26208 tcp wnn6-ds wnn6-ds26208 udp wnn6-ds wnn6-ds26262 tcp k3software-svr K3 Software-Server26263 udp k3software-cli K3 Software-Client26264 tcp gserver Gserver26264 udp gserver Gserver26274 udp DeltaSource [trojan] Delta Source26274 udp DeltaSource [trojan] Delta Source26681 tcp VoiceSpyOBS [trojan] Voice Spy - OBS!!!26681 tcp VoiceSpy [trojan] Voice Spy

27000 tcp flex-lm FlexLM (1-10)27000 tcp quakeworld QuakeWorld Master Server27000 udp quakeworld QuakeWorld Master Server27001 tcp flex-lm FlexLM (1-10)27002 tcp flex-lm FlexLM (1-10)27003 tcp flex-lm FlexLM (1-10)27004 tcp flex-lm FlexLM (1-10)27005 tcp flex-lm FlexLM (1-10)27006 tcp flex-lm FlexLM (1-10)27007 tcp flex-lm FlexLM (1-10)27008 tcp flex-lm FlexLM (1-10)27009 tcp flex-lm FlexLM (1-10)27015 udp halflife Half-Life Game Server27160 tcp MoonPie [trojan] MoonPie27345 tcp imagepump ImagePump27345 udp imagepump ImagePump27374 tcp BadBlood [trojan] Bad Blood27374 tcp EGO [trojan] EGO27374 tcp FakeSubSeven [trojan] Fake SubSeven27374 tcp Lion [trojan] Lion27374 tcp Ramen [trojan] Ramen27374 tcp Seeker [trojan] Seeker27374 tcp Subseven2.1.4DefCon8 [trojan] Subseven 2.1.4 DefCon 827374 tcp SubSeven2.1Gold [trojan] SubSeven 2.1 Gold27374 tcp SubSeven2.2 [trojan] SubSeven 2.227374 tcp SubSevenMuie [trojan] SubSeven Muie27374 tcp SubSeven [trojan] SubSeven27374 tcp TheSaint [trojan] The Saint27374 tcp Ttfloader [trojan] Ttfloader27374 tcp Webhead [trojan] Webhead27444 udp Trinoo_Bcast [trojan] Trinoo distributed attack tool27444 udp Trinoo [trojan] Trinoo27500 tcp quakeworld QuakeWorld27500 udp quakeworld QuakeWorld27573 tcp SubSeven [trojan] SubSeven27660 udp quake3server Quake 3 Arena Server (for first player)27665 tcp Trinoo_Master Trinoo distributed attack tool27665 tcp Trinoo [trojan] Trinoo27900 udp game-heartbeat GameSpy Arcade master server udp heartbeat27910 udp quake2server Quake 2 Server27960 tcp quake3server Quake 3 Arena Server27960 udp Quake3Server Quake 3 Arena Server27999 tcp tw-auth-key TW Authentication Key Distribution and27999 udp tw-auth-key Attribute Certificate Services28001 tcp tribes Tribes (game)

28001 udp tribes Tribes (game)28431 tcp Hack´a´Tack [trojan] Hack´a´Tack28431 udp HackaTack [trojan] Hack'a'Tack 2K28432 udp HackaTack [trojan] Hack'a'Tack 2K28678 tcp Exploiter [trojan] Exploiter28900 tcp game-list GameSpy Arcade master server list request28910 tcp heretic2 Heretic II Game Server29000 udp starsiege Starsiege (game - main default port)29000 tcp game-connect GameSpy Arcade connection manager29001 udp starsiege Starsiege (game - possible default port)29001 tcp game-search GameSpy Arcade search manager29002 udp starsiege Starsiege (game - possible default port)29003 udp starsiege Starsiege (game - possible default port)29004 udp starsiege Starsiege (game - possible default port)29005 udp starsiege Starsiege (game - possible default port)29006 udp starsiege Starsiege (game - possible default port)29007 udp starsiege Starsiege (game - possible default port)29008 udp starsiege Starsiege (game - possible default port)29009 udp starsiege Starsiege (game - possible default port)29104 tcp NetTrojan [trojan] NetTrojan29104 tcp NetTrojan [trojan] NetTrojan29292 tcp BackGate [trojan] BackGate29369 tcp ovasOn [trojan] ovasOn29559 tcp Latinus [trojan] Latinus29891 tcp TheUnexplained [trojan] The Unexplained29891 tcp TheUnexplained [trojan] The Unexplained29891 udp TheUnexplained [trojan] The Unexplained30000 tcp Infector [trojan] Infector30001 tcp ErrOr32 [trojan] ErrOr3230001 tcp ErrOr32 [trojan] ErrOr3230003 tcp LamersDeath [trojan] Lamers Death30003 tcp LamersDeath [trojan] Lamers Death30005 tcp BackdoorJZ [trojan] Backdoor JZ30029 tcp AOLTrojan [trojan] AOL Trojan30029 tcp AOLtrojan [trojan] AOL trojan30100 tcp NetSphere [trojan] NetSphere30100 tcp NetSphere [trojan] NetSphere30101 tcp NetSphere [trojan] NetSphere30101 tcp NetSphere [trojan] NetSphere

30102 tcp NetSphere [trojan] NetSphere30102 tcp NetSphere [trojan] NetSphere30103 tcp NetSphere [trojan] NetSphere30103 tcp NetSphere [trojan] NetSphere30103 udp NetSphere [trojan] NetSphere30103 udp NetSphere [trojan] NetSphere30133 tcp NetSphere [trojan] NetSphere30133 tcp NetSphere [trojan] NetSphere30303 tcp SocketsdesTroie [trojan] Sockets des Troie30303 tcp SocketsdeTroie [trojan] Sockets de Troie30700 tcp Mantis [trojan] Mantis30947 tcp Intruse [trojan] Intruse30947 tcp Intruse [trojan] Intruse30999 tcp Kuang2 [trojan] Kuang230999 tcp Kuang2 [trojan] Kuang231221 tcp Knark [trojan] Knark31335 tcp Trinoo [trojan] Trinoo31335 tcp Trinoo [trojan] Trinoo31335 udp Trinoo_Register Trinoo distributed attack tool31336 tcp BoWhack [trojan] Bo Whack31336 tcp BoWhack [trojan] Bo Whack31336 tcp ButtFunnel [trojan] Butt Funnel31337 tcp ADMworm [trojan] ADM worm31337 tcp BackFire [trojan] Back Fire31337 tcp BackOrifice1.20patches [trojan] Back Orifice 1.20 patches31337 tcp BackOrifice(Lm) [trojan] Back Orifice (Lm)31337 tcp BackOrificerussian [trojan] Back Orifice russian31337 tcp BaronNight [trojan] Baron Night31337 tcp Beeone [trojan] Beeone31337 tcp bindshell [trojan] bindshell31337 tcp BO2 [trojan] BO231337 tcp BOclient [trojan] BO client31337 tcp BOFacil [trojan] BO Facil31337 tcp BOspy [trojan] BO spy31337 tcp cron/crontab [trojan] cron / crontab31337 tcp DeepBO [trojan] Deep BO31337 tcp Freak2k [trojan] Freak2k31337 tcp Freak88 [trojan] Freak8831337 tcp Gummo [trojan] Gummo31337 tcp icmp_pipe.c [trojan] icmp_pipe.c31337 tcp LinuxRootkitIV [trojan] Linux Rootkit IV31337 udp BackOrifice [trojan] cDc Back Orifice remote admin tool31337 udp BackOrifice [trojan] Back Orifice31337 tcp psybnc [trojan] psybnc31338 tcp BackOrifice [trojan] Back Orifice31338 tcp ButtFunnel [trojan] Butt Funnel31338 tcp ButtFunnel [trojan] Butt Funnel31338 udp BackOrifice [trojan] Back Orifice

31338 udp DeepBO [trojan] Deep BO31339 tcp NetSpyDK [trojan] NetSpy (DK)31339 tcp NetSpy(DK) [trojan] NetSpy (DK)31510 tcp KingPin KingPin (game)31510 udp KingPin KingPin (game)31557 tcp NetBus [trojan] NetBus31557 tcp Xanadu [trojan] Xanadu31666 tcp BOWhack [trojan] BOWhack31666 tcp BOWhack [trojan] BOWhack31745 tcp BuschTrommel [trojan] BuschTrommel31785 tcp HackaTack [trojan] Hack¦a¦Tack31785 tcp Hack´a´Tack [trojan] Hack´a´Tack31787 tcp HackaTack [trojan] Hack¦a¦Tack31787 tcp Hack´a´Tack [trojan] Hack´a´Tack31788 tcp HackaTack [trojan] Hack¦a¦Tack31788 tcp Hack´a´Tack [trojan] Hack´a´Tack31789 udp HackaTack [trojan] Hack¦a¦Tack31789 udp Hack´a´Tack [trojan] Hack´a´Tack31790 tcp HackaTack [trojan] Hack´a´Tack31790 tcp Hack´a´Tack [trojan] Hack´a´Tack31791 udp HackaTack [trojan] Hack¦a¦Tack31791 udp Hack´a´Tack [trojan] Hack´a´Tack31792 tcp HackaTack [trojan] Hack¦a¦Tack31792 tcp Hack´a´Tack [trojan] Hack´a´Tack32000 tcp merak-webmail Merak WebMail server32001 tcp DonaldDick [trojan] Donald Dick32001 tcp DonaldDick [trojan] Donald Dick32100 tcp PeanutBrittle [trojan] Peanut Brittle32100 tcp PeanutBrittle [trojan] Peanut Brittle32100 tcp ProjectnEXT [trojan] Project nEXT32418 tcp AcidBattery [trojan] Acid Battery32418 tcp AcidBattery [trojan] Acid Battery32768 tcp HackersParadise [trojan] Hacker's Paradise32768 udp filenet-tms Filenet TMS32769 tcp filenet-rpc Filenet RPC32769 udp filenet-rpc Filenet RPC32769 tcp sgi-iphone SGI InPerson Phone32770 tcp filenet-nch Filenet NCH32770 udp filenet-nch Filenet NCH32771 tcp sometimes-rpc5 Sometimes an RPC port on my Solaris box (rusersd)32771 udp sometimes-rpc6 Sometimes an RPC port on my Solaris box (rusersd)32772 tcp sometimes-rpc7 Sometimes an RPC port on my Solaris box (status)32772 udp sometimes-rpc8 Sometimes an RPC port on my Solaris box (status)32773 tcp sometimes-rpc9 Sometimes an RPC port on my Solaris box (rquotad)

32773 udp sometimes-rpc10 Sometimes an RPC port on my Solaris box (rquotad)32774 tcp sometimes-rpc11 Sometimes an RPC port on my Solaris box (rusersd)32774 udp sometimes-rpc12 Sometimes an RPC port on my Solaris box (rusersd)32775 tcp sometimes-rpc13 Sometimes an RPC port on my Solaris box (status)32775 udp sometimes-rpc14 Sometimes an RPC port on my Solaris box (status)32776 tcp sometimes-rpc15 Sometimes an RPC port on my Solaris box (sprayd)32776 udp sometimes-rpc16 Sometimes an RPC port on my Solaris box (sprayd)32777 tcp sometimes-rpc17 Sometimes an RPC port on my Solaris box (walld)32777 udp sometimes-rpc18 Sometimes an RPC port on my Solaris box (walld)32778 tcp sometimes-rpc19 Sometimes an RPC port on my Solaris box (rstatd)32778 udp sometimes-rpc20 Sometimes an RPC port on my Solaris box (rstatd)32779 tcp sometimes-rpc21 Sometimes an RPC port on my Solaris box32779 udp sometimes-rpc22 Sometimes an RPC port on my Solaris box32780 tcp sometimes-rpc23 Sometimes an RPC port on my Solaris box32780 udp sometimes-rpc24 Sometimes an RPC port on my Solaris box32786 tcp sometimes-rpc25 Sometimes an RPC port (mountd)32786 udp sometimes-rpc26 Sometimes an RPC port32787 tcp sometimes-rpc27 Sometimes an RPC port dmispd (DMI Service Provider)32787 udp sometimes-rpc28 Sometimes an RPC port32791 tcp Acropolis [trojan] Acropolis33270 tcp Trinity [trojan] Trinity33333 tcp Blakharaz [trojan] Blakharaz33333 tcp Prosiak [trojan] Prosiak33334 udp EmpireEarth Empire Earth33335 tcp EmpireEarth Empire Earth33567 tcp Lion [trojan] Lion33567 tcp T0rnRootkit [trojan] T0rn Rootkit33568 tcp Lion [trojan] Lion33568 tcp T0rnRootkit [trojan] T0rn Rootkit33577 tcp SonofPsychWard [trojan] Son of PsychWard33777 tcp SonofPsychWard [trojan] Son of PsychWard33911 tcp Spirit2000 [trojan] Spirit 200033911 tcp Spirit2001 [trojan] Spirit 200134324 tcp BigGluck [trojan] Big Gluck

34324 tcp TinyTelnetServer [trojan] Tiny Telnet Server34324 tcp TN [trojan] TN34444 tcp DonaldDick [trojan] Donald Dick34555 udp Trinoo(forWindows) [trojan] Trinoo (for Windows)35555 udp Trinoo(forWindows) [trojan] Trinoo (for Windows)37237 tcp Mantis [trojan] Mantis37266 tcp TheKillerTrojan [trojan] The Killer Trojan37651 tcp YetAnotherTrojan [trojan] Yet Another Trojan - YAT37849 tcp officescan OfficeScan webserver37852 udp linkproof Radware LinkProof Content Mgmt38293 udp NortonAntiVirus Norton Anti-Virus host discovery38741 tcp CyberSpy [trojan] CyberSpy39507 tcp Busters [trojan] Busters40412 tcp TheSpy [trojan] The Spy40421 tcp Agent40421 [trojan] Agent 4042140421 tcp MastersParadise [trojan] Masters Paradise40422 tcp MastersParadise [trojan] Masters Paradise40423 tcp MastersParadise [trojan] Masters Paradise40423 tcp MastersParadise [trojan] Masters Paradise40425 tcp MastersParadise [trojan] Masters Paradise40426 tcp MastersParadise [trojan] Masters Paradise40841 tcp cscp CSCP40841 udp cscp CSCP40842 tcp csccredir CSCCREDIR40842 udp csccredir CSCCREDIR40843 tcp csccfirewall CSCCFIREWALL40843 udp csccfirewall CSCCFIREWALL41337 tcp Storm [trojan] Storm41524 udp ArcServe Arc Serve (looks for license violations)41666 tcp RemoteBootTool [trojan] Remote Boot Tool - RBT43188 tcp reachout 43188 udp reachout REACHOUT43189 tcp ndm-agent-port NDM-AGENT-PORT43189 udp ndm-agent-port NDM-AGENT-PORT43190 tcp ip-provision IP-PROVISION43190 udp ip-provision IP-PROVISION43330 udp litmus-3.0-cmd [trojan] Litmus Trojan v3.0 command channel43594 tcp runescape Runescape (game)43981 udp vicar Vicar networks X10 mgmt44333 tcp winroute WinRoute Pro (admin port)44333 udp winroute WinRoute Pro (admin port)44444 tcp Prosiak [trojan] Prosiak44575 tcp Exploiter [trojan] Exploiter44767 udp SchoolBus [trojan] School Bus44818 tcp rockwell-encap Rockwell Encapsulation44818 udp rockwell-encap Rockwell Encapsulation

45000 tcp cisco-ids CiscoSecure IDS communication45054 tcp invision-ag InVision AG45054 udp invision-ag InVision AG45559 tcp Maniacrootkit [trojan] Maniac rootkit45673 tcp Acropolis [trojan] Acropolis45678 tcp eba EBA PRISE45678 udp eba EBA PRISE45966 tcp ssr-servermgr SSRServerMgr45966 udp ssr-servermgr SSRServerMgr46626 tcp Psychward [trojan] Psychward46882 tcp Psychward [trojan] Psychward47000 tcp mbus Message Bus47000 udp mbus Message Bus47017 tcp T0rnRootkit [trojan] T0rn Rootkit47262 udp DeltaSource [trojan] Delta Source47262 udp DeltaSource [trojan] Delta Source47557 tcp dbbrowse Databeam Corporation47557 udp dbbrowse Databeam Corporation47624 tcp directplaysrvr Direct Play Server47624 udp directplaysrvr Direct Play Server47806 tcp ap ALC Protocol47806 udp ap ALC Protocol47808 tcp bacnet Building Automation and Control Networks47808 udp bacnet Building Automation and Control Networks48000 tcp nimcontroller Nimbus Controller48000 udp nimcontroller Nimbus Controller48001 tcp nimspooler Nimbus Spooler48001 udp nimspooler Nimbus Spooler48002 tcp nimhub Nimbus Hub48002 udp nimhub Nimbus Hub48003 tcp nimgtw Nimbus Gateway48003 udp nimgtw Nimbus Gateway48004 tcp FraggleRock [trojan] Fraggle Rock48006 tcp FraggleRock [trojan] Fraggle Rock48556 tcp com-bardac-dw com-bardac-dw48556 udp com-bardac-dw com-bardac-dw49000 tcp FraggleRock [trojan] Fraggle Rock49301 tcp OnLineKeyLogger [trojan] OnLine KeyLogger50000 tcp SubSARI [trojan] SubSARI50000 tcp ibm-db2 IBM DB2 generic listener50000 tcp Terrarium MS .NET Terrarium50130 tcp Enterprise [trojan] Enterprise50505 tcp SocketsdesTroie [trojan] Sockets des Troie50505 tcp SocketsdeTroie [trojan] Sockets de Troie50766 tcp Fore [trojan] Fore50766 tcp Fore [trojan] Fore50766 tcp Schwindler [trojan] Schwindler

51100 tcp freedom ZeroKnowledge Freedom Firewall51100 udp freedom ZeroKnowledge Freedom Firewall51101 udp freedom ZeroKnowledge Freedom Firewall51102 tcp freedom ZeroKnowledge Freedom Firewall51107 tcp freedom ZeroKnowledge Freedom Firewall51109 udp freedom ZeroKnowledge Freedom Firewall51140 tcp freedom ZeroKnowledge Freedom Firewall51966 tcp Cafeini [trojan] Cafeini51966 tcp Cafeini [trojan] Cafeini52317 tcp AcidBattery2000 [trojan] Acid Battery 200052317 tcp AcidBattery2000 [trojan] Acid Battery 200053001 tcp RemoteWindowsShutdown [trojan] Remote Windows Shutdown53001 tcp RemoteWindowsShutdown [trojan] Remote Windows Shutdown - RWS54283 tcp SubSeven2.1Gold [trojan] SubSeven 2.1 Gold54283 tcp SubSeven [trojan] SubSeven54283 tcp SubSeven [trojan] SubSeven54320 tcp BackOrifice2000 [trojan] Back Orifice 200054320 tcp BackOrifice2000 [trojan] Back Orifice 200054321 tcp BackOrifice2000 [trojan] Back Orifice 200054321 tcp SchoolBus [trojan] School Bus54321 tcp SchoolBus [trojan] School Bus54321 udp BackOrifice2000 [trojan] Back Orifice 200055165 tcp WMTrojanGenerator [trojan] WM Trojan Generator55166 tcp WMTrojanGenerator [trojan] WM Trojan Generator57341 tcp NetRaider [trojan] NetRaider57341 tcp NetRaider [trojan] NetRaider58339 tcp ButtFunnel [trojan] Butt Funnel58339 tcp ButtFunnel [trojan] Butt Funnel60000 tcp DeepThroat [trojan] Deep Throat60000 tcp DeepThroat [trojan] Deep Throat60000 tcp Foreplay [trojan] Foreplay60000 tcp SocketsdesTroie [trojan] Sockets des Troie60001 tcp Trinity [trojan] Trinity60008 tcp Lion [trojan] Lion60008 tcp T0rnRootkit [trojan] T0rn Rootkit60068 tcp Xzip6000068 [trojan] Xzip 600006860068 tcp Xzip6000068 [trojan] Xzip 600006860411 tcp Connection [trojan] Connection60411 tcp Connection [trojan] Connection61348 tcp BunkerHill [trojan] Bunker-Hill61348 tcp Bunker-Hill [trojan] Bunker-Hill

61439 tcp netprowler Axent NetProwler manager61440 tcp netprowler Axent NetProwler manager61441 tcp netprowler Axent NetProwler sensor61466 tcp TeleCommando [trojan] TeleCommando61466 tcp TeleCommando [trojan] TeleCommando61603 tcp BunkerHill [trojan] Bunker-Hill61603 tcp Bunker-Hill [trojan] Bunker-Hill63333 tcp TrippLite Tripp Lite PowerAlert UPS63485 tcp BunkerHill [trojan] Bunker-Hill63485 tcp Bunker-Hill [trojan] Bunker-Hill64101 tcp TaskmanTaskManager [trojan] Taskman / Task Manager64101 tcp Taskman [trojan] Taskman65000 tcp Devil [trojan] Devil65000 tcp Devil [trojan] Devil65000 tcp SocketsdesTroie [trojan] Sockets des Troie65000 tcp Stacheldrahtagent [trojan] Stacheldraht agent - handler65000 tcp Stacheldraht [trojan] Stacheldraht65301 tcp pcanywhere 65390 tcp Eclypse [trojan] Eclypse65421 tcp Jade [trojan] Jade65432 tcp TheTraitor=th3tr41t0r [trojan] The Traitor (= th3tr41t0r)65432 tcp TheTraitor [trojan] The Traitor (= th3tr41t0r)65432 udp TheTraitor=th3tr41t0r [trojan] The Traitor (= th3tr41t0r)65432 udp TheTraitor [trojan] The Traitor (= th3tr41t0r)65530 tcp WindowsMite [trojan] Windows Mite65534 tcp sbininitd [trojan] /sbin/initd65534 tcp /sbin/initd [trojan] /sbin/initd65535 tcp Adoreworm [trojan] Adore worm65535 tcp RC1trojan [trojan] RC1 trojan65535 tcp RC1trojan [trojan] RC1 trojan65535 tcp Sins [trojan] Sins

BuSiNdRe