List of TCP/UDP Ports

Lista de Portas - TCP/UDP
Page 1 of 144
Lista de Portas TCP/UDP

Port Type
0 0 1 1 2 2 3 3 5 5 7 7 9 9 11 11 13 13 15 17 17 18 18 19 19 20 20 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP TCP UDP TCP UDP TCP UDP TCP UDP
Keyword
Description
Trojan info
tcpmux tcpmux compressnet compressnet compressnet compressnet rje rje echo echo discard discard systat systat daytime daytime qotd qotd msp msp chargen chargen ftp-data ftp-data ftp
21 TCP
21 UDP ftp 22 TCP ssh 22 UDP ssh 23 TCP telnet
23 UDP telnet 24 TCP 24 UDP
25 TCP
smtp
25 27 27 28 29 29 30
UDP TCP UDP TCP TCP UDP TCP
smtp nsw-fe nsw-fe msg-icp msg-icp msg-auth msg-auth dsp dsp
31 TCP 31 33 33 35 35 37 37 38 UDP TCP UDP TCP UDP TCP UDP TCP
time time rap
Reserved Reserved TCP Port Service Multiplexer Breach, SocketsDeTroie TCP Port Service Multiplexer Sockets des Troie, SocketsDeTroie Management Utility Death Management Utility Compression Process Compression Process Remote Job Entry Remote Job Entry Echo Echo Discard Discard Active Users Active Users Daytime (RFC 867) Daytime (RFC 867) B2 Quote of the Day Quote of the Day Message Send Protocol Message Send Protocol Character Generator Character Generator File Transfer [Default Data] Senna Spy FTP server File Transfer [Default Data] Back Construction, Blade Runner, Cattivik FTP Server, CC Invader, Dark FTP, Doly Trojan, Fore, File Transfer [Control] FreddyK, Invisible FTP, Juggernaut 42, Larva, MotIv FTP, Net Administrator, Ramen, RTB 666, Senna Spy FTP server, The Flu, Traitor 21, WebEx, WinCrash File Transfer [Control] SSH Remote Login Protocol Adore sshd, Shaft SSH Remote Login Protocol ADM worm, Fire HacKer, My Very Own trojan, RTB Telnet 666, Telnet Pro, Tiny Telnet Server - TTS, Truva Atl Telnet any private mail system Back Orifice 2000 (BO2K) Control Port any private mail system Ajan, Antigen, Barok, BSE, Email Password Sender EPS, EPS II, Gip, Gris, Happy99, Hpteam mail, Hybris, I love you, Kuang2, Magic Horse, MBT (Mail Bombing Simple Mail Transfer Trojan), Moscow Email trojan, Naebi, NewApt worm, ProMail trojan, Shtirlitz, Stealth, Stukach, Tapiras, Terminator, WinPC, WinSpy Simple Mail Transfer NSW User System FE NSW User System FE Amanda MSG ICP MSG ICP Agent 40421 Agent 31, Hackers Paradise, Masters Paradise, MSG Authentication MastersParadise MSG Authentication Display Support Protocol Display Support Protocol any private printer server any private printer server Time Time Route Access Protocol
http://www.portalchapeco.com.br/jackson/portas.htm
11/09/2012
Page 2 of 144
38 39 39 41 41 42 42 43 43 44 44
UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
rap rlp rlp graphics graphics nameserver nameserver nicname nicname mpm-flags mpm-flags mpm
45 TCP
45 UDP mpm 46 46 47 47 48 48 TCP UDP TCP UDP TCP UDP mpm-snd mpm-snd ni-ftp ni-ftp auditd auditd tacacs
49 TCP
49 UDP tacacs 50 TCP re-mail-ck
50 UDP re-mail-ck 51 TCP la-maint
51 UDP la-maint 52 52 53 53 54 54 55 55 56 56 57 57 58 58 59 59 60 60 61 61 62 62 63 63 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP xns-time xns-time domain domain xns-ch xns-ch isi-gl isi-gl xns-auth xns-auth
xns-mail xns-mail
ni-mail ni-mail acas acas whois++ whois++ covia
64 TCP
64 UDP covia 65 65 66 66 67 67 68 TCP UDP TCP UDP TCP UDP TCP tacacs-ds tacacs-ds sql*net sql*net bootps bootps bootpc
Route Access Protocol Resource Location Protocol Resource Location Protocol Graphics Graphics Host Name Server Host Name Server Who Is Who Is MPM FLAGS Protocol MPM FLAGS Protocol Message Processing Module [recv] Message Processing Module [recv] MPM [default send] MPM [default send] NI FTP NI FTP Digital Audit Daemon Digital Audit Daemon Login Host Protocol (TACACS) Login Host Protocol (TACACS) Remote Mail Checking Protocol Remote Mail Checking Protocol IMP Logical Address Maintenance IMP Logical Address Maintenance XNS Time Protocol XNS Time Protocol Domain Name Server Domain Name Server XNS Clearinghouse XNS Clearinghouse ISI Graphics Language ISI Graphics Language XNS Authentication XNS Authentication any private terminal access any private terminal access XNS Mail XNS Mail any private file service any private file service Unassigned Unassigned NI MAIL NI MAIL ACA Services ACA Services whois++ whois++ Communications Integrator (CI) Communications Integrator (CI) TACACS-Database Service TACACS-Database Service Oracle SQL*NET Oracle SQL*NET Bootstrap Protocol Server Bootstrap Protocol Server Bootstrap Protocol Client
SubSARI Deep Throat, Foreplay or Reduced Foreplay
Arctic
DRAT
DRAT
ADM worm, Lion
DMSetup DMSetup
Subseven
11/09/2012
Page 3 of 144
68 69 69 70 70 71 71 72 72 73 73 74 74 75 75
UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
bootpc tftp tftp gopher gopher netrjs-1 netrjs-1 netrjs-2 netrjs-2 netrjs-3 netrjs-3 netrjs-4 netrjs-4
76 TCP
deos
76 UDP deos 77 77 78 78 79 79 TCP UDP TCP UDP TCP UDP
vettcp vettcp finger finger
Bootstrap Protocol Client Trivial File Transfer Trivial File Transfer Gopher Gopher Remote Job Service Remote Job Service Remote Job Service Remote Job Service Remote Job Service Remote Job Service Remote Job Service Remote Job Service any private dial out service any private dial out service Distributed External Object Store Distributed External Object Store any private RJE service any private RJE service vettcp vettcp Finger Finger
BackGate
CDK, Firehotcker 711 trojan (Seven Eleven), AckCmd, Back End, Back Orifice 2000 Plug-Ins, Cafeini, CGI Backdoor, Code Red, Executor, God Message, God Message 4 Creator, Hooker, IISworm, MTX, NCX, Nimda, Noob, Ramen, Reverse WWW Tunnel Backdoor, RingZero, RTB 666, Seeker, WAN Remote, Web Server CT, WebDownloader
80 TCP
www-http
World Wide Web HTTP
80 81 81 82 82 83 83 84 84 85 85 86 86 87 87 88 88 89 89
UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
www-http hosts2-ns hosts2-ns xfer xfer mit-ml-dev mit-ml-dev ctf ctf mit-ml-dev mit-ml-dev mfcobol mfcobol
kerberos kerberos su-mit-tg su-mit-tg dnsix
90 TCP
90 UDP dnsix 91 91 92 92 93 93 94 94 95 95 96 96 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP mit-dov mit-dov npp npp dcp dcp objcall objcall supdup supdup dixie dixie swift-rvf
World Wide Web HTTP HOSTS2 Name Server RemoConChubo HOSTS2 Name Server XFER Utility XFER Utility MIT ML Device MIT ML Device Common Trace Facility Common Trace Facility MIT ML Device MIT ML Device Micro Focus Cobol Micro Focus Cobol any private terminal link any private terminal link Kerberos Kerberos SU/MIT Telnet Gateway SU/MIT Telnet Gateway DNSIX Securit Attribute Token Map DNSIX Securit Attribute Token Map MIT Dover Spooler MIT Dover Spooler Network Printing Protocol Network Printing Protocol Device Control Protocol Device Control Protocol Tivoli Object Dispatcher Tivoli Object Dispatcher SUPDUP SUPDUP DIXIE Protocol Specification DIXIE Protocol Specification Swift Remote Virtural File
97 TCP
11/09/2012
Page 4 of 144
97 UDP swift-rvf 98 98 99 99 100 101 101 102 102 TCP UDP TCP UDP TCP TCP UDP TCP UDP tacnews tacnews metagram metagram newacct hostname hostname iso-tsap iso-tsap gppitnp
103 TCP
103 UDP gppitnp 104 TCP acr-nema
104 UDP acr-nema 105 105 106 106 107 107 108 108 TCP UDP TCP UDP TCP UDP TCP UDP csnet-ns csnet-ns 3com-tsmux 3com-tsmux rtelnet rtelnet snagas snagas pop2
109 TCP
109 UDP pop2 110 TCP pop3
110 UDP pop3 111 TCP sunrpc 111 UDP sunrpc 112 TCP mcidas
112 UDP mcidas 113 113 114 114 TCP UDP TCP UDP auth auth audionews audionews sftp
115 TCP
115 UDP sftp 116 116 117 117 118 118 TCP UDP TCP UDP TCP UDP ansanotify ansanotify uucp-path uucp-path sqlserv sqlserv nntp
119 TCP
119 UDP nntp 120 TCP cfdptkt 120 UDP cfdptkt 121 TCP erpc
121 UDP erpc 122 TCP smakynet 122 UDP smakynet 123 TCP ntp
Protocol Swift Remote Virtural File Protocol TAC News TAC News Metagram Relay Metagram Relay [unauthorized use] NIC Host Name Server NIC Host Name Server ISO-TSAP Class 0 ISO-TSAP Class 0 Genesis Point-to-Point Trans Net Genesis Point-to-Point Trans Net ACR-NEMA Digital Imag. & Comm. 300 ACR-NEMA Digital Imag. & Comm. 300 Mailbox Name Nameserver Mailbox Name Nameserver 3COM-TSMUX 3COM-TSMUX Remote Telnet Service Remote Telnet Service SNA Gateway Access Server SNA Gateway Access Server Post Office Protocol Version 2 Post Office Protocol Version 2 Post Office Protocol Version 3 Post Office Protocol Version 3 SUN Remote Procedure Call SUN Remote Procedure Call McIDAS Data Transmission Protocol McIDAS Data Transmission Protocol Authentication Service Authentication Service Audio News Multicast Audio News Multicast Simple File Transfer Protocol Simple File Transfer Protocol ANSA REX Notify ANSA REX Notify UUCP Path Service UUCP Path Service SQL Services SQL Services Network News Transfer Protocol Network News Transfer Protocol CFDPTKT CFDPTKT Encore Expedited Remote Pro.Call Encore Expedited Remote Pro.Call SMAKYNET SMAKYNET Network Time Protocol
Hidden Port, Mandragore, NCX
ProMail trojan
Invisible Identd Deamon, Kazimas
Happy99
Attack Bot, God Message, JammerKillah
Net Controller
11/09/2012
Page 5 of 144
123 UDP ntp 124 TCP ansatrader 124 UDP ansatrader 125 TCP locus-map
125 UDP locus-map 126 TCP nxedit 126 UDP nxedit 127 TCP locus-con
127 UDP locus-con 128 TCP gss-xlicen 128 UDP gss-xlicen 129 TCP pwdgen
129 UDP pwdgen 130 130 131 131 132 132 133 133 134 134 135 135 136 136 137 137 138 138 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP cisco-fna cisco-fna cisco-tna cisco-tna cisco-sys cisco-sys statsrv statsrv ingres-net ingres-net epmap epmap profile profile netbios-ns netbios-ns netbios-dgm netbios-dgm netbios-ssn netbios-ssn emfis-data emfis-data emfis-cntl emfis-cntl bl-idm bl-idm imap
Network Time Protocol ANSA REX Trader ANSA REX Trader Locus PC-Interface Net Map Ser Locus PC-Interface Net Map Ser NXEdit NXEdit Locus PC-Interface Conn Server Locus PC-Interface Conn Server GSS X License Verification GSS X License Verification Password Generator Protocol Password Generator Protocol cisco FNATIVE cisco FNATIVE cisco TNATIVE cisco TNATIVE cisco SYSMAINT cisco SYSMAINT Statistics Service Statistics Service INGRES-NET Service INGRES-NET Service DCE endpoint resolution DCE endpoint resolution PROFILE Naming System PROFILE Naming System NETBIOS Name Service NETBIOS Name Service NETBIOS Datagram Service NETBIOS Datagram Service NETBIOS Session Service NETBIOS Session Service EMFIS Data Service EMFIS Data Service EMFIS Control Service EMFIS Control Service Britton-Lee IDM Britton-Lee IDM Internet Message Access Protocol Internet Message Access Protocol Universal Management Architecture Universal Management Architecture UAAC Protocol UAAC Protocol ISO-IP0 ISO-IP0 ISO-IP ISO-IP Jargon Jargon AED 512 Emulation Service AED 512 Emulation Service SQL-NET SQL-NET HEMS HEMS
Faranz, port 146 - Infector, Farnaz
W32.Blaster.Worm, W32/Lovsan.worm
Chode Msinit, Qaz, OpaSoft Chode Chode, God Message worm, Msinit, Netlog, Network, Qaz, Sadmind, SMB Relay
139 TCP 139 140 140 141 141 142 142 UDP TCP UDP TCP UDP TCP UDP
NetTaxi
143 TCP
143 UDP imap 144 TCP uma
144 UDP uma 145 145 146 146 147 147 148 148 149 149 150 150 151 151 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP uaac uaac iso-tp0 iso-tp0 iso-ip iso-ip jargon jargon aed-512 aed-512 sql-net sql-net hems hems
Infector Infector
11/09/2012
Page 6 of 144
152 TCP
bftp
152 UDP bftp 153 153 154 154 155 155 156 156 TCP UDP TCP UDP TCP UDP TCP UDP sgmp sgmp netsc-prod netsc-prod netsc-dev netsc-dev sqlsrv sqlsrv knet-cmp
157 TCP
157 UDP knet-cmp 158 158 159 159 160 160 161 161 162 162 163 163 164 164 165 165 166 166 167 167 168 168 169 169 170 170 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP pcmail-srv pcmail-srv nss-routing nss-routing sgmp-traps sgmp-traps snmp snmp snmptrap snmptrap cmip-man cmip-man cmip-agent cmip-agent xns-courier xns-courier s-net s-net namp namp rsvd rsvd send send print-srv print-srv multiplex
171 TCP
171 UDP multiplex 172 172 173 173 174 174 175 175 176 176 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP cl/1 cl/1 xyplex-mux xyplex-mux mailq mailq vmnet vmnet genrad-mux genrad-mux xdmcp
177 TCP
177 UDP xdmcp 178 178 179 179 180 180 TCP UDP TCP UDP TCP UDP nextstep nextstep bgp bgp ris ris
Background File Transfer Program Background File Transfer Program SGMP SGMP NETSC NETSC NETSC NETSC SQL Service SQL Service KNET/VM Command/Message Protocol KNET/VM Command/Message Protocol PCMail Server PCMail Server NSS-Routing NSS-Routing SGMP-TRAPS SGMP-TRAPS SNMP SNMP SNMPTRAP SNMPTRAP CMIP/TCP Manager CMIP/TCP Manager CMIP/TCP Agent CMIP/TCP Agent Xerox Xerox Sirius Systems Sirius Systems NAMP NAMP RSVD RSVD SEND SEND Network PostScript Network PostScript Network Innovations Multiplex Network Innovations Multiplex Network Innovations CL/1 Network Innovations CL/1 Xyplex Xyplex MAILQ MAILQ VMNET VMNET GENRAD-MUX GENRAD-MUX X Display Manager Control Protocol X Display Manager Control Protocol NextStep Window Server NextStep Window Server Border Gateway Protocol Border Gateway Protocol Intergraph Intergraph
NokNok
A-trojan ATrojan
11/09/2012
Page 7 of 144
181 181 182 182 183 183 184 184 185 185 186 186
TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
unify unify audit audit ocbinder ocbinder ocserver ocserver remote-kis remote-kis kis kis aci
187 TCP
187 UDP aci 188 188 189 189 TCP UDP TCP UDP mumps mumps qft qft gacp
190 TCP
190 UDP gacp 191 TCP prospero 191 UDP prospero 192 TCP osu-nms
192 UDP osu-nms 193 TCP srmp
193 UDP srmp 194 TCP irc 194 UDP irc 195 TCP dn6-nlm-aud
195 UDP dn6-nlm-aud 196 TCP dn6-smm-red
196 UDP dn6-smm-red 197 TCP dls 197 UDP dls 198 TCP dls-mon
198 UDP dls-mon 199 TCP smux 199 UDP smux 200 TCP src
200 UDP src 201 TCP at-rtmp
201 UDP at-rtmp 202 202 203 203 204 204 205 205 206 TCP UDP TCP UDP TCP UDP TCP UDP TCP at-nbp at-nbp at-3 at-3 at-echo at-echo at-5 at-5 at-zis
Unify Unify Unisys Audit SITP Unisys Audit SITP OCBinder OCBinder OCServer OCServer Remote-KIS Remote-KIS KIS Protocol KIS Protocol Application Communication Interface Application Communication Interface Plus Five's MUMPS Plus Five's MUMPS Queued File Transport Queued File Transport Gateway Access Control Protocol Gateway Access Control Protocol Prospero Directory Service Prospero Directory Service OSU Network Monitoring System OSU Network Monitoring System Spider Remote Monitoring Protocol Spider Remote Monitoring Protocol Internet Relay Chat Protocol Internet Relay Chat Protocol DNSIX Network Level Module Audit DNSIX Network Level Module Audit DNSIX Session Mgt Module Audit Redir DNSIX Session Mgt Module Audit Redir Directory Location Service Directory Location Service Directory Location Service Monitor Directory Location Service Monitor SMUX SMUX IBM System Resource Controller IBM System Resource Controller AppleTalk Routing Maintenance AppleTalk Routing Maintenance AppleTalk Name Binding AppleTalk Name Binding AppleTalk Unused AppleTalk Unused AppleTalk Echo AppleTalk Echo AppleTalk Unused AppleTalk Unused AppleTalk Zone Information
11/09/2012
Page 8 of 144
206 207 207 208 208
UDP TCP UDP TCP UDP
at-zis at-7 at-7 at-8 at-8 qmtp
209 TCP
209 UDP qmtp 210 TCP z39.50 210 UDP z39.50 211 TCP 914c/g
211 UDP 914c/g 212 212 213 213 214 214 215 215 TCP UDP TCP UDP TCP UDP TCP UDP anet anet ipx ipx vmpwscs vmpwscs softpc softpc CAIlic
216 TCP
216 UDP CAIlic 217 TCP dbase 217 UDP dbase 218 TCP mpp
218 UDP mpp 219 TCP uarps 219 UDP uarps 220 TCP imap3
220 UDP imap3 221 TCP fln-spx
221 UDP fln-spx 222 TCP rsh-spx 222 UDP rsh-spx 223 TCP cdc
223 UDP cdc 224 224 242 242 243 243 244 244 245 245 246 246 247 247 248 248 256 256 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP masqdialer masqdialer direct direct sur-meas sur-meas inbusiness inbusiness link link dsp3270 dsp3270 subntbcst_tftp subntbcst_tftp bhfhs bhfhs rap rap set
AppleTalk Zone Information AppleTalk Unused AppleTalk Unused AppleTalk Unused AppleTalk Unused The Quick Mail Transfer Protocol The Quick Mail Transfer Protocol ANSI Z39.50 ANSI Z39.50 Texas Instruments 914C/G Terminal Texas Instruments 914C/G Terminal ATEXSSTR ATEXSSTR IPX IPX VM PWSCS VM PWSCS Insignia Solutions Insignia Solutions Computer Associates Int'l License Server Computer Associates Int'l License Server dBASE Unix dBASE Unix Netix Message Posting Protocol Netix Message Posting Protocol Unisys ARPs Unisys ARPs Interactive Mail Access Protocol v3 Interactive Mail Access Protocol v3 Berkeley rlogind with SPX auth Berkeley rlogind with SPX auth Berkeley rshd with SPX auth Berkeley rshd with SPX auth Certificate Distribution Center Certificate Distribution Center masqdialer masqdialer Direct Direct Survey Measurement Survey Measurement inbusiness inbusiness LINK LINK Display Systems Protocol Display Systems Protocol SUBNTBCST_TFTP SUBNTBCST_TFTP bhfhs bhfhs RAP RAP Secure Electronic
257 TCP
11/09/2012
Page 9 of 144
257 UDP set 258 TCP yak-chat 258 UDP yak-chat 259 TCP esro-gen
259 UDP esro-gen 260 TCP openport 260 UDP openport 261 TCP nsiiops
261 UDP nsiiops 262 262 263 263 264 264 265 265 266 266 267 267 268 268 280 280 281 281 282 282 283 283 284 284 285 286 286 287 287 308 308 309 309 310 310 311 311 312 312 313 313 314 314 315 315 316 316 317 317 318 318 319 319 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP arcisdms arcisdms hdap hdap bgmp bgmp x-bone-ctl x-bone-ctl sst sst td-service td-service td-replica td-replica http-mgmt http-mgmt personal-link personal-link cableport-ax cableport-ax rescap rescap corerjd corerjd fxp fxp k-block k-block novastorbakcup novastorbakcup entrusttime entrusttime bhmds bhmds asip-webadmin asip-webadmin vslmp vslmp magenta-logic magenta-logic opalis-robot opalis-robot dpsi dpsi decauth decauth zannet zannet pkix-timestamp pkix-timestamp ptp-event ptp-event
Transaction Secure Electronic Transaction Yak Winsock Personal Chat Yak Winsock Personal Chat Efficient Short Remote Operations Efficient Short Remote Operations Openport Openport IIOP Name Service over TLS/SSL IIOP Name Service over TLS/SSL Arcisdms Arcisdms HDAP HDAP BGMP BGMP X-Bone CTL X-Bone CTL SCSI on ST SCSI on ST Tobit David Service Layer Tobit David Service Layer Tobit David Replica Tobit David Replica http-mgmt http-mgmt Personal Link Personal Link Cable Port A/X Cable Port A/X rescap rescap corerjd corerjd FXP Communication FXP Communication K-BLOCK K-BLOCK Novastor Backup Novastor Backup EntrustTime EntrustTime bhmds bhmds AppleShare IP WebAdmin AppleShare IP WebAdmin VSLMP VSLMP Magenta Logic Magenta Logic Opalis Robot Opalis Robot DPSI DPSI decAuth decAuth Zannet Zannet PKIX TimeStamp PKIX TimeStamp PTP Event PTP Event WCTrojan WCTrojan
11/09/2012
Page 10 of 144
320 320 321 321 322 322 333 333 334
TCP UDP TCP UDP TCP UDP TCP UDP TCP
ptp-general ptp-general pip pip rtsps rtsps texar texar pdap
PTP General PTP General PIP PIP RTSPS RTSPS Texar Security Port Texar Security Port Backage Prospero Data Access Protocol Prospero Data Access Protocol Perf Analysis Workbench Perf Analysis Workbench Zebra server Zebra server Fatmen Server Fatmen Server Cabletron Management Protocol Cabletron Management Protocol mftp mftp MATIP Type A MATIP Type A bhoetty (added 5/21/97) bhoetty bhoedap4 (added 5/21/97) bhoedap4 NDSAUTH NDSAUTH bh611 bh611 DATEX-ASN DATEX-ASN Cloanto Net 1 Cloanto Net 1 bhevent bhevent Shrinkwrap Shrinkwrap Network Security Risk Management Protocol Network Security Risk Management Protocol scoi2odialog scoi2odialog Semantix Semantix SRS Send SRS Send RSVP Tunnel RSVP Tunnel Aurora CMGR Aurora CMGR DTK DTK ODMR ODMR MortgageWare MortgageWare QbikGDP QbikGDP rpc2portmap rpc2portmap codaauth2
344 TCP
344 UDP pdap 345 345 346 346 347 347 TCP UDP TCP UDP TCP UDP pawserv pawserv zserv zserv fatserv fatserv csi-sgwp
348 TCP
348 UDP csi-sgwp 349 349 350 350 351 351 352 352 353 353 354 354 355 355 356 356 357 357 358 358 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP mftp mftp matip-type-a matip-type-a bhoetty bhoetty bhoedap4 bhoedap4 ndsauth ndsauth bh611 bh611 datex-asn datex-asn cloanto-net-1 cloanto-net-1 bhevent bhevent shrinkwrap shrinkwrap nsrmp
359 TCP
359 UDP nsrmp 360 360 361 361 362 362 363 363 364 364 365 365 366 366 367 367 368 368 369 369 370 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP scoi2odialog scoi2odialog semantix semantix srssend srssend rsvp_tunnel rsvp_tunnel aurora-cmgr aurora-cmgr dtk dtk odmr odmr mortgageware mortgageware qbikgdp qbikgdp rpc2portmap rpc2portmap codaauth2
NeuroticKat
11/09/2012
Page 11 of 144
370 371 371 372 372 373 373 374 374 375 375
codaauth2 Clearcase Clearcase ListProcessor ListProcessor Legent Corporation Legent Corporation Legent Corporation Legent Corporation Hassle Hassle Amiga Envoy Network 376 TCP nip Inquiry Proto Amiga Envoy Network 376 UDP nip Inquiry Proto 377 TCP tnETOS NEC Corporation 377 UDP tnETOS NEC Corporation 378 TCP dsETOS NEC Corporation 378 UDP dsETOS NEC Corporation 379 TCP is99c TIA/EIA/IS-99 modem client 379 UDP is99c TIA/EIA/IS-99 modem client 380 TCP is99s TIA/EIA/IS-99 modem server 380 UDP is99s TIA/EIA/IS-99 modem server hp performance data 381 TCP hp-collector collector hp performance data 381 UDP hp-collector collector hp-managedhp performance data 382 TCP node managed node hp-managedhp performance data 382 UDP node managed node hp performance data alarm 383 TCP hp-alarm-mgr manager hp performance data alarm 383 UDP hp-alarm-mgr manager A Remote Network Server 384 TCP arns System A Remote Network Server 384 UDP arns System 385 TCP ibm-app IBM Application 385 UDP ibm-app IBM Application ASA Message Router Object 386 TCP asa Def. ASA Message Router Object 386 UDP asa Def. Appletalk Update-Based 387 TCP aurp Routing Pro. Appletalk Update-Based 387 UDP aurp Routing Pro. 388 TCP unidata-ldm Unidata LDM 388 UDP unidata-ldm Unidata LDM Lightweight Directory 389 TCP ldap Access Protocol Lightweight Directory 389 UDP ldap Access Protocol 390 TCP uis UIS 390 UDP uis UIS 391 TCP synotics-relay SynOptics SNMP Relay Port 391 UDP synotics-relay SynOptics SNMP Relay Port 392 TCP synotics-broker SynOptics Port Broker Port 392 UDP synotics-broker SynOptics Port Broker Port 393 TCP meta5 Meta5 393 UDP meta5 Meta5 394 TCP embl-ndt EMBL Nucleic Data Transfer 394 UDP embl-ndt EMBL Nucleic Data Transfer 395 TCP netcp NETscout Control Protocol 395 UDP netcp NETscout Control Protocol 396 TCP netware-ip Novell Netware over IP
codaauth2 clearcase clearcase ulistproc ulistproc legent-1 legent-1 legent-2 legent-2 hassle hassle
11/09/2012
Page 12 of 144
396 397 397 398 398
UDP TCP UDP TCP UDP
netware-ip mptn mptn kryptolan kryptolan iso-tsap-c2
399 TCP
399 UDP iso-tsap-c2 400 TCP work-sol 400 UDP work-sol 401 TCP ups
401 UDP ups 402 402 403 403 404 404 405 405 TCP UDP TCP UDP TCP UDP TCP UDP genie genie decap decap nced nced ncld ncld imsp
406 TCP
406 UDP imsp 407 TCP timbuktu 407 UDP timbuktu 408 TCP prm-sm
408 UDP prm-sm 409 TCP prm-nm
409 UDP prm-nm 410 TCP decladebug
410 UDP decladebug 411 411 412 412 TCP UDP TCP UDP rmt rmt synoptics-trap synoptics-trap smsp
413 TCP
413 UDP smsp 414 414 415 415 416 416 417 417 418 418 419 419 420 420 421 421 422 422 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP infoseek infoseek bnet bnet silverplatter silverplatter onmux onmux hyper-g hyper-g ariel1 ariel1 smpte smpte ariel2 ariel2 ariel3 ariel3 opc-job-start
Novell Netware over IP Multi Protocol Trans. Net. Multi Protocol Trans. Net. Kryptolan Kryptolan ISO Transport Class 2 NonControl over TCP ISO Transport Class 2 NonControl over UDP Workstation Solutions Workstation Solutions Uninterruptible Power Supply Uninterruptible Power Supply Genie Protocol Genie Protocol decap decap nced nced ncld ncld Interactive Mail Support Protocol Interactive Mail Support Protocol Timbuktu Timbuktu Prospero Resource Manager Sys. Man. Prospero Resource Manager Sys. Man. Prospero Resource Manager Node Man. Prospero Resource Manager Node Man. DECLadebug Remote Debug Protocol DECLadebug Remote Debug Protocol Remote MT Protocol Remote MT Protocol Trap Convention Port Trap Convention Port Storage Management Services Protocol Storage Management Services Protocol InfoSeek InfoSeek BNet BNet Silverplatter Silverplatter Onmux Onmux Hyper-G Hyper-G Ariel 1 Ariel 1 SMPTE SMPTE Ariel 2 Ariel 2 Ariel 3 Ariel 3 IBM Operations Planning
Backage
Coma
Breach, Incognito TCP Wrappers trojan
423 TCP
11/09/2012
Page 13 of 144
and Control Start IBM Operations Planning 423 UDP opc-job-start and Control Start IBM Operations Planning 424 TCP opc-job-track and Control Track IBM Operations Planning 424 UDP opc-job-track and Control Track 425 TCP icad-el ICAD 425 UDP icad-el ICAD 426 TCP smartsdp smartsdp 426 UDP smartsdp smartsdp 427 TCP svrloc Server Location 427 UDP svrloc Server Location 428 TCP ocs_cmu OCS_CMU 428 UDP ocs_cmu OCS_CMU 429 TCP ocs_amu OCS_AMU 429 UDP ocs_amu OCS_AMU 430 TCP utmpsd UTMPSD 430 UDP utmpsd UTMPSD 431 TCP utmpcd UTMPCD 431 UDP utmpcd UTMPCD 432 TCP iasd IASD 432 UDP iasd IASD 433 TCP nnsp NNSP 433 UDP nnsp NNSP 434 TCP mobileip-agent MobileIP-Agent 434 UDP mobileip-agent MobileIP-Agent 435 TCP mobilip-mn MobilIP-MN 435 UDP mobilip-mn MobilIP-MN 436 TCP dna-cml DNA-CML 436 UDP dna-cml DNA-CML 437 TCP comscm comscm 437 UDP comscm comscm 438 TCP dsfgw dsfgw 438 UDP dsfgw dsfgw 439 TCP dasp dasp Thomas Obermair dasp 439 UDP dasp tommy@inlab.m.eunet.de 440 TCP sgcp sgcp 440 UDP sgcp sgcp 441 TCP decvms-sysmgt decvms-sysmgt 441 UDP decvms-sysmgt decvms-sysmgt 442 TCP cvc_hostd cvc_hostd 442 UDP cvc_hostd cvc_hostd 443 TCP https http protocol over TLS/SSL 443 UDP https http protocol over TLS/SSL Simple Network Paging 444 TCP snpp Protocol Simple Network Paging 444 UDP snpp Protocol 445 TCP microsoft-ds Microsoft-DS Microsoft-DS DDM-Remote Relational Database Access DDM-Remote Relational Database Access DDM-Distributed File Management DDM-Distributed File Management DDM-Remote DB Access Using Secure Sockets DDM-Remote DB Access Using Secure Sockets AS Server Mapper AS Server Mapper Computer Supported Lioten, Randon, WORM_DELODER.A, W32/Deloder.A, W32.HLLW.Deloder
445 UDP microsoft-ds 446 TCP ddm-rdb
446 UDP ddm-rdb 447 TCP ddm-dfm
447 UDP ddm-dfm 448 TCP ddm-ssl
448 UDP ddm-ssl 449 TCP as-servermap 449 UDP as-servermap
11/09/2012
Page 14 of 144
450 TCP
tserver
450 UDP tserver 451 TCP sfs-smp-net
451 UDP sfs-smp-net 452 452 453 453 454 454 455 455 456 456 457 457 458 458 459 459 460 460 461 461 462 462 463 463 464 464 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP sfs-config sfs-config creativeserver creativeserver contentserver contentserver creativepartnr creativepartnr macon-tcp macon-udp scohelp scohelp appleqtc appleqtc ampr-rcmd ampr-rcmd skronk skronk datasurfsrv datasurfsrv datasurfsrvsec datasurfsrvsec alpes alpes kpasswd kpasswd urd igmpv3lite digital-vrc digital-vrc mylex-mapd mylex-mapd photuris photuris rcp rcp scx-proxy scx-proxy mondex mondex ljk-login ljk-login hybrid-pop hybrid-pop tn-tl-w1 tn-tl-w2 tcpnethaspsrv tcpnethaspsrv tn-tl-fd1 tn-tl-fd1 ss7ns ss7ns spsc spsc iafserver iafserver iafdbase iafdbase
465 TCP 465 466 466 467 467 468 468 469 469 470 470 471 471 472 472 473 473 474 474 475 475 476 476 477 477 478 478 479 479 480 480 UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
Telecomunication Applications Computer Supported Telecomunication Applications Cray Network Semaphore server Cray Network Semaphore server Cray SFS config server Cray SFS config server CreativeServer CreativeServer ContentServer ContentServer CreativePartnr CreativePartnr macon-tcp macon-udp scohelp scohelp apple quick time apple quick time ampr-rcmd ampr-rcmd skronk skronk DataRampSrv DataRampSrv DataRampSrvSec DataRampSrvSec alpes alpes kpasswd kpasswd URL Rendesvous Directory for SSM IGMP over UDP for SSM digital-vrc digital-vrc mylex-mapd mylex-mapd proturis proturis Radio Control Protocol Radio Control Protocol scx-proxy scx-proxy Mondex Mondex ljk-login ljk-login hybrid-pop hybrid-pop tn-tl-w1 tn-tl-w2 tcpnethaspsrv tcpnethaspsrv tn-tl-fd1 tn-tl-fd1 ss7ns ss7ns spsc spsc iafserver iafserver iafdbase iafdbase
Fatal Connections Hackers Paradise
11/09/2012
Page 15 of 144
481 481 482 482 483 483
TCP UDP TCP UDP TCP UDP
ph ph bgs-nsi bgs-nsi ulpnet ulpnet integra-sme
484 TCP
484 UDP integra-sme 485 485 486 486 TCP UDP TCP UDP powerburst powerburst avian avian saft
487 TCP
487 UDP saft 488 488 489 489 490 490 491 491 TCP UDP TCP UDP TCP UDP TCP UDP gss-http gss-http nest-protocol nest-protocol micom-pfs micom-pfs go-login go-login ticf-1
492 TCP
492 UDP ticf-1 493 TCP ticf-2
493 UDP ticf-2 494 494 495 495 496 496 497 497 498 498 499 499 500 500 501 501 502 502 503 503 504 504 505 505 506 506 507 507 508 508 509 509 510 510 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP pov-ray pov-ray intecourier intecourier pim-rp-disc pim-rp-disc dantz dantz siam siam iso-ill iso-ill isakmp isakmp stmf stmf asa-appl-proto asa-appl-proto intrinsa intrinsa citadel citadel mailbox-lm mailbox-lm ohimsrv ohimsrv crs crs xvttp xvttp snare snare fcp fcp
Ph service Ph service bgs-nsi bgs-nsi ulpnet ulpnet Integra Software Management Environment Integra Software Management Environment Air Soft Power Burst Air Soft Power Burst avian avian saft Simple Asynchronous File Transfer saft Simple Asynchronous File Transfer gss-http gss-http nest-protocol nest-protocol micom-pfs micom-pfs go-login go-login Transport Independent Convergence for FNA Transport Independent Convergence for FNA Transport Independent Convergence for FNA Transport Independent Convergence for FNA POV-Ray POV-Ray intecourier intecourier PIM-RP-DISC PIM-RP-DISC dantz dantz siam siam ISO ILL Protocol ISO ILL Protocol isakmp isakmp STMF STMF asa-appl-proto asa-appl-proto Intrinsa Intrinsa citadel citadel mailbox-lm mailbox-lm ohimsrv ohimsrv crs crs xvttp xvttp snare snare FirstClass Protocol FirstClass Protocol
t0rnkit sshd backdoor
11/09/2012
Page 16 of 144
511 TCP passgo 511 UDP passgo 512 TCP exec 512 UDP biff 513 TCP login
513 UDP who 514 514 515 515 516 516 517 517 518 518 519 519 520 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP shell syslog printer printer videotex videotex talk talk ntalk ntalk utime utime efs
PassGo PassGo remote process execution used by mail system to notify users remote login a la telnet maintains data bases showing who's cmd spooler spooler videotex videotex like tenex link, but across like tenex link, but across
T0rn Rootkit
RPC Backdoor lpdw0rm, Ramen
520 UDP router 521 521 522 522 523 523 524 524 525 525 526 526 527 527 528 528 529 529 530 530 531 531 532 532 533 533 534 534 535 535 536 536 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP ripng ripng ulp ulp ibm-db2 ibm-db2 ncp ncp timed timed tempo tempo stx stx custix custix irc-serv irc-serv courier courier conference conference netnews netnews netwall netwall mm-admin mm-admin iiop iiop opalis-rdv opalis-rdv nmsp
537 TCP
537 UDP nmsp 538 TCP gdomap 538 UDP gdomap 539 TCP apertus-ldp
539 UDP apertus-ldp 540 TCP uucp 540 UDP uucp 541 TCP uucp-rlogin
unixtime unixtime extended file name server local routing process (on site) ripng ripng ULP ULP IBM-DB2 IBM-DB2 NCP NCP timeserver timeserver newdate newdate Stock IXChange Stock IXChange Customer IXChange Customer IXChange IRC-SERV IRC-SERV rpc rpc chat Net666, Rasmin chat readnews readnews for emergency broadcasts for emergency broadcasts MegaMedia Admin MegaMedia Admin iiop iiop opalis-rdv opalis-rdv Networked Media Streaming Protocol Networked Media Streaming Protocol gdomap gdomap Apertus Technologies Load Determination Apertus Technologies Load Determination uucpd uucpd uucp-rlogin
11/09/2012
Page 17 of 144
541 542 542 543 543 544 544 545 545 546 546 547 547 548 548 549 549 550 550 551 551 552 552 553 553
UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
uucp-rlogin commerce commerce klogin klogin kshell kshell appleqtcsrvr appleqtcsrvr dhcpv6-client dhcpv6-client dhcpv6-server dhcpv6-server afpovertcp afpovertcp idfp idfp new-rwho new-rwho cybercash cybercash devshr-nts devshr-nts pirp pirp rtsp
uucp-rlogin commerce commerce
554 TCP
554 UDP rtsp 555 TCP dsf
krcmd krcmd appleqtcsrvr appleqtcsrvr DHCPv6 Client DHCPv6 Client DHCPv6 Server DHCPv6 Server AFP over TCP AFP over TCP IDFP IDFP new-who new-who cybercash cybercash DeviceShare DeviceShare pirp pirp Real Time Stream Control Protocol Real Time Stream Control Protocol 711 trojan (Seven Eleven), Phase-0, Phase Zero, Net Administrator, Ini-Killer, Stealth Spy, Id2001, PhaseZero, StealthSpy rfs server rfs server openvms-sysipc openvms-sysipc SDNSKMP SDNSKMP TEEDTAP TEEDTAP rmonitord rmonitord
555 UDP dsf 556 TCP remotefs 556 UDP remotefs openvms557 TCP sysipc openvms557 UDP sysipc 558 TCP sdnskmp 558 UDP sdnskmp 559 TCP teedtap 559 UDP teedtap 560 TCP rmonitor 560 UDP rmonitor 561 TCP monitor 561 UDP monitor 562 TCP chshell 562 UDP chshell 563 TCP nntps
563 UDP nntps 564 564 565 565 566 566 567 567 568 568 569 569 570 570 571 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP 9pfs 9pfs whoami whoami streettalk streettalk banyan-rpc banyan-rpc ms-shuttle ms-shuttle ms-rome ms-rome meter meter meter
chcmd chcmd nntp protocol over TLS/SSL (was snntp) nntp protocol over TLS/SSL (was snntp) plan 9 file service plan 9 file service whoami whoami streettalk streettalk banyan-rpc banyan-rpc microsoft shuttle microsoft shuttle microsoft rome microsoft rome demon demon udemon
11/09/2012
Page 18 of 144
571 572 572 573 573 574 574 575 575 576 576 577 577 578 578 579 579 580 580 581 581 582 582 583 583 584 584
UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
meter sonar sonar banyan-vip banyan-vip ftp-agent ftp-agent vemmi vemmi ipcd ipcd vnas vnas ipdd ipdd decbsrv decbsrv sntp-heartbeat sntp-heartbeat bdp bdp scc-security scc-security philips-vc philips-vc keyserver keyserver imap4-ssl
585 TCP
585 UDP imap4-ssl 586 586 587 587 588 588 589 589 590 590 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP password-chg password-chg submission submission cal cal eyelink eyelink tns-cml tns-cml http-alt
591 TCP
591 UDP http-alt 592 592 593 593 594 594 595 595 596 596 597 597 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP eudora-set eudora-set http-rpc-epmap http-rpc-epmap tpip tpip cab-protocol cab-protocol smsd smsd ptcnameservice ptcnameservice scowebsrvrmg3 scowebsrvrmg3 acp acp ipcserver ipcserver syslog-conn syslog-conn xmlrpc-beep
udemon sonar sonar banyan-vip banyan-vip FTP Software Agent System FTP Software Agent System VEMMI VEMMI ipcd ipcd vnas vnas ipdd ipdd decbsrv decbsrv SNTP HEARTBEAT SNTP HEARTBEAT Bundle Discovery Protocol Bundle Discovery Protocol SCC Security SCC Security Philips Video-Conferencing Philips Video-Conferencing Key Server Key Server IMAP4+SSL (use 993 instead) IMAP4+SSL (use 993 instead) Password Change Password Change Submission Submission CAL CAL EyeLink EyeLink TNS CML TNS CML FileMaker, Inc. - HTTP Alternate (see Port 80) FileMaker, Inc. - HTTP Alternate (see Port 80) Eudora Set Eudora Set HTTP RPC Ep Map HTTP RPC Ep Map TPIP TPIP CAB Protocol CAB Protocol SMSD SMSD PTC Name Service PTC Name Service SCO Web Server Manager 3 SCO Web Server Manager 3 Aeolon Core Protocol Aeolon Core Protocol Sun IPC server Sun IPC server Reliable Syslog Service Reliable Syslog Service XML-RPC over BEEP
598 TCP 598 UDP 599 599 600 600 601 601 602 TCP UDP TCP UDP TCP UDP TCP
Sadmind
11/09/2012
Page 19 of 144
602 603 603 604 604 605 605
XML-RPC over BEEP IDXP IDXP TUNNEL TUNNEL SOAP over BEEP Secret Service SOAP over BEEP Cray Unified Resource 606 TCP urm Manager Cray Unified Resource 606 UDP urm Manager 607 TCP nqs nqs 607 UDP nqs nqs Sender-Initiated/Unsolicited 608 TCP sift-uft File Transfer Sender-Initiated/Unsolicited 608 UDP sift-uft File Transfer 609 TCP npmp-trap npmp-trap 609 UDP npmp-trap npmp-trap 610 TCP npmp-local npmp-local 610 UDP npmp-local npmp-local 611 TCP npmp-gui npmp-gui 611 UDP npmp-gui npmp-gui 612 TCP hmmp-ind HMMP Indication 612 UDP hmmp-ind HMMP Indication 613 TCP hmmp-op HMMP Operation 613 UDP hmmp-op HMMP Operation 614 TCP sshell SSLshell 614 UDP sshell SSLshell Internet Configuration 615 TCP sco-inetmgr Manager Internet Configuration 615 UDP sco-inetmgr Manager SCO System Administration 616 TCP sco-sysmgr Server SCO System Administration 616 UDP sco-sysmgr Server SCO Desktop 617 TCP sco-dtmgr Administration Server SCO Desktop 617 UDP sco-dtmgr Administration Server 618 TCP dei-icda DEI-ICDA 618 UDP dei-icda DEI-ICDA 619 TCP compaq-evm Compaq EVM 619 UDP compaq-evm Compaq EVM 620 TCP sco-websrvrmgr SCO WebServer Manager 620 UDP sco-websrvrmgr SCO WebServer Manager 621 TCP escp-ip ESCP 621 UDP escp-ip ESCP 622 TCP collaborator Collaborator 622 UDP collaborator Collaborator ASF Remote Management 623 TCP asf-rmcp Rtb666 and Control Protocol ASF Remote Management 623 UDP asf-rmcp and Control Protocol 624 TCP cryptoadmin Crypto Admin 624 UDP cryptoadmin Crypto Admin 625 TCP dec_dlm DEC DLM 625 UDP dec_dlm DEC DLM 626 TCP asia ASIA 626 UDP asia ASIA 627 TCP passgo-tivoli PassGo Tivoli 627 UDP passgo-tivoli PassGo Tivoli 628 TCP qmqp QMQP 628 UDP qmqp QMQP 629 TCP 3com-amp3 3Com AMP3 629 UDP 3com-amp3 3Com AMP3 630 TCP rda RDA
UDP TCP UDP TCP UDP TCP UDP
xmlrpc-beep idxp idxp tunnel tunnel soap-beep soap-beep
11/09/2012
Page 20 of 144
630 UDP rda 631 TCP 631 UDP 632 TCP 632 UDP 633 TCP 633 UDP 634 634 635 635 TCP UDP TCP UDP
636 TCP 636 UDP 637 637 638 638 639 639 640 640 641 641 642 642 643 643 644 644 645 645 646 646 647 647 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
648 TCP 648 UDP 649 TCP 649 UDP 650 650 651 651 652 652 653 653 654 654 655 655 656 656 657 657 658 658 660 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP
RDA IPP (Internet Printing ipp Protocol) IPP (Internet Printing ipp Protocol) bmpp bmpp bmpp bmpp Service Status update servstat (Sterling Software) Service Status update servstat (Sterling Software) ginad ginad ginad ginad rlzdbase RLZ DBase rlzdbase RLZ DBase ldap protocol over TLS/SSL ldaps (was sldap) ldap protocol over TLS/SSL ldaps (was sldap) lanserver lanserver lanserver lanserver mcns-sec mcns-sec mcns-sec mcns-sec msdp MSDP msdp MSDP entrust-sps entrust-sps entrust-sps entrust-sps repcmd repcmd repcmd repcmd esro-emsdp ESRO-EMSDP V1.3 esro-emsdp ESRO-EMSDP V1.3 sanity SANity sanity SANity dwr dwr dwr dwr pssc PSSC pssc PSSC ldp LDP ldp LDP dhcp-failover DHCP Failover dhcp-failover DHCP Failover Registry Registrar Protocol rrp (RRP) Registry Registrar Protocol rrp (RRP) Cadview-3d - streaming 3d cadview-3d models over the internet Cadview-3d - streaming 3d cadview-3d models over the internet obex OBEX obex OBEX ieee-mms IEEE MMS ieee-mms IEEE MMS hello-port HELLO_PORT hello-port HELLO_PORT repscmd RepCmd repscmd RepCmd aodv AODV aodv AODV tinc TINC tinc TINC spmp SPMP spmp SPMP rmc RMC rmc RMC tenfold TenFold tenfold TenFold mac-srvr-admin MacOS Server Admin
Zaratustra
11/09/2012
Page 21 of 144
660 661 661 662 662 663 663
MacOS Server Admin HAP HAP PFTP PFTP PureNoise PureNoise ASF Secure Remote 664 TCP asf-secure-rmcp Management and Control Protocol ASF Secure Remote 664 UDP asf-secure-rmcp Management and Control Protocol 665 TCP sun-dr Sun DR 665 UDP sun-dr Sun DR 666 TCP doom doom Id Software doom Id Software campaign contribution disclosures - SDR Technologies campaign contribution disclosures - SDR Technologies MeComm MeComm MeRegister MeRegister VACDSM-SWS VACDSM-SWS VACDSM-APP VACDSM-APP VPPS-QUA VPPS-QUA CIMPLEX CIMPLEX ACAP ACAP DCTP DCTP VPPS Via VPPS Via Virtual Presence Protocol Virtual Presence Protocol GNU Generation Foundation NCP GNU Generation Foundation NCP MRM MRM entrust-aaas entrust-aaas entrust-aams entrust-aams XFR XFR CORBA IIOP CORBA IIOP CORBA IIOP SSL CORBA IIOP SSL MDC Port Mapper MDC Port Mapper Hardware Control Protocol Wismar
UDP TCP UDP TCP UDP TCP UDP
mac-srvr-admin hap hap pftp pftp purenoise purenoise
NokNok
666 UDP doom 667 TCP disclose
Attack FTP, lpdw0rm, Shadow Phyre, ServU, Satans Back Door - SBD, NokNok, Cain & Abel, Back Construction, BLA trojan, th3r1pp3rz (= Therippers), BackConstruction Bla, Noknok SniperNet
667 UDP disclose 668 668 669 669 670 670 671 671 672 672 673 673 674 674 675 675 676 676 677 677 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP mecomm mecomm meregister meregister vacdsm-sws vacdsm-sws vacdsm-app vacdsm-app vpps-qua vpps-qua cimplex cimplex acap acap dctp dctp vpps-via vpps-via vpp vpp ggf-ncp
th3r1pp3rz (= Therippers), Unicorn DP trojan
678 TCP
678 UDP ggf-ncp 679 679 680 680 681 681 682 682 683 683 684 684 mrm mrm entrust-aaas entrust-aaas entrust-aams entrust-aams xfr xfr corba-iiop corba-iiop corba-iiop-ssl corba-iiop-ssl mdc685 TCP portmapper 685 UDP mdcportmapper 686 TCP hcp-wismar TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
Rtb666
11/09/2012
Page 22 of 144
Hardware Control Protocol Wismar 687 TCP asipregistry asipregistry 687 UDP asipregistry asipregistry 688 TCP realm-rusd REALM-RUSD 688 UDP realm-rusd REALM-RUSD 689 TCP nmap NMAP 689 UDP nmap NMAP 690 TCP vatp VATP 690 UDP vatp VATP 691 TCP msexch-routing MS Exchange Routing 691 UDP msexch-routing MS Exchange Routing 692 TCP hyperwave-isp Hyperwave-ISP 692 UDP hyperwave-isp Hyperwave-ISP 693 TCP connendp connendp 693 UDP connendp connendp 694 TCP ha-cluster ha-cluster 694 UDP ha-cluster ha-cluster 695 TCP ieee-mms-ssl IEEE-MMS-SSL 695 UDP ieee-mms-ssl IEEE-MMS-SSL 696 TCP rushd RUSHD 696 UDP rushd RUSHD 697 TCP uuidgen UUIDGEN 697 UDP uuidgen UUIDGEN 698 TCP olsr OLSR 698 UDP olsr OLSR 699 TCP accessnetwork Access Network 699 UDP accessnetwork Access Network Extensible Provisioning 700 TCP epp Protocol Extensible Provisioning 700 UDP epp Protocol 704 TCP elcsd errlog copy/server daemon 704 UDP elcsd errlog copy/server daemon 705 TCP agentx AgentX 705 UDP agentx AgentX 706 TCP silc SILC 706 UDP silc SILC 707 TCP borland-dsj Borland DSJ 707 UDP borland-dsj Borland DSJ Entrust Key Management 709 TCP entrust-kmsh Service Handler Entrust Key Management 709 UDP entrust-kmsh Service Handler Entrust Administration 710 TCP entrust-ash Service Handler Entrust Administration 710 UDP entrust-ash Service Handler 711 TCP cisco-tdp Cisco TDP 711 UDP cisco-tdp Cisco TDP 712 TCP tbrpf TBRPF 712 UDP tbrpf TBRPF IBM NetView DM/6000 729 TCP netviewdm1 Server/Client IBM NetView DM/6000 729 UDP netviewdm1 Server/Client IBM NetView DM/6000 730 TCP netviewdm2 send/tcp IBM NetView DM/6000 730 UDP netviewdm2 send/tcp IBM NetView DM/6000 731 TCP netviewdm3 receive/tcp IBM NetView DM/6000 731 UDP netviewdm3 receive/tcp 741 TCP netgw netGW 741 UDP netgw netGW Network based Rev. Cont. 742 TCP netrcs Sys. 686 UDP hcp-wismar
GayOL
TCP TCP TCP TCP
11/09/2012
Page 23 of 144
742 UDP netrcs 744 744 747 747 TCP UDP TCP UDP flexlm flexlm fujitsu-dev fujitsu-dev ris-cm
748 TCP
748 UDP ris-cm 749 749 750 750 751 751 752 752 753 753 754 754 758 758 759 759 760 760 761 761 762 762 763 763 764 764 765 765 767 767 769 769 770 770 771 771 772 772 773 773 774 774 775 775 776 776 777 777 780 780 785 800 800 801 801 808 810 810 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP TCP UDP TCP UDP TCP TCP UDP kerberos-adm kerberos-adm rfile kerberos-iv pump pump qrh qrh rrh rrh tell tell nlogin nlogin con con ns ns rxe rxe quotad quotad cycleserv cycleserv omserv omserv webster webster phonebook phonebook vid vid cadlock cadlock rtip rtip cycleserv2 cycleserv2 submit notify rpasswd acmaint_dbd entomb acmaint_transd wpages wpages multiling-http multiling-http wpgs wpgs mdbs_daemon mdbs_daemon device device fcp-udp fcp-udp
Network based Rev. Cont. Sys. Flexible License Manager Flexible License Manager Fujitsu Device Control Fujitsu Device Control Russell Info Sci Calendar Manager Russell Info Sci Calendar Manager kerberos administration kerberos administration kerberos version iv
send send
phone phone
Multiling HTTP Multiling HTTP
AimSpy, Undetected, Tiny
NetworkTerrorist NeuroticKitten
WinHole FCP FCP Datagram
11/09/2012
Page 24 of 144
828 828 829 829 831 847 847 848 848 860 860 873 873 886 886 887 887 888 888 900 900 901 901 902 902 903 903 911 911 912 912 913 913
TCP UDP TCP UDP TCP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
itm-mcell-s itm-mcell-s pkix-3-ca-ra pkix-3-ca-ra dhcp-failover2 dhcp-failover2 gdoi gdoi iscsi iscsi rsync rsync iclcnet-locate iclcnet-locate iclcnet_svinfo iclcnet_svinfo cddbp accessbuilder omginitialrefs omginitialrefs smpnameres smpnameres ideafarm-chat ideafarm-chat ideafarm-catch ideafarm-catch xact-backup xact-backup apex-mesh apex-mesh apex-edge apex-edge ftps-data
itm-mcell-s itm-mcell-s PKIX-3 CA/RA PKIX-3 CA/RA NeuroticKat dhcp-failover 2 dhcp-failover 2 GDOI GDOI iSCSI iSCSI rsync rsync ICL coNETion locate server ICL coNETion locate server ICL coNETion server info ICL coNETion server info CD Database Protocol AccessBuilder OMG Initial Refs OMG Initial Refs SMPNAMERES NetDevil SMPNAMERES IDEAFARM-CHAT IDEAFARM-CHAT IDEAFARM-CATCH IDEAFARM-CATCH xact-backup Dark Shadow, Dark Shadow xact-backup APEX relay-relay service APEX relay-relay service APEX endpoint-relay service APEX endpoint-relay service ftp protocol, data, over TLS/SSL ftp protocol, data, over TLS/SSL ftp protocol, control, over TLS/SSL ftp protocol, control, over TLS/SSL Netnews Administration System Netnews Administration System telnet protocol over TLS/SSL telnet protocol over TLS/SSL imap4 protocol over TLS/SSL imap4 protocol over TLS/SSL irc protocol over TLS/SSL irc protocol over TLS/SSL pop3 protocol over TLS/SSL (was spop3) pop3 protocol over TLS/SSL (was spop3) vsinet vsinet
989 TCP
989 UDP ftps-data 990 TCP ftps
990 UDP ftps 991 TCP nas
991 UDP nas 992 TCP telnets
992 UDP telnets 993 TCP imaps
993 UDP imaps 994 TCP ircs 994 UDP ircs 995 TCP pop3s
995 UDP pop3s 996 996 997 997 998 998 TCP UDP TCP UDP TCP UDP vsinet vsinet maitrd maitrd busboy puparp puprouter
999 TCP
Deep Throat, Foreplay or Reduced Foreplay, WinSatan, Chat power
999 UDP puprouter
11/09/2012
Page 25 of 144
1000 TCP
cadlock2
Connecter, Der Spher / Der Spaeher, Direct Connection, DerSpaeher Der Spher / Der Spaeher, Theef, Silencer, Le Guardien, WebEx Theef Lion, AutoSpy DerSpaeher, Doly Trojan Doly Trojan Doly Trojan Doly Trojan Doly Trojan Vampire Reserved Reserved
1000 UDP cadlock2 1001 TCP 1005 1008 1010 1010 1011 1012 1015 1016 1020 1023 1023 TCP TCP TCP surf UDP surf TCP TCP TCP TCP TCP TCP UDP
surf surf
Portas Registradas
Port Type
1024 TCP 1024 UDP 1025 TCP 1025 1026 1026 1027 1027 1029 1030 1030 1031 1031 1032 1032 1033 1033 1034 1034 1035 1035 UDP TCP UDP TCP UDP TCP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP blackjack blackjack cap cap exosee exosee iad1 iad1 iad2 iad2 iad3 iad3 netinfo-local netinfo-local activesync activesync mxxrlogin mxxrlogin nsstp
Keyword
Description
Reserved Reserved network blackjack network blackjack Calender Access Protocol Calender Access Protocol ExoSee ExoSee BBN IAD BBN IAD BBN IAD BBN IAD BBN IAD BBN IAD local netinfo port local netinfo port ActiveSync Notifications ActiveSync Notifications MX-XR RPC MX-XR RPC Nebula Secure Segment Transfer Protocol Nebula Secure Segment Transfer Protocol AMS AMS Netarx Netarx
Trojan info
Jade, Latinus, NetSpy, Remote Administration Tool - RAT [no 2] Fraggle Rock, md5 Backdoor, NetSpy, Remote Storm Remote Storm
ICKiller InCommand Access, ICQ Nuke 98
Xanadu
NetSpy
Multidropper
1036 TCP
1036 UDP nsstp 1037 1037 1040 1040 1042 1042 TCP UDP TCP UDP TCP UDP ams ams netarx netarx
BLA trojan BLA trojan fpitp Fingerprint Image Transfer Protocol Fingerprint Image Transfer Protocol Sun's NEO Object Request Broker Sun's NEO Object Request Broker Sun's NEO Object Request Broker Sun's NEO Object Request Rasmin
1045 TCP
1045 UDP fpitp 1047 TCP neod1
1047 UDP neod1 1048 TCP neod2
1048 UDP neod2
11/09/2012
Page 26 of 144
1049 1049 1050 1050 1051 1051 1052 1052 1053 1053 1054 1054 1055 1055 1056 1056 1057 1057 1058 1058 1059 1059 1060 1060 1061 1061 1062 1062 1063 1063 1064 1064 1065 1065 1066 1066
TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
td-postman td-postman cma cma optima-vnet optima-vnet ddt ddt remote-as remote-as brvread brvread ansyslmd ansyslmd vfo vfo startron startron nim nim nimreg nimreg polestar polestar kiosk kiosk veracity veracity kyoceranetdev kyoceranetdev jstel jstel syscomlan syscomlan fpo-fns fpo-fns instl_boots
1067 TCP
1067 UDP instl_boots 1068 TCP instl_bootc
1068 UDP instl_bootc 1069 1069 1070 1070 1071 1071 1072 1072 1073 1073 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP cognex-insight cognex-insight gmrupdateserv gmrupdateserv bsquare-voip bsquare-voip cardax cardax bridgecontrol bridgecontrol fastechnologlm
1074 TCP
1074 UDP fastechnologlm 1075 1075 1076 1076 1077 1077 1078 1078 1079 TCP UDP TCP UDP TCP UDP TCP UDP TCP rdrmshc rdrmshc dab-sti-c dab-sti-c imgames imgames avocent-proxy avocent-proxy asprovatalk
Broker Tobit David Postman VPMN Tobit David Postman VPMN CORBA Management Agent CORBA Management Agent Optima VNET Optima VNET Dynamic DNS Tools Dynamic DNS Tools Remote Assistant (RA) Remote Assistant (RA) BRVREAD BRVREAD ANSYS - License Manager ANSYS - License Manager VFO VFO STARTRON STARTRON nim nim nimreg nimreg POLESTAR POLESTAR KIOSK KIOSK Veracity Veracity KyoceraNetDev KyoceraNetDev JSTEL JSTEL SYSCOMLAN SYSCOMLAN FPO-FNS FPO-FNS Installation Bootstrap Proto. Serv. Installation Bootstrap Proto. Serv. Installation Bootstrap Proto. Cli. Installation Bootstrap Proto. Cli. COGNEX-INSIGHT COGNEX-INSIGHT GMRUpdateSERV GMRUpdateSERV BSQUARE-VOIP BSQUARE-VOIP CARDAX CARDAX Bridge Control Bridge Control FASTechnologies License Manager FASTechnologies License Manager RDRMSHC RDRMSHC DAB STI-C DAB STI-C IMGames IMGames Avocent Proxy Protocol Avocent Proxy Protocol ASPROVATalk
/sbin/initd MiniCommand
The Thief AckCmd
11/09/2012
Page 27 of 144
1079 1080 1080 1081 1081 1082 1082 1083 1083 1084 1084 1085 1085 1086 1086 1087 1087 1088 1088 1089 1089
UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
asprovatalk socks socks pvuniwien pvuniwien amt-esd-prot amt-esd-prot ansoft-lm-1 ansoft-lm-1 ansoft-lm-2 ansoft-lm-2 webobjects webobjects cplscrambler-lg cplscrambler-lg cplscrambler-in cplscrambler-in cplscrambler-al cplscrambler-al ff-annunc ff-annunc ff-fms
1090 TCP
1090 UDP ff-fms 1091 TCP ff-sm 1091 UDP ff-sm 1092 TCP obrpd
1092 UDP obrpd 1093 1093 1094 1094 1095 1095 TCP UDP TCP UDP TCP UDP proofd proofd rootd rootd nicelink nicelink cnrprotocol
1096 TCP
1096 UDP cnrprotocol 1097 1097 1098 1098 TCP UDP TCP UDP sunclustermgr sunclustermgr rmiactivation rmiactivation rmiregistry rmiregistry mctp mctp pt2-discover pt2-discover adobeserver-1 adobeserver-1 adobeserver-2 adobeserver-2 xrl xrl ftranhc ftranhc isoipsigport-1 isoipsigport-1 isoipsigport-2 isoipsigport-2 ratio-adp ratio-adp nfsd-status nfsd-keepalive
ASPROVATalk Socks Socks PVUNIWIEN PVUNIWIEN AMT-ESD-PROT AMT-ESD-PROT Anasoft License Manager Anasoft License Manager Anasoft License Manager Anasoft License Manager Web Objects Web Objects CPL Scrambler Logging CPL Scrambler Logging CPL Scrambler Internal CPL Scrambler Internal CPL Scrambler Alarm Log CPL Scrambler Alarm Log FF Annunciation FF Annunciation FF Fieldbus Message Specification FF Fieldbus Message Specification FF System Management FF System Management Open Business Reporting Protocol Open Business Reporting Protocol PROOFD PROOFD ROOTD ROOTD NICELink NICELink Common Name Resolution Protocol Common Name Resolution Protocol Sun Cluster Manager Sun Cluster Manager RMI Activation RMI Activation RMI Registry RMI Registry MCTP MCTP PT2-DISCOVER PT2-DISCOVER ADOBE SERVER 1 ADOBE SERVER 1 ADOBE SERVER 2 ADOBE SERVER 2 XRL XRL FTRANHC FTRANHC ISOIPSIGPORT-1 ISOIPSIGPORT-1 ISOIPSIGPORT-2 ISOIPSIGPORT-2 ratio-adp ratio-adp Cluster status info Client status info
WinHole WinHole WinHole WinHole
Xtreme
Remote Administration Tool - RAT
Remote Administration Tool - RAT Remote Administration Tool - RAT Blood Fest Evolution, Remote Administration Tool - RAT
1099 TCP 1099 1100 1100 1101 1101 1102 1102 1103 1103 1104 1104 1105 1105 1106 1106 1107 1107 1108 1108 1110 1110 UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
RexxRave
11/09/2012
Page 28 of 144
1111 TCP lmsocialserver 1111 UDP lmsocialserver 1112 TCP icp
1112 UDP icp 1114 1114 1115 1115 1116 1116 1117 1117 1121 1121 1122 1122 1123 1123 1130 1130 1150 1151 1155 1155 1161 1161 1162 1162 1168 1168 1169 1169 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP TCP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP mini-sql mini-sql ardus-trns ardus-trns ardus-cntl ardus-cntl ardus-mtrns ardus-mtrns rmpp rmpp availant-mgr availant-mgr murray murray
LM Social Server LM Social Server Intelligent Communication Protocol Intelligent Communication Protocol Mini SQL Mini SQL ARDUS Transfer ARDUS Transfer ARDUS Control ARDUS Control ARDUS Multicast Transfer ARDUS Multicast Transfer Datalode RMPP Datalode RMPP availant-mgr availant-mgr Murray Murray
TPort
Noknok Noknok Orion Orion nfa nfa health-polling health-polling health-trap health-trap vchat vchat tripwire tripwire atc-lm atc-lm atc-appserver atc-appserver mc-client mc-client llsurfup-http llsurfup-http llsurfup-https llsurfup-https catchpole catchpole hp-webadmin hp-webadmin dmidi dmidi scol scol nucleus-sand nucleus-sand caiccipc caiccipc ssslic-mgr ssslic-mgr ssslog-mgr ssslog-mgr accord-mgc accord-mgc anthony-data anthony-data metasage Network File Access Network File Access Health Polling Health Polling Health Trap Health Trap VChat Conference Service VChat Conference Service TRIPWIRE TRIPWIRE AT+C License Manager AT+C License Manager AT+C FmiApplicationServer AT+C FmiApplicationServer Millicent Client Proxy Millicent Client Proxy LL Surfup HTTP LL Surfup HTTP LL Surfup HTTPS LL Surfup HTTPS Catchpole port Catchpole port HP Web Admin HP Web Admin DMIDI DMIDI SCOL SCOL Nucleus Sand Nucleus Sand caiccipc caiccipc License Validation License Validation Log Request Listener Log Request Listener Accord-MGC Accord-MGC Anthony Data Anthony Data MetaSage DaCryptic Unin68 Psyber Stream Server - PSS, Streaming Audio Server, Voice
1170 TCP 1170 1171 1171 1174 1180 1180 1183 1183 1184 1184 1185 1185 1188 1188 1199 1199 1200 1200 1201 1201 1202 1202 1203 1203 1204 1204 1205 1205 1206 1206 1207 UDP TCP UDP TCP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP
NoBackO NoBackO
SoftWAR
11/09/2012
Page 29 of 144
1207 1208 1208 1209 1209 1210 1210 1211 1211 1212 1212 1213 1213 1214 1214 1215 1215 1216 1216 1217 1217 1218 1218 1219 1219 1220 1220 1221 1221 1222 1222 1223 1223 1224 1224 1225 1225 1226 1226 1227 1227 1228 1228 1229 1229 1230 1230 1231 1231 1233 1233 1234 1234 1235 1235 1236 1236 1237 1237 1238 1238 1239 1239 1240 1240 1241 1241
UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
metasage seagull-ais seagull-ais ipcd3 ipcd3 eoss eoss groove-dpp groove-dpp lupa lupa mpc-lifenet mpc-lifenet kazaa kazaa scanstat-1 scanstat-1 etebac5 etebac5 hpss-ndapi hpss-ndapi aeroflight-ads aeroflight-ads aeroflight-ret aeroflight-ret qt-serveradmin qt-serveradmin sweetware-apps sweetware-apps nerv nerv tgp tgp vpnz vpnz slinkysearch slinkysearch stgxfws stgxfws dns2go dns2go florence florence novell-zfs novell-zfs periscope periscope menandmice-lpm menandmice-lpm univ-appserver univ-appserver search-agent search-agent mosaicsyssvc1 mosaicsyssvc1 bvcontrol bvcontrol tsdos390 tsdos390 hacl-qs hacl-qs nmsd nmsd instantia instantia nessus nessus
MetaSage SEAGULL AIS SEAGULL AIS IPCD3 IPCD3 EOSS EOSS Groove DPP Groove DPP lupa lupa MPC LIFENET MPC LIFENET KAZAA KAZAA scanSTAT 1.0 scanSTAT 1.0 ETEBAC 5 ETEBAC 5 HPSS-NDAPI HPSS-NDAPI AeroFlight-ADs AeroFlight-ADs AeroFlight-Ret AeroFlight-Ret QT SERVER ADMIN QT SERVER ADMIN SweetWARE Apps SweetWARE Apps SNI R&D network SNI R&D network TGP TGP VPNz VPNz SLINKYSEARCH SLINKYSEARCH STGXFWS STGXFWS DNS2Go DNS2Go FLORENCE FLORENCE Novell ZFS Novell ZFS Periscope Periscope menandmice-lpm menandmice-lpm Universal App Server Universal App Server Infoseek Search Agent Infoseek Search Agent mosaicsyssvc1 mosaicsyssvc1 bvcontrol bvcontrol tsdos390 tsdos390 hacl-qs hacl-qs NMSD NMSD Instantia Instantia nessus nessus
Infector
Kaos
Scarab
SubSeven Java client, Ultors Trojan
11/09/2012
Page 30 of 144
1242 TCP nmasoverip 1242 UDP nmasoverip 1243 TCP 1243 1244 1244 1245 1245 1246 1246 1247 1247 1248 1248 1249 1249 1250 1250 1251 1251 1252 1252 1253 1253 1254 1254 1255 1255 1256 1256 1257 1257 1258 1258 1259 1259 1260 1260 1261 1261 1262 1262 1263 1263 1264 1264 1265 1265 1266 1266 1267 1267 1268 1268 1269 1269 1270 1270 1271 1271 1272 1272 1273 1273 1274 1274 UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP serialgateway serialgateway isbconference1 isbconference1 isbconference2 isbconference2 payrouter payrouter visionpyramid visionpyramid hermes hermes mesavistaco mesavistaco swldy-sias swldy-sias servergraph servergraph bspne-pcc bspne-pcc q55-pcc q55-pcc de-noc de-noc de-cache-query de-cache-query de-server de-server shockwave2 shockwave2 opennl opennl opennl-voice opennl-voice ibm-ssd ibm-ssd mpshrsv mpshrsv qnts-orb qnts-orb dka dka prat prat dssiapi dssiapi dellpwrappks dellpwrappks epc epc propel-msgsys propel-msgsys watilapp watilapp opsmgr opsmgr excw excw cspmlockmgr cspmlockmgr emc-gateway emc-gateway t1distproc t1distproc
NMAS over IP NMAS over IP SerialGateway SerialGateway isbconference1 isbconference1 isbconference2 isbconference2 payrouter payrouter VisionPyramid VisionPyramid hermes hermes Mesa Vista Co Mesa Vista Co swldy-sias swldy-sias servergraph servergraph bspne-pcc bspne-pcc q55-pcc q55-pcc de-noc de-noc de-cache-query de-cache-query de-server de-server Shockwave 2 Shockwave 2 Open Network Library Open Network Library Open Network Library Voice Open Network Library Voice ibm-ssd ibm-ssd mpshrsv mpshrsv QNTS-ORB QNTS-ORB dka dka PRAT PRAT DSSIAPI DSSIAPI DELLPWRAPPKS DELLPWRAPPKS eTrust Policy Compliance eTrust Policy Compliance PROPEL-MSGSYS PROPEL-MSGSYS WATiLaPP WATiLaPP Microsoft Operations Manager Microsoft Operations Manager eXcW eXcW CSPMLockMgr CSPMLockMgr EMC-Gateway EMC-Gateway t1distproc t1distproc BackDoor-G, SubSeven Apocalypse, SubSeven, Tiles
VooDoo Doll, VoodooDoll
Scarab Project nEXT, RexxRave
Mavericks Matrix
The Matrix
11/09/2012
Page 31 of 144
1275 1275 1276 1276 1277 1277 1278 1278 1279 1279 1280 1280 1281 1281 1282 1282 1283 1283 1284 1284 1285 1285 1286 1286 1288 1288 1289 1289 1290 1290 1291 1291 1292 1292 1293 1293 1294 1294
TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
ivcollector ivcollector ivmanager ivmanager miva-mqs miva-mqs dellwebadmin-1 dellwebadmin-1 dellwebadmin-2 dellwebadmin-2 pictrography pictrography healthd healthd emperion emperion productinfo productinfo iee-qfx iee-qfx neoiface neoiface netuitive netuitive navbuddy navbuddy jwalkserver jwalkserver winjaserver winjaserver seagulllms seagulllms dsdn dsdn pkt-krb-ipsec pkt-krb-ipsec cmmdriver cmmdriver ehtp
1295 TCP
1295 UDP ehtp 1296 1296 1297 1297 1298 1298 1299 1299 1300 1300 1301 1301 1302 1302 1303 1303 1304 1304 1305 1305 1306 1306 1307 1307 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP dproxy dproxy sdproxy sdproxy lpcp lpcp hp-sci hp-sci h323hostcallsc h323hostcallsc ci3-software-1 ci3-software-1 ci3-software-2 ci3-software-2 sftsrv sftsrv boomerang boomerang pe-mike pe-mike re-conn-proto re-conn-proto pacmand pacmand odsi
1308 TCP
ivcollector ivcollector ivmanager ivmanager mqs mqs Dell Web Admin 1 Dell Web Admin 1 Dell Web Admin 2 Dell Web Admin 2 Pictrography Pictrography healthd healthd Emperion Emperion ProductInfo ProductInfo IEE-QFX IEE-QFX neoiface neoiface netuitive netuitive NavBuddy NavBuddy JWalkServer JWalkServer WinJaServer WinJaServer SEAGULLLMS SEAGULLLMS dsdn dsdn PKT-KRB-IPSec PKT-KRB-IPSec CMMdriver CMMdriver End-by-Hop Transmission Protocol End-by-Hop Transmission Protocol dproxy dproxy sdproxy sdproxy lpcp lpcp hp-sci hp-sci H323 Host Call Secure H323 Host Call Secure CI3-Software-1 CI3-Software-1 CI3-Software-2 CI3-Software-2 sftsrv sftsrv Boomerang Boomerang pe-mike pe-mike RE-Conn-Proto RE-Conn-Proto Pacmand Pacmand Optical Domain Service Interconnect (ODSI)
11/09/2012
Page 32 of 144
Optical Domain Service Interconnect (ODSI) 1309 TCP jtag-server JTAG server 1309 UDP jtag-server JTAG server 1310 TCP husky Husky 1310 UDP husky Husky 1311 TCP rxmon RxMon 1311 UDP rxmon RxMon 1312 TCP sti-envision STI Envision 1312 UDP sti-envision STI Envision 1313 TCP bmc_patroldb BMC_PATROLDB 1313 UDP bmc_patroldb BMC_PATROLDB Photoscript Distributed 1314 TCP pdps Printing System Photoscript Distributed 1314 UDP pdps Printing System 1315 TCP els E.L.S., Event Listener Service 1315 UDP els E.L.S., Event Listener Service 1316 TCP exbit-escp Exbit-ESCP 1316 UDP exbit-escp Exbit-ESCP 1317 TCP vrts-ipcserver vrts-ipcserver 1317 UDP vrts-ipcserver vrts-ipcserver 1318 TCP krb5gatekeeper krb5gatekeeper 1318 UDP krb5gatekeeper krb5gatekeeper 1319 TCP panja-icsp Panja-ICSP 1319 UDP panja-icsp Panja-ICSP 1320 TCP panja-axbnet Panja-AXBNET 1320 UDP panja-axbnet Panja-AXBNET 1321 TCP pip PIP 1321 UDP pip PIP 1322 TCP novation Novation 1322 UDP novation Novation 1323 TCP brcd brcd 1323 UDP brcd brcd 1324 TCP delta-mcp delta-mcp 1324 UDP delta-mcp delta-mcp 1325 TCP dx-instrument DX-Instrument 1325 UDP dx-instrument DX-Instrument 1326 TCP wimsic WIMSIC 1326 UDP wimsic WIMSIC 1327 TCP ultrex Ultrex 1327 UDP ultrex Ultrex 1328 TCP ewall EWALL 1328 UDP ewall EWALL 1329 TCP netdb-export netdb-export 1329 UDP netdb-export netdb-export 1330 TCP streetperfect StreetPerfect 1330 UDP streetperfect StreetPerfect 1331 TCP intersan intersan 1331 UDP intersan intersan 1332 TCP pcia-rxp-b PCIA RXP-B 1332 UDP pcia-rxp-b PCIA RXP-B 1333 TCP passwrd-policy Password Policy 1333 UDP passwrd-policy Password Policy 1334 TCP writesrv writesrv 1334 UDP writesrv writesrv 1335 TCP digital-notary Digital Notary Protocol 1335 UDP digital-notary Digital Notary Protocol 1336 TCP ischat Instant Service Chat 1336 UDP ischat Instant Service Chat 1337 TCP menandmice-dns menandmice DNS 1337 UDP menandmice-dns menandmice DNS 1338 TCP wmc-log-svc WMC-log-svr 1338 UDP wmc-log-svc WMC-log-svr 1339 TCP kjtsiteserver kjtsiteserver 1339 UDP kjtsiteserver kjtsiteserver 1340 TCP naap NAAP 1340 UDP naap NAAP 1308 UDP odsi
NETrojan
Shadyshell Millennium Worm
11/09/2012
Page 33 of 144
1341 1341 1342 1342 1343 1343 1344 1344 1345 1345 1346 1346 1347 1347 1348 1348 1349 1349 1350 1350 1351 1351 1352 1352 1353 1353 1354 1354 1355 1355 1356 1356 1357 1357 1358 1358 1359 1359 1360 1360 1361 1361 1362 1362 1363 1363 1364 1364 1365 1365
TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
qubes qubes esbroker esbroker re101 re101 icap icap vpjp vpjp alta-ana-lm alta-ana-lm bbn-mmc bbn-mmc bbn-mmx bbn-mmx sbook sbook editbench editbench equationbuilder equationbuilder lotusnote lotusnote relief relief XSIP-network XSIP-network intuitive-edge intuitive-edge cuillamartin cuillamartin pegboard pegboard connlcli connlcli ftsrv ftsrv mimer mimer linx linx timeflies timeflies ndm-requester ndm-requester ndm-server ndm-server adapt-sna adapt-sna netware-csp
1366 TCP
1366 UDP netware-csp 1367 1367 1368 1368 1369 1369 1370 1370 1371 1371 1372 1372 1373 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP dcs dcs screencast screencast gv-us gv-us us-gv us-gv fc-cli fc-cli fc-ser fc-ser chromagrafx
QuBES QuBES ESBroker ESBroker re101 re101 ICAP ICAP VPJP VPJP Alta Analytics License Manager Alta Analytics License Manager multi media conferencing multi media conferencing multi media conferencing multi media conferencing Registration Network Protocol Bo dll Registration Network Protocol BackOrifice DLL, BO DLL Registration Network Protocol Registration Network Protocol Digital Tool Works (MIT) Digital Tool Works (MIT) Lotus Note Lotus Note Relief Consulting Relief Consulting Five Across XSIP Network Five Across XSIP Network Intuitive Edge Intuitive Edge CuillaMartin Company CuillaMartin Company Electronic PegBoard Electronic PegBoard CONNLCLI CONNLCLI FTSRV FTSRV MIMER MIMER LinX LinX TimeFlies TimeFlies Network DataMover Requester Network DataMover Requester Network DataMover Server Network DataMover Server Network Software Associates Network Software Associates Novell NetWare Comm Service Platform Novell NetWare Comm Service Platform DCS DCS ScreenCast ScreenCast GlobalView to Unix Shell GlobalView to Unix Shell Unix Shell to GlobalView Unix Shell to GlobalView Fujitsu Config Protocol Fujitsu Config Protocol Fujitsu Config Protocol Fujitsu Config Protocol Chromagrafx
11/09/2012
Page 34 of 144
1373 1374 1374 1375 1375 1376 1376 1377 1377 1378 1378 1379 1379
UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
chromagrafx molly molly bytex bytex ibm-pps ibm-pps cichlid cichlid elan elan dbreporter dbreporter telesis-licman
1380 TCP
1380 UDP telesis-licman 1381 TCP apple-licman
1381 UDP apple-licman 1382 TCP udt_os 1382 UDP udt_os 1383 TCP gwha
1383 UDP gwha 1384 TCP os-licman
1384 UDP os-licman 1385 TCP atex_elmd
1385 UDP atex_elmd 1386 TCP checksum 1386 UDP checksum 1387 TCP cadsi-lm
1387 UDP cadsi-lm 1388 TCP objective-dbc
1388 UDP objective-dbc 1389 1389 1390 1390 1391 1391 1392 1392 1393 1393 1394 1394 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP iclpv-dm iclpv-dm iclpv-sc iclpv-sc iclpv-sas iclpv-sas iclpv-pm iclpv-pm iclpv-nls iclpv-nls iclpv-nlc iclpv-nlc iclpv-wsm
1395 TCP
1395 UDP iclpv-wsm 1396 1396 1397 1397 1398 1398 1399 TCP UDP TCP UDP TCP UDP TCP dvl-activemail dvl-activemail audio-activmail audio-activmail video-activmail video-activmail cadkey-licman
Chromagrafx EPI Software Systems EPI Software Systems Bytex Bytex IBM Person to Person Software IBM Person to Person Software Cichlid License Manager Cichlid License Manager Elan License Manager Elan License Manager Integrity Solutions Integrity Solutions Telesis Network License Manager Telesis Network License Manager Apple Network License Manager Apple Network License Manager udt_os udt_os GW Hannaway Network License Manager GW Hannaway Network License Manager Objective Solutions License Manager Objective Solutions License Manager Atex Publishing License Manager Atex Publishing License Manager CheckSum License Manager Dagger CheckSum License Manager Computer Aided Design Software Inc LM Computer Aided Design Software Inc LM Objective Solutions DataBase Cache Objective Solutions DataBase Cache Document Manager Document Manager Storage Controller Storage Controller Storage Access Server Storage Access Server Print Manager Print Manager Network Log Server Network Log Server Network Log Client GoFriller, Backdoor G-1 Network Log Client PC Workstation Manager software PC Workstation Manager software DVL Active Mail DVL Active Mail Audio Active Mail Audio Active Mail Video Active Mail Video Active Mail Cadkey License Manager
11/09/2012
Page 35 of 144
1399 1400 1400 1401 1401 1402 1402 1403 1403
UDP TCP UDP TCP UDP TCP UDP TCP UDP
cadkey-licman cadkey-tablet cadkey-tablet goldleaf-licman goldleaf-licman prm-sm-np prm-sm-np prm-nm-np prm-nm-np igi-lm
1404 TCP
1404 UDP igi-lm 1405 1405 1406 1406 1407 1407 1408 1408 1409 1409 1410 1410 1411 1411 1412 1412 1413 1413 1414 1414 1415 1415 1416 1416 1417 1417 1418 1418 1419 1419 1420 1420 1421 1421 1422 1422 1423 1423 1424 1424 1425 1425 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP ibm-res ibm-res netlabs-lm netlabs-lm dbsa-lm dbsa-lm sophia-lm sophia-lm here-lm here-lm hiq hiq af af innosys innosys innosys-acl innosys-acl ibm-mqseries ibm-mqseries dbstar dbstar novell-lu6.2 novell-lu6.2 timbuktu-srv1 timbuktu-srv1 timbuktu-srv2 timbuktu-srv2 timbuktu-srv3 timbuktu-srv3 timbuktu-srv4 timbuktu-srv4 gandalf-lm gandalf-lm autodesk-lm autodesk-lm essbase essbase hybrid hybrid zion-lm zion-lm sais
1426 TCP
1426 UDP sais 1427 1427 1428 1428 1429 1429 1430 1430 1431 TCP UDP TCP UDP TCP UDP TCP UDP TCP mloadd mloadd informatik-lm informatik-lm nms nms tpdu tpdu rgtp
Cadkey License Manager Cadkey Tablet Daemon Cadkey Tablet Daemon Goldleaf License Manager Goldleaf License Manager Prospero Resource Manager Prospero Resource Manager Prospero Resource Manager Prospero Resource Manager Infinite Graphics License Manager Infinite Graphics License Manager IBM Remote Execution Starter IBM Remote Execution Starter NetLabs License Manager NetLabs License Manager DBSA License Manager DBSA License Manager Sophia License Manager Sophia License Manager Here License Manager Here License Manager HiQ License Manager HiQ License Manager AudioFile AudioFile InnoSys InnoSys Innosys-ACL Innosys-ACL IBM MQSeries IBM MQSeries DBStar DBStar Novell LU6.2 Novell LU6.2 Timbuktu Service 1 Port Timbuktu Service 1 Port Timbuktu Service 2 Port Timbuktu Service 2 Port Timbuktu Service 3 Port Timbuktu Service 3 Port Timbuktu Service 4 Port Timbuktu Service 4 Port Gandalf License Manager Gandalf License Manager Autodesk License Manager Autodesk License Manager Essbase Arbor Software Essbase Arbor Software Hybrid Encryption Protocol Hybrid Encryption Protocol Zion Software License Manager Zion Software License Manager Satellite-data Acquisition System 1 Satellite-data Acquisition System 1 mloadd monitoring tool mloadd monitoring tool Informatik License Manager Informatik License Manager Hypercom NMS Hypercom NMS Hypercom TPDU Hypercom TPDU Reverse Gossip Transport
11/09/2012
Page 36 of 144
1431 UDP rgtp 1432 TCP blueberry-lm
1432 UDP blueberry-lm 1433 1433 1434 1434 1435 1435 TCP UDP TCP UDP TCP UDP ms-sql-s ms-sql-s ms-sql-m ms-sql-m ibm-cics ibm-cics saism
1436 TCP
1436 UDP saism 1437 1437 1438 1438 1439 1439 TCP UDP TCP UDP TCP UDP tabula tabula eicon-server eicon-server eicon-x25 eicon-x25 eicon-slp
1440 TCP
1440 UDP eicon-slp 1441 1441 1442 1442 TCP UDP TCP UDP cadis-1 cadis-1 cadis-2 cadis-2 ies-lm
1443 TCP
1443 UDP ies-lm 1444 1444 1445 1445 TCP UDP TCP UDP marcam-lm marcam-lm proxima-lm proxima-lm ora-lm
1446 TCP
1446 UDP ora-lm 1447 1447 1448 1448 1449 1449 TCP UDP TCP UDP TCP UDP apri-lm apri-lm oc-lm oc-lm peport peport dwf
1450 TCP
1450 UDP dwf 1451 TCP infoman 1451 UDP infoman 1452 TCP gtegsc-lm
1452 UDP gtegsc-lm 1453 1453 1454 1454 1455 1455 1456 1456 1457 1457 1458 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP genie-lm genie-lm interhdl_elmd interhdl_elmd esl-lm esl-lm dca dca valisys-lm valisys-lm nrcabq-lm
Reverse Gossip Transport Blueberry Software License Manager Blueberry Software License Manager Microsoft-SQL-Server SQL Snake Microsoft-SQL-Server Microsoft-SQL-Monitor Microsoft-SQL-Monitor SQL Slammer IBM CICS IBM CICS Satellite-data Acquisition System 2 Satellite-data Acquisition System 2 Tabula Tabula Eicon Security Agent/Server Eicon Security Agent/Server Eicon X25/SNA Gateway Eicon X25/SNA Gateway Eicon Service Location Protocol Eicon Service Location Protocol Cadis License Management Remote Storm Cadis License Management Cadis License Management Cadis License Management Integrated Engineering Software Integrated Engineering Software Marcam License Management Marcam License Management Proxima License Manager Proxima License Manager Optical Research Associates License Manager Optical Research Associates License Manager Applied Parallel Research LM Applied Parallel Research LM OpenConnect License Manager OpenConnect License Manager PEport PEport Tandem Distributed Workbench Facility Tandem Distributed Workbench Facility IBM Information Management IBM Information Management GTE Government Systems License Man GTE Government Systems License Man Genie License Manager Genie License Manager interHDL License Manager interHDL License Manager ESL License Manager ESL License Manager DCA DCA Valisys License Manager Valisys License Manager Nichols Research Corp.
11/09/2012
Page 37 of 144
1458 1459 1459 1460 1460 1461 1461 1462 1462 1463 1463 1464 1464 1465
UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP
nrcabq-lm proshare1 proshare1 proshare2 proshare2 ibm_wrless_lan ibm_wrless_lan world-lm world-lm nucleus nucleus msl_lmd msl_lmd pipes
1465 UDP pipes 1466 TCP oceansoft-lm
1466 UDP oceansoft-lm 1467 1467 1468 1468 TCP UDP TCP UDP csdmbase csdmbase csdm csdm aal-lm
1469 TCP
1469 UDP aal-lm 1470 1470 1471 1471 1472 1472 1473 1473 1474 1474 1475 1475 1476 1476 1477 1477 1478 1478 1479 1479 1480 1480 1481 1481 1482 1482 1483 1483 1484 1484 1485 1485 1486 1486 1487 1487 1488 1488 1489 1489 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP uaiact uaiact csdmbase csdmbase csdm csdm openmath openmath telefinder telefinder taligent-lm taligent-lm clvm-cfg clvm-cfg ms-sna-server ms-sna-server ms-sna-base ms-sna-base dberegister dberegister pacerforum pacerforum airs airs miteksys-lm miteksys-lm afs afs confluent confluent lansource lansource nms_topo_serv nms_topo_serv localinfosrvr localinfosrvr docstor docstor dmdocbroker dmdocbroker
Nichols Research Corp. Proshare Notebook Application Proshare Notebook Application Proshare Notebook Application Proshare Notebook Application IBM Wireless LAN IBM Wireless LAN World License Manager World License Manager Nucleus Nucleus MSL License Manager MSL License Manager Pipes Platform Pipes Platform mfarlin@peerlogic.com Ocean Software License Manager Ocean Software License Manager CSDMBASE CSDMBASE CSDM CSDM Active Analysis Limited License Manager Active Analysis Limited License Manager Universal Analytics Universal Analytics csdmbase csdmbase csdm csdm OpenMath OpenMath Telefinder Telefinder Taligent License Manager Taligent License Manager clvm-cfg clvm-cfg ms-sna-server ms-sna-server ms-sna-base ms-sna-base dberegister dberegister PacerForum RemoteHack PacerForum AIRS AIRS Miteksys License Manager Miteksys License Manager AFS License Manager AFS License Manager Confluent License Manager Confluent License Manager LANSource LANSource nms_topo_serv nms_topo_serv LocalInfoSrvr LocalInfoSrvr DocStor DocStor dmdocbroker dmdocbroker
11/09/2012
Page 38 of 144
1490 1490 1491 1491 1492 1492 1493 1493 1494 1494 1495 1495 1496 1496 1497 1497 1498 1498 1499 1499 1500 1500
TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
insitu-conf insitu-conf anynetgateway anynetgateway stone-design-1 stone-design-1 netmap_lm netmap_lm ica ica cvc cvc liberty-lm liberty-lm rfx-lm rfx-lm sybase-sqlany sybase-sqlany fhc fhc vlsi-lm vlsi-lm saiscm
1501 TCP
1501 UDP saiscm 1502 1502 1503 1503 TCP UDP TCP UDP shivadiscovery shivadiscovery imtc-mcs imtc-mcs evb-elm
1504 TCP
1504 UDP evb-elm 1505 1505 1506 1506 1507 1507 1508 1508 TCP UDP TCP UDP TCP UDP TCP UDP funkproxy funkproxy utcd utcd symplex symplex diagmond diagmond robcad-lm
insitu-conf insitu-conf anynetgateway anynetgateway stone-design-1 stone-design-1 netmap_lm netmap_lm ica ica cvc cvc liberty-lm liberty-lm rfx-lm rfx-lm Sybase SQL Any Sybase SQL Any Federico Heinz Consultora Federico Heinz Consultora VLSI License Manager VLSI License Manager Satellite-data Acquisition System 3 Satellite-data Acquisition System 3 Shiva Shiva Databeam Databeam EVB Software Engineering License Manager EVB Software Engineering License Manager Funk Software, Inc. Funk Software, Inc. Universal Time daemon (utcd) Universal Time daemon (utcd) symplex symplex diagmond diagmond Robcad, Ltd. License Manager Robcad, Ltd. License Manager Midland Valley Exploration Ltd. Lic. Man. Midland Valley Exploration Ltd. Lic. Man. 3l-l1 3l-l1 Microsoft's Windows Internet Name Service Microsoft's Windows Internet Name Service Fujitsu Systems Business of America, Inc Fujitsu Systems Business of America, Inc Fujitsu Systems Business of America, Inc Fujitsu Systems Business of America, Inc ifor-protocol ifor-protocol Virtual Places Audio data Virtual Places Audio data Virtual Places Audio control
FTP99CMP
1509 TCP
Psyber Streaming Server, Psyber StreamingServer
1509 UDP robcad-lm 1510 TCP mvx-lm
1510 UDP mvx-lm 1511 TCP 3l-l1 1511 UDP 3l-l1 1512 TCP wins
1512 UDP wins 1513 TCP fujitsu-dtc
1513 UDP fujitsu-dtc 1514 TCP fujitsu-dtcns
1514 UDP fujitsu-dtcns 1515 1515 1516 1516 1517 TCP UDP TCP UDP TCP ifor-protocol ifor-protocol vpad vpad vpac
11/09/2012
Page 39 of 144
1517 1518 1518 1519 1519 1520 1520 1521 1521
vpac vpvd vpvd vpvc vpvc atm-zip-office atm-zip-office ncube-lm ncube-lm ricardo-lm
1522 TCP
1522 UDP ricardo-lm 1523 1523 1524 1524 TCP UDP TCP UDP cichild-lm cichild-lm ingreslock ingreslock prospero-np
1525 TCP
1525 UDP prospero-np 1526 TCP pdap-np
1526 UDP pdap-np 1527 1527 1528 1528 1529 1529 1530 1530 1531 1531 1532 1532 1533 1533 1534 1534 1535 1535 1536 1536 1537 1537 1538 1538 1539 1539 1540 1540 1541 1541 1542 1542 1543 1543 1544 1544 1545 1545 1546 1546 1547 1547 1548 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP tlisrv tlisrv mciautoreg mciautoreg coauthor coauthor rap-service rap-service rap-listen rap-listen miroconnect miroconnect virtual-places virtual-places micromuse-lm micromuse-lm ampr-info ampr-info ampr-inter ampr-inter sdsc-lm sdsc-lm 3ds-lm 3ds-lm intellistor-lm intellistor-lm rds rds rds2 rds2 gridgen-elmd gridgen-elmd simba-cs simba-cs aspeclmd aspeclmd vistium-share vistium-share abbaccuray abbaccuray laplink laplink axon-lm
Virtual Places Audio control Virtual Places Video data Virtual Places Video data Virtual Places Video control Virtual Places Video control atm zip office atm zip office nCube License Manager nCube License Manager Ricardo North America License Manager Ricardo North America License Manager cichild cichild ingres Trinoo ingres Prospero Directory Service non-priv Prospero Directory Service non-priv Prospero Data Access Prot non-priv Prospero Data Access Prot non-priv oracle oracle micautoreg micautoreg oracle oracle rap-service rap-service rap-listen rap-listen miroconnect miroconnect Virtual Places Software Virtual Places Software micromuse-lm micromuse-lm ampr-info ampr-info ampr-inter ampr-inter isi-lm isi-lm 3ds-lm 3ds-lm Intellistor License Manager Intellistor License Manager rds rds rds2 rds2 gridgen-elmd gridgen-elmd simba-cs simba-cs aspeclmd aspeclmd vistium-share vistium-share abbaccuray abbaccuray laplink laplink Axon License Manager
11/09/2012
Page 40 of 144
1548 UDP axon-lm 1549 TCP shivahose 1549 UDP shivasound 1550 TCP 3m-image-lm
1550 UDP 3m-image-lm 1551 1551 1552 1552 1553 1553 TCP UDP TCP UDP TCP UDP hecmtl-db hecmtl-db pciarray pciarray sna-cs sna-cs caci-lm
1554 TCP
1554 UDP caci-lm 1555 1555 1556 1556 1557 1557 1558 1558 1559 1559 1560 1560 1561 1561 1562 1562 1563 1563 1564 1564 1565 1565 1566 1566 1567 1567 1568 1568 1569 1569 1570 1570 1571 1571 1572 1572 1573 1573 1574 1574 1575 1575 1576 1576 1577 1577 1578 1578 1579 1579 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP livelan livelan ashwin ashwin arbortext-lm arbortext-lm xingmpeg xingmpeg web2host web2host asci-val asci-val facilityview facilityview pconnectmgr pconnectmgr cadabra-lm cadabra-lm pay-per-view pay-per-view winddlb winddlb corelvideo corelvideo jlicelmd jlicelmd tsspmap tsspmap ets ets orbixd orbixd rdb-dbs-disp rdb-dbs-disp chip-lm chip-lm itscomm-ns itscomm-ns mvel-lm mvel-lm oraclenames oraclenames moldflow-lm moldflow-lm hypercube-lm hypercube-lm jacobus-lm jacobus-lm ioc-sea-lm ioc-sea-lm
Axon License Manager Shiva Hose Shiva Sound Image Storage license manager 3M Company Image Storage license manager 3M Company HECMTL-DB HECMTL-DB pciarray pciarray sna-cs sna-cs CACI Products Company License Manager CACI Products Company License Manager livelan livelan AshWin CI Tecnologies AshWin CI Tecnologies ArborText License Manager ArborText License Manager xingmpeg xingmpeg web2host web2host ASCI-RemoteSHADOW ASCI-RemoteSHADOW facilityview facilityview pconnectmgr pconnectmgr Cadabra License Manager Cadabra License Manager Pay-Per-View Pay-Per-View WinDD WinDD CORELVIDEO CORELVIDEO jlicelmd jlicelmd tsspmap Remote Hack, RemoteHack tsspmap ets ets orbixd orbixd Oracle Remote Data Base Oracle Remote Data Base Chipcom License Manager Chipcom License Manager itscomm-ns itscomm-ns mvel-lm mvel-lm oraclenames oraclenames moldflow-lm moldflow-lm hypercube-lm hypercube-lm Jacobus License Manager Jacobus License Manager ioc-sea-lm ioc-sea-lm
11/09/2012
Page 41 of 144
1580 1580 1581 1581 1582 1582 1583 1583 1584 1584 1585 1585 1586 1586 1587 1587 1588 1588 1589 1589 1590 1590 1591 1591 1592 1592 1593 1593 1594 1594 1595 1595 1596 1596 1597 1597 1598 1598 1599 1599
TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
tn-tl-r1 tn-tl-r2 mil-2045-47001 mil-2045-47001 msims msims simbaexpress simbaexpress tn-tl-fd2 tn-tl-fd2 intv intv ibm-abtact ibm-abtact pra_elmd pra_elmd triquest-lm triquest-lm vqp vqp gemini-lm gemini-lm ncpm-pm ncpm-pm commonspace commonspace mainsoft-lm mainsoft-lm sixtrak sixtrak radio radio radio-sm radio-bc orbplus-iiop orbplus-iiop picknfs picknfs simbaservices simbaservices issd issd aas aas inspect inspect picodbc picodbc icabrowser icabrowser slp
tn-tl-r1 tn-tl-r2 MIL-2045-47001 MIL-2045-47001 MSIMS MSIMS simbaexpress simbaexpress tn-tl-fd2 tn-tl-fd2 intv intv ibm-abtact ibm-abtact pra_elmd pra_elmd triquest-lm triquest-lm VQP VQP gemini-lm gemini-lm ncpm-pm ncpm-pm commonspace commonspace mainsoft-lm mainsoft-lm sixtrak sixtrak radio radio radio-sm radio-bc orbplus-iiop orbplus-iiop picknfs picknfs simbaservices simbaservices Direct Connection, Shivka-Burka, DirectConnection aas DirectConnection aas inspect DirectConnection inspect pickodbc pickodbc icabrowser icabrowser Salutation Manager (Salutation Protocol) Salutation Manager (Salutation Protocol) Salutation Manager (SLM-API) Salutation Manager (SLM-API) stt stt Smart Corp. License Manager Smart Corp. License Manager isysg-lm isysg-lm taurus-wh taurus-wh Inter Library Loan Inter Library Loan NetBill Transaction Server
1600 TCP 1600 1601 1601 1602 1602 1603 1603 1604 1604 UDP TCP UDP TCP UDP TCP UDP TCP UDP
1605 TCP
1605 UDP slp 1606 1606 1607 1607 1608 1608 1609 1609 1610 1610 1611 1611 1612 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP slm-api slm-api stt stt smart-lm smart-lm isysg-lm isysg-lm taurus-wh taurus-wh ill ill netbill-trans
11/09/2012
Page 42 of 144
1612 1613 1613 1614 1614 1615 1615 1616 1616
netbill-trans netbill-keyrep netbill-keyrep netbill-cred netbill-cred netbill-auth netbill-auth netbill-prod netbill-prod nimrod-agent
1617 TCP
1617 UDP nimrod-agent 1618 1618 1619 1619 1620 1620 1621 1621 1622 1622 1623 1623 1624 1624 1625 1625 1626 1626 1627 1627 1628 1628 1629 1629 1630 1630 1631 1631 1632 1632 1633 1633 1634 1634 1635 1635 1636 1636 1637 1637 1638 1638 1639 1639 1640 1640 1641 1641 1642 1642 1643 1643 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP skytelnet skytelnet xs-openstorage xs-openstorage faxportwinport faxportwinport softdataphone softdataphone ontime ontime jaleosnd jaleosnd udp-sr-port udp-sr-port svs-omagent svs-omagent shockwave shockwave t128-gateway t128-gateway lontalk-norm lontalk-norm lontalk-urgnt lontalk-urgnt oraclenet8cman oraclenet8cman visitview visitview pammratc pammratc pammrpc pammrpc loaprobe loaprobe edb-server1 edb-server1 cncp cncp cnap cnap cnip cnip cert-initiator cert-initiator cert-responder cert-responder invision invision isis-am isis-am isis-ambc isis-ambc saiseh
1644 TCP
NetBill Transaction Server NetBill Key Repository NetBill Key Repository NetBill Credential Server NetBill Credential Server NetBill Authorization Server NetBill Authorization Server NetBill Product Server NetBill Product Server Nimrod Inter-Agent Communication Nimrod Inter-Agent Communication skytelnet skytelnet xs-openstorage xs-openstorage faxportwinport faxportwinport softdataphone softdataphone ontime ontime jaleosnd jaleosnd udp-sr-port udp-sr-port svs-omagent svs-omagent Shockwave Shockwave T.128 Gateway T.128 Gateway LonTalk normal LonTalk normal LonTalk urgent LonTalk urgent Oracle Net8 Cman Oracle Net8 Cman Visit view Visit view PAMMRATC PAMMRATC PAMMRPC PAMMRPC Log On America Probe Log On America Probe EDB Server 1 EDB Server 1 CableNet Control Protocol CableNet Control Protocol CableNet Admin Protocol CableNet Admin Protocol CableNet Info Protocol CableNet Info Protocol cert-initiator cert-initiator cert-responder cert-responder InVision InVision isis-am isis-am isis-ambc isis-ambc Satellite-data Acquisition System 4
NetCrack
11/09/2012
Page 43 of 144
1645 1645 1646 1646 1647 1647 1648 1648 1649 1649 1650 1650 1651 1651 1652 1652 1653 1653 1654 1654 1655 1655 1656 1656 1657 1657 1658 1658 1659 1659 1660 1660 1661 1661 1662 1662 1663 1663 1664 1664 1665 1665 1666 1666 1667 1667 1668 1668 1669 1669 1670 1670 1671 1671 1672 1672 1673 1673 1674 1674 1675 1675 1676 1676 1677 1677 1678
TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP
sightline sightline sa-msg-port sa-msg-port rsap rsap concurrent-lm concurrent-lm kermit kermit nkd nkd shiva_confsrvr shiva_confsrvr xnmp xnmp alphatech-lm alphatech-lm stargatealerts stargatealerts dec-mbadmin dec-mbadmin dec-mbadmin-h dec-mbadmin-h fujitsu-mmpdc fujitsu-mmpdc sixnetudr sixnetudr sg-lm sg-lm skip-mc-gikreq skip-mc-gikreq netview-aix-1 netview-aix-1 netview-aix-2 netview-aix-2 netview-aix-3 netview-aix-3 netview-aix-4 netview-aix-4 netview-aix-5 netview-aix-5 netview-aix-6 netview-aix-6 netview-aix-7 netview-aix-7 netview-aix-8 netview-aix-8 netview-aix-9 netview-aix-9 netview-aix-10 netview-aix-10 netview-aix-11 netview-aix-11 netview-aix-12 netview-aix-12 proshare-mc-1 proshare-mc-1 proshare-mc-2 proshare-mc-2 pdp pdp netcomm1 netcomm2 groupwise groupwise prolink
SightLine SightLine sa-msg-port sa-msg-port rsap rsap concurrent-lm concurrent-lm kermit kermit nkdn nkd shiva_confsrvr shiva_confsrvr xnmp xnmp alphatech-lm alphatech-lm stargatealerts stargatealerts dec-mbadmin dec-mbadmin dec-mbadmin-h dec-mbadmin-h fujitsu-mmpdc fujitsu-mmpdc sixnetudr sixnetudr Silicon Grail License Manager Silicon Grail License Manager skip-mc-gikreq skip-mc-gikreq netview-aix-1 netview-aix-1 netview-aix-2 netview-aix-2 netview-aix-3 netview-aix-3 netview-aix-4 netview-aix-4 netview-aix-5 netview-aix-5 netview-aix-6 netview-aix-6 netview-aix-7 netview-aix-7 netview-aix-8 netview-aix-8 netview-aix-9 netview-aix-9 netview-aix-10 netview-aix-10 netview-aix-11 netview-aix-11 netview-aix-12 netview-aix-12 Intel Proshare Multicast Intel Proshare Multicast Intel Proshare Multicast Intel Proshare Multicast Pacific Data Products Pacific Data Products netcomm1 netcomm2 groupwise groupwise prolink
11/09/2012
Page 44 of 144
1678 1679 1679 1680 1680 1681 1681 1682 1682 1683 1683 1684 1684 1685 1685 1686 1686 1687 1687 1688 1688 1689 1689 1690 1690 1691 1691 1692 1692 1693 1693 1694 1694 1695 1695 1696 1696 1697 1697 1698 1698 1699 1699 1700 1700 1701 1701 1702 1702 1703 1703 1704 1704 1705 1705 1706 1706 1707 1707 1708 1708 1709 1709 1710 1710 1711 1711
prolink darcorp-lm darcorp-lm microcom-sbp microcom-sbp sd-elmd sd-elmd lanyon-lantern lanyon-lantern ncpm-hip ncpm-hip snaresecure snaresecure n2nremote n2nremote cvmon cvmon nsjtp-ctrl nsjtp-ctrl nsjtp-data nsjtp-data firefox firefox ng-umds ng-umds empire-empuma empire-empuma sstsys-lm sstsys-lm rrirtr rrirtr rrimwm rrimwm rrilwm rrilwm rrifmm rrifmm rrisat rrisat rsvp-encap-1 rsvp-encap-1 rsvp-encap-2 rsvp-encap-2 mps-raft mps-raft l2tp l2tp deskshare deskshare hb-engine hb-engine bcs-broker bcs-broker slingshot slingshot jetform jetform vdmplay vdmplay gat-lmd gat-lmd centra centra impera impera pptconference pptconference
prolink darcorp-lm darcorp-lm microcom-sbp microcom-sbp sd-elmd sd-elmd lanyon-lantern lanyon-lantern ncpm-hip ncpm-hip SnareSecure SnareSecure n2nremote n2nremote cvmon cvmon nsjtp-ctrl nsjtp-ctrl nsjtp-data nsjtp-data firefox firefox ng-umds ng-umds empire-empuma empire-empuma sstsys-lm sstsys-lm rrirtr rrirtr rrimwm rrimwm rrilwm rrilwm rrifmm rrifmm rrisat rrisat RSVP-ENCAPSULATION-1 RSVP-ENCAPSULATION-1 RSVP-ENCAPSULATION-2 RSVP-ENCAPSULATION-2 mps-raft mps-raft l2tp l2tp deskshare deskshare hb-engine hb-engine bcs-broker bcs-broker slingshot slingshot jetform jetform vdmplay vdmplay gat-lmd gat-lmd centra centra impera impera pptconference pptconference
Exploiter
11/09/2012
Page 45 of 144
1712 1712 1713 1713 1714 1714 1715 1715 1716 1716 1717 1717 1718 1718 1719 1719 1720 1720 1721 1721 1722 1722 1723 1723 1724 1724 1725 1725 1726 1726 1727 1727 1728 1728 1729 1729 1730 1730 1731 1731 1732 1732
TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
registrar registrar conferencetalk conferencetalk sesi-lm sesi-lm houdini-lm houdini-lm xmsg xmsg fj-hdnet fj-hdnet h323gatedisc h323gatedisc h323gatestat h323gatestat h323hostcall h323hostcall caicci caicci hks-lm hks-lm pptp pptp csbphonemaster csbphonemaster iden-ralp iden-ralp iberiagames iberiagames winddx winddx telindus telindus citynl citynl roketz roketz msiccp msiccp proxim proxim siipat
1733 TCP
1733 UDP siipat 1734 TCP cambertx-lm
1734 UDP cambertx-lm 1735 1735 1736 1736 1737 1737 1738 1738 1739 1739 1740 1740 1741 1741 1742 1742 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP privatechat privatechat street-stream street-stream ultimad ultimad gamegen1 gamegen1 webaccess webaccess encore encore cisco-net-mgmt cisco-net-mgmt 3Com-nsd 3Com-nsd cinegrfx-lm
1743 TCP
resource monitoring service resource monitoring service ConferenceTalk ConferenceTalk sesi-lm sesi-lm houdini-lm houdini-lm xmsg xmsg fj-hdnet fj-hdnet h323gatedisc h323gatedisc h323gatestat h323gatestat h323hostcall h323hostcall caicci caicci HKS License Manager HKS License Manager pptp pptp csbphonemaster csbphonemaster iden-ralp iden-ralp IBERIAGAMES IBERIAGAMES winddx winddx TELINDUS TELINDUS CityNL License Management CityNL License Management roketz roketz MSICCP MSICCP proxim proxim SIMS - SIIPAT Protocol for Alarm Transmission SIMS - SIIPAT Protocol for Alarm Transmission Camber Corporation License Management Camber Corporation License Management PrivateChat PrivateChat street-stream street-stream ultimad ultimad GameGen1 GameGen1 webaccess webaccess encore encore cisco-net-mgmt cisco-net-mgmt 3Com-nsd 3Com-nsd Cinema Graphics License Manager
11/09/2012
Page 46 of 144
1743 UDP cinegrfx-lm 1744 1744 1745 1745 1746 1746 1747 1747 1748 1748 1749 1749 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP ncpm-ft ncpm-ft remote-winsock remote-winsock ftrapid-1 ftrapid-1 ftrapid-2 ftrapid-2 oracle-em1 oracle-em1 aspen-services aspen-services sslp
1750 TCP
1750 UDP sslp 1751 TCP swiftnet 1751 UDP swiftnet 1752 TCP lofr-lm
1752 UDP lofr-lm 1753 1753 1754 1754 1755 1755 1756 1756 1757 1757 1758 1758 1759 1759 1760 1760 1761 1761 1762 1762 1763 1763 1764 1764 1765 1765 1766 1766 1767 1767 1768 1768 1769 1769 1770 1770 1771 1771 1772 1772 1773 1773 1774 1774 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP translogic-lm translogic-lm oracle-em2 oracle-em2 ms-streaming ms-streaming capfast-lmd capfast-lmd cnhrp cnhrp tftp-mcast tftp-mcast spss-lm spss-lm www-ldap-gw www-ldap-gw cft-0 cft-0 cft-1 cft-1 cft-2 cft-2 cft-3 cft-3 cft-4 cft-4 cft-5 cft-5 cft-6 cft-6 cft-7 cft-7 bmc-net-adm bmc-net-adm bmc-net-svc bmc-net-svc vaultbase vaultbase essweb-gw essweb-gw kmscontrol kmscontrol global-dtserv global-dtserv
Cinema Graphics License Manager ncpm-ft ncpm-ft remote-winsock remote-winsock ftrapid-1 ftrapid-1 ftrapid-2 ftrapid-2 oracle-em1 oracle-em1 aspen-services aspen-services Simple Socket Library's PortMaster Simple Socket Library's PortMaster SwiftNet SwiftNet Leap of Faith Research License Manager Leap of Faith Research License Manager Translogic License Manager Translogic License Manager oracle-em2 oracle-em2 ms-streaming ms-streaming capfast-lmd capfast-lmd cnhrp cnhrp tftp-mcast tftp-mcast SPSS License Manager SPSS License Manager www-ldap-gw www-ldap-gw cft-0 cft-0 cft-1 cft-1 cft-2 cft-2 cft-3 cft-3 cft-4 cft-4 cft-5 cft-5 cft-6 cft-6 cft-7 cft-7 bmc-net-adm bmc-net-adm bmc-net-svc bmc-net-svc vaultbase vaultbase EssWeb Gateway EssWeb Gateway KMSControl KMSControl global-dtserv global-dtserv
11/09/2012
Page 47 of 144
1776 TCP
femis
1776 UDP femis 1777 1777 1778 1778 1779 1779 1780 1780 1781 1781 1782 1782 1784 1784 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP powerguardian powerguardian prodigy-intrnet prodigy-intrnet pharmasoft pharmasoft dpkeyserv dpkeyserv answersoft-lm answersoft-lm hp-hcip hp-hcip finle-lm finle-lm windlm
1785 TCP
1785 UDP windlm 1786 1786 1787 1787 1788 1788 1789 1789 TCP UDP TCP UDP TCP UDP TCP UDP funk-logger funk-logger funk-license funk-license psmond psmond hello hello nmsp
1790 TCP
1790 UDP nmsp 1791 1791 1792 1792 1793 1793 1794 1794 1795 1795 1796 1796 1797 1797 1798 1798 1799 1799 1800 1800 1801 1801 1802 1802 1803 1803 1804 1804 1805 1805 1806 1806 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP ea1 ea1 ibm-dt-2 ibm-dt-2 rsc-robot rsc-robot cera-bcm cera-bcm dpi-proxy dpi-proxy vocaltec-admin vocaltec-admin uma uma etp etp netrisk netrisk ansys-lm ansys-lm msmq msmq concomp1 concomp1 hp-hcip-gwy hp-hcip-gwy enl enl enl-name enl-name musiconline musiconline
Federal Emergency Management Information System Federal Emergency Management Information System powerguardian Scarab powerguardian prodigy-internet prodigy-internet pharmasoft pharmasoft dpkeyserv dpkeyserv answersoft-lm answersoft-lm hp-hcip hp-hcip Finle License Manager Snid Finle License Manager Wind River Systems License Manager Wind River Systems License Manager funk-logger funk-logger funk-license funk-license psmond psmond hello hello Narrative Media Streaming Protocol Narrative Media Streaming Protocol EA1 EA1 ibm-dt-2 ibm-dt-2 rsc-robot rsc-robot cera-bcm cera-bcm dpi-proxy dpi-proxy Vocaltec Server Administration Vocaltec Server Administration UMA UMA Event Transfer Protocol Event Transfer Protocol NETRISK NETRISK ANSYS-License manager ANSYS-License manager Microsoft Message Que Microsoft Message Que ConComp1 ConComp1 HP-HCIP-GWY HP-HCIP-GWY ENL ENL ENL-Name ENL-Name Musiconline Musiconline
11/09/2012
Page 48 of 144
1807 1807 1808 1808 1809 1809 1810 1810 1811 1811 1812 1812 1813 1813 1814 1814 1815 1815 1816 1816 1817 1817
TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
fhsp fhsp oracle-vp2 oracle-vp2 oracle-vp1 oracle-vp1 jerand-lm jerand-lm scientia-sdb scientia-sdb radius radius radius-acct radius-acct tdp-suite tdp-suite mmpft mmpft harp harp rkb-oscs rkb-oscs etftp
1818 TCP
1818 UDP etftp 1819 1819 1820 1820 1821 1821 1822 1822 TCP UDP TCP UDP TCP UDP TCP UDP plato-lm plato-lm mcagent mcagent donnyworld donnyworld es-elmd es-elmd unisys-lm
1823 TCP
1823 UDP unisys-lm 1824 1824 1825 1825 1826 1826 1827 1827 1828 1828 1829 1829 1830 1830 1831 1831 1832 1832 1833 1833 1834 1834 1835 1835 1836 1836 1837 1837 1838 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP metrics-pas metrics-pas direcpc-video direcpc-video ardt ardt asi asi itm-mcell-u itm-mcell-u optika-emedia optika-emedia net8-cman net8-cman myrtle myrtle tht-treasure tht-treasure udpradio udpradio ardusuni ardusuni ardusmul ardusmul ste-smsc ste-smsc csoft1 csoft1 talnet
Fujitsu Hot Standby Protocol Fujitsu Hot Standby Protocol Oracle-VP2 Oracle-VP2 Oracle-VP1 Oracle-VP1 Jerand License Manager Jerand License Manager Scientia-SDB Scientia-SDB RADIUS RADIUS RADIUS Accounting RADIUS Accounting TDP Suite TDP Suite MMPFT MMPFT HARP HARP RKB-OSCS RKB-OSCS Enhanced Trivial File Transfer Protocol Enhanced Trivial File Transfer Protocol Plato License Manager Plato License Manager mcagent mcagent donnyworld donnyworld es-elmd es-elmd Unisys Natural Language License Manager Unisys Natural Language License Manager metrics-pas metrics-pas DirecPC Video DirecPC Video ARDT ARDT ASI ASI itm-mcell-u itm-mcell-u Optika eMedia Optika eMedia Oracle Net8 CMan Admin Oracle Net8 CMan Admin Myrtle Myrtle ThoughtTreasure ThoughtTreasure udpradio udpradio ARDUS Unicast ARDUS Unicast ARDUS Multicast ARDUS Multicast ste-smsc ste-smsc csoft1 csoft1 TALNET
Spy Sender, SpySender
Glacier
11/09/2012
Page 49 of 144
1838 1839 1839 1840 1840 1841 1841 1842 1842 1843 1843 1844 1844 1845 1845 1846 1846 1847 1847 1848 1848 1849 1849 1850 1850 1851 1851 1852 1852 1853 1853 1854 1854 1855 1855 1856 1856 1857 1857 1858 1858 1859 1859 1860 1860 1861 1861 1862 1862 1863 1863 1864 1864 1865 1865 1866 1866 1867 1867 1868 1868 1869 1869 1870 1870 1871 1871
talnet netopia-vo1 netopia-vo1 netopia-vo2 netopia-vo2 netopia-vo3 netopia-vo3 netopia-vo4 netopia-vo4 netopia-vo5 netopia-vo5 direcpc-dll direcpc-dll altalink altalink tunstall-pnc tunstall-pnc slp-notify slp-notify fjdocdist fjdocdist alpha-sms alpha-sms gsi gsi ctcd ctcd virtual-time virtual-time vids-avtp vids-avtp buddy-draw buddy-draw fiorano-rtrsvc fiorano-rtrsvc fiorano-msgsvc fiorano-msgsvc datacaptor datacaptor privateark privateark gammafetchsvr gammafetchsvr sunscalar-svc sunscalar-svc lecroy-vicp lecroy-vicp techra-server techra-server msnp msnp paradym-31port paradym-31port entp entp swrmi swrmi udrive udrive viziblebrowser viziblebrowser yestrader yestrader sunscalar-dns sunscalar-dns canocentral0 canocentral0
TALNET netopia-vo1 netopia-vo1 netopia-vo2 netopia-vo2 netopia-vo3 netopia-vo3 netopia-vo4 netopia-vo4 netopia-vo5 netopia-vo5 DirecPC-DLL DirecPC-DLL altalink altalink Tunstall PNC Tunstall PNC SLP Notification SLP Notification fjdocdist fjdocdist ALPHA-SMS ALPHA-SMS GSI GSI ctcd ctcd Virtual Time Virtual Time VIDS-AVTP VIDS-AVTP Buddy Draw Buddy Draw Fiorano RtrSvc Fiorano RtrSvc Fiorano MsgSvc Fiorano MsgSvc DataCaptor DataCaptor PrivateArk PrivateArk Gamma Fetcher Server Gamma Fetcher Server SunSCALAR Services SunSCALAR Services LeCroy VICP LeCroy VICP techra-server techra-server MSNP MSNP Paradym 31 Port Paradym 31 Port ENTP ENTP swrmi swrmi UDRIVE UDRIVE VizibleBrowser VizibleBrowser YesTrader YesTrader SunSCALAR DNS Service SunSCALAR DNS Service Cano Central 0 Cano Central 0
11/09/2012
Page 50 of 144
1872 1872 1873 1873 1874 1874 1875 1875 1876 1876 1877 1877 1878 1878 1879 1879 1880 1880
TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
canocentral1 canocentral1 fjmpjps fjmpjps fjswapsnp fjswapsnp westell-stats westell-stats ewcappsrv ewcappsrv hp-webqosdb hp-webqosdb drmsmc drmsmc nettgain-nms nettgain-nms vsat-control vsat-control ibm-mqseries2
1881 TCP
1881 UDP ibm-mqseries2 1882 1882 1883 1883 1884 1884 1885 1885 1886 1886 1887 1887 1888 1888 1889 1889 1890 1890 1891 1891 1892 1892 1893 1893 1894 1894 1896 1896 1897 1897 1898 1898 1899 1899 1900 1900 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP ecsqdmn ecsqdmn ibm-mqisdp ibm-mqisdp idmaps idmaps vrtstrapserver vrtstrapserver leoip leoip filex-lport filex-lport ncconfig ncconfig unify-adapter unify-adapter wilkenlistener wilkenlistener childkey-notif childkey-notif childkey-ctrl childkey-ctrl elad elad o2server-port o2server-port b-novative-ls b-novative-ls metaagent metaagent cymtec-port cymtec-port mc2studios mc2studios ssdp ssdp fjicl-tep-a
1901 TCP
1901 UDP fjicl-tep-a 1902 TCP fjicl-tep-b
1902 UDP fjicl-tep-b 1903 TCP linkname 1903 UDP linkname
Cano Central 1 Cano Central 1 Fjmpjps Fjmpjps Fjswapsnp Fjswapsnp westell stats westell stats ewcappsrv ewcappsrv hp-webqosdb hp-webqosdb drmsmc drmsmc NettGain NMS NettGain NMS Gilat VSAT Control Gilat VSAT Control IBM WebSphere MQ Everyplace IBM WebSphere MQ Everyplace ecsqdmn ecsqdmn IBM MQSeries SCADA IBM MQSeries SCADA Internet Distance Map Svc Internet Distance Map Svc Veritas Trap Server Veritas Trap Server Leonardo over IP Leonardo over IP FileX Listening Port FileX Listening Port NC Config Port NC Config Port Unify Web Adapter Service Unify Web Adapter Service wilkenListener wilkenListener ChildKey Notification ChildKey Notification ChildKey Control ChildKey Control ELAD Protocol ELAD Protocol O2Server Port O2Server Port b-novative license server b-novative license server MetaAgent MetaAgent Cymtec secure management Cymtec secure management MC2Studios MC2Studios SSDP SSDP Fujitsu ICL Terminal Emulator Program A Fujitsu ICL Terminal Emulator Program A Fujitsu ICL Terminal Emulator Program B Fujitsu ICL Terminal Emulator Program B Local Link Name Resolution Local Link Name Resolution
11/09/2012
Page 51 of 144
1904 TCP
fjicl-tep-c
1904 UDP fjicl-tep-c 1905 TCP sugp
1905 UDP sugp 1906 1906 1907 1907 1908 1908 1909 1909 TCP UDP TCP UDP TCP UDP TCP UDP tpmd tpmd intrastar intrastar dawn dawn global-wlink global-wlink ultrabac
1910 TCP
1910 UDP ultrabac 1911 TCP mtp
1911 UDP mtp 1912 1912 1913 1913 1914 1914 1915 1915 1916 1916 1917 1917 1918 1918 1919 1919 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP rhp-iibp rhp-iibp armadp armadp elm-momentum elm-momentum facelink facelink persona persona noagent noagent can-nds can-nds can-dch can-dch can-ferret
1920 TCP
1920 UDP can-ferret 1921 1921 1922 1922 1923 1923 1924 1924 1925 1925 1926 1926 1927 1927 1928 1928 1929 1929 1930 1930 1931 1931 1932 1932 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP noadmin noadmin tapestry tapestry spice spice xiip xiip discovery-port discovery-port egs egs videte-cipc videte-cipc emsd-port emsd-port bandwiz-system bandwiz-system driveappserver driveappserver amdsched amdsched ctt-broker ctt-broker
Fujitsu ICL Terminal Emulator Program C Fujitsu ICL Terminal Emulator Program C Secure UP.Link Gateway Protocol Secure UP.Link Gateway Protocol TPortMapperReq TPortMapperReq IntraSTAR IntraSTAR Dawn Dawn Global World Link Global World Link UltraBac Software communications port UltraBac Software communications port Starlight Networks Multimedia Transport Protocol Starlight Networks Multimedia Transport Protocol rhp-iibp rhp-iibp armadp armadp Elm-Momentum Elm-Momentum FACELINK FACELINK Persoft Persona Persoft Persona nOAgent nOAgent Candle Directory Service - NDS Candle Directory Service - NDS Candle Directory Service - DCH Candle Directory Service - DCH Candle Directory Service FERRET Candle Directory Service FERRET NoAdmin NoAdmin Tapestry Tapestry SPICE SPICE XIIP XIIP Surrogate Discovery Port Surrogate Discovery Port Evolution Game Server Evolution Game Server Videte CIPC Port Videte CIPC Port Expnd Maui Srvr Dscovr Expnd Maui Srvr Dscovr Bandwiz System - Server Bandwiz System - Server Drive AppServer Drive AppServer AMD SCHED AMD SCHED CTT Broker CTT Broker
11/09/2012
Page 52 of 144
1933 1933 1934 1934
TCP UDP TCP UDP
xmapi xmapi xaapi xaapi macromedia-fcs
1935 TCP
1935 UDP macromedia-fcs 1936 1936 1937 1937 1938 1938 1939 1939 1940 1940 1941 1941 1942 1942 1943 1943 1944 1944 1945 1945 1946 1946 1947 1947 1948 1948 1949 1949 1950 1950 1951 1951 1952 1952 1953 1953 1954 1954 1955 1955 1956 1956 1957 1957 1958 1958 1959 1959 1960 1960 1961 1961 1962 1962 1963 1963 1964 1964 1965 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP jetcmeserver jetcmeserver jwserver jwserver jwclient jwclient jvserver jvserver jvclient jvclient dic-aida dic-aida res res beeyond-media beeyond-media close-combat close-combat dialogic-elmd dialogic-elmd tekpls tekpls hlserver hlserver eye2eye eye2eye ismaeasdaqlive ismaeasdaqlive ismaeasdaqtest ismaeasdaqtest bcs-lmserver bcs-lmserver mpnjsc mpnjsc rapidbase rapidbase abr-basic abr-basic abr-secure abr-secure vrtl-vmf-ds vrtl-vmf-ds unix-status unix-status dxadmind dxadmind simp-all simp-all nasmanager nasmanager bts-appserver bts-appserver biap-mp biap-mp webmachine webmachine solid-e-engine solid-e-engine tivoli-npm
IBM LM MT Agent IBM LM MT Agent IBM LM Appl Agent IBM LM Appl Agent Macromedia Flash Communications Server MX Macromedia Flash Communications server MX JetCmeServer Server Port JetCmeServer Server Port JetVWay Server Port JetVWay Server Port JetVWay Client Port JetVWay Client Port JetVision Server Port JetVision Server Port JetVision Client Port JetVision Client Port DIC-Aida DIC-Aida Real Enterprise Service Real Enterprise Service Beeyond Media Beeyond Media close-combat close-combat dialogic-elmd dialogic-elmd tekpls tekpls hlserver hlserver eye2eye eye2eye ISMA Easdaq Live ISMA Easdaq Live ISMA Easdaq Test ISMA Easdaq Test bcs-lmserver bcs-lmserver mpnjsc mpnjsc Rapid Base Rapid Base ABR-Basic Data ABR-Basic Data ABR-Secure Data ABR-Secure Data Vertel VMF DS Vertel VMF DS unix-status unix-status CA Administration Daemon CA Administration Daemon SIMP Channel SIMP Channel Merit DAC NASmanager Merit DAC NASmanager BTS APPSERVER BTS APPSERVER BIAP-MP BIAP-MP WebMachine WebMachine SOLID E ENGINE SOLID E ENGINE Tivoli NPM
11/09/2012
Page 53 of 144
1965 1966 1966 1967 1967 1968 1968 1969 1969 1970 1970 1971 1971 1972 1972
tivoli-npm slush slush sns-quote sns-quote lipsinc lipsinc lipsinc1 lipsinc1 netop-rc netop-rc netop-school netop-school intersys-cache intersys-cache dlsrap
1973 TCP
1973 UDP dlsrap 1974 1974 1975 1975 1976 1976 1977 1977 1978 1978 1979 1979 1980 1980 1981 1981 1982 1982 1983 1983 1984 1984 1985 1985 1986 1986 1987 1987 1988 1988 1989 1989 1990 1990 1991 1991 1992 1992 1993 1993 1994 1994 1995 1995 1996 1996 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP drp drp tcoflashagent tcoflashagent tcoregagent tcoregagent tcoaddressbook tcoaddressbook unisql unisql unisql-java unisql-java pearldoc-xact pearldoc-xact p2pq p2pq estamp estamp lhtp lhtp bb bb hsrp hsrp licensedaemon licensedaemon tr-rsrb-p1 tr-rsrb-p1 tr-rsrb-p2 tr-rsrb-p2 mshnet mshnet stun-p1 stun-p1 stun-p2 stun-p2 ipsendmsg ipsendmsg snmp-tcp-port snmp-tcp-port stun-port stun-port perf-port perf-port tr-rsrb-port tr-rsrb-port gdp-port
1997 TCP
Tivoli NPM Slush Slush SNS Quote SNS Quote LIPSinc LIPSinc LIPSinc 1 LIPSinc 1 NetOp Remote Control NetOp Remote Control NetOp School NetOp School Cache Cache Data Link Switching Remote Access Protocol Data Link Switching Remote Access Protocol DRP DRP TCO Flash Agent TCO Flash Agent TCO Reg Agent TCO Reg Agent TCO Address Book TCO Address Book UniSQL UniSQL UniSQL Java UniSQL Java PearlDoc XACT PearlDoc XACT p2pQ p2pQ Evidentiary Timestamp Evidentiary Timestamp Loophole Test Protocol Loophole Test Protocol BB BB Hot Standby Router Protocol Hot Standby Router Protocol cisco license management cisco license management cisco RSRB Priority 1 port cisco RSRB Priority 1 port cisco RSRB Priority 2 port cisco RSRB Priority 2 port MHSnet system MHSnet system cisco STUN Priority 1 port cisco STUN Priority 1 port cisco STUN Priority 2 port cisco STUN Priority 2 port IPsendmsg IPsendmsg cisco SNMP TCP port cisco SNMP TCP port cisco serial tunnel port cisco serial tunnel port cisco perf port cisco perf port cisco Remote SRB port cisco Remote SRB port cisco Gateway Discovery Protocol cisco Gateway Discovery
Fake FTP For Your Eyes Only - FYEO, WM FTP Server
OpC BO
Bowl, Shockrave
PitFall
11/09/2012
Page 54 of 144
1997 UDP gdp-port 1998 TCP x25-svc-port 1998 UDP x25-svc-port 1999 TCP tcp-id-port
Protocol cisco X.25 service (XOT) cisco X.25 service (XOT) cisco identification port cisco identification port Cisco SCCP Cisco SCCp Der Spaeher 3, TransScout, Trojan Cow, Der Spher / Der Spaeher, DIRT, TrojanCow curry TransScout Peer-to-peer UDP DDoS (PUD) TransScout, TransmissionScout TranScout, TransScout CCWS mm conf TransScout Remote Explorer 2000, Last 2000, Insane Network, Der Spher / Der Spaeher, Senna Spy Trojan Generator, ATrojan, InsaneNetwork Back Door, SubSeven, TransScout, TransmissionScout
1999 UDP tcp-id-port 2000 TCP cisco-sccp
2000 UDP cisco-sccp 2001 TCP 2001 2002 2002 2003 2004 2004 2005 2005 2006 2006 2007 2007 2008 2008 2009 2009 2010 2010 2011 2011 2012 2012 2013 2013 2014 2014 2015 2015 2016 2016 2017 2017 2018 2018 2019 2019 2020 2020 2021 2021 2022 2022 2023 2023 2024 2024 2025 2025 2026 2026 2027 2027 2028 2028 2030 2030 UDP TCP UDP TCP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP dc wizard globe globe mailbox emce berknet oracle invokator raid-cd dectalk raid-am conf terminaldb news whosockami search pipe_server raid-cc servserv ttyinfo raid-ac raid-am raid-cd troff raid-sf cypress raid-cs bootserver bootserver cypress-stat bootclient terminaldb rellpack whosockami about xinupageserver xinupageserver servexec xinuexpansion1 down xinuexpansion2 xinuexpansion3 xinuexpansion3 xinuexpansion4 xinuexpansion4 ellpack xribs scrabble scrabble shadowserver shadowserver submitserver submitserver device2 device2
raid
raid
PassRipper, Ripper Pro, RipperPro
11/09/2012
Page 55 of 144
2032 2032 2033 2033 2034 2034 2035 2035 2037 2037 2038 2038 2040 2040 2041 2041 2042 2042 2043 2043 2044 2044 2045 2045 2046 2046 2047 2047 2048 2048
TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
blackboard blackboard glogger glogger scoremgr scoremgr imsldoc imsldoc p2plus p2plus objectmanager objectmanager lam lam interbase interbase isis isis isis-bcast isis-bcast rimsl rimsl cdfunc cdfunc sdfunc sdfunc dls dls dls-monitor dls-monitor nfs
P2plus Application Server P2plus Application Server
InfernoUploader
isis isis isis-bcast isis-bcast
2049 TCP
2049 UDP nfs 2050 2050 2051 2051 2052 2052 2053 2053 2054 2054 2055 2055 2056 2056 2057 2057 2058 2058 2059 2059 2060 2060 2061 2061 2062 2062 2063 2063 2064 2064 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP av-emb-config av-emb-config epnsdp epnsdp clearvisn clearvisn lot105-ds-upd lot105-ds-upd weblogin weblogin iop iop omnisky omnisky rich-cp rich-cp newwavesearch newwavesearch bmc-messaging bmc-messaging teleniumdaemon teleniumdaemon netmount netmount icg-swp icg-swp icg-bridge icg-bridge icg-iprelay icg-iprelay dlsrpn
2065 TCP
Network File System - Sun Microsystems Network File System - Sun Microsystems Avaya EMB Config Port Avaya EMB Config Port EPNSDP EPNSDP clearVisn Services Port clearVisn Services Port Lot105 DSuper Updates Lot105 DSuper Updates Weblogin Port Weblogin Port Iliad-Odyssey Protocol Iliad-Odyssey Protocol OmniSky Port OmniSky Port Rich Content Protocol Rich Content Protocol NewWaveSearchables RMI NewWaveSearchables RMI BMC Messaging Service BMC Messaging Service Telenium Daemon IF Telenium Daemon IF NetMount NetMount ICG SWP Port ICG SWP Port ICG Bridge Port ICG Bridge Port ICG IP Relay Port ICG IP Relay Port Data Link Switch Read Port Number Data Link Switch Read Port
2065 UDP dlsrpn
11/09/2012
Page 56 of 144
2067 TCP
dlswpn
2067 UDP dlswpn 2068 2068 2069 2069 TCP UDP TCP UDP avauthsrvprtcl avauthsrvprtcl event-port event-port ah-esp-encap
2070 TCP
2070 UDP ah-esp-encap 2071 2071 2072 2072 2073 2073 2074 2074 2075 2075 2076 2076 2077 2077 2078 2078 2079 2079 2080 2080 2081 2081 2082 2082 2086 2086 2087 2087 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP acp-port acp-port msync msync gxs-data-port gxs-data-port vrtl-vmf-sa vrtl-vmf-sa newlixengine newlixengine newlixconfig newlixconfig trellisagt trellisagt trellissvr trellissvr idware-router idware-router autodesk-nlm autodesk-nlm kme-trap-port kme-trap-port infowave infowave gnunet gnunet eli eli sep
2089 TCP
2089 UDP sep 2090 2090 2091 2091 2092 2092 2093 2093 2094 2094 2095 2095 2096 2096 2097 2097 2098 2098 2099 2099 2100 2100 2101 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP lrp lrp prp prp descent3 descent3 nbx-cc nbx-cc nbx-au nbx-au nbx-ser nbx-ser nbx-dir nbx-dir jetformpreview jetformpreview dialog-port dialog-port h2250-annex-g h2250-annex-g amiganetfs amiganetfs rtcm-sc104
Number Data Link Switch Write Port Number Data Link Switch Write Port Number Avocent AuthSrv Protocol Avocent AuthSrv Protocol HTTP Event Port HTTP Event Port AH and ESP Encapsulated in UDP packet AH and ESP Encapsulated in UDP packet Axon Control Protocol Axon Control Protocol GlobeCast mSync GlobeCast mSync DataReel Database Socket DataReel Database Socket Vertel VMF SA Vertel VMF SA Newlix ServerWare Engine Newlix ServerWare Engine Newlix JSPConfig Newlix JSPConfig TrelliSoft Agent TrelliSoft Agent TrelliSoft Server TrelliSoft Server IDWARE Router Port IDWARE Router Port Autodesk NLM (FLEXlm) WinHole Autodesk NLM (FLEXlm) KME PRINTER TRAP PORT KME PRINTER TRAP PORT Infowave Mobility Server Infowave Mobiltiy Server GNUnet GNUnet ELI - Event Logging Integration ELI - Event Logging Integration Security Encapsulation Protocol - SEP Security Encapsulation Protocol - SEP Load Report Protocol Load Report Protocol PRP PRP Descent 3 Descent 3 NBX CC NBX CC NBX AU NBX AU NBX SER NBX SER NBX DIR NBX DIR Jet Form Preview Jet Form Preview Dialog Port Dialog Port H.225.0 Annex G H.225.0 Annex G Amiga Network Filesystem Amiga Network Filesystem rtcm-sc104
11/09/2012
Page 57 of 144
2101 2102 2102 2103 2103 2104 2104 2105 2105 2106 2106 2107 2107 2108 2108 2109 2109 2110 2110 2111 2111 2112 2112 2113 2113 2114 2114 2115 2115 2116 2116 2117 2117 2118 2118 2119 2119 2120 2120 2121 2121 2122 2122 2123 2123 2124 2124 2125 2125 2126 2126 2127 2127 2128 2128 2129 2129 2130 2130 2131 2131 2132 2132 2133 2133 2134 2134
rtcm-sc104 zephyr-srv zephyr-srv zephyr-clt zephyr-clt zephyr-hm zephyr-hm minipay minipay mzap mzap bintec-admin bintec-admin comcam comcam ergolight ergolight umsp umsp dsatp dsatp idonix-metanet idonix-metanet hsl-storm hsl-storm newheights newheights kdm kdm ccowcmr ccowcmr mentaclient mentaclient mentaserver mentaserver gsigatekeeper gsigatekeeper qencp qencp scientia-ssdb scientia-ssdb caupc-remote caupc-remote gtp-control gtp-control elatelink elatelink lockstep lockstep pktcable-cops pktcable-cops index-pc-wb index-pc-wb net-steward net-steward cs-live cs-live swc-xds swc-xds avantageb2b avantageb2b avail-epmap avail-epmap zymed-zpp zymed-zpp avenue avenue
rtcm-sc104 Zephyr server Zephyr server Zephyr serv-hm connection Zephyr serv-hm connection Zephyr hostmanager Zephyr hostmanager MiniPay MiniPay MZAP MZAP BinTec Admin BinTec Admin Comcam Comcam Ergolight Ergolight UMSP UMSP DSATP DSATP Idonix MetaNet Idonix MetaNet HSL StoRM HSL StoRM NEWHEIGHTS NEWHEIGHTS Key Distribution Manager Key Distribution Manager CCOWCMR CCOWCMR MENTACLIENT MENTACLIENT MENTASERVER MENTASERVER GSIGATEKEEPER GSIGATEKEEPER Quick Eagle Networks CP Quick Eagle Networks CP SCIENTIA-SSDB SCIENTIA-SSDB CauPC Remote Control CauPC Remote Control GTP-Control Plane (3GPP) GTP-Control Plane (3GPP) ELATELINK ELATELINK LOCKSTEP LOCKSTEP PktCable-COPS PktCable-COPS INDEX-PC-WB INDEX-PC-WB Net Steward Control Net Steward Control cs-live.com cs-live.com SWC-XDS SWC-XDS Avantageb2b Avantageb2b AVAIL-EPMAP AVAIL-EPMAP ZYMED-ZPP ZYMED-ZPP AVENUE AVENUE
Bugs
Mini Backlash
11/09/2012
Page 58 of 144
2135 TCP
gris
2135 UDP gris 2136 2136 2137 2137 2138 2138 2139 2139 2140 TCP UDP TCP UDP TCP UDP TCP UDP TCP appworxsrv appworxsrv connect connect unbind-cluster unbind-cluster ias-auth ias-auth ias-reg
Grid Resource Information Server Grid Resource Information Server APPWORXSRV APPWORXSRV CONNECT CONNECT UNBIND-CLUSTER UNBIND-CLUSTER IAS-AUTH IAS-AUTH IAS-REG IAS-REG IAS-ADMIND IAS-ADMIND TDM-OVER-IP TDM-OVER-IP Live Vault Job Control Live Vault Job Control Live Vault Fast Object Transfer Live Vault Fast Object Transfer Live Vault Remote Diagnostic Console Support Live Vault Remote Diagnostic Console Support Live Vault Admin Event Notification Live Vault Admin Event Notification Live Vault Authentication Live Vault Authentication VERITAS UNIVERSAL COMMUNICATION LAYER VERITAS UNIVERSAL COMMUNICATION LAYER ACPTSYS ACPTSYS DYNAMIC3D DYNAMIC3D DOCENT DOCENT GTP-User Plane (3GPP) GTP-User Plane (3GPP)
2140 UDP ias-reg 2141 2141 2142 2142 2143 2143 2144 2144 TCP UDP TCP UDP TCP UDP TCP UDP ias-admind ias-admind tdm-over-ip tdm-over-ip lv-jc lv-jc lv-ffx lv-ffx lv-pici
Deep Throat, The invasor, DeepThroat Deep Throat, Foreplay or Reduced Foreplay, DeepThroat
2145 TCP
2145 UDP lv-pici 2146 TCP lv-not
2146 UDP lv-not 2147 TCP lv-auth 2147 UDP lv-auth 2148 TCP veritas-ucl
2148 UDP veritas-ucl 2149 2149 2150 2150 2151 2151 2152 2152 2155 2159 2159 2160 2160 2161 2161 2162 2162 2163 2163 2164 2164 2165 2165 2166 2166 2167 2167 TCP UDP TCP UDP TCP UDP TCP UDP TCP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP acptsys acptsys dynamic3d dynamic3d docent docent gtp-user gtp-user gdbremote gdbremote apc-2160 apc-2160 apc-2161 apc-2161 navisphere navisphere navisphere-sec navisphere-sec ddns-v3 ddns-v3 x-bone-api x-bone-api iwserver iwserver raw-serial raw-serial mc-gt-srv
Illusion Mailer GDB Remote Debug Port GDB Remote Debug Port APC 2160 APC 2160 APC 2161 APC 2161 Navisphere Navisphere Navisphere Secure Navisphere Secure Dynamic DNS Version 3 Dynamic DNS Version 3 X-Bone API X-Bone API iwserver iwserver Raw Async Serial Link Raw Async Serial Link Millicent Vendor Gateway Server Millicent Vendor Gateway Server
2180 TCP
2180 UDP mc-gt-srv
11/09/2012
Page 59 of 144
2181 2181 2190 2190 2191 2191 2200 2200
TCP UDP TCP UDP TCP UDP TCP UDP
eforward eforward tivoconnect tivoconnect tvbus tvbus ici ici ats
2201 TCP
2201 UDP ats 2202 TCP imtc-map
2202 UDP imtc-map 2213 2213 2220 2220 2221 2221 2222 2222 2223 2223 2232 2232 2233 2233 2234 2234 2235 2235 2236 2236 2237 2237 2238 2238 2239 2239 2240 2240 2241 2241 2242 2242 2243 2243 2244 2244 2245 2245 2246 2246 2248 2248 2249 2249 2250 2250 2251 2251 2252 2252 2253 2253 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP kali kali netiq netiq rockwell-csp1 rockwell-csp1 rockwell-csp2 rockwell-csp2 rockwell-csp3 rockwell-csp3 ivs-video ivs-video infocrypt infocrypt directplay directplay sercomm-wlink sercomm-wlink nani nani optech-port1-lm optech-port1-lm aviva-sna aviva-sna imagequery imagequery recipe recipe ivsd ivsd foliocorp foliocorp magicom magicom nmsserver nmsserver hao hao pc-mta-addrmap pc-mta-addrmap ums ums rfmp rfmp remote-collab remote-collab dif-port dif-port njenet-ssl njenet-ssl dtv-chan-req dtv-chan-req
eforward eforward TiVoConnect Beacon TiVoConnect Beacon TvBus Messaging TvBus Messaging ICI ICI Advanced Training System Program Advanced Training System Program Int. Multimedia Teleconferencing Cosortium Int. Multimedia Teleconferencing Cosortium Kali Kali NetIQ End2End NetIQ End2End Rockwell CSP1 Rockwell CSP1 Rockwell CSP2 Rootshell left by AMD exploit Rockwell CSP2 Rockwell CSP3 Rockwell CSP3 IVS Video default IVS Video default INFOCRYPT INFOCRYPT DirectPlay DirectPlay Sercomm-WLink Sercomm-WLink Nani Nani Optech Port1 License Manager Optech Port1 License Manager AVIVA SNA SERVER AVIVA SNA SERVER Image Query Image Query RECIPe RECIPe IVS Daemon IVS Daemon Folio Remote Server Folio Remote Server Magicom Protocol Magicom Protocol NMS Server NMS Server HaO HaO PacketCable MTA Addr Map PacketCable MTA Addr Map User Management Service User Management Service RISO File Manager Protocol RISO File Manager Protocol remote-collab remote-collab Distributed Framework Port Distributed Framework Port NJENET using SSL NJENET using SSL DTV Channel Request DTV Channel Request
11/09/2012
Page 60 of 144
2254 TCP seispoc 2254 UDP seispoc 2255 TCP vrtp
2255 UDP vrtp 2260 2260 2279 2279 2280 2280 2281 2281 2282 2282 2283 2283 2284 2284 2285 2285 2286 2286 2287 2287 2288 2288 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP apc-2260 apc-2260 xmquery xmquery lnvpoller lnvpoller lnvconsole lnvconsole lnvalarm lnvalarm lnvstatus lnvstatus lnvmaps lnvmaps lnvmailmon lnvmailmon nas-metering nas-metering dna dna netml netml konshus-lm
2294 TCP
2294 UDP konshus-lm 2295 TCP advant-lm 2295 UDP advant-lm 2296 TCP theta-lm
2296 UDP theta-lm 2297 2297 2298 2298 2299 2299 2300 2300 2301 2301 2302 2302 2303 2303 2304 2304 2305 2305 2306 2306 2307 2307 2308 2308 2309 2309 2310 2310 2311 2311 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP d2k-datamover1 d2k-datamover1 d2k-datamover2 d2k-datamover2 pc-telecommute pc-telecommute cvmmon cvmmon cpq-wbem cpq-wbem binderysupport binderysupport proxy-gateway proxy-gateway attachmate-uts attachmate-uts mt-scaleserver mt-scaleserver tappi-boxnet tappi-boxnet pehelp pehelp sdhelp sdhelp sdserver sdserver sdclient sdclient messageservice messageservice
Seismic P.O.C. Port Seismic P.O.C. Port VRTP - ViRtue Transfer Protocol VRTP - ViRtue Transfer Protocol APC 2260 APC 2260 xmquery xmquery LNVPOLLER LNVPOLLER LNVCONSOLE LNVCONSOLE LNVALARM LNVALARM LNVSTATUS LNVSTATUS LNVMAPS LNVMAPS LNVMAILMON LNVMAILMON NAS-Metering NAS-Metering DNA DNA NETML NETML Konshus License Manager (FLEX) Konshus License Manager (FLEX) Advant License Manager Advant License Manager Theta License Manager (Rainbow) Theta License Manager (Rainbow) D2K DataMover 1 D2K DataMover 1 D2K DataMover 2 D2K DataMover 2 PC Telecommute PC Telecommute CVMMON CVMMON Compaq HTTP Compaq HTTP Bindery Support Bindery Support Proxy Gateway Proxy Gateway Attachmate UTS Attachmate UTS MT ScaleServer MT ScaleServer TAPPI BoxNet TAPPI BoxNet pehelp pehelp sdhelp sdhelp SD Server SD Server SD Client SD Client Message Service Message Service
Nirvana
HVL Rat 5
Xplorer
Studio 54
11/09/2012
Page 61 of 144
2313 TCP
iapp
2313 UDP iapp 2314 2314 2315 2315 2316 2316 2317 2317 2318 2318 2319 2319 2320 2320 2321 2321 2322 2322 2323 2323 2324 2324 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP cr-websystems cr-websystems precise-sft precise-sft sent-lm sent-lm attachmate-g32 attachmate-g32 cadencecontrol cadencecontrol infolibria infolibria siebel-ns siebel-ns rdlap rdlap ofsd ofsd 3d-nfsd 3d-nfsd cosmocall cosmocall designspace-lm
2325 TCP
2325 UDP designspace-lm 2326 2326 2327 2327 2328 2328 2329 2329 2330 2330 2331 2331 2332 2332 2333 2333 2334 2334 2335 2335 2336 2336 2337 2337 2338 2338 2339 2339 2340 2340 2341 2341 2342 2342 2343 2343 2344 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP idcp idcp xingcsm xingcsm netrix-sftm netrix-sftm nvd nvd tscchat tscchat agentview agentview rcc-host rcc-host snapp snapp ace-client ace-client ace-proxy ace-proxy appleugcontrol appleugcontrol ideesrv ideesrv norton-lambert norton-lambert 3com-webview 3com-webview wrs_registry wrs_registry xiostatus xiostatus manage-exec manage-exec nati-logos nati-logos fcmsys
IAPP (Inter Access Point Protocol) IAPP (Inter Access Point Protocol) CR WebSystems CR WebSystems Precise Sft. Precise Sft. SENT License Manager SENT License Manager Attachmate G32 Attachmate G32 Cadence Control Cadence Control InfoLibria InfoLibria Siebel NS Siebel NS RDLAP RDLAP ofsd ofsd 3d-nfsd 3d-nfsd Cosmocall Cosmocall Design Space License Management Design Space License Management IDCP IDCP xingcsm xingcsm Netrix SFTM Netrix SFTM NVD NVD TSCCHAT TSCCHAT AGENTVIEW AGENTVIEW RCC Host RCC Host SNAPP SNAPP ACE Client Auth ACE Client Auth ACE Proxy ACE Proxy Apple UG Control Apple UG Control ideesrv ideesrv Norton Lambert Norton Lambert 3Com WebView 3Com WebView WRS Registry WRS Registry XIO Status XIO Status Seagate Manage Exec Seagate Manage Exec nati logos nati logos fcmsys
IRC Contact IRC Contact IRC Contact, SilentSpy IRC Contact IRC Contact IRC Contact IRC Contact IRC Contact IRC Contact IRC Contact, Voice Spy Voice Spy
11/09/2012
Page 62 of 144
2344 2345 2345 2346 2346
UDP TCP UDP TCP UDP
fcmsys dbm dbm redstorm_join redstorm_join redstorm_find
2347 TCP
2347 UDP redstorm_find 2348 TCP redstorm_info
2348 UDP redstorm_info 2349 2349 2350 2350 2351 2351 2352 2352 2353 2353 2354 2354 2355 2355 2356 2356 2357 2357 2358 2358 2359 2359 2360 2360 2361 2361 2362 2362 2363 2363 2364 2364 2365 2365 2366 2366 2367 2367 2368 2368 2369 2369 2370 2370 2371 2371 2381 2381 2382 2382 2383 2383 2384 2384 2385 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP redstorm_diag redstorm_diag psbserver psbserver psrserver psrserver pslserver pslserver pspserver pspserver psprserver psprserver psdbserver psdbserver gxtelmd gxtelmd unihub-server unihub-server futrix futrix flukeserver flukeserver nexstorindltd nexstorindltd tl1 tl1 digiman digiman mediacntrlnfsd mediacntrlnfsd oi-2000 oi-2000 dbref dbref qip-login qip-login service-ctrl service-ctrl opentable opentable acs2000-dsp acs2000-dsp l3-hbmon l3-hbmon worldwire worldwire compaq-https compaq-https ms-olap3 ms-olap3 ms-olap4 ms-olap4 sd-request sd-capacity sd-data
fcmsys dbm dbm Game Connection Port Game Connection Port Game Announcement and Location Game Announcement and Location Information to query for game status Information to query for game status Diagnostics Port Diagnostics Port psbserver psbserver psrserver psrserver pslserver pslserver pspserver pspserver psprserver psprserver psdbserver psdbserver GXT License Managemant GXT License Managemant UniHub Server UniHub Server Futrix Futrix FlukeServer FlukeServer NexstorIndLtd NexstorIndLtd TL1 TL1 digiman digiman Media Central NFSD Media Central NFSD OI-2000 OI-2000 dbref dbref qip-login qip-login Service Control Service Control OpenTable OpenTable ACS2000 DSP ACS2000 DSP L3-HBMon L3-HBMon Compaq WorldWire Port Compaq WorldWire Port Compaq HTTPS Compaq HTTPS Microsoft OLAP Microsoft OLAP Microsoft OLAP Microsoft OLAP SD-REQUEST SD-CAPACITY SD-DATA
Doly Trojan
11/09/2012
Page 63 of 144
2385 2386 2386 2387 2387 2388 2388 2389 2389 2390 2390 2391 2391 2392 2392 2393 2393 2394 2394 2395 2395 2396 2396 2397 2397 2398 2398
SD-DATA Virtual Tape Virtual Tape VSAM Redirector VSAM Redirector MYNAH AutoStart MYNAH AutoStart OpenView Session Mgr OpenView Session Mgr RSMTP RSMTP 3COM Net Management 3COM Net Management Tactical Auth Tactical Auth MS OLAP 1 MS OLAP 1 MS OLAP 2 MS OLAP 2 LAN900 Remote LAN900 Remote Wusage Wusage NCL NCL Orbiter Orbiter FileMaker, Inc. - Data Access 2399 TCP fmpro-fdal Layer FileMaker, Inc. - Data Access 2399 UDP fmpro-fdal Layer 2400 TCP opequus-server OpEquus Server 2400 UDP opequus-server OpEquus Server 2401 TCP cvspserver cvspserver 2401 UDP cvspserver cvspserver 2402 TCP taskmaster2000 TaskMaster 2000 Server 2402 UDP taskmaster2000 TaskMaster 2000 Server 2403 TCP taskmaster2000 TaskMaster 2000 Web 2403 UDP taskmaster2000 TaskMaster 2000 Web IEC 60870-5-104 process 2404 TCP iec-104 control over IP IEC 60870-5-104 process 2404 UDP iec-104 control over IP 2405 TCP trc-netpoll TRC Netpoll 2405 UDP trc-netpoll TRC Netpoll 2406 TCP jediserver JediServer 2406 UDP jediserver JediServer 2407 TCP orion Orion 2407 UDP orion Orion 2408 TCP optimanet OptimaNet 2408 UDP optimanet OptimaNet 2409 TCP sns-protocol SNS Protocol 2409 UDP sns-protocol SNS Protocol 2410 TCP vrts-registry VRTS Registry 2410 UDP vrts-registry VRTS Registry 2411 TCP netwave-ap-mgmt Netwave AP Management 2411 UDP netwave-ap-mgmt Netwave AP Management 2412 TCP cdn CDN 2412 UDP cdn CDN 2413 TCP orion-rmi-reg orion-rmi-reg 2413 UDP orion-rmi-reg orion-rmi-reg 2414 TCP beeyond Beeyond 2414 UDP beeyond Beeyond Codima Remote Transaction 2415 TCP codima-rtp Protocol Codima Remote Transaction 2415 UDP codima-rtp Protocol 2416 TCP rmtserver RMT Server
UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
sd-data virtualtape virtualtape vsamredirector vsamredirector mynahautostart mynahautostart ovsessionmgr ovsessionmgr rsmtp rsmtp 3com-net-mgmt 3com-net-mgmt tacticalauth tacticalauth ms-olap1 ms-olap1 ms-olap2 ms-olap2 lan900_remote lan900_remote wusage wusage ncl ncl orbiter orbiter
PortD
11/09/2012
Page 64 of 144
2416 2417 2417 2418 2418 2419 2419 2420 2420 2421 2421 2422 2422 2423 2423 2424 2424 2425 2425
UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
rmtserver composit-server composit-server cas cas attachmate-s2s attachmate-s2s dslremote-mgmt dslremote-mgmt g-talk g-talk crmsbits crmsbits rnrp rnrp kofax-svr kofax-svr fjitsuappmgr fjitsuappmgr mgcp-gateway
2427 TCP
2427 UDP mgcp-gateway 2428 2428 2429 2429 2430 2430 2431 2431 2432 2432 2433 2433 2434 2434 2435 2435 2436 2436 2437 2437 2438 2438 2439 2439 2440 2440 2441 2441 2442 2442 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP ott ott ft-role ft-role venus venus venus-se venus-se codasrv codasrv codasrv-se codasrv-se pxc-epmap pxc-epmap optilogic optilogic topx topx unicontrol unicontrol msp msp sybasedbsynch sybasedbsynch spearway spearway pvsw-inet pvsw-inet netangel netangel powerclientcsf
2443 TCP
2443 UDP powerclientcsf 2444 2444 2445 2445 2446 2446 2447 2447 2448 2448 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP btpp2sectrans btpp2sectrans dtn1 dtn1 bues_service bues_service ovwdb ovwdb hpppssvr hpppssvr
RMT Server Composit Server Composit Server cas cas Attachmate S2S Attachmate S2S DSL Remote Management DSL Remote Management G-Talk G-Talk CRMSBITS CRMSBITS RNRP RNRP KOFAX-SVR KOFAX-SVR Fujitsu App Manager Fujitsu App Manager Media Gateway Control Protocol Gateway Media Gateway Control Protocol Gateway One Way Trip Time One Way Trip Time FT-ROLE FT-ROLE venus venus venus-se venus-se codasrv codasrv codasrv-se codasrv-se pxc-epmap pxc-epmap OptiLogic OptiLogic TOP/X TOP/X UniControl UniControl MSP MSP SybaseDBSynch SybaseDBSynch Spearway Lockers Spearway Lockers Pervasive I*net Data Server Pervasive I*net Data Server Netangel Netangel PowerClient Central Storage Facility PowerClient Central Storage Facility BT PP2 Sectrans BT PP2 Sectrans DTN1 DTN1 bues_service bues_service OpenView NNM daemon OpenView NNM daemon hpppsvr hpppsvr
11/09/2012
Page 65 of 144
2449 2449 2450 2450 2451 2451 2452 2452 2453 2453 2454 2454 2455 2455 2456 2456 2457 2457 2458 2458 2459 2459 2460 2460 2461 2461 2462 2462 2463 2463 2464 2464 2465 2465 2466 2466 2467 2467 2468 2468 2469 2469 2470 2470 2471 2471 2472 2472 2473 2473 2474 2474 2475 2475 2476 2476
TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
ratl ratl netadmin netadmin netchat netchat snifferclient snifferclient madge-ltd madge-ltd indx-dds indx-dds wago-io-system wago-io-system altav-remmgt altav-remmgt rapido-ip rapido-ip griffin griffin community community ms-theater ms-theater qadmifoper qadmifoper qadmifevent qadmifevent symbios-raid symbios-raid direcpc-si direcpc-si lbm lbm lbf lbf high-criteria high-criteria qip-msgd qip-msgd mti-tcs-comm mti-tcs-comm taskman-port taskman-port seaodbc seaodbc c3 c3 aker-cdp aker-cdp vitalanalysis vitalanalysis ace-server ace-server ace-svr-prop ace-svr-prop ssm-cvs
2477 TCP
2477 UDP ssm-cvs 2478 TCP ssm-cssps
2478 UDP ssm-cssps 2479 TCP ssm-els
2479 UDP ssm-els
RATL RATL netadmin netadmin netchat netchat SnifferClient SnifferClient madge ltd madge ltd IndX-DDS IndX-DDS WAGO-IO-SYSTEM WAGO-IO-SYSTEM altav-remmgt altav-remmgt Rapido_IP Rapido_IP griffin griffin Community Community ms-theater ms-theater qadmifoper qadmifoper qadmifevent qadmifevent Symbios Raid Symbios Raid DirecPC SI DirecPC SI Load Balance Management Load Balance Management Load Balance Forwarding Load Balance Forwarding High Criteria High Criteria qip_msgd qip_msgd MTI-TCS-COMM MTI-TCS-COMM taskman port taskman port SeaODBC SeaODBC C3 C3 Aker-cdp Aker-cdp Vital Analysis Vital Analysis ACE Server ACE Server ACE Server Propagation ACE Server Propagation SecurSight Certificate Valifation Service SecurSight Certificate Valifation Service SecurSight Authentication Server (SSL) SecurSight Authentication Server (SSL) SecurSight Event Logging Server (SSL) SecurSight Event Logging Server (SSL)
11/09/2012
Page 66 of 144
2480 2480 2481 2481 2482 2482 2483 2483 2484 2484 2485 2485 2486 2486 2487 2487 2488 2488 2489 2489 2490 2490 2491 2491 2492 2492 2493 2493 2494 2494 2495 2495 2496 2496 2497 2497 2498 2498 2499 2499
TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
lingwood lingwood giop giop giop-ssl giop-ssl ttc ttc ttc-ssl ttc-ssl netobjects1 netobjects1 netobjects2 netobjects2 pns pns moy-corp moy-corp tsilb tsilb qip-qdhcp qip-qdhcp conclave-cpp conclave-cpp groove groove talarian-mqs talarian-mqs bmc-ar bmc-ar fast-rem-serv fast-rem-serv dirgis dirgis quaddb quaddb odn-castraq odn-castraq unicontrol unicontrol rtsserv
2500 TCP
2500 UDP rtsserv 2501 TCP rtsclient
2501 UDP rtsclient 2502 2502 2503 2503 2504 2504 2506 2506 2507 2507 2508 2508 2509 2509 2510 2510 2511 2511 2512 2512 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP kentrox-prot kentrox-prot nms-dpnss nms-dpnss wlbs wlbs jbroker jbroker spock spock jdatastore jdatastore fjmpss fjmpss fjappmgrbulk fjappmgrbulk metastorm metastorm citrixima citrixima
Lingwood's Detail Lingwood's Detail Oracle GIOP Oracle GIOP Oracle GIOP SSL Oracle GIOP SSL Oracle TTC Oracle TTC Oracle TTC SSL Oracle TTC SSL Net Objects1 Net Objects1 Net Objects2 Net Objects2 Policy Notice Service Policy Notice Service Moy Corporation Moy Corporation TSILB TSILB qip_qdhcp qip_qdhcp Conclave CPP Conclave CPP GROOVE GROOVE Talarian MQS Talarian MQS BMC AR BMC AR Fast Remote Services Fast Remote Services DIRGIS DIRGIS Quad DB Quad DB ODN-CasTraq ODN-CasTraq UniControl UniControl Resource Tracking system server Resource Tracking system server Resource Tracking system client Resource Tracking system client Kentrox Protocol Kentrox Protocol NMS-DPNSS NMS-DPNSS WLBS WLBS jbroker jbroker spock spock JDataStore JDataStore fjmpss fjmpss fjappmgrbulk fjappmgrbulk Metastorm Metastorm Citrix IMA Citrix IMA
11/09/2012
Page 67 of 144
2513 2513 2514 2514 2515 2515 2516 2516
Citrix ADMIN Citrix ADMIN Facsys NTP Facsys NTP Facsys Router Facsys Router Main Control Main Control H.323 Annex E call signaling 2517 TCP call-sig-trans transport H.323 Annex E call signaling 2517 UDP call-sig-trans transport 2518 TCP willy Willy 2518 UDP willy Willy 2519 TCP globmsgsvc globmsgsvc 2519 UDP globmsgsvc globmsgsvc 2520 TCP pvsw Pervasive Listener 2520 UDP pvsw Pervasive Listener 2521 TCP adaptecmgr Adaptec Manager 2521 UDP adaptecmgr Adaptec Manager 2522 TCP windb WinDb 2522 UDP windb WinDb 2523 TCP qke-llc-v3 Qke LLC V.3 2523 UDP qke-llc-v3 Qke LLC V.3 2524 TCP optiwave-lm Optiwave License Management 2524 UDP optiwave-lm Optiwave License Management 2525 TCP ms-v-worlds MS V-Worlds 2525 UDP ms-v-worlds MS V-Worlds 2526 TCP ema-sent-lm EMA License Manager 2526 UDP ema-sent-lm EMA License Manager 2527 TCP iqserver IQ Server 2527 UDP iqserver IQ Server 2528 TCP ncr_ccl NCR CCL 2528 UDP ncr_ccl NCR CCL 2529 TCP utsftp UTS FTP 2529 UDP utsftp UTS FTP 2530 TCP vrcommerce VR Commerce 2530 UDP vrcommerce VR Commerce 2531 TCP ito-e-gui ITO-E GUI 2531 UDP ito-e-gui ITO-E GUI 2532 TCP ovtopmd OVTOPMD 2532 UDP ovtopmd OVTOPMD 2533 TCP snifferserver SnifferServer 2533 UDP snifferserver SnifferServer 2534 TCP combox-web-acc Combox Web Access 2534 UDP combox-web-acc Combox Web Access 2535 TCP madcap MADCAP 2535 UDP madcap MADCAP 2536 TCP btpp2audctr1 btpp2audctr1 2536 UDP btpp2audctr1 btpp2audctr1 2537 TCP upgrade Upgrade Protocol 2537 UDP upgrade Upgrade Protocol 2538 TCP vnwk-prapi vnwk-prapi 2538 UDP vnwk-prapi vnwk-prapi 2539 TCP vsiadmin VSI Admin 2539 UDP vsiadmin VSI Admin 2540 TCP lonworks LonWorks 2540 UDP lonworks LonWorks 2541 TCP lonworks2 LonWorks2 2541 UDP lonworks2 LonWorks2 2542 TCP davinci daVinci Presenter 2542 UDP davinci daVinci Presenter 2543 TCP reftek REFTEK 2543 UDP reftek REFTEK 2544 TCP novell-zen Novell ZEN 2544 UDP novell-zen Novell ZEN 2545 TCP sis-emt sis-emt
citrixadmin citrixadmin facsys-ntp facsys-ntp facsys-router facsys-router maincontrol maincontrol
11/09/2012
Page 68 of 144
2545 2546 2546 2547 2547 2548 2548 2549 2549 2550 2550 2551 2551 2552 2552 2553 2553 2554 2554 2555 2555 2556 2556 2557 2557 2558 2558 2559 2559 2560 2560 2561 2561 2562 2562 2563 2563
UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
sis-emt vytalvaultbrtp vytalvaultbrtp vytalvaultvsmp vytalvaultvsmp vytalvaultpipe vytalvaultpipe ipass ipass ads ads isg-uda-server isg-uda-server call-logging call-logging efidiningport efidiningport vcnet-link-v10 vcnet-link-v10 compaq-wcp compaq-wcp nicetec-nmsvc nicetec-nmsvc nicetec-mgmt nicetec-mgmt pclemultimedia pclemultimedia lstp lstp labrat labrat mosaixcc mosaixcc delibo delibo cti-redwood cti-redwood hp-3000-telnet coord-svr coord-svr pcs-pcw pcs-pcw clp clp spamtrap spamtrap sonuscallsig sonuscallsig hs-port hs-port cecsvc cecsvc ibp ibp trustestablish trustestablish blockade-bpsp blockade-bpsp hl7 hl7 tclprodebugger tclprodebugger scipticslsrvr scipticslsrvr rvs-isdn-dcp rvs-isdn-dcp
2564 TCP 2565 2565 2566 2566 2567 2567 2568 2568 2569 2569 2570 2570 2571 2571 2572 2572 2573 2573 2574 2574 2575 2575 2576 2576 2577 2577 2578 2578 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
sis-emt vytalvaultbrtp vytalvaultbrtp vytalvaultvsmp vytalvaultvsmp vytalvaultpipe vytalvaultpipe IPASS IPASS ADS ADS ISG UDA Server ISG UDA Server Call Logging Call Logging efidiningport efidiningport VCnet-Link v10 VCnet-Link v10 Compaq WCP Compaq WCP nicetec-nmsvc nicetec-nmsvc nicetec-mgmt nicetec-mgmt PCLE Multi Media PCLE Multi Media LSTP LSTP labrat labrat MosaixCC MosaixCC Delibo Delibo CTI Redwood CTI Redwood HP 3000 NS/VT block mode telnet Coordinator Server Coordinator Server pcs-pcw pcs-pcw Cisco Line Protocol Cisco Line Protocol SPAM TRAP SPAM TRAP Sonus Call Signal Sonus Call Signal HS Port HS Port CECSVC CECSVC IBP IBP Trust Establish Trust Establish Blockade BPSP Blockade BPSP HL7 HL7 TCL Pro Debugger TCL Pro Debugger Scriptics Lsrvr Scriptics Lsrvr RVS ISDN DCP RVS ISDN DCP
Lion, T0rn Rootkit
Striker trojan
11/09/2012
Page 69 of 144
2579 2579 2580 2580 2581 2581 2582 2582 2583 2583 2584 2584 2585 2585 2586 2586 2587 2587 2588 2588 2589 2589 2590 2590 2591 2591 2592 2592 2593 2593 2594 2594 2595 2595 2596 2596 2597 2597 2598 2598 2599 2599
mpfoncl mpfoncl tributary tributary argis-te argis-te argis-ds argis-ds mon mon cyaserv cyaserv netx-server netx-server netx-agent netx-agent masc masc privilege privilege quartus-tcl quartus-tcl idotdist idotdist maytagshuffle maytagshuffle netrek netrek mns-mail mns-mail dts dts worldfusion1 worldfusion1 worldfusion2 worldfusion2 homesteadglory homesteadglory citriximaclient citriximaclient snapd snapd hpstgmgr hpstgmgr discp-client discp-client discp-server discp-server servicemeter servicemeter nsc-ccs nsc-ccs nsc-posa nsc-posa netmon netmon connection connection wag-service wag-service system-monitor system-monitor versa-tek versa-tek lionhead lionhead
mpfoncl mpfoncl Tributary Tributary ARGIS TE ARGIS TE ARGIS DS ARGIS DS MON MON cyaserv cyaserv NETX Server NETX Server NETX Agent NETX Agent MASC MASC Privilege Privilege quartus tcl quartus tcl idotdist idotdist Maytag Shuffle Maytag Shuffle netrek netrek MNS Mail Notice Service MNS Mail Notice Service Data Base Server Data Base Server World Fusion 1 World Fusion 1 World Fusion 2 World Fusion 2 Homestead Glory Homestead Glory Citrix MA Client Citrix MA Client Snap Discovery Snap Discovery HPSTGMGR HPSTGMGR discp client discp client discp server discp server Service Meter Service Meter NSC CCS NSC CCS NSC POSA NSC POSA Dell Netmon Dell Netmon Dell Connection Dell Connection Wag Service Wag Service System Monitor System Monitor VersaTek VersaTek LIONHEAD LIONHEAD
WinCrash 2
Dagger
2600 TCP 2600 2601 2601 2602 2602 2603 2603 2604 2604 2605 2605 2606 2606 2607 2607 2608 2608 2609 2609 2610 2610 2611 2611 UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
Digital Root Beer, Digital RootBeer, DigitalRootbeer
11/09/2012
Page 70 of 144
2612 2612 2613 2613 2614 2614 2615 2615 2616 2616 2617 2617 2618 2618 2619 2619 2620 2620 2621 2621 2622 2622 2623 2623 2624 2624 2625 2625 2626 2626 2627 2627 2628 2628 2629 2629 2630 2630 2631 2631 2632 2632 2633 2633 2634 2634 2635 2635 2636 2636 2637 2637 2638 2638 2639 2639
TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
qpasa-agent qpasa-agent smntubootstrap smntubootstrap neveroffline neveroffline firepower firepower appswitch-emp appswitch-emp cmadmin cmadmin priority-e-com priority-e-com bruce bruce lpsrecommender lpsrecommender miles-apart miles-apart metricadbc metricadbc lmdp lmdp aria aria blwnkl-port blwnkl-port gbjd816 gbjd816 moshebeeri moshebeeri dict dict sitaraserver sitaraserver sitaramgmt sitaramgmt sitaradir sitaradir irdg-post irdg-post interintelli interintelli pk-electronics pk-electronics backburner backburner solve solve imdocsvc imdocsvc sybaseanywhere sybaseanywhere aminet aminet sai_sentlm
2640 TCP
2640 UDP sai_sentlm 2641 2641 2642 2642 2643 2643 2644 TCP UDP TCP UDP TCP UDP TCP hdl-srv hdl-srv tragic tragic gte-samp gte-samp travsoft-ipx-t
Qpasa Agent Qpasa Agent SMNTUBootstrap SMNTUBootstrap Never Offline Never Offline firepower firepower appswitch-emp appswitch-emp Clinical Context Managers Clinical Context Managers Priority E-Com Priority E-Com bruce bruce LPSRecommender LPSRecommender Miles Apart Jukebox Server Miles Apart Jukebox Server MetricaDBC MetricaDBC LMDP LMDP Aria Aria Blwnkl Port Blwnkl Port gbjd816 gbjd816 Moshe Beeri Moshe Beeri DICT DICT Sitara Server Sitara Server Sitara Management Sitara Management Sitara Dir Sitara Dir IRdg Post IRdg Post InterIntelli InterIntelli PK Electronics PK Electronics Back Burner Back Burner Solve Solve Import Document Service Import Document Service Sybase Anywhere Sybase Anywhere AMInet AMInet Sabbagh Associates Licence Manager Sabbagh Associates Licence Manager HDL Server HDL Server Tragic Tragic GTE-SAMP GTE-SAMP Travsoft IPX Tunnel
11/09/2012
Page 71 of 144
2644 2645 2645 2646 2646 2647 2647 2648 2648 2649 2649 2650 2650 2651 2651 2652 2652 2653 2653 2654 2654 2655 2655 2656 2656 2657 2657 2658 2658 2659 2659 2660 2660 2661 2661 2662 2662 2663 2663 2664 2664 2665 2665 2666 2666 2667 2667 2668 2668 2669 2669 2670 2670 2671 2671 2672 2672 2673 2673 2674 2674 2675 2675 2676 2676 2677 2677
travsoft-ipx-t novell-ipx-cmd novell-ipx-cmd and-lm and-lm syncserver syncserver upsnotifyprot upsnotifyprot vpsipport vpsipport eristwoguns eristwoguns ebinsite ebinsite interpathpanel interpathpanel sonus sonus corel_vncadmin corel_vncadmin unglue unglue kana kana sns-dispatcher sns-dispatcher sns-admin sns-admin sns-query sns-query gcmonitor gcmonitor olhost olhost bintec-capi bintec-capi bintec-tapi bintec-tapi patrol-mq-gm patrol-mq-gm patrol-mq-nm patrol-mq-nm extensis extensis alarm-clock-s alarm-clock-s alarm-clock-c alarm-clock-c toad toad tve-announce tve-announce newlixreg newlixreg nhserver nhserver firstcall42 firstcall42 ewnn ewnn ttc-etap ttc-etap simslink simslink gadgetgate1way gadgetgate1way
Travsoft IPX Tunnel Novell IPX CMD Novell IPX CMD AND License Manager AND License Manager SyncServer SyncServer Upsnotifyprot Upsnotifyprot VPSIPPORT VPSIPPORT eristwoguns eristwoguns EBInSite EBInSite InterPathPanel InterPathPanel Sonus Sonus Corel VNC Admin Corel VNC Admin UNIX Nt Glue UNIX Nt Glue Kana Kana SNS Dispatcher SNS Dispatcher SNS Admin SNS Admin SNS Query SNS Query GC Monitor GC Monitor OLHOST OLHOST BinTec-CAPI BinTec-CAPI BinTec-TAPI BinTec-TAPI Patrol for MQ GM Patrol for MQ GM Patrol for MQ NM Patrol for MQ NM extensis extensis Alarm Clock Server Alarm Clock Server Alarm Clock Client Alarm Clock Client TOAD TOAD TVE Announce TVE Announce newlixreg newlixreg nhserver nhserver First Call 42 First Call 42 ewnn ewnn TTC ETAP TTC ETAP SIMSLink SIMSLink Gadget Gate 1 Way Gadget Gate 1 Way
11/09/2012
Page 72 of 144
2678 2678 2679 2679 2680 2680 2681 2681 2683 2683 2684 2684 2685 2685 2686 2686 2687 2687 2688 2688 2689 2689 2690 2690 2691 2691 2692 2692 2694 2694 2695 2695 2696 2696 2697 2697 2698 2698 2699 2699 2700 2700 2701 2701 2702 2702 2703 2703 2704 2704 2705 2705 2706 2706 2707 2707 2708 2708 2709 2709 2710 2710 2711 2711
TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
gadgetgate2way gadgetgate2way syncserverssl syncserverssl pxc-sapxom pxc-sapxom mpnjsomb mpnjsomb ncdloadbalance ncdloadbalance mpnjsosv mpnjsosv mpnjsocl mpnjsocl mpnjsomg mpnjsomg pq-lic-mgmt pq-lic-mgmt md-cg-http md-cg-http fastlynx fastlynx hp-nnm-data hp-nnm-data itinternet itinternet admins-lms admins-lms pwrsevent pwrsevent vspread vspread unifyadmin unifyadmin oce-snmp-trap oce-snmp-trap mck-ivpip mck-ivpip csoft-plusclnt csoft-plusclnt tqdata tqdata sms-rcinfo sms-rcinfo sms-xfer sms-xfer sms-chat sms-chat sms-remctrl sms-remctrl sds-admin sds-admin ncdmirroring ncdmirroring emcsymapiport emcsymapiport banyan-net banyan-net supermon supermon sso-service sso-service sso-control sso-control aocp
2712 TCP
Gadget Gate 2 Way Gadget Gate 2 Way Sync Server SSL Sync Server SSL pxc-sapxom pxc-sapxom mpnjsomb mpnjsomb NCDLoadBalance NCDLoadBalance mpnjsosv mpnjsosv mpnjsocl mpnjsocl mpnjsomg mpnjsomg pq-lic-mgmt pq-lic-mgmt md-cf-http md-cf-http FastLynx FastLynx HP NNM Embedded Database HP NNM Embedded Database ITInternet ISM Server ITInternet ISM Server Admins LMS Admins LMS pwrsevent pwrsevent VSPREAD VSPREAD Unify Admin Unify Admin Oce SNMP Trap Port Oce SNMP Trap Port MCK-IVPIP MCK-IVPIP Csoft Plus Client Csoft Plus Client tqdata tqdata SMS RCINFO SMS RCINFO SMS XFER Black Diver SMS XFER Black Diver SMS CHAT SMS CHAT SMS REMCTRL SMS REMCTRL SDS Admin SDS Admin NCD Mirroring NCD Mirroring EMCSYMAPIPORT EMCSYMAPIPORT Banyan-Net Banyan-Net Supermon Supermon SSO Service SSO Service SSO Control SSO Control Axapta Object Communication Protocol Axapta Object Communication
2712 UDP aocp
11/09/2012
Page 73 of 144
2713 2713 2714 2714 2715 2715 2716 2716 2717 2717 2718 2718 2719 2719 2720 2720 2721 2721 2722 2722 2723 2723 2724 2724 2725 2725 2726 2726
TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
raven1 raven1 raven2 raven2 hpstgmgr2 hpstgmgr2 inova-ip-disco inova-ip-disco pn-requester pn-requester pn-requester2 pn-requester2 scan-change scan-change wkars wkars smart-diagnose smart-diagnose proactivesrvr proactivesrvr watchdognt watchdognt qotps qotps msolap-ptp2 msolap-ptp2 tams tams mgcp-callagent
2727 TCP
2727 UDP mgcp-callagent 2728 2728 2729 2729 2730 2730 2731 2731 2732 2732 2733 2733 2734 2734 2735 2735 2736 2736 2737 2737 2738 2738 2739 2739 2740 2740 2741 2741 2742 2742 2743 2743 2744 2744 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP sqdr sqdr tcim-control tcim-control nec-raidplus nec-raidplus fyre-messanger fyre-messanger g5m g5m signet-ctf signet-ctf ccs-software ccs-software netiq-mc netiq-mc radwiz-nms-srv radwiz-nms-srv srp-feedback srp-feedback ndl-tcp-ois-gw ndl-tcp-ois-gw tn-timing tn-timing alarm alarm tsb tsb tsb2 tsb2 murx murx honyaku honyaku
Protocol Raven1 Raven1 Raven2 Raven2 HPSTGMGR2 HPSTGMGR2 Inova IP Disco Inova IP Disco PN REQUESTER PN REQUESTER PN REQUESTER 2 PN REQUESTER 2 Scan & Change Scan & Change wkars wkars Smart Diagnose Smart Diagnose Proactive Server Proactive Server WatchDog NT WatchDog NT qotps qotps MSOLAP PTP2 MSOLAP PTP2 TAMS TAMS Media Gateway Control Protocol Call Agent Media Gateway Control Protocol Call Agent SQDR SQDR TCIM Control TCIM Control NEC RaidPlus NEC RaidPlus Fyre Messanger Fyre Messagner G5M G5M Signet CTF Signet CTF CCS Software CCS Software NetIQ Monitor Console NetIQ Monitor Console RADWIZ NMS SRV RADWIZ NMS SRV SRP Feedback SRP Feedback NDL TCP-OSI Gateway NDL TCP-OSI Gateway TN Timing TN Timing Alarm Alarm TSB TSB TSB2 TSB2 murx murx honyaku honyaku
The Prayer 2
Phase Zero Phase Zero
11/09/2012
Page 74 of 144
2745 2745 2746 2746 2747 2747 2748 2748 2749 2749 2750 2750 2751 2751 2752 2752 2753 2753 2754 2754 2755 2755 2756 2756 2757 2757 2758 2758 2759 2759 2760 2760 2761 2761 2762 2762 2763 2763 2764 2764 2765 2765 2766 2766 2767 2767 2768 2768 2769 2769 2770 2770 2771 2771 2772 2772 2773 2773 2774 2774 2775 2775 2776 2776 2777 2777 2778
urbisnet urbisnet cpudpencap cpudpencap fjippol-swrly fjippol-swrly fjippol-polsvr fjippol-polsvr fjippol-cnsl fjippol-cnsl fjippol-port1 fjippol-port1 fjippol-port2 fjippol-port2 rsisysaccess rsisysaccess de-spot de-spot apollo-cc apollo-cc expresspay expresspay simplement-tie simplement-tie cnrp cnrp apollo-status apollo-status apollo-gms apollo-gms sabams sabams dicom-iscl dicom-iscl dicom-tls dicom-tls desktop-dna desktop-dna data-insurance data-insurance qip-audup qip-audup compaq-scp compaq-scp uadtc uadtc uacs uacs exce exce veronica veronica vergencecm vergencecm auris auris rbakcup1 rbakcup1 rbakcup2 rbakcup2 smpp smpp ridgeway1 ridgeway1 ridgeway2 ridgeway2 gwen-sonya
URBISNET URBISNET CPUDPENCAP CPUDPENCAP
RSISYS ACCESS RSISYS ACCESS de-spot de-spot APOLLO CC APOLLO CC Express Pay Express Pay simplement-tie simplement-tie CNRP CNRP APOLLO Status APOLLO Status APOLLO GMS APOLLO GMS Saba MS Saba MS DICOM ISCL DICOM ISCL DICOM TLS DICOM TLS Desktop DNA Desktop DNA Data Insurance Data Insurance qip-audup qip-audup Compaq SCP Compaq SCP UADTC UADTC UACS UACS eXcE eXcE Veronica Veronica Vergence CM Vergence CM auris auris RBackup Remote Backup SubSeven RBackup Remote Backup RBackup Remote Backup SubSeven RBackup Remote Backup SMPP SMPP Ridgeway Systems & Software Ridgeway Systems & Software Ridgeway Systems & Software Ridgeway Systems & Software Gwen-Sonya
11/09/2012
Page 75 of 144
2778 2779 2779 2780 2780 2781 2781 2782 2782 2783 2783 2784 2784 2785 2785
gwen-sonya lbc-sync lbc-sync lbc-control lbc-control whosells whosells everydayrc everydayrc aises aises www-dev www-dev aic-np aic-np aic-oncrpc
2786 TCP
2786 UDP aic-oncrpc 2787 TCP piccolo 2787 UDP piccolo 2788 TCP fryeserv
2788 UDP fryeserv 2789 2789 2790 2790 2791 2791 2792 2792 2793 2793 2794 2794 2795 2795 2796 2796 2797 2797 2798 2798 2799 2799 2800 2800 2801 2801 2802 2802 2803 2803 2804 2804 2805 2805 2806 2806 2807 2807 2808 2808 2809 2809 2810 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP media-agent media-agent plgproxy plgproxy mtport-regist mtport-regist f5-globalsite f5-globalsite initlsmsad initlsmsad aaftp aaftp livestats livestats ac-tech ac-tech esp-encap esp-encap tmesis-upshot tmesis-upshot icon-discover icon-discover acc-raid acc-raid igcp igcp veritas-tcp1 veritas-udp1 btprjctrl btprjctrl telexis-vtu telexis-vtu wta-wsp-s wta-wsp-s cspuni cspuni cspmulti cspmulti j-lan-p j-lan-p corbaloc corbaloc netsteward
Gwen-Sonya LBC Sync LBC Sync LBC Control LBC Control whosells whosells everydayrc everydayrc AISES AISES world wide web - development world wide web - development aic-np aic-np aic-oncrpc - Destiny MCD database aic-oncrpc - Destiny MCD database piccolo - Cornerstone Software piccolo - Cornerstone Software NetWare Loadable Module Seagate Software NetWare Loadable Module Seagate Software Media Agent Media Agent PLG Proxy PLG Proxy MT Port Registrator MT Port Registrator f5-globalsite f5-globalsite initlsmsad initlsmsad aaftp aaftp LiveStats LiveStats ac-tech ac-tech esp-encap esp-encap TMESIS-UPShot TMESIS-UPShot ICON Discover ICON Discover ACC RAID ACC RAID IGCP Phineas Phucker IGCP Veritas TCP1 Veritas UDP1 btprjctrl btprjctrl Telexis VTU Telexis VTU WTA WSP-S WTA WSP-S cspuni cspuni cspmulti cspmulti J-LAN-P J-LAN-P CORBA LOC CORBA LOC Active Net Steward
11/09/2012
Page 76 of 144
2810 2811 2811 2812 2812 2813 2813 2814 2814 2815 2815 2816 2816 2817 2817 2818 2818 2819 2819 2820 2820
netsteward gsiftp gsiftp atmtcp atmtcp llm-pass llm-pass llm-csv llm-csv lbc-measure lbc-measure lbc-watchdog lbc-watchdog nmsigport nmsigport rmlnk rmlnk fc-faultnotify fc-faultnotify univision univision vrts-at-port
2821 TCP
2821 UDP vrts-at-port 2822 2822 2823 2823 2824 2824 2826 2826 2827 2827 2828 2828 2829 2829 2830 2830 2831 2831 2832 2832 2833 2833 2834 2834 2835 2835 2836 2836 2837 2837 2838 2838 2839 2839 2840 2840 2841 2841 2842 2842 2843 2843 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP ka0wuc ka0wuc cqg-netlan cqg-netlan cqg-netlan-1 cqg-netlan-1 slc-systemlog slc-systemlog slc-ctrlrloops slc-ctrlrloops itm-lm itm-lm silkp1 silkp1 silkp2 silkp2 silkp3 silkp3 silkp4 silkp4 glishd glishd evtp evtp evtp-data evtp-data catalyst catalyst repliweb repliweb starbot starbot nmsigport nmsigport l3-exprt l3-exprt l3-ranger l3-ranger l3-hawk l3-hawk pdnet pdnet
Active Net Steward GSI FTP GSI FTP atmtcp atmtcp llm-pass llm-pass llm-csv llm-csv LBC Measurement LBC Measurement LBC Watchdog LBC Watchdog NMSig Port NMSig Port rmlnk rmlnk FC Fault Notification FC Fault Notification UniVision UniVision VERITAS Authentication Service VERITAS Authentication Service ka0wuc ka0wuc CQG Net/LAN CQG Net/LAN CQG Net/LAN 1 CQG Net/Lan 1 slc systemlog slc systemlog slc ctrlrloops slc ctrlrloops ITM License Manager ITM License Manager silkp1 silkp1 silkp2 silkp2 silkp3 silkp3 silkp4 silkp4 glishd glishd EVTP EVTP EVTP-DATA EVTP-DATA catalyst catalyst Repliweb Repliweb Starbot Starbot NMSigPort NMSigPort l3-exprt l3-exprt l3-ranger l3-ranger l3-hawk l3-hawk PDnet PDnet
11/09/2012
Page 77 of 144
2844 2844 2845 2845 2846 2846 2847 2847 2848 2848 2849 2849 2850 2850 2851 2851 2852 2852 2853 2853 2854 2854 2856 2856 2857 2857 2858 2858 2859 2859 2860 2860 2861 2861 2862 2862 2863 2863 2864 2864 2865 2865 2866 2866 2867 2867 2868 2868 2869 2869 2870 2870 2871 2871 2872 2872 2874 2874 2875 2875 2876 2876 2877 2877 2878 2878 2879
bpcp-poll bpcp-poll bpcp-trap bpcp-trap aimpp-hello aimpp-hello aimpp-port-req aimpp-port-req amt-blc-port amt-blc-port fxp fxp metaconsole metaconsole webemshttp webemshttp bears-01 bears-01 ispipes ispipes infomover infomover cesdinv cesdinv simctlp simctlp ecnp ecnp activememory activememory dialpad-voice1 dialpad-voice1 dialpad-voice2 dialpad-voice2 ttg-protocol ttg-protocol sonardata sonardata astromed-main astromed-main pit-vpn pit-vpn iwlistener iwlistener esps-portal esps-portal npep-messaging npep-messaging icslap icslap daishi daishi msi-selectplay msi-selectplay radix radix dxmessagebase1 dxmessagebase1 dxmessagebase2 dxmessagebase2 sps-tunnel sps-tunnel bluelance bluelance aap aap ucentric-ds
BPCP POLL BPCP POLL BPCP TRAP BPCP TRAP AIMPP Hello AIMPP Hello AIMPP Port Req AIMPP Port Req AMT-BLC-PORT AMT-BLC-PORT FXP FXP MetaConsole MetaConsole webemshttp webemshttp bears-01 bears-01 ISPipes ISPipes InfoMover InfoMover cesdinv cesdinv SimCtIP SimCtIP ECNP ECNP Active Memory Active Memory Dialpad Voice 1 Dialpad Voice 1 Dialpad Voice 2 Dialpad Voice 2 TTG Protocol TTG Protocol Sonar Data Sonar Data main 5001 cmd main 5001 cmd pit-vpn pit-vpn iwlistener iwlistener esps-portal esps-portal NPEP Messaging NPEP Messaging ICSLAP ICSLAP daishi daishi MSI Select Play MSI Select Play RADIX RADIX dxmessagebase1 dxmessagebase1 dxmessagebase2 dxmessagebase2 SPS Tunnel SPS Tunnel BLUELANCE BLUELANCE AAP AAP ucentric-ds
11/09/2012
Page 78 of 144
2879 2880 2880 2881 2881 2882 2882 2883 2883 2884 2884 2885 2885 2886 2886 2887 2887 2888 2888 2889 2889 2890 2890
ucentric-ds Synapse Transport Synapse Transport NDSP NDSP NDTP NDTP NDNP NDNP Flash Msg Flash Msg TopFlow TopFlow RESPONSELOGIC RESPONSELOGIC aironet aironet SPCSDLOBBY SPCSDLOBBY RSOM RSOM CSPCLMULTI CSPCLMULTI CINEGRFX-ELMD License 2891 TCP cinegrfx-elmd Manager CINEGRFX-ELMD License 2891 UDP cinegrfx-elmd Manager 2892 TCP snifferdata SNIFFERDATA 2892 UDP snifferdata SNIFFERDATA 2893 TCP vseconnector VSECONNECTOR 2893 UDP vseconnector VSECONNECTOR 2894 TCP abacus-remote ABACUS-REMOTE 2894 UDP abacus-remote ABACUS-REMOTE 2895 TCP natuslink NATUS LINK 2895 UDP natuslink NATUS LINK 2896 TCP ecovisiong6-1 ECOVISIONG6-1 2896 UDP ecovisiong6-1 ECOVISIONG6-1 2897 TCP citrix-rtmp Citrix RTMP 2897 UDP citrix-rtmp Citrix RTMP 2898 TCP appliance-cfg APPLIANCE-CFG 2898 UDP appliance-cfg APPLIANCE-CFG 2899 TCP powergemplus POWERGEMPLUS 2899 UDP powergemplus POWERGEMPLUS 2900 TCP quicksuite QUICKSUITE 2900 UDP quicksuite QUICKSUITE 2901 TCP allstorcns ALLSTORCNS 2901 UDP allstorcns ALLSTORCNS 2902 TCP netaspi NET ASPI 2902 UDP netaspi NET ASPI 2903 TCP suitcase SUITCASE 2903 UDP suitcase SUITCASE 2904 TCP m2ua M2UA 2904 UDP m2ua M2UA 2904 SCTP m2ua M2UA 2905 TCP m3ua M3UA 2905 UDP m3ua De-registered (2001 June 07) 2905 SCTP m3ua M3UA 2906 TCP caller9 CALLER9 2906 UDP caller9 CALLER9 2907 TCP webmethods-b2b WEBMETHODS B2B 2907 UDP webmethods-b2b WEBMETHODS B2B 2908 TCP mao mao 2908 UDP mao mao 2909 TCP funk-dialout Funk Dialout 2909 UDP funk-dialout Funk Dialout 2910 TCP tdaccess TDAccess 2910 UDP tdaccess TDAccess
UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
ucentric-ds synapse synapse ndsp ndsp ndtp ndtp ndnp ndnp flashmsg flashmsg topflow topflow responselogic responselogic aironetddp aironetddp spcsdlobby spcsdlobby rsom rsom cspclmulti cspclmulti
11/09/2012
Page 79 of 144
2911 2911 2912 2912 2913 2913 2914 2914 2915 2915 2916 2916 2917 2917 2918 2918 2919 2919 2920 2920
TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
blockade blockade epicon epicon boosterware boosterware gamelobby gamelobby tksocket tksocket elvin_server elvin_server elvin_client elvin_client kastenchasepad kastenchasepad roboer roboer roboeda roboeda cesdcdman
2921 TCP
2921 UDP cesdcdman 2922 TCP cesdcdtrn
2922 UDP cesdcdtrn 2923 2923 2924 2924 2926 2926 2927 2927 2928 2928 2929 2929 2930 2930 2931 2931 2932 2932 2933 2933 2934 2934 2935 2935 2936 2936 2937 2937 2938 2938 2939 2939 2940 2940 2941 2941 2942 2942 2943 2943 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP wta-wsp-wtp-s wta-wsp-wtp-s precise-vip precise-vip mobile-file-dl mobile-file-dl unimobilectrl unimobilectrl redstone-cpss redstone-cpss amx-webadmin amx-webadmin amx-weblinx amx-weblinx circle-x circle-x incp incp 4-tieropmgw 4-tieropmgw 4-tieropmcli 4-tieropmcli qtp qtp otpatch otpatch pnaconsult-lm pnaconsult-lm sm-pas-1 sm-pas-1 sm-pas-2 sm-pas-2 sm-pas-3 sm-pas-3 sm-pas-4 sm-pas-4 sm-pas-5 sm-pas-5 ttnrepository ttnrepository
Blockade Blockade Epicon Epicon Booster Ware Booster Ware Game Lobby Game Lobby TK Socket TK Socket Elvin Server Elvin Server Elvin Client Elvin Client Kasten Chase Pad Kasten Chase Pad roboER roboER roboEDA roboEDA CESD Contents Delivery Management CESD Contents Delivery Management CESD Contents Delivery Data Transfer CESD Contents Delivery Data Transfer WTA-WSP-WTP-S WTA-WSP-WTP-S PRECISE-VIP PRECISE-VIP MOBILE-FILE-DL MOBILE-FILE-DL UNIMOBILECTRL UNIMOBILECTRL REDSTONE-CPSS REDSTONE-CPSS AMX-WEBADMIN AMX-WEBADMIN AMX-WEBLINX AMX-WEBLINX Circle-X Circle-X INCP INCP 4-TIER OPM GW 4-TIER OPM GW 4-TIER OPM CLI 4-TIER OPM CLI QTP QTP OTPatch OTPatch PNACONSULT-LM PNACONSULT-LM SM-PAS-1 SM-PAS-1 SM-PAS-2 SM-PAS-2 SM-PAS-3 SM-PAS-3 SM-PAS-4 SM-PAS-4 SM-PAS-5 SM-PAS-5 TTNRepository TTNRepository
Konik
11/09/2012
Page 80 of 144
2944 2944 2945 2945 2946 2946 2947 2947 2948 2948 2949 2949 2950 2950 2951 2951 2952 2952 2953 2953 2954 2954 2955 2955 2956 2956 2957 2957 2958 2958 2959 2959 2960 2960 2961 2961 2962 2962 2963 2963 2964 2964 2965 2965 2966 2966 2967 2967 2968 2968 2969 2969 2970 2970 2971 2971 2972 2972 2973 2973 2974 2974
TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
megaco-h248 megaco-h248 h248-binary h248-binary fjsvmpor fjsvmpor gpsd gpsd wap-push wap-push wap-pushsecure wap-pushsecure esip esip ottp ottp mpfwsas mpfwsas ovalarmsrv ovalarmsrv ovalarmsrv-cmd ovalarmsrv-cmd csnotify csnotify ovrimosdbman ovrimosdbman jmact5 jmact5 jmact6 jmact6 rmopagt rmopagt dfoxserver dfoxserver boldsoft-lm boldsoft-lm iph-policy-cli iph-policy-cli iph-policy-adm iph-policy-adm bullant-srap bullant-srap bullant-rap bullant-rap idp-infotrieve idp-infotrieve ssc-agent ssc-agent enpp enpp essp essp index-net index-net netclip netclip pmsm-webrctl pmsm-webrctl svnetworks svnetworks signal signal fjmpcm
2975 TCP
2975 UDP fjmpcm 2976 TCP cns-srv-port
Megaco H-248 Megaco H-248 H248 Binary H248 Binary FJSVmpor FJSVmpor GPSD GPSD WAP PUSH WAP PUSH WAP PUSH SECURE WAP PUSH SECURE ESIP ESIP OTTP OTTP MPFWSAS MPFWSAS OVALARMSRV OVALARMSRV OVALARMSRV-CMD OVALARMSRV-CMD CSNOTIFY CSNOTIFY OVRIMOSDBMAN OVRIMOSDBMAN JAMCT5 JAMCT5 JAMCT6 JAMCT6 RMOPAGT RMOPAGT DFOXSERVER DFOXSERVER BOLDSOFT-LM BOLDSOFT-LM IPH-POLICY-CLI IPH-POLICY-CLI IPH-POLICY-ADM IPH-POLICY-ADM BULLANT SRAP BULLANT SRAP BULLANT RAP BULLANT RAP IDP-INFOTRIEVE IDP-INFOTRIEVE SSC-AGENT SSC-AGENT ENPP ENPP ESSP ESSP INDEX-NET INDEX-NET NetClip clipboard daemon NetClip clipboard daemon PMSM Webrctl PMSM Webrctl SV Networks SV Networks Signal Signal Fujitsu Configuration Management Service Fujitsu Configuration Management Service CNS Server Port
11/09/2012
Page 81 of 144
2976 UDP cns-srv-port 2977 TCP ttc-etap-ns
2977 UDP ttc-etap-ns 2978 TCP ttc-etap-ds
2978 UDP ttc-etap-ds 2979 2979 2980 2980 2981 2981 2982 2982 2983 2983 2984 2984 2985 2985 2986 2986 2987 2987 2988 2988 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP h263-video h263-video wimd wimd mylxamport mylxamport iwb-whiteboard iwb-whiteboard netplan netplan hpidsadmin hpidsadmin hpidsagent hpidsagent stonefalls stonefalls identify identify hippad hippad zarkov
2989 TCP
2989 UDP zarkov 2990 2990 2991 2991 2992 2992 2993 2993 2994 2994 2995 2995 2996 2996 2997 2997 2998 2998 2999 2999 3000 3000 3001 3001 3002 3002 3003 3003 3004 3004 3005 3005 3006 3006 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP boscap boscap wkstn-mon wkstn-mon itb301 itb301 veritas-vis1 veritas-vis1 veritas-vis2 veritas-vis2 idrs idrs vsixml vsixml rebol rebol realsecure realsecure remoteware-un remoteware-un remoteware-cl remoteware-cl redwood-broker redwood-broker remoteware-srv remoteware-srv cgms cgms csoftragent csoftragent geniuslm geniuslm ii-admin ii-admin
CNS Server Port TTCs Enterprise Test Access Protocol - NS TTCs Enterprise Test Access Protocol - NS TTCs Enterprise Test Access Protocol - DS TTCs Enterprise Test Access Protocol - DS H.263 Video Streaming H.263 Video Streaming Instant Messaging Service Instant Messaging Service MYLXAMPORT MYLXAMPORT IWB-WHITEBOARD IWB-WHITEBOARD NETPLAN NETPLAN HPIDSADMIN HPIDSADMIN HPIDSAGENT HPIDSAGENT STONEFALLS STONEFALLS identify identify HIPPA Reporting Protocol HIPPA Reporting Protocol ZARKOV Intelligent Agent Communication ZARKOV Intelligent Agent Communication BOSCAP BOSCAP WKSTN-MON WKSTN-MON ITB301 ITB301 VERITAS VIS1 VERITAS VIS1 VERITAS VIS2 VERITAS VIS2 IDRS IDRS vsixml vsixml REBOL REBOL Real Secure Real Secure RemoteWare Unassigned RemoteWare Unassigned RemoteWare Client RemoteWare Client Redwood Broker Redwood Broker RemoteWare Server RemoteWare Server CGMS CGMS Csoft Agent Csoft Agent Genius License Manager Genius License Manager Instant Internet Admin Instant Internet Admin Lotus Mail Tracking Agent
Rat Remote Administration Tool - RAT
InetSpy, Remote Shut
11/09/2012
Page 82 of 144
3007 TCP
Protocol Lotus Mail Tracking Agent 3007 UDP lotusmtap Protocol 3008 TCP midnight-tech Midnight Technologies 3008 UDP midnight-tech Midnight Technologies 3009 TCP pxc-ntfy PXC-NTFY 3009 UDP pxc-ntfy PXC-NTFY 3010 TCP gw Telerate Workstation 3010 UDP ping-pong Telerate Workstation 3011 TCP trusted-web Trusted Web 3011 UDP trusted-web Trusted Web 3012 TCP twsdss Trusted Web Client 3012 UDP twsdss Trusted Web Client 3013 TCP gilatskysurfer Gilat Sky Surfer 3013 UDP gilatskysurfer Gilat Sky Surfer 3014 TCP broker_service Broker Service 3014 UDP broker_service Broker Service 3015 TCP nati-dstp NATI DSTP 3015 UDP nati-dstp NATI DSTP 3016 TCP notify_srvr Notify Server 3016 UDP notify_srvr Notify Server 3017 TCP event_listener Event Listener 3017 UDP event_listener Event Listener 3018 TCP srvc_registry Service Registry 3018 UDP srvc_registry Service Registry 3019 TCP resource_mgr Resource Manager 3019 UDP resource_mgr Resource Manager 3020 TCP cifs CIFS 3020 UDP cifs CIFS 3021 TCP agriserver AGRI Server 3021 UDP agriserver AGRI Server 3022 TCP csregagent CSREGAGENT 3022 UDP csregagent CSREGAGENT 3023 TCP magicnotes magicnotes 3023 UDP magicnotes magicnotes 3024 TCP nds_sso NDS_SSO 3024 UDP nds_sso NDS_SSO 3025 TCP arepa-raft Arepa Raft 3025 UDP arepa-raft Arepa Raft 3026 TCP agri-gateway AGRI Gateway 3026 UDP agri-gateway AGRI Gateway 3027 TCP LiebDevMgmt_C LiebDevMgmt_C 3027 UDP LiebDevMgmt_C LiebDevMgmt_C 3028 TCP LiebDevMgmt_DM LiebDevMgmt_DM 3028 UDP LiebDevMgmt_DM LiebDevMgmt_DM 3029 TCP LiebDevMgmt_A LiebDevMgmt_A 3029 UDP LiebDevMgmt_A LiebDevMgmt_A 3030 TCP arepa-cas Arepa Cas 3030 UDP arepa-cas Arepa Cas Remote AppleEvents/PPC 3031 TCP eppc Toolbox Remote AppleEvents/PPC 3031 UDP eppc Toolbox 3032 TCP redwood-chat Redwood Chat 3032 UDP redwood-chat Redwood Chat 3033 TCP pdb PDB 3033 UDP pdb PDB 3034 TCP osmosis-aeea Osmosis / Helix (R) AEEA Port 3034 UDP osmosis-aeea Osmosis / Helix (R) AEEA Port 3035 TCP fjsv-gssagt FJSV gssagt 3035 UDP fjsv-gssagt FJSV gssagt 3036 TCP hagel-dump Hagel DUMP 3036 UDP hagel-dump Hagel DUMP 3037 TCP hp-san-mgmt HP SAN Mgmt 3037 UDP hp-san-mgmt HP SAN Mgmt 3038 TCP santak-ups Santak UPS 3038 UDP santak-ups Santak UPS 3039 TCP cogitate Cogitate, Inc.
lotusmtap
WinCrash
Microspy
11/09/2012
Page 83 of 144
3039 3040 3040 3041 3041 3042 3042 3043 3043 3044 3044 3045 3045 3046 3046 3047 3047 3048 3048 3049 3049 3050 3050 3051 3051 3052 3052 3053 3053 3054 3054 3055 3055 3056 3056 3057 3057 3058 3058 3059 3059 3060 3060 3061 3061 3062 3062 3063 3063 3064 3064 3065 3065 3066 3066 3067 3067 3068 3068 3069 3069 3070 3070 3071 3071 3072 3072
cogitate tomato-springs tomato-springs di-traceware di-traceware journee journee brp brp epp epp responsenet responsenet di-ase di-ase hlserver hlserver pctrader pctrader nsws nsws gds_db gds_db galaxy-server galaxy-server apc-3052 apc-3052 dsom-server dsom-server amt-cnf-prot amt-cnf-prot policyserver policyserver cdl-server cdl-server goahead-fldup goahead-fldup videobeans videobeans qsoft qsoft interserver interserver cautcpd cautcpd ncacn-ip-tcp ncacn-ip-tcp ncadg-ip-udp ncadg-ip-udp rprt rprt slinterbase slinterbase netattachsdmp netattachsdmp fjhpjp fjhpjp ls3bcast ls3bcast ls3 ls3 mgxswitch mgxswitch csd-mgmt-port csd-mgmt-port csd-monitor csd-monitor
Cogitate, Inc. Tomato Springs Tomato Springs di-traceware di-traceware journee journee BRP BRP EndPoint Protocol EndPoint Protocol ResponseNet ResponseNet di-ase di-ase Fast Security HL Server Fast Security HL Server Sierra Net PC Trader Sierra Net PC Trader NSWS NSWS gds_db gds_db Galaxy Server Galaxy Server APC 3052 APC 3052 dsom-server dsom-server AMT CNF PROT AMT CNF PROT Policy Server Policy Server CDL Server CDL Server GoAhead FldUp GoAhead FldUp videobeans videobeans qsoft qsoft interserver interserver cautcpd cautcpd ncacn-ip-tcp ncacn-ip-tcp ncadg-ip-udp ncadg-ip-udp Remote Port Redirector Remote Port Redirector slinterbase slinterbase NETATTACHSDMP NETATTACHSDMP FJHPJP FJHPJP ls3 Broadcast ls3 Broadcast ls3 ls3 MGXSWITCH MGXSWITCH ContinuStor Manager Port ContinuStor Manager Port ContinuStor Monitor Port ContinuStor Monitor Port
11/09/2012
Page 84 of 144
3073 3073 3074 3074 3075 3075 3076 3076 3077 3077 3078 3078 3079 3079 3080 3080 3081 3081 3082 3082 3083 3083 3084 3084 3085 3085 3086 3086 3087 3087
TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
vcrp vcrp xbox xbox orbix-locator orbix-locator orbix-config orbix-config orbix-loc-ssl orbix-loc-ssl orbix-cfg-ssl orbix-cfg-ssl lv-frontpanel lv-frontpanel stm_pproc stm_pproc tl1-lv tl1-lv tl1-raw tl1-raw tl1-telnet tl1-telnet itm-mccs itm-mccs pcihreq pcihreq jdl-dbkitchen jdl-dbkitchen asoki-sma asoki-sma xdtp
3088 TCP
3088 UDP xdtp 3089 3089 3090 3090 3091 3091 3092 3092 3093 3093 3094 3094 3095 3095 3096 3096 3097 3098 3098 3099 3099 3100 3100 3101 3101 3102 3102 3103 3103 3104 3104 3105 3105 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP SCTP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP ptk-alink ptk-alink rtss rtss 1ci-smcs 1ci-smcs njfss njfss rapidmq-center rapidmq-center rapidmq-reg rapidmq-reg panasas panasas ndl-aps ndl-aps itu-bicc-stc umm-port umm-port chmd chmd opcon-xps opcon-xps hp-pxpib hp-pxpib slslavemon slslavemon autocuesmi autocuesmi autocuelog autocuetime cardbox cardbox
Very simple chatroom prot Very simple chatroom prot Xbox game port Xbox game port Orbix 2000 Locator Orbix 2000 Locator Orbix 2000 Config Orbix 2000 Config Orbix 2000 Locator SSL Orbix 2000 Locator SSL Orbix 2000 Locator SSL Orbix 2000 Locator SSL LV Front Panel LV Front Panel stm_pproc stm_pproc TL1-LV TL1-LV TL1-RAW TL1-RAW TL1-TELNET TL1-TELNET ITM-MCCS ITM-MCCS PCIHReq PCIHReq JDL-DBKitchen JDL-DBKitchen Asoki SMA Asoki SMA eXtensible Data Transfer Protocol eXtensible Data Transfer Protocol ParaTek Agent Linking ParaTek Agent Linking Rappore Session Services Rappore Session Services 1Ci Server Management 1Ci Server Management Netware sync services Netware sync services Jiiva RapidMQ Center Jiiva RapidMQ Center Jiiva RapidMQ Registry Jiiva RapidMQ Registry Panasas rendevous port Panasas rendevous port Active Print Server Port Active Print Server Port ITU-T Q.1902.1/Q.2150.3 Universal Message Manager Universal Message Manager CHIPSY Machine Daemon CHIPSY Machine Daemon OpCon/xps OpCon/xps HP PolicyXpert PIB Server HP PolicyXpert PIB Server SoftlinK Slave Mon Port SoftlinK Slave Mon Port Autocue SMI Protocol Autocue SMI Protocol Autocue Logger Protocol Autocue Time Service Cardbox Cardbox
11/09/2012
Page 85 of 144
3106 3106 3107 3107 3108 3108 3109 3109 3110 3110 3111 3111 3112 3112 3113 3113 3114 3114 3115 3115 3116 3116 3117 3117 3118 3118 3119 3119 3120 3120 3122 3122 3123 3123 3124 3124 3125 3125 3126 3126 3127 3127
cardbox-http cardbox-http business business geolocate geolocate personnel personnel sim-control sim-control wsynch wsynch ksysguard ksysguard cs-auth-svr cs-auth-svr ccmad ccmad mctet-master mctet-master mctet-gateway mctet-gateway mctet-jserv mctet-jserv pkagent pkagent d2000kernel d2000kernel d2000webserver d2000webserver vtr-emulator vtr-emulator edix edix beacon-port beacon-port a13-an a13-an ms-dotnetster ms-dotnetster ctx-bridge ctx-bridge ndl-aas ndl-aas netport-id netport-id icpv2 icpv2 netbookmark netbookmark ms-rule-engine
Cardbox HTTP Cardbox HTTP Business protocol Business protocol Geolocate protocol Geolocate protocol Personnel protocol Personnel protocol simulator control port simulator control port Web Synchronous Services Web Synchronous Services KDE System Guard KDE System Guard CS-Authenticate Svr Port CS-Authenticate Svr Port CCM AutoDiscover CCM AutoDiscover MCTET Master MCTET Master MCTET Gateway MCTET Gateway MCTET Jserv MCTET Jserv PKAgent PKAgent D2000 Kernel Port D2000 Kernel Port D2000 Webserver Port D2000 Webserver Port MTI VTR Emulator port MTI VTR Emulator port EDI Translation Protocol EDI Translation Protocol Beacon Port Beacon Port A13-AN Interface A13-AN Interface Microsoft .NETster Port Microsoft .NETster Port CTX Bridge Port CTX Bridge Port Active API Server Port Active API Server Port NetPort Discovery Port NetPort Discovery Port ICPv2 ICPv2 Net Book Mark Net Book Mark Microsoft Business Rule Engine Update Service Microsoft Business Rule Engine Update Service Prism Deploy User Port Prism Deploy User Port Extensible Code Protocol Extensible Code Protocol PeerBook Port PeerBook Port Grub Server Port Grub Server Port rtnt-1 data packets rtnt-1 data packets rtnt-2 data packets rtnt-2 data packets Incognito Rendez-Vous
MyDoom Reverse WWW Tunnel Backdoor, RingZero, MastersParadise, MyDoom MastersParadise Masters Paradise, MastersParadise, MyDoom MastersParadise MyDoom SubSARI, MyDoom MyDoom
3132 TCP
3132 UDP ms-rule-engine 3133 3133 3134 3134 3135 3135 3136 3136 3137 3137 3138 3138 3139 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP prism-deploy prism-deploy ecp ecp peerbook-port peerbook-port grubd grubd rtnt-1 rtnt-1 rtnt-2 rtnt-2 incognitorv
MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom
11/09/2012
Page 86 of 144
3139 3140 3140 3141 3141 3142 3142 3143 3143 3144 3144 3145 3145 3146 3146 3147 3147 3148 3148 3149 3149
incognitorv ariliamulti ariliamulti vmodem vmodem rdc-wh-eos rdc-wh-eos seaview seaview tarantella tarantella csi-lfap csi-lfap bears-02 bears-02 rfio rfio nm-game-admin nm-game-admin nm-game-server nm-game-server nm-asses-admin
3150 TCP
3150 UDP nm-asses-admin 3151 3151 3152 3152 3153 3153 3154 3154 3155 3155 3156 3156 3157 3157 3158 3158 3159 3159 3160 3160 3161 3161 3162 3162 3163 3163 3164 3164 3165 3165 3166 3166 3167 3167 3168 3168 3169 3169 3170 3170 3171 3171 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP nm-assessor nm-assessor feitianrockey feitianrockey s8-client-port s8-client-port ccmrmi ccmrmi jpegmpeg jpegmpeg indura indura e3consultants e3consultants stvp stvp navegaweb-port navegaweb-port tip-app-server tip-app-server doc1lm doc1lm sflm sflm res-sap res-sap imprs imprs newgenpay newgenpay qrepos qrepos poweroncontact poweroncontact poweronnud poweronnud serverview-as serverview-as serverview-asn serverview-asn serverview-gf serverview-gf
Incognito Rendez-Vous Arilia Multiplexor Arilia Multiplexor VMODEM VMODEM RDC WH EOS RDC WH EOS Sea View Sea View Tarantella Tarantella CSI-LFAP CSI-LFAP bears-02 bears-02 RFIO RFIO NetMike Game Administrator NetMike Game Administrator NetMike Game Server NetMike Game Server NetMike Assessor Administrator NetMike Assessor Administrator NetMike Assessor NetMike Assessor FeiTian Port FeiTian Port S8Cargo Client Port S8Cargo Client Port ON RMI Registry ON RMI Registry JpegMpeg Port JpegMpeg Port Indura Collector Indura Collector CCC Listener Port CCC Listener Port SmashTV Protocol SmashTV Protocol NavegaWeb Tarification NavegaWeb Tarification TIP Application Server TIP Application Server DOC1 License Manager DOC1 License Manager SFLM SFLM RES-SAP RES-SAP IMPRS IMPRS Newgenpay Engine Service Newgenpay Engine Service Quest Repository Quest Repository poweroncontact poweroncontact poweronnud poweronnud SERVERVIEW-AS SERVERVIEW-AS SERVERVIEW-ASN SERVERVIEW-ASN SERVERVIEW-GF SERVERVIEW-GF
MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom Deep Throat, The invasor, DeepThroat, MiniBacklash, MyDoom Deep Throat, Foreplay or Reduced Foreplay, DeepThroat, MiniBacklash MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom
11/09/2012
Page 87 of 144
3172 3172 3173 3173 3174 3174 3175 3175 3176 3176 3177 3177 3178 3178 3179 3179 3180 3180 3181 3181 3182 3182 3183 3183 3184 3184 3185 3185 3186 3186 3187 3187 3188 3188 3189 3189 3190 3190 3191 3191 3192 3192 3193 3193 3194 3194 3195 3195 3196 3196
SERVERVIEW-RM SERVERVIEW-RM SERVERVIEW-ICC SERVERVIEW-ICC ARMI Server ARMI Server T1_E1_Over_IP T1_E1_Over_IP ARS Master ARS Master Phonex Protocol Phonex Protocol Radiance UltraEdge Port Radiance UltraEdge Port H2GF W.2m Handover prot. H2GF W.2m Handover prot. Millicent Broker Server Millicent Broker Server BMC Patrol Agent BMC Patrol Agent BMC Patrol Rendezvous BMC Patrol Rendezvous COPS/TLS COPS/TLS ApogeeX Port ApogeeX Port SuSE Meta PPPD SuSE Meta PPPD IIW Monitor User Port IIW Monitor User Port Open Design Listen Port Open Design Listen Port Broadcom Port Broadcom Port Pinnacle Sys InfEx Port Pinnacle Sys InfEx Port ConServR Proxy ConServR Proxy ConServR SSL Proxy ConServR SSL Proxy FireMon Revision Control FireMon Revision Control Cordaxis Data Port Cordaxis Data Port Rockstorm MAG protocol Rockstorm MAG protocol Network Control Unit Network Control Unit Network Control Unit Network Control Unit Embrace Device Protocol 3197 TCP embrace-dp-s Server Embrace Device Protocol 3197 UDP embrace-dp-s Server Embrace Device Protocol 3198 TCP embrace-dp-c Client Embrace Device Protocol 3198 UDP embrace-dp-c Client 3199 TCP dmod-workspace DMOD WorkSpace 3199 UDP dmod-workspace DMOD WorkSpace 3200 TCP tick-port Press-sense Tick Port 3200 UDP tick-port Press-sense Tick Port 3201 TCP cpq-tasksmart CPQ-TaskSmart 3201 UDP cpq-tasksmart CPQ-TaskSmart 3202 TCP intraintra IntraIntra 3202 UDP intraintra IntraIntra 3203 TCP netwatcher-mon Network Watcher Monitor 3203 UDP netwatcher-mon Network Watcher Monitor
TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
serverview-rm serverview-rm serverview-icc serverview-icc armi-server armi-server t1-e1-over-ip t1-e1-over-ip ars-master ars-master phonex-port phonex-port radclientport radclientport h2gf-w-2m h2gf-w-2m mc-brk-srv mc-brk-srv bmcpatrolagent bmcpatrolagent bmcpatrolrnvu bmcpatrolrnvu cops-tls cops-tls apogeex-port apogeex-port smpppd smpppd iiw-port iiw-port odi-port odi-port brcm-comm-port brcm-comm-port pcle-infex pcle-infex csvr-proxy csvr-proxy csvr-sslproxy csvr-sslproxy firemonrcc firemonrcc cordataport cordataport magbind magbind ncu-1 ncu-1 ncu-2 ncu-2
MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom MyDoom
MyDoom
11/09/2012
Page 88 of 144
3204 3204 3205 3205 3206 3206 3207 3207 3208 3208
Network Watcher DB Access Network Watcher DB Access iSNS Server Port iSNS Server Port IronMail POP Proxy IronMail POP Proxy Veritas Authentication Port Veritas Authentication Port PFU PR Callback PFU PR Callback HP OpenView Network Path 3209 TCP netwkpathengine Engine Server HP OpenView Network Path 3209 UDP netwkpathengine Engine Server 3210 TCP flamenco-proxy Flamenco Networks Proxy 3210 UDP flamenco-proxy Flamenco Networks Proxy 3211 TCP avsecuremgmt Avocent Secure Management 3211 UDP avsecuremgmt Avocent Secure Management 3212 TCP surveyinst Survey Instrument 3212 UDP surveyinst Survey Instrument 3213 TCP neon24x7 NEON 24X7 Mission Control 3213 UDP neon24x7 NEON 24X7 Mission Control 3214 TCP jmq-daemon-1 JMQ Daemon Port 1 3214 UDP jmq-daemon-1 JMQ Daemon Port 1 3215 TCP jmq-daemon-2 JMQ Daemon Port 2 3215 UDP jmq-daemon-2 JMQ Daemon Port 2 3216 TCP ferrari-foam Ferrari electronic FOAM 3216 UDP ferrari-foam Ferrari electronic FOAM 3217 TCP unite Unified IP & Telecomm Env 3217 UDP unite Unified IP & Telecomm Env 3218 TCP smartpackets EMC SmartPackets 3218 UDP smartpackets EMC SmartPackets 3219 TCP wms-messenger WMS Messenger 3219 UDP wms-messenger WMS Messenger 3220 TCP xnm-ssl XML NM over SSL 3220 UDP xnm-ssl XML NM over SSL 3221 TCP xnm-clear-text XML NM over TCP 3221 UDP xnm-clear-text XML NM over TCP 3222 TCP glbp Gateway Load Balancing Pr 3222 UDP glbp Gateway Load Balancing Pr 3223 TCP digivote DIGIVOTE (R) Vote-Server 3223 UDP digivote DIGIVOTE (R) Vote-Server 3224 TCP aes-discovery AES Discovery Port 3224 UDP aes-discovery AES Discovery Port 3225 TCP fcip-port FCIP 3225 UDP fcip-port FCIP 3226 TCP isi-irp ISI Industry Software IRP 3226 UDP isi-irp ISI Industry Software IRP 3227 TCP dwnmshttp DiamondWave NMS Server 3227 UDP dwnmshttp DiamondWave NMS Server 3228 TCP dwmsgserver DiamondWave MSG Server 3228 UDP dwmsgserver DiamondWave MSG Server 3229 TCP global-cd-port Global CD Port 3229 UDP global-cd-port Global CD Port 3230 TCP sftdst-port Software Distributor Port 3230 UDP sftdst-port Software Distributor Port 3231 TCP dsnl Delta Solutions Direct 3231 UDP dsnl Delta Solutions Direct 3232 TCP mdtp MDT port 3232 UDP mdtp MDT port 3233 TCP whisker WhiskerControl main port 3233 UDP whisker WhiskerControl main port 3234 TCP alchemy Alchemy Server 3234 UDP alchemy Alchemy Server 3235 TCP mdap-port MDAP port 3235 UDP mdap-port MDAP Port 3236 TCP apparenet-ts appareNet Test Server
TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
netwatcher-db netwatcher-db isns isns ironmail ironmail vx-auth-port vx-auth-port pfu-prcallback pfu-prcallback
BlackStar, Ghost
11/09/2012
Page 89 of 144
3236 UDP apparenet-ts 3237 TCP apparenet-tps
3237 UDP apparenet-tps 3238 3238 3239 3239 3240 3240 3241 3241 3242 3242 3243 3243 3244 3244 3245 3245 3246 3246 3247 3247 3248 3248 3249 3249 3250 3250 3251 3251 3252 3252 3253 3253 3254 3254 3255 3255 3256 3256 3257 3257 3258 3258 3259 3259 3260 3260 3261 3261 3262 3262 3263 3263 3264 3264 3265 3265 3266 3266 3267 3267 3268 3268 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP apparenet-as apparenet-as apparenet-ui apparenet-ui triomotion triomotion sysorb sysorb sdp-id-port sdp-id-port timelot timelot onesaf onesaf vieo-fe vieo-fe dvt-system dvt-system dvt-data dvt-data procos-lm procos-lm ssp ssp hicp hicp sysscanner sysscanner dhe dhe pda-data pda-data pda-sys pda-sys semaphore semaphore cpqrpm-agent cpqrpm-agent cpqrpm-server cpqrpm-server ivecon-port ivecon-port epncdp2 epncdp2 iscsi-target iscsi-target winshadow winshadow necp necp ecolor-imager ecolor-imager ccmail ccmail altav-tunnel altav-tunnel ns-cfg-server ns-cfg-server ibm-dial-out ibm-dial-out msft-gc msft-gc
appareNet Test Server appareNet Test Packet Sequencer appareNet Test Packet Sequencer appareNet Analysis Server appareNet Analysis Server appareNet User Interface appareNet User Interface Trio Motion Control Port Trio Motion Control Port SysOrb Monitoring Server SysOrb Monitoring Server Session Description ID Session Description ID Timelot Port Timelot Port OneSAF OneSAF VIEO Fabric Executive VIEO Fabric Executive DVT SYSTEM PORT DVT SYSTEM PORT DVT DATA LINK DVT DATA LINK PROCOS LM PROCOS LM State Sync Protocol State Sync Protocol HMS hicp port HMS hicp port Sys Scanner Sys Scanner DHE port DHE port PDA Data PDA Data PDA System PDA System Semaphore Connection Port Semaphore Connection Port Compaq RPM Agent Port Compaq RPM Agent Port Compaq RPM Server Port Compaq RPM Server Port Ivecon Server Port Ivecon Server Port Epson Network Common Devi Epson Network Common Devi iSCSI port iSCSI port winShadow winShadow NECP NECP E-Color Enterprise Imager E-Color Enterprise Imager cc:mail/lotus cc:mail/lotus Altav Tunnel Altav Tunnel NS CFG Server NS CFG Server IBM Dial Out IBM Dial Out Microsoft Global Catalog Microsoft Global Catalog
11/09/2012
Page 90 of 144
3269 TCP
msft-gc-ssl
3269 UDP msft-gc-ssl 3270 3270 3271 3271 3272 3272 TCP UDP TCP UDP TCP UDP verismart verismart csoft-prev csoft-prev user-manager user-manager sxmp
3273 TCP
3273 UDP sxmp 3274 3274 3275 3275 3276 3276 3277 3277 3278 3278 3279 3279 3280 3280 3281 3281 3282 3282 3283 3283 3284 3284 3285 3285 3286 3286 3287 3287 3288 3288 3289 3289 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP ordinox-server ordinox-server samd samd maxim-asics maxim-asics awg-proxy awg-proxy lkcmserver lkcmserver admind admind vs-server vs-server sysopt sysopt datusorb datusorb net-assistant net-assistant 4talk 4talk plato plato e-net e-net directvdata directvdata cops cops enpc enpc caps-lm
3290 TCP
3290 UDP caps-lm 3291 3291 3292 3292 3293 3293 3294 3294 3295 3295 3296 3296 3297 3297 3298 3298 3299 3299 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP sah-lm sah-lm cart-o-rama cart-o-rama fg-fps fg-fps fg-gip fg-gip dyniplookup dyniplookup rib-slm rib-slm cytel-lm cytel-lm deskview deskview pdrncs pdrncs
Microsoft Global Catalog with LDAP/SSL Microsoft Global Catalog with LDAP/SSL Verismart Verismart CSoft Prev Port CSoft Prev Port Fujitsu User Manager Fujitsu User Manager Simple Extensible Multiplexed Protocol Simple Extensible Multiplexed Protocol Ordinox Server Ordinox Server SAMD SAMD Maxim ASICs Maxim ASICs AWG Proxy AWG Proxy LKCM Server LKCM Server admind admind VS Server VS Server SYSOPT SYSOPT Datusorb Datusorb Net Assistant Net Assistant 4Talk 4Talk Plato Plato E-Net E-Net DIRECTVDATA DIRECTVDATA COPS COPS ENPC ENPC CAPS LOGISTICS TOOLKIT LM CAPS LOGISTICS TOOLKIT LM S A Holditch & Associates - LM S A Holditch & Associates - LM Cart O Rama Cart O Rama fg-fps fg-fps fg-gip fg-gip Dynamic IP Lookup Dynamic IP Lookup Rib License Manager Rib License Manager Cytel License Manager Cytel License Manager DeskView DeskView pdrncs pdrncs
11/09/2012
Page 91 of 144
3302 3302 3303 3303 3304 3304 3305 3305 3306 3306 3307 3307 3308 3308 3309 3309 3310 3310 3311 3311
TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
mcs-fastmail mcs-fastmail opsession-clnt opsession-clnt opsession-srvr opsession-srvr odette-ftp odette-ftp mysql mysql opsession-prxy opsession-prxy tns-server tns-server tns-adv tns-adv dyna-access dyna-access mcns-tel-ret mcns-tel-ret appman-server
3312 TCP
3312 UDP appman-server 3313 3313 3314 3314 3315 3315 3316 3316 3317 3317 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP uorb uorb uohost uohost cdid cdid aicc-cmi aicc-cmi vsaiport vsaiport ssrip
3318 TCP
3318 UDP ssrip 3319 TCP 3319 UDP 3320 TCP 3320 UDP 3321 TCP 3321 UDP 3322-3325 3326 TCP 3326 UDP 3327 TCP 3327 UDP 3328 TCP 3328 UDP 3329 TCP 3329 UDP 3330 TCP 3330 UDP 3331 TCP 3331 UDP 3332 TCP 3332 UDP 3333 TCP 3333 UDP 3334 TCP 3334 UDP 3335 TCP 3335 UDP 3336 TCP 3336 UDP sdt-lmd sdt-lmd officelink2000 officelink2000 vnsstr vnsstr active-net sftu sftu bbars bbars egptlm egptlm hp-device-disc hp-device-disc mcs-calypsoicf mcs-calypsoicf mcs-messaging mcs-messaging mcs-mailsvr mcs-mailsvr dec-notes dec-notes directv-web directv-web directv-soft directv-soft directv-tick directv-tick
MCS Fastmail MCS Fastmail OP Session Client OP Session Client OP Session Server OP Session Server ODETTE-FTP ODETTE-FTP MySQL MySQL OP Session Proxy OP Session Proxy TNS Server TNS Server TNS ADV TNS ADV Dyna Access Dyna Access MCNS Tel Ret MCNS Tel Ret Application Management Server Application Management Server Unify Object Broker Unify Object Broker Unify Object Host Unify Object Host CDID CDID AICC/CMI AICC/CMI VSAI PORT VSAI PORT Swith to Swith Routing Information Protocol Swith to Swith Routing Information Protocol SDT License Manager SDT License Manager Office Link 2000 Office Link 2000 VNSSTR VNSSTR Active Networks SFTU SFTU BBARS BBARS Eaglepoint License Manager Eaglepoint License Manager HP Device Disc HP Device Disc MCS Calypso ICF MCS Calypso ICF MCS Messaging MCS Messaging MCS Mail Server MCS Mail Server DEC Notes DEC Notes Direct TV Webcasting Direct TV Webcasting Direct TV Software Updates Direct TV Software Updates Direct TV Tickers Direct TV Tickers
Daodan Daodan
11/09/2012
Page 92 of 144
3337 TCP 3337 UDP 3338 TCP 3338 UDP 3339 TCP 3339 UDP 3340 TCP 3340 UDP 3341 TCP 3341 UDP 3342 TCP 3342 UDP 3343 TCP 3343 UDP 3344 TCP 3344 UDP 3345 TCP 3345 UDP 3346 TCP 3346 UDP 3347 TCP 3347 UDP 3348 TCP 3348 UDP 3349 TCP 3349 UDP 3350 TCP 3350 UDP 3351 TCP 3351 UDP 3352 TCP 3352 UDP 3353 TCP 3353 UDP 3354 TCP 3354 UDP 3355 TCP 3355 UDP 3356 TCP 3356 UDP 3357 TCP 3357 UDP 3358 TCP 3358 UDP 3359 TCP 3359 UDP 3360 TCP 3360 UDP 3361 TCP 3361 UDP 3362 TCP 3362 UDP 3363 TCP 3363 UDP 3364 TCP 3364 UDP 3365 TCP 3365 UDP 3366 TCP 3366 UDP 3367-3371 3372 TCP 3372 UDP 3373 TCP 3373 UDP 3374 TCP 3374 UDP
directv-catlg directv-catlg anet-b anet-b anet-l anet-l anet-m anet-m anet-h anet-h webtie webtie ms-cluster-net ms-cluster-net bnt-manager bnt-manager influence influence trnsprntproxy trnsprntproxy phoenix-rpc phoenix-rpc pangolin-laser pangolin-laser chevinservices chevinservices findviatv findviatv btrieve btrieve ssql ssql fatpipe fatpipe suitjd suitjd ordinox-dbase ordinox-dbase upnotifyps upnotifyps adtech-test adtech-test mpsysrmsvr mpsysrmsvr wg-netforce wg-netforce kv-server kv-server kv-agent kv-agent dj-ilm dj-ilm nati-vi-server nati-vi-server creativeserver creativeserver contentserver contentserver creativepartnr creativepartnr satvid-datalnk tip2 tip2 lavenir-lm lavenir-lm cluster-disc cluster-disc
Direct TV Data Catalog Direct TV Data Catalog OMF data b OMF data b OMF data l OMF data l OMF data m OMF data m OMF data h OMF data h WebTIE WebTIE MS Cluster Net MS Cluster Net BNT Manager BNT Manager Influence Influence Trnsprnt Proxy Trnsprnt Proxy Phoenix RPC Phoenix RPC Pangolin Laser Pangolin Laser Chevin Services Chevin Services FINDVIATV FINDVIATV Btrieve port Btrieve port Scalable SQL Scalable SQL FATPIPE FATPIPE SUITJD SUITJD Ordinox Dbase Ordinox Dbase UPNOTIFYPS UPNOTIFYPS Adtech Test IP Adtech Test IP Mp Sys Rmsvr Mp Sys Rmsvr WG NetForce WG NetForce KV Server KV Server KV Agent KV Agent DJ ILM DJ ILM NATI Vi Server NATI Vi Server Creative Server Creative Server Content Server Content Server Creative Partner Creative Partner Satellite Video Data Link TIP 2 TIP 2 Lavenir License Manager Lavenir License Manager Cluster Disc Cluster Disc
11/09/2012
Page 93 of 144
3375 3375 3376 3376
TCP UDP TCP UDP
vsnm-agent vsnm-agent cdbroker cdbroker cogsys-lm
3377 TCP
3377 UDP cogsys-lm 3378 3378 3379 3379 3380 3380 3381 3381 TCP UDP TCP UDP TCP UDP TCP UDP wsicopy wsicopy socorfs socorfs sns-channels sns-channels geneous geneous fujitsu-neat
3382 TCP
3382 UDP fujitsu-neat 3383 TCP esp-lm
3383 UDP esp-lm 3384 3384 3385 3385 3386 3386 3387 3387 3388 3388 3389 3389 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP hp-clic hp-clic qnxnetman qnxnetman gprs-data gprs-sig backroomnet backroomnet cbserver cbserver ms-wbt-server ms-wbt-server dsc
3390 TCP
3390 UDP dsc 3391 3391 3392 3392 3393 3393 3394 3394 3395 3395 3396 3396 3397 3397 3398 3398 3399 3399 3400 3400 3401 3401 3402 3402 3403 3403 3405 3405 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP savant savant efi-lm efi-lm d2k-tapestry1 d2k-tapestry1 d2k-tapestry2 d2k-tapestry2 dyna-lm dyna-lm printer_agent printer_agent cloanto-lm cloanto-lm mercantile mercantile csms csms csms2 csms2 filecast filecast fxaengine-net fxaengine-net copysnap copysnap nokia-ann-ch1 nokia-ann-ch1
VSNM Agent VSNM Agent CD Broker CD Broker Cogsys Network License Manager Cogsys Network License Manager WSICOPY WSICOPY SOCORFS SOCORFS SNS Channels SNS Channels Geneous Geneous Fujitsu Network Enhanced Antitheft function Fujitsu Network Enhanced Antitheft function Enterprise Software Products License Manager Enterprise Software Products License Manager Cluster Management Services Hardware Management qnxnetman qnxnetman GPRS Data GPRS SIG Back Room Net Back Room Net CB Server CB Server MS WBT Server MS WBT Server Distributed Service Coordinator Distributed Service Coordinator SAVANT SAVANT EFI License Management EFI License Management D2K Tapestry Client to Server D2K Tapestry Client to Server D2K Tapestry Server to Server D2K Tapestry Server to Server Dyna License Manager (Elam) Dyna License Manager (Elam) Printer Agent Printer Agent Cloanto License Manager Cloanto License Manager Mercantile Mercantile CSMS CSMS CSMS2 CSMS2 filecast filecast FXa Engine Network Port FXa Engine Network Port CopySnap Server Port CopySnap Server Port Nokia Announcement ch 1 Nokia Announcement ch 1
11/09/2012
Page 94 of 144
3406 3406 3407 3407 3408 3408 3409 3409 3410 3410 3411 3411 3412 3412 3413 3413 3414 3414 3415 3415 3416 3416 3417 3417 3418 3418 3419 3419 3420 3420 3421 3421 3422 3422 3423 3423 3424 3424 3425 3425 3426 3426 3427 3427 3428 3428 3429 3429 3430 3430 3431 3431 3432 3432
TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
nokia-ann-ch2 nokia-ann-ch2 ldap-admin ldap-admin issapi issapi networklens networklens networklenss networklenss biolink-auth biolink-auth xmlblaster xmlblaster svnet svnet wip-port wip-port bcinameservice bcinameservice commandport commandport csvr csvr rnmap rnmap softaudit softaudit ifcp-port ifcp-port bmap bmap rusb-sys-port rusb-sys-port xtrm xtrm xtrms xtrms agps-port agps-port arkivio arkivio websphere-snmp websphere-snmp twcss twcss gcsp gcsp ssdispatch ssdispatch ndl-als ndl-als osdcp osdcp alta-smp
3433 TCP
3433 UDP alta-smp 3434 3434 3435 3435 TCP UDP TCP UDP opencm opencm pacom pacom gc-config
3436 TCP
3436 UDP gc-config 3437 TCP autocueds
Nokia Announcement ch 2 Nokia Announcement ch 2 LDAP admin server port LDAP admin server port POWERpack API Port POWERpack API Port NetworkLens Event Port NetworkLens Event Port NetworkLens SSL Event OptixPro NetworkLens SSL Event BioLink Authenteon server BioLink Authenteon server xmlBlaster xmlBlaster SpecView Networking SpecView Networking BroadCloud WIP Port BroadCloud WIP Port BCI Name Service BCI Name Service AirMobile IS Command Port AirMobile IS Command Port ConServR file translation ConServR file translation Remote nmap Remote nmap Isogon SoftAudit ISogon SoftAudit iFCP User Port iFCP User Port Bull Apprise portmapper Bull Apprise portmapper Remote USB System Port Remote USB System Port xTrade Reliable Messaging xTrade Reliable Messaging xTrade over TLS/SSL xTrade over TLS/SSL AGPS Access Port AGPS Access Port Arkivio Storage Protocol Arkivio Storage Protocol WebSphere SNMP WebSphere SNMP 2Wire CSS 2Wire CSS GCSP user port GCSP user port Scott Studios Dispatch Scott Studios Dispatch Active License Server Port Active License Server Port Secure Device Protocol Secure Device Protocol Altaworks Service Management Platform Altaworks Service Management Platform OpenCM Server OpenCM Server Pacom Security User Port Pacom Security User Port GuardControl Exchange Protocol GuardControl Exchange Protocol Autocue Directory Service
11/09/2012
Page 95 of 144
3437 3438 3438 3439 3439 3440 3440 3441 3441 3442 3442
autocueds spiral-admin spiral-admin hri-port hri-port ans-console ans-console connect-client connect-client connect-server connect-server ov-nnm-websrv
3443 TCP
3443 UDP ov-nnm-websrv 3444 3444 3445 3445 3446 3446 3447 3447 3448 3448 3449 3449 3450 3450 3451 3451 3452 3452 3453 3453 3454 3455 3455 3456 3456 3457 3457 3458 3458 3459 3459 3460 3460 3461 3461 3462 3462 3463 3463 3464 3464 3465 3465 3466 3466 3467 3467 3468 3468 3469 3469 3470 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP denali-server denali-server monp monp 3comfaxrpc 3comfaxrpc cddn cddn dnc-port dnc-port hotu-chat hotu-chat castorproxy castorproxy asam asam sabp-signal sabp-signal pscupd pscupd mira prsvp prsvp vat vat vat-control vat-control d3winosfi d3winosfi integral integral edm-manager edm-manager edm-stager edm-stager edm-std-notify edm-std-notify edm-adm-notify edm-adm-notify edm-mgr-sync edm-mgr-sync edm-mgr-cntrl edm-mgr-cntrl workflow workflow rcst rcst ttcmremotectrl ttcmremotectrl pluribus pluribus jt400
Autocue Directory Service Spiralcraft Admin Spiralcraft Admin HRI Interface Port HRI Interface Port Net Steward Mgmt Console Net Steward Mgmt Console OC Connect Client OC Connect Client OC Connect Server OC Connect Server OpenView Network Node Manager WEB Server OpenView Network Node Manager WEB Server Denali Server Denali Server Media Object Network Media Object Network 3Com FAX RPC port 3Com FAX RPC port CompuDuo DirectNet CompuDuo DirectNet Discovery and Net Config Discovery and Net Config HotU Chat HotU Chat CAStorProxy CAStorProxy ASAM Services ASAM Services SABP-Signalling Protocol SABP-Signalling Protocol PSC Update Port PSC Update Port Apple Remote Access Protocol RSVP Port RSVP Port VAT default data Terror trojan, Force, TerrorTrojan VAT default data VAT default control VAT default control D3WinOSFI D3WinOSFI TIP Integral Eclipse 2000, Sanctuary TIP Integral EDM Manger EDM Manger EDM Stager EDM Stager EDM STD Notify EDM STD Notify EDM ADM Notify EDM ADM Notify EDM MGR Sync EDM MGR Sync EDM MGR Cntrl EDM MGR Cntrl WORKFLOW WORKFLOW RCST RCST TTCM Remote Controll TTCM Remote Controll Pluribus Pluribus jt400
11/09/2012
Page 96 of 144
3470 3471 3471 3472 3472 3473 3473 3474 3474 3475 3475 3476 3476 3477 3477
jt400 jt400-ssl jt400-ssl jaugsremotec-1 jaugsremotec-1 jaugsremotec-2 jaugsremotec-2 ttntspauto ttntspauto genisar-port genisar-port nppmp nppmp ecomm ecomm nat-stun-port
3478 TCP
3478 UDP nat-stun-port 3479 3479 3480 3480 3481 3481 3482 3482 3483 3483 3484 3484 3485 3485 3486 3486 3487 3487 3488 3488 3489 3489 3490 3490 3491 3491 3492 3492 3493 3493 3494 3494 3495 3495 3496 3496 3497 3497 3498 3498 3499 3499 3500 3500 3501 3501 3502 3502 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP twrpc twrpc plethora plethora cleanerliverc cleanerliverc vulture vulture slim-devices slim-devices gbs-stp gbs-stp celatalk celatalk ifsf-hb-port ifsf-hb-port ltctcp ltcudp fs-rh-srv fs-rh-srv dtp-dia dtp-dia colubris colubris swr-port swr-port tvdumtray-port tvdumtray-port nut nut ibm3494 ibm3494 seclayer-tcp seclayer-tcp seclayer-tls seclayer-tls ipether232port ipether232port dashpas-port dashpas-port sccip-media sccip-media rtmp-port rtmp-port isoft-p2p isoft-p2p avinstalldisc avinstalldisc
jt400 jt400-ssl jt400-ssl JAUGS N-G Remotec 1 JAUGS N-G Remotec 1 JAUGS N-G Remotec 2 JAUGS N-G Remotec 2 TSP Automation TSP Automation Genisar Comm Port Genisar Comm Port NVIDIA Mgmt Protocol NVIDIA Mgmt Protocol eComm link port eComm link port Simple Traversal of UDP Through NAT (STUN) port Simple Traversal of UDP Through NAT (STUN) port 2Wire RPC 2Wire RPC Secure Virtual Workspace Secure Virtual Workspace CleanerLive remote ctrl CleanerLive remote ctrl Vulture Monitoring System Vulture Monitoring System Slim Devices Protocol Slim Devices Protocol GBS SnapTalk Protocol GBS SnapTalk Protocol CelaTalk CelaTalk IFSF Heartbeat Port IFSF Heartbeat Port LISA TCP Transfer Channel LISA UDP Transfer Channel FS Remote Host Server FS Remote Host Server DTP/DIA DTP/DIA Colubris Management Port Colubris Management Port SWR Port SWR Port TVDUM Tray Port TVDUM Tray Port Network UPS Tools Network UPS Tools IBM 3494 IBM 3494 securitylayer over tcp securitylayer over tcp securitylayer over tls securitylayer over tls ipEther232Port ipEther232Port DASHPAS user port DASHPAS user port SccIP Media SccIP Media RTMP Port RTMP Port iSoft-P2P iSoft-P2P Avocent Install Discovery Avocent Install Discovery
11/09/2012
Page 97 of 144
3503 3503 3504 3504 3505 3505 3506 3506 3507 3507 3508 3508 3509 3509 3510 3510 3511 3511 3512 3512 3513 3513 3514 3514 3515 3515 3516 3516 3517 3517 3518 3518 3519 3519 3520 3520 3521 3521 3522 3522 3523 3523 3524 3524 3525 3525 3526 3526 3527 3527 3528 3528 3529 3529 3530 3530 3531 3531
TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
lsp-ping lsp-ping ironstorm ironstorm ccmcomm ccmcomm apc-3506 apc-3506 nesh-broker nesh-broker interactionweb interactionweb vt-ssl vt-ssl xss-port xss-port webmail-2 webmail-2 aztec aztec arcpd arcpd must-p2p must-p2p must-backplane must-backplane smartcard-port smartcard-port 802-11-iapp 802-11-iapp artifact-msg artifact-msg nvmsgd galileo galileolog galileolog mc3ss mc3ss nssocketport nssocketport odeumservlink odeumservlink ecmport ecmport eisport eisport starquiz-port starquiz-port beserver-msg-q beserver-msg-q jboss-iiop jboss-iiop jboss-iiop-ssl jboss-iiop-ssl gf gf joltid joltid raven-rmp
3532 TCP
3532 UDP raven-rmp 3533 TCP raven-rdp
3533 UDP raven-rdp 3534 TCP urld-port 3534 UDP urld-port
MPLS LSP-echo Port MPLS LSP-echo Port IronStorm game server IronStorm game server CCM communications port CCM communications port APC 3506 APC 3506 Nesh Broker Port Nesh Broker Port Interaction Web Interaction Web Virtual Token SSL Port Virtual Token SSL Port XSS Port XSS Port WebMail/2 WebMail/2 Aztec Distribution Port Aztec Distribution Port Adaptec Remote Protocol Adaptec Remote Protocol MUST Peer to Peer MUST Peer to Peer MUST Backplane MUST Backplane Smartcard Port Smartcard Port IEEE 802.11 WLANs WG IAPP IEEE 802.11 WLANs WG IAPP Artifact Message Server Artifact Message Server Netvion Messenger Port Netvion Galileo Port Netvion Galileo Log Port Netvion Galileo Log Port Telequip Labs MC3SS Telequip Labs MC3SS DO over NSSocketPort DO over NSSocketPort Odeum Serverlink Odeum Serverlink ECM Server port ECM Server port EIS Server port EIS Server port starQuiz Port starQuiz Port VERITAS Backup Exec Server VERITAS Backup Exec Server JBoss IIOP JBoss IIOP JBoss IIOP/SSL JBoss IIOP/SSL Grid Friendly Grid Friendly Joltid Joltid Raven Remote Management Control Raven Remote Management Control Raven Remote Management Data Raven Remote Management Data URL Daemon Port URL Daemon Port
AutoSpy
11/09/2012
Page 98 of 144
3535 3535 3536 3536 3537 3537 3538 3538 3539 3539 3540 3540 3541 3541 3542 3542 3543 3543 3544 3544 3545 3545 3547 3547 3548 3548 3549 3549 3550 3550 3551 3551 3552 3552 3553 3553 3554 3554 3555 3555 3556 3556 3557 3557 3558 3558 3559 3559 3560 3560 3561 3561 3562 3562 3563 3563 3564 3564 3565 3565 3566 3566 3567 3567 3568 3568 3569
TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP SCTP TCP UDP TCP UDP TCP UDP TCP
ms-la ms-la snac snac ni-visa-remote ni-visa-remote ibm-diradm ibm-diradm ibm-diradm-ssl ibm-diradm-ssl pnrp-port pnrp-port voispeed-port voispeed-port hacl-monitor hacl-monitor qftest-lookup qftest-lookup teredo teredo camac camac symantec-sim symantec-sim interworld interworld tellumat-nms tellumat-nms ssmpp ssmpp apcupsd apcupsd taserver taserver rbr-discovery rbr-discovery questnotify questnotify razor razor sky-transport sky-transport personalos-001 personalos-001 mcp-port mcp-port cctv-port cctv-port iniserve-port iniserve-port bmc-onekey bmc-onekey sdbproxy sdbproxy watcomdebug watcomdebug esimport esimport m2pa m2pa quest-launcher quest-launcher emware-oft emware-oft emware-epss emware-epss mbg-ctrl
MS-LA MS-LA SNAC SNAC Remote NI-VISA port Remote NI-VISA port IBM Directory Server IBM Directory Server IBM Directory Server SSL IBM Directory Server SSL PNRP User Port PNRP User Port VoiSpeed Port VoiSpeed Port HA cluster monitor HA cluster monitor qftest Lookup Port qftest Lookup Port Teredo Port Teredo Port CAMAC equipment CAMAC equipment Symantec SIM Symantec SIM Interworld Interworld Tellumat MDR NMS Tellumat MDR NMS Secure SMPP Secure SMPP Apcupsd Information Port Apcupsd Information Port TeamAgenda Server Port TeamAgenda Server Port Red Box Recorder ADP Red Box Recorder ADP Quest Notification Server Quest Notification Server Vipul's Razor Vipul's Razor Sky Transport Protocol Sky Transport Protocol PersonalOS Comm Port PersonalOS Comm Port MCP user port MCP user port CCTV control port CCTV control port INIServe port INIServe port BMC-OneKey BMC-OneKey SDBProxy SDBProxy Watcom Debug Watcom Debug Electromed SIM port Electromed SIM port M2PA M2PA Quest Agent Manager Quest Agent Manager emWare OFT Services emWare OFT Services emWare EMIT/Secure emWare EMIT/Secure Meinberg Control Service
11/09/2012
Page 99 of 144
3569 3570 3570 3571 3571 3572 3572 3573 3573 3574 3574 3575 3575 3576 3576 3577 3577 3578 3578 3579 3579 3580 3580 3581 3581 3582 3582 3583 3583 3584 3584 3585 3585 3586 3586 3587 3587 3588 3588 3589 3589 3590 3590 3591 3591 3592 3592 3593 3593 3594 3594 3595 3595 3596 3596 3597 3597 3598 3598 3599 3599 3600 3600 3601 3601 3602 3602
mbg-ctrl mccwebsvr-port mccwebsvr-port megardsvr-port megardsvr-port megaregsvrport megaregsvrport tag-ups-1 tag-ups-1 dmaf-server dmaf-caster ccm-port ccm-port cmc-port cmc-port config-port config-port data-port data-port ttat3lb ttat3lb nati-svrloc nati-svrloc kfxaclicensing kfxaclicensing press press canex-watch canex-watch u-dbap u-dbap emprise-lls emprise-lls emprise-lsc emprise-lsc p2pgroup p2pgroup sentinel sentinel isomair isomair wv-csp-sms wv-csp-sms gtrack-server gtrack-server gtrack-ne gtrack-ne bpmd bpmd mediaspace mediaspace shareapp shareapp iw-mmogame iw-mmogame a14 a14 a15 a15 quasar-server quasar-server trap-daemon trap-daemon visinet-gui visinet-gui infiniswitchcl infiniswitchcl
Meinberg Control Service MCC Web Server Port MCC Web Server Port MegaRAID Server Port MegaRAID Server Port Registration Server Port Registration Server Port Advantage Group UPS Suite Advantage Group UPS Suite DMAF Server DMAF Caster Coalsere CCM Port Coalsere CCM Port Coalsere CMC Port Coalsere CMC Port Configuration Port Configuration Port Data Port Data Port Tarantella Load Balancing Tarantella Load Balancing NATI-ServiceLocator NATI-ServiceLocator Ascent Capture Licensing Ascent Capture Licensing PEG PRESS Server PEG PRESS Server CANEX Watch System CANEX Watch System U-DBase Access Protocol U-DBase Access Protocol Emprise License Server Emprise License Server License Server Console License Server Console Peer to Peer Grouping Peer to Peer Grouping Sentinel Server Sentinel Server isomair isomair WV CSP SMS Binding WV CSP SMS Binding LOCANIS G-TRACK Server LOCANIS G-TRACK Server LOCANIS G-TRACK NE Port LOCANIS G-TRACK NE Port BP Model Debugger BP Model Debugger MediaSpace MediaSpace ShareApp ShareApp Illusion Wireless MMOG Illusion Wireless MMOG A14 (AN-to-SC/MM) A14 (AN-to-SC/MM) A15 (AN-to-AN) A15 (AN-to-AN) Quasar Accounting Server Quasar Accounting Server text relay-answer text relay-answer Visinet Gui Visinet Gui InfiniSwitch Mgr Client InfiniSwitch Mgr Client
Snid ****Head trojan
11/09/2012
Page 100 of 144
3603 3603 3604 3604 3605 3605 3606 3606 3607 3607 3608 3608 3609 3609 3610 3610 3611 3611 3612 3612 3613 3613 3614 3614 3615 3615 3616 3616 3617 3617 3618 3618 3619 3619 3620 3620 3621 3621 3622 3622 3623 3623 3624 3624 3625 3625 3626 3626 3627 3627 3628 3628 3629 3629 3630 3630 3631 3631 3632 3632 3633 3633 3634 3634 3635 3635 3636
int-rcv-cntrl int-rcv-cntrl bmc-jmx-port bmc-jmx-port comcam-io comcam-io splitlock splitlock precise-i3 precise-i3 trendchip-dcp trendchip-dcp cpdi-pidas-cm cpdi-pidas-cm echonet echonet six-degrees six-degrees hp-dataprotect hp-dataprotect alaris-disc alaris-disc sigma-port sigma-port start-network start-network cd3o-protocol cd3o-protocol sharp-server sharp-server aairnet-1 aairnet-1 aairnet-2 aairnet-2 ep-pcp ep-pcp ep-nsp ep-nsp ff-lr-port ff-lr-port haipe-discover haipe-discover dist-upgrade dist-upgrade volley volley bvcdaemon-port bvcdaemon-port jamserverport jamserverport ept-machine ept-machine escvpnet escvpnet cs-remote-db cs-remote-db cs-services cs-services distcc distcc wacp wacp hlibmgr hlibmgr sdo sdo opscenter
Integrated Rcvr Control Integrated Rcvr Control BMC JMX Port BMC JMX Port ComCam IO Port ComCam IO Port Splitlock Server Splitlock Server Precise I3 Precise I3 Trendchip control protocol Trendchip control protocol CPDI PIDAS Connection Mon CPDI PIDAS Connection Mon ECHONET ECHONET Six Degrees Port Six Degrees Port HP Data Protector HP Data Protector Alaris Device Discovery Alaris Device Discovery Invensys Sigma Port Invensys Sigma Port Start Messaging Network Start Messaging Network cd3o Control Protocol cd3o Control Protocol ATI SHARP Logic Engine ATI SHARP Logic Engine AAIR-Network 1 AAIR-Network 1 AAIR-Network 2 AAIR-Network 2 EPSON Projector Control Port EPSON Projector Control Port EPSON Network Screen Port EPSON Network Screen Port FF LAN Redundancy Port FF LAN Redundancy Port HAIPIS Dynamic Discovery HAIPIS Dynamic Discovery Distributed Upgrade Port Distributed Upgrade Port Volley Volley bvControl Daemon bvControl Daemon Jam Server Port Jam Server Port EPT Machine Interface EPT Machine Interface ESC/VP.net ESC/VP.net C&S Remote Database Port C&S Remote Database Port C&S Web Services Port C&S Web Services Port distributed compiler distributed compiler Wyrnix AIS port Wyrnix AIS port hNTSP Library Manager hNTSP Library Manager Simple Distributed Objects Simple Distributed Objects OpsCenter
11/09/2012
Page 101 of 144
3636 3637 3637 3638 3638 3639 3639 3640 3640 3641 3641 3642 3642 3643 3643 3644 3644 3645 3645 3646 3646 3647 3647 3648 3648 3649 3649 3650 3650 3651 3651 3652 3652 3653 3653 3654 3654 3655 3655 3656 3656 3657 3657 3658 3658 3659 3659
UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
opscenter scservp scservp ehp-backup ehp-backup xap-ha xap-ha netplay-port1 netplay-port1 netplay-port2 netplay-port2 juxml-port juxml-port audiojuggler audiojuggler ssowatch ssowatch cyc cyc xss-srv-port xss-srv-port splitlock-gw splitlock-gw fjcp fjcp nmmp nmmp prismiq-plugin prismiq-plugin xrpc-registry xrpc-registry vxcrnbuport vxcrnbuport tsp tsp vaprtm vaprtm abatemgr abatemgr abatjss abatjss immedianet-bcn immedianet-bcn ps-ams ps-ams apple-sasl apple-sasl can-nds-ssl
3660 TCP
3660 UDP can-nds-ssl 3661 TCP can-ferret-ssl
3661 UDP can-ferret-ssl 3662 3662 3663 3663 3664 3664 3665 3665 3666 3666 3667 3667 3668 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP pserver pserver dtp dtp ups-engine ups-engine ent-engine ent-engine eserver-pap eserver-pap infoexch infoexch dell-rm-port
OpsCenter Customer Service Port Customer Service Port EHP Backup Protocol EHP Backup Protocol Extensible Automation Extensible Automation Netplay Port 1 Netplay Port 1 Netplay Port 2 Netplay Port 2 Juxml Replication port Juxml Replication port AudioJuggler AudioJuggler ssowatch ssowatch Cyc Cyc XSS Server Port XSS Server Port Splitlock Gateway Splitlock Gateway Fujitsu Cooperation Port Fujitsu Cooperation Port Nishioka Miyuki Msg Protocol Nishioka Miyuki Msg Protocol PRISMIQ VOD plug-in PRISMIQ VOD plug-in XRPC Registry XRPC Registry VxCR NBU Default Port VxCR NBU Default Port Tunnel Setup Protocol Tunnel Setup Protocol VAP RealTime Messenger VAP RealTime Messenger ActiveBatch Exec Agent ActiveBatch Exec Agent ActiveBatch Job Scheduler ActiveBatch Job Scheduler ImmediaNet Beacon ImmediaNet Beacon PlayStation AMS (Secure) PlayStation AMS (Secure) Apple SASL Apple SASL Candle Directory Services using SSL Candle Directory Services using SSL Candle Directory Services using SSL Candle Directory Services using SSL pserver pserver DIRECWAY Tunnel Protocol DIRECWAY Tunnel Protocol UPS Engine Port UPS Engine Port Enterprise Engine Port Enterprise Engine Port IBM eServer PAP IBM EServer PAP IBM Information Exchange IBM Information Exchange Dell Remote Management
11/09/2012
Page 102 of 144
3668 3669 3669 3670 3670 3671 3671 3672 3672 3673 3673 3674 3674 3675 3675 3676 3676 3677 3677 3678 3678 3679 3679 3680 3680 3681 3681 3682 3682 3683 3683 3684 3684 3685 3685 3686 3686 3687 3687 3688 3688 3689 3689 3690 3690 3691 3691 3692 3692 3693 3693
UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
dell-rm-port casanswmgmt casanswmgmt smile smile efcp efcp lispworks-orb lispworks-orb mediavault-gui mediavault-gui wininstall-ipc wininstall-ipc calltrax calltrax va-pacbase va-pacbase roverlog roverlog ipr-dglt ipr-dglt newton-dock newton-dock npds-tracker npds-tracker bts-x73 bts-x73 cas-mapi cas-mapi bmc-ea bmc-ea faxstfx-port faxstfx-port dsx-agent dsx-agent tnmpv2 tnmpv2 simple-push simple-push simple-push-s simple-push-s daap daap svn svn magaya-network magaya-network intelsync intelsync gttp gttp vpntpp
3694 TCP
3694 UDP vpntpp 3695 3695 3696 3696 3697 3697 3698 3698 3699 3699 3700 3700 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP bmc-data-coll bmc-data-coll telnetcpcd telnetcpcd nw-license nw-license sagectlpanel sagectlpanel kpn-icw kpn-icw lrs-paging lrs-paging
Dell Remote Management CA SAN Switch Management CA SAN Switch Management SMILE TCP/UDP Interface SMILE TCP/UDP Interface e Field Control (EIBnet) e Field Control (EIBnet) LispWorks ORB LispWorks ORB Openview Media Vault GUI Openview Media Vault GUI WinINSTALL IPC Port WinINSTALL IPC Port CallTrax Data Port CallTrax Data Port VisualAge Pacbase server VisualAge Pacbase server RoverLog IPC RoverLog IPC DataGuardianLT DataGuardianLT Newton Dock Newton Dock NPDS Tracker NPDS Tracker BTS X73 Port BTS X73 Port EMC SmartPackets-MAPI EMC SmartPackets-MAPI BMC EDV/EA BMC EDV/EA FAXstfX FAXstfX DS Expert Agent DS Expert Agent Trivial Network Management Trivial Network Management simple-push simple-push simple-push Secure simple-push Secure Digital Audio Access Protocol Digital Audio Access Protocol Subversion Subversion Magaya Network Port Magaya Network Port Brimstone IntelSync Brimstone IntelSync GTTP GTTP VPN Token Propagation Protocol VPN Token Propagation Protocol BMC Data Collection BMC Data Collection Telnet Com Port Control Telnet Com Port Control NavisWorks License System NavisWorks Licnese System SAGECTLPANEL SAGECTLPANEL Internet Call Waiting Internet Call Waiting LRS NetPage LRS NetPage
Portal of Doom - POD, PortalOfDoom
11/09/2012
Page 103 of 144
3701 3701 3702 3702 3703 3703 3704 3704 3705 3705 3706 3706 3707 3707 3709 3709 3710 3710 3711 3711 3712 3712 3713 3713 3714 3714 3715 3715 3716 3716 3717 3717 3718 3718 3719 3719 3720 3720 3721 3721 3722 3722 3723 3723 3724 3724 3725 3725 3726 3726 3727 3727 3728 3728 3729 3729 3730 3730 3731 3731 3732 3732 3733 3733 3734 3734 3735
netcelera netcelera upnp-discovery upnp-discovery adobeserver-3 adobeserver-3 adobeserver-4 adobeserver-4 adobeserver-5 adobeserver-5 rt-event rt-event rt-event-s rt-event-s ca-idms ca-idms portgate-auth portgate-auth edb-server2 edb-server2 sentinel-ent sentinel-ent tftps tftps delos-dms delos-dms anoto-rendezv anoto-rendezv wv-csp-sms-cir wv-csp-sms-cir wv-csp-udp-cir wv-csp-udp-cir opus-services opus-services itelserverport itelserverport ufastro-instr ufastro-instr xsync xsync xserveraid xserveraid sychrond sychrond battlenet battlenet na-er-tip na-er-tip array-manager array-manager e-mdu e-mdu e-woa e-woa fksp-audit fksp-audit client-ctrl client-ctrl smap smap m-wnn m-wnn multip-msg multip-msg synel-data synel-data pwdis
NetCelera NetCelera UPNP v2 Discovery UPNP v2 Discovery Adobe Server 3 Adobe Server 3 Adobe Server 4 Adobe Server 4 Adobe Server 5 Adobe Server 5 Real-Time Event Port Real-Time Event Port Real-Time Event Secure Port Real-Time Event Secure Port CA-IDMS Server CA-IDMS Server PortGate Authentication PortGate Authentication EBD Server 2 EBD Server 2 Sentinel Enterprise Sentinel Enterprise TFTP over TLS TFTP over TLS DELOS Direct Messaging DELOS Direct Messaging Anoto Rendezvous Port Anoto Rendezvous Port WV CSP SMS CIR Channel WV CSP SMS CIR Channel WV CSP UDP/IP CIR Channel WV CSP UDP/IP CIR Channel OPUS Server Port OPUS Server Port iTel Server Port iTel Server Port UF Astro. Instr. Services UF Astro. Instr. Services Xsync Xsync Xserve RAID Xserve RAID Sychron Service Daemon Sychron Service Daemon Blizzard Battlenet Blizzard Battlenet Netia NA-ER Port Netia NA-ER Port Xyratex Array Manager Xyartex Array Manager Ericsson Mobile Data Unit Ericsson Mobile Data Unit Ericsson Web on Air Ericsson Web on Air Fireking Audit Port Fireking Audit Port Client Control Client Control Service Manager Service Manager Mobile Wnn Mobile Wnn Multipuesto Msg Port Multipuesto Msg Port Synel Data Collection Port Synel Data Collection Port Password Distribution
Mantis
11/09/2012
Page 104 of 144
3735 3736 3736 3738 3738 3739 3739 3740 3740 3741 3741
pwdis rs-rmi rs-rmi versatalk versatalk launchbird-lm launchbird-lm heartbeat heartbeat wysdma wysdma cst-port
3742 TCP
3742 UDP cst-port 3743 3743 3744 3744 3745 3745 3746 3746 3747 3747 3748 3748 3749 3749 3750 3750 3751 3751 3752 3752 3753 3753 3754 3754 3755 3755 3756 3756 3757 3757 3758 3758 3759 3759 3760 3760 3761 3761 3762 3762 3763 3763 3764 3764 3765 3765 3767 3767 3768 3768 3769 3769 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP ipcs-command ipcs-command sasg sasg gw-call-port gw-call-port linktest linktest linktest-s linktest-s webdata webdata cimtrak cimtrak cbos-ip-port cbos-ip-port gprs-cube gprs-cube vipremoteagent vipremoteagent nattyserver nattyserver timestenbroker timestenbroker sas-remote-hlp sas-remote-hlp canon-capt canon-capt grf-port grf-port apw-registry apw-registry exapt-lmgr exapt-lmgr adtempusclient adtempusclient gsakmp gsakmp gbs-smp gbs-smp xo-wave xo-wave mni-prot-rout mni-prot-rout rtraceroute rtraceroute listmgr-port listmgr-port rblcheckd rblcheckd haipe-otnk haipe-otnk
Password Distribution RealSpace RMI RealSpace RMI versaTalk Server Port versaTalk Server Port Launchbird LicenseManager Launchbird LicenseManager Heartbeat Protocol Heartbeat Protocol WysDM Agent WysDM Agent CST - Configuration & Service Tracker CST - Configuration & Service Tracker IP Control Systems Ltd. IP Control Systems Ltd. SASG SASG GWRTC Call Port GWRTC Call Port LXPRO.COM LinkTest LXPRO.COM LinkTest LXPRO.COM LinkTest SSL LXPRO.COM LinkTest SSL webData webData CimTrak CimTrak CBOS/IP ncapsalation port CBOS/IP ncapsalatoin port CommLinx GPRS Cube CommLinx GPRS Cube Vigil-IP RemoteAgent Vigil-IP RemoteAgent NattyServer Port NattyServer Port TimesTen Broker Port TimesTen Broker Port SAS Remote Help Server SAS Remote Help Server Canon CAPT Port Canon CAPT Port GRF Server Port GRF Server Port apw RMI registry apw RMI registry Exapt License Manager Exapt License Manager adTempus Client adTEmpus Client gsakmp port gsakmp port GBS SnapMail Protocol GBS SnapMail Protocol XO Wave Control Port XO Wave Control Port MNI Protected Routing MNI Protected Routing Remote Traceroute Remote Traceroute ListMGR Port ListMGR Port rblcheckd server daemon rblcheckd server daemon HAIPE Network Keying HAIPE Network Keying
11/09/2012
Page 105 of 144
3770 3770 3771 3771 3772 3772 3773 3773 3774 3774 3775 3775 3776 3776 3777 3777 3778 3778 3779 3779 3780 3780 3781 3781 3782 3782 3783 3783 3784 3784 3785 3785 3786 3786 3787 3787 3788 3788 3789 3789 3790 3790 3791 3791 3792 3792 3793 3793 3794 3794 3795 3795 3796 3796 3797 3797 3798 3798 3799 3799 3800 3800 3801 3801 3802 3802 3803
cindycollab cindycollab paging-port paging-port ctp ctp ctdhercules ctdhercules zicom zicom ispmmgr ispmmgr dvcprov-port dvcprov-port jibe-eb jibe-eb c-h-it-port c-h-it-port cognima cognima nnp nnp abcvoice-port abcvoice-port iso-tp0s iso-tp0s bim-pem bim-pem bfd bfd bfd-control bfd-control upstriggervsw upstriggervsw fintrx fintrx isrp-port isrp-port remotedeploy remotedeploy quickbooksrds quickbooksrds tvnetworkvideo tvnetworkvideo sitewatch sitewatch dcsoftware dcsoftware jaus jaus myblast myblast spw-dialer spw-dialer idps idps minilock minilock radius-dynauth radius-dynauth pwgpsi pwgpsi
Cinderella Collaboration Cinderella Collaboration RTP Paging Port RTP Paging Port Chantry Tunnel Protocol Chantry Tunnel Protocol ctdhercules ctdhercules ZICOM ZICOM ISPM Manager Port ISPM Manager Port Device Provisioning Port Device Provisioning Port Jibe EdgeBurst Jibe EdgeBurst Cutler-Hammer IT Port Cutler-Hammer IT Port Cognima Replication Cognima Replication Nuzzler Network Protocol Nuzzler Network Protocol ABCvoice server port ABCvoice server port Secure ISO TP0 port Secure ISO TP0 port Impact Mgr./PEM Gateway Impact Mgr./PEM Gateway BFD BFD BFD-Control BFD-Control VSW Upstrigger port VSW Upstrigger port Fintrx Fintrx SPACEWAY Routing port SPACEWAY Routing port RemoteDeploy Administrati RemoteDeploy Administrati QuickBooks RDS QuickBooks RDS TV NetworkVideo Data port TV NetworkVideo Data port e-watch, Inc. SiteWatch e-watch, Inc. Sitewatch DataCore Software DataCore Software JAUS Robots JAUS Robots myBLAST Mekentosj port myBLAST Mekentosj port Spaceway Dialer Spaceway Dialer idps idps Minilock Minilock RADIUS Dynamic Authorization RADIUS Dynamic Authorization Print Services Interface Print Services Interface
PsychWard
Eclypse, Total Solar Eclypse
Eclypse Eclypse Total Solar Eclypse Eclypse
vhd vhd soniqsync
VHD VHD SoniqSync
11/09/2012
Page 106 of 144
3803 3804 3804 3805 3805 3806 3806 3807 3807 3810 3810 3811 3811 3812 3812 3813 3813 3814 3814 3815 3815 3816 3816 3817 3817 3818 3818 3838 3838 3839 3839 3840 3840 3841 3841 3842 3842 3843 3843 3844 3844 3845 3845 3846 3846 3847 3847 3848 3848 3849 3849 3850 3850 3851 3851 3852 3852 3853 3853 3854 3854 3855 3855 3856 3856 3857 3857
soniqsync iqnet-port iqnet-port tcpdataserver tcpdataserver wsmlb wsmlb spugna spugna wlanauth wlanauth amp amp neto-wol-server neto-wol-server rap-ip rap-ip neto-dcs neto-dcs lansurveyorxml lansurveyorxml sunlps-http sunlps-http tapeware tapeware crinis-hb crinis-hb sos sos amx-mtgman amx-mtgman flirtmitmir flirtmitmir zfirm-shiprush3 zfirm-shiprush3 nhci nhci quest-agent quest-agent rnm rnm v-one-spp v-one-spp an-pcp an-pcp msfw-control msfw-control item item spw-dnspreload spw-dnspreload qtms-bootstrap qtms-bootstrap spectraport spectraport sse-app-config sse-app-config sscan sscan stryker-com stryker-com opentrac opentrac informer informer trap-port trap-port
SoniqSync Harman IQNet Port Harman IQNet Port ThorGuard Server Port ThorGuard Server Port Remote System Manager Remote System Manager SpuGNA Communication Port SpuGNA Communication Port WLAN AS server WLAN AS server AMP AMP netO WOL Server netO WOL Server Rhapsody Interface Protocol Rhapsody Interface Protocol netO DCS netO DCS LANsurveyor XML LANsurveyor XML Sun Local Patch Server Sun Local Patch Server Yosemite Tech Tapeware Yosemite Tech Tapeware Crinis Heartbeat Crinis Heartbeat Scito Object Server Scito Object Server AMX MeetingManager AMX MeetingManager www.FlirtMitMir.de www.FlirtMitMir.de Z-Firm ShipRush v3 Z-Firm ShipRush v3 NHCI status port NHCI status port Quest Common Agent Quest Common Agent RNM RNM V-ONE Single Port Proxy V-ONE Single Port Proxy Astare Network PCP Astare Network PCP MS Firewall Control MS Firewall Control IT Environmental Monitor IT Environmental Monitor SPACEWAY DNS Preload SPACEWAY DNS Prelaod QTMS Bootstrap Protocol QTMS Bootstrap Protocol SpectraTalk Port SpectraTalk Port SSE App Configuration SSE App Configuration SONY scanning protocol SONY scanning protocol Stryker Comm Port Stryker Comm Port OpenTRAC OpenTRAC INFORMER INFORMER Trap Port Trap Port
11/09/2012
Page 107 of 144
3858 3858 3859 3859 3860 3860 3861 3861 3862 3862 3863 3863 3864 3864 3865 3865 3866 3866
TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
trap-port-mom trap-port-mom nav-port nav-port ewlm ewlm winshadow-hd winshadow-hd giga-pocket giga-pocket asap-tcp asap-tcp asap-tcp-tls asap-tcp-tls xpl xpl dzdaemon dzdaemon dzoglserver
3867 TCP
3867 UDP dzoglserver 3868 3868 3869 3869 3870 3870 3871 3871 3872 3872 3873 3873 3874 3874 3875 3875 3876 3876 3877 3877 3878 3878 3879 3879 3880 3880 3881 3881 3882 3882 3883 3883 3884 3884 3885 3885 3886 3886 3887 3887 3888 3888 3889 3889 3890 TCP SCTP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP diameter diameter ovsam-mgmt ovsam-mgmt ovsam-d-agent ovsam-d-agent avocent-adsap avocent-adsap oem-agent oem-agent fagordnc fagordnc sixxsconfig sixxsconfig pnbscada pnbscada dl_agent dl_agent xmpcr-interface xmpcr-interface fotogcad fotogcad appss-lm appss-lm microgrid microgrid idac idac msdts1 msdts1 vrpn vrpn softrack-meter softrack-meter topflow-ssl topflow-ssl nei-management nei-management leogic-data leogic-data leogic-services leogic-services dandv-tester dandv-tester ndsconnect
Trap Port MOM Trap Port MOM Navini Port Navini Port eWLM eWLM winShadow Host Discovery winShadow Host Discovery GIGA-POCKET GIGA-POCKET asap tcp port asap tcp port asap/tls tcp port asap/tls tcp port xpl automation protocol xpl automation protocol Sun SDViz DZDAEMON Port Sun SDViz DZDAEMON Port Sun SDViz DZOGLSERVER Port Sun SDViz DZOGLSERVER Port DIAMETER DIAMETER hp OVSAM MgmtServer Disco hp OVSAM MgmtServer Disco hp OVSAM HostAgent Disco hp OVSAM HostAgent Disco Avocent DS Authorization Avocent DS Authorization OEM Agent OEM Agent fagordnc fagordnc SixXS Configuration SixXS Configuration PNBSCADA PNBSCADA DirectoryLockdown Agent DirectoryLockdown Agent XMPCR Interface Port XMPCR Interface Port FotoG CAD interface FotoG CAD interface appss license manager appss license manager microgrid microgrid Data Acquisition and Control Data Acquisition and Control DTS Service Port DTS Service Port VR Peripheral Network VR Peripheral Network SofTrack Metering SofTrack Metering TopFlow SSL TopFlow SSL NEI management port NEI management port Leogic Data Transport Leogic Data Transport Leogic Services Leogic Services D and V Tester Control Port D and V Tester Control Port Niche Data Server Connect
11/09/2012
Page 108 of 144
3890 3891 3891 3892 3892 3893 3893 3894 3894 3895 3895
Niche Data Server Connect Oracle RTC-PM port Oracle RTC-PM port PCC-image-port PCC-image-port CGI StarAPI Server CGI StarAPI Server SyAM Agent Port SyAM Agent Port SyAm SMC Service Port SyAm SMC Service Port Simple Distributed Objects 3896 TCP sdo-tls over TLS Simple Distributed Objects 3896 UDP sdo-tls over TLS Simple Distributed Objects 3897 TCP sdo-ssh over SSH Simple Distributed Objects 3897 UDP sdo-ssh over SSH IAS, Inc. SmartEye NET 3898 TCP senip Internet Protocol IAS, Inc. SmartEye NET 3898 UDP senip Internet Protocol 3899 TCP itv-control ITV Port 3899 UDP itv-control ITV Port 3900 TCP udt_os Unidata UDT OS 3900 UDP udt_os Unidata UDT OS 3901 TCP nimsh NIM Service Handler 3901 UDP nimsh NIM Service Handler 3902 TCP nimaux NIMsh Auxiliary Port 3902 UDP nimaux NIMsh Auxiliary Port 3903 TCP charsetmgr CharsetMGR 3903 UDP charsetmgr CharsetMGR 3904 TCP omnilink-port Arnet Omnilink Port 3904 UDP omnilink-port Arnet Omnilink Port Mailbox Update (MUPDATE) 3905 TCP mupdate protocol Mailbox Update (MUPDATE) 3905 UDP mupdate protocol 3906 TCP topovista-data TopoVista elevation data 3906 UDP topovista-data TopoVista elevation data 3907 TCP imoguia-port Imoguia Port 3907 UDP imoguia-port Imoguia Port 3908 TCP hppronetman HP Procurve NetManagement 3908 UDP hppronetman HP Procurve NetManagement 3909 TCP surfcontrolcpa SurfControl CPA 3909 UDP surfcontrolcpa SurfControl CPA 3910 TCP prnrequest Printer Request Port 3910 UDP prnrequest Printer Request Port 3911 TCP prnstatus Printer Status Port 3911 UDP prnstatus Printer Status Port 3912 TCP gbmt-stars Global Maintech Stars 3912 UDP gbmt-stars Global Maintech Stars 3913 TCP listcrt-port ListCREATOR Port 3913 UDP listcrt-port ListCREATOR Port 3914 TCP listcrt-port-2 ListCREATOR Port 2 3914 UDP listcrt-port-2 ListCREATOR Port 2 3915 TCP agcat Auto-Graphics Cataloging 3915 UDP agcat Auto-Graphics Cataloging 3916 TCP wysdmc WysDM Controller 3916 UDP wysdmc WysDM Controller 3917 TCP aftmux AFT multiplex port 3917 UDP aftmux AFT multiples port 3918 TCP pktcablemmcops PacketCableMultimediaCOPS 3918 UDP pktcablemmcops PacketCableMultimediaCOPS 3919 TCP hyperip HyperIP 3919 UDP hyperip HyperIP 3920 TCP exasoftport1 Exasoft IP Port
ndsconnect rtc-pm-port rtc-pm-port pcc-image-port pcc-image-port cgi-starapi cgi-starapi syam-agent syam-agent syam-smc syam-smc
11/09/2012
Page 109 of 144
3920 3921 3921 3922 3922 3923 3923 3924 3924 3925 3925 3926 3926 3927 3927 3928 3928 3929 3929 3930 3930 3931 3931 3932 3932 3933 3933 3934 3934 3935 3935 3936 3936 3937 3937 3938 3938
exasoftport1 herodotus-net herodotus-net sor-update sor-update symb-sb-port symb-sb-port mpl-gprs-port mpl-gprs-port zmp zmp winport winport natdataservice natdataservice netboot-pxe netboot-pxe smauth-port smauth-port syam-webserver syam-webserver msr-plugin-port msr-plugin-port dyn-site dyn-site plbserve-port plbserve-port sunfm-port sunfm-port sdp-portmapper sdp-portmapper mailprox mailprox dvbservdscport dvbservdscport dbcontrol_agent dbcontrol_agent aamp
3939 TCP
3939 UDP aamp 3940 3940 3941 3941 3942 3942 3943 3943 3944 3944 3945 3945 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP xecp-node xecp-node homeportal-web homeportal-web srdp srdp tig tig sops sops emcads emcads mapper-nodemgr
3984 TCP
3984 UDP mapper-nodemgr 3985 3985 3986 3986 3987 3987 3995 3995 3996 3996 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP mapper-mapethd mapper-mapethd mapper-ws_ethd mapper-ws_ethd centerline centerline iss-mgmt-ssl iss-mgmt-ssl
Exasoft IP Port Herodotus Net Herodotus Net Soronti Update Port Soronti Update Port Symbian Service Broker Symbian Service Broker MPL_GPRS_PORT MPL_GPRS_Port Zoran Media Port Zoran Media Port WINPort WINPort ScsTsr ScsTsr PXE NetBoot Manager PXE NetBoot Manager AMS Port AMS Port Syam Web Server Port Syam Web Server Port MSR Plugin Port MSR Plugin Port Dynamic Site System Dynamic Site System PL/B App Server User Port PL/B App Server User Port PL/B File Manager Port PL/B File Manager Port SDP Port Mapper Protocol SDP Port Mapper Protocol Mailprox Mailprox DVB Service Disc Port DVB Service Disc Port Oracle dbControl Agent po Oracel dbControl Agent po Anti-virus Application Management Port Anti-virus Application Management Port XeCP Node Service XeCP Node Service Home Portal Web Server Home Portal Web Server satellite distribution satellite distribution TetraNode Ip Gateway TetraNode Ip Gateway S-Ops Management S-Ops Management EMCADS Server Port EMCADS Server Port MAPPER network node manager MAPPER network node manager MAPPER TCP/IP server MAPPER TCP/IP server MAPPER workstation server MAPPER workstation server Centerline Centerline ISS Management Svcs SSL ISS Management Svcs SSL RemoteAnything RemoteAnything
11/09/2012
Page 110 of 144
4000 TCP 4000 4001 4001 4002 4002 4003 4003 4004 4004 4005 4005 4006 4006 4007 4007 4008 4008 4009 4009 4010 4010 4011 4011 4012 4012 4013 4013 4014 4014 4015 4015 4016 4016 4017 4017 4018 4018 4019 4019 4020 4020 4021 4021 4022 4022 4023 4023 4024 4024 4025 4025 4026 4026 4027 4027 4028 4028 4029 4029 4030 4030 4031 4031 4032 4032 UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
terabase terabase newoak newoak pxc-spvr-ft pxc-spvr-ft pxc-splr-ft pxc-splr-ft pxc-roid pxc-roid pxc-pin pxc-pin pxc-spvr pxc-spvr pxc-splr pxc-splr netcheque netcheque chimera-hwm chimera-hwm samsung-unidex samsung-unidex altserviceboot altserviceboot pda-gate pda-gate acl-manager acl-manager taiclock taiclock talarian-mcast1 talarian-mcast1 talarian-mcast2 talarian-mcast2 talarian-mcast3 talarian-mcast3 talarian-mcast4 talarian-mcast4 talarian-mcast5 talarian-mcast5 trap trap nexus-portal nexus-portal dnox dnox esnm-zoning esnm-zoning tnp1-port tnp1-port partimage partimage as-debug as-debug bxp bxp dtserver-port dtserver-port ip-qsig ip-qsig jdmn-port jdmn-port suucp suucp vrts-auth-port vrts-auth-port
Terabase Terabase NewOak NewOak pxc-spvr-ft pxc-spvr-ft pxc-splr-ft pxc-splr-ft pxc-roid pxc-roid pxc-pin pxc-pin pxc-spvr pxc-spvr pxc-splr pxc-splr NetCheque accounting NetCheque accounting Chimera HWM Chimera HWM Samsung Unidex Samsung Unidex Alternate Service Boot Alternate Service Boot PDA Gate PDA Gate ACL Manager ACL Manager TAICLOCK TAICLOCK Talarian Mcast Talarian Mcast Talarian Mcast Talarian Mcast Talarian Mcast Talarian Mcast Talarian Mcast Talarian Mcast Talarian Mcast Talarian Mcast TRAP Port TRAP Port Nexus Portal Nexus Portal DNOX DNOX ESNM Zoning Port ESNM Zoning Port TNP1 User Port TNP1 User Port Partition Image Port Partition Image Port Graphical Debug Server Graphical Debug Server bitxpress bitxpress DTServer Port DTServer Port IP Q signaling protocol IP Q signaling protocol Accell/JSP Daemon Port Accell/JSP Daemon Port UUCP over SSL UUCP over SSL VERITAS Authorization Service VERITAS Authorization Service
Psyber Streaming Server, Skydance, ConnectBack Backdoor RemoteAnything
11/09/2012
Page 111 of 144
4033 TCP 4033 UDP 4034 TCP 4034 UDP 4035 TCP 4035 UDP 4036 TCP 4036 UDP 4040 TCP 4040 UDP 4041 TCP 4041 UDP 4042 TCP 4042 UDP 4092 TCP 4096 TCP 4096 UDP 4097 TCP 4097 UDP 4098 TCP 4098 UDP 4099 TCP 4099 UDP 4100 TCP 4100 UDP 4114 TCP 4114 UDP 4132 TCP 4132 UDP 4133 TCP 4133 UDP 4134 TCP 4134 UDP 4138 TCP 4138 UDP 4141 TCP 4141 UDP 4142 TCP 4142 UDP 4143 TCP 4143 UDP 4145 TCP 4145 UDP 4154 TCP 4154 UDP 4160 TCP 4160 UDP 4199 TCP 4199 UDP 4200-4299 4201 TCP 4225 TCP 4242 TCP 4300 TCP 4300 UDP 4321 TCP 4321 UDP 4343 TCP 4343 UDP 4344 TCP 4344 UDP 4345 TCP 4345 UDP 4346 TCP 4346 UDP 4347 TCP 4347 UDP
sanavigator sanavigator ubxd ubxd wap-push-http wap-push-http wap-push-https wap-push-https yo-main yo-main houston houston ldxp ldxp bre bre patrolview patrolview drmsfsd drmsfsd dpcp dpcp igo-incognito igo-incognito jomamqmonitor jomamqmonitor nuts_dem nuts_dem nuts_bootp nuts_bootp nifty-hmi nifty-hmi nettest nettest oirtgsvc oirtgsvc oidocsvc oidocsvc oidsr oidsr vvr-control vvr-control atlinks atlinks jini-discovery jini-discovery eims-admin eims-admin vrml-multi-use vrml-multi-use vrml-multi-use vrml-multi-use corelccam corelccam rwhois rwhois unicall unicall vinainstall vinainstall m4-network-as m4-network-as elanlm elanlm lansurveyor lansurveyor
SANavigator Peer Port SANavigator Peer Port Ubiquinox Daemon Ubiquinox Daemon WAP Push OTA-HTTP port WAP Push OTA-HTTP port WAP Push OTA-HTTP secure WAP Push OTA-HTTP secure Yo.net main service Yo.net main service Rocketeer-Houston Rocketeer-Houston LDXP LDXP WinCrash BRE (Bridge Relay Element) BRE (Bridge Relay Element) Patrol View Patrol View drmsfsd drmsfsd DPCP DPCP IGo Incognito Data Port IGo Incognito Data Port JomaMQMonitor JomaMQMonitor NUTS Daemon NUTS Daemon NUTS Bootp Server NUTS Bootp Server NIFTY-Serve HMI protocol NIFTY-Serve HMI protocol nettest nettest Workflow Server Workflow Server Document Server Document Server Document Replication Document Replication VVR Control VVR Control atlinks device discovery atlinks device discovery Jini Discovery Jini Discovery EIMS ADMIN EIMS ADMIN VRML Multi User Systems VRML Multi User Systems VRML Multi User Systems VRML Multi User Systems Corel CCam Corel CCam Remote Who Is Remote Who Is UNICALL UNICALL VinaInstall VinaInstall Macro 4 Network AS Macro 4 Network AS ELAN LM ELAN LM LAN Surveyor LAN Surveyor
War trojan, Wartrojan SilentSpy Virtual Hacking Machine - VHM
BoBo
11/09/2012
Page 112 of 144
4348 4348 4349 4349 4350 4350 4351 4351 4353 4353 4354 4354 4355 4355 4356 4356 4357 4357 4358 4358 4426 4442 4442 4443 4443 4444 4444 4445 4445 4446 4446 4447 4447 4448 4448 4449 4449 4450 4450 4451 4451 4452 4452 4453 4453 4454 4454 4455 4455 4456 4456 4457 4457 4488 4500 4500 4523 4545 4545 4546 4546 4547 4547 4555 4555 4559 4559
TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP TCP UDP TCP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
itose itose fsportmap fsportmap net-device net-device plcy-net-svcs plcy-net-svcs f5-iquery f5-iquery qsnet-trans qsnet-trans qsnet-workst qsnet-workst qsnet-assist qsnet-assist qsnet-cond qsnet-cond qsnet-nucl qsnet-nucl beacon-port-2 saris saris pharos pharos nv-video nv-video upnotifyp upnotifyp n1-fwp n1-fwp n1-rmgmt n1-rmgmt asc-slmd asc-slmd privatewire privatewire camp camp ctisystemmsg ctisystemmsg ctiprogramload ctiprogramload nssalertmgr nssalertmgr nssagentmgr nssagentmgr prchat-user prchat-user prchat-server prchat-server prRegister prRegister ipsec-msft ipsec-msft worldscores worldscores sf-lm sf-lm lanner-lm lanner-lm rsip rsip hylafax hylafax
ITOSE ITOSE File System Port Map File System Port Map Net Device Net Device PLCY Net Services PLCY Net Services F5 iQuery F5 iQuery QSNet Transmitter QSNet Transmitter QSNet Workstation QSNet Workstation QSNet Assistant QSNet Assistant QSNet Conductor QSNet Conductor QSNet Nucleus QSNet Nucleus SMARTS Beacon Port Saris Saris Pharos Pharos NV Video default NV Video default UPNOTIFYP UPNOTIFYP N1-FWP N1-FWP N1-RMGMT N1-RMGMT ASC Licence Manager ASC Licence Manager PrivateWire PrivateWire Camp Camp CTI System Msg CTI System Msg CTI Program Load CTI Program Load NSS Alert Manager NSS Alert Manager NSS Agent Manager NSS Agent Manager PR Chat User PR Chat User PR Chat Server PR Chat Server PR Register PR Register Microsoft IPsec NAT-T Microsoft IPsec NAT-T
CrackDown, Prosiak, Swift Remote, AlexTrojan
Event Horizon, EventHorizon
Celine WorldScores Internal Revise, InternalRevise, RemoteRevise WorldScores SF License Manager (Sentinel) SF License Manager (Sentinel) Lanner License Manager Lanner License Manager RSIP Port RSIP Port HylaFAX HylaFAX
11/09/2012
Page 113 of 144
4567 4567 4568 4568 4590 4600 4600 4601 4601 4653 4660 4660
TCP UDP TCP UDP TCP TCP UDP TCP UDP TCP TCP UDP
tram tram bmc-reporting bmc-reporting piranha1 piranha1 piranha2 piranha2 smaclmgr smaclmgr kar2ouche
TRAM TRAM BMC Reporting BMC Reporting Piranha1 Piranha1 Piranha2 Piranha2
File Nail, FileNail
ICQ Trojan
Cero smaclmgr smaclmgr Kar2ouche Peer location service Kar2ouche Peer location service Mneah rfa rfa snap snap iims remote file access server remote file access server Simple Network Audio Protocol Simple Network Audio Protocol Icona Instant Messenging System Icona Instant Messenging System Icona Web Embedded Chat Icona Web Embedded Chat Icona License System Server Icona License System Server HTCP HTCP Varadero-0 Varadero-0 Varadero-1 Varadero-1 Varadero-2 Varadero-2 App Server - Admin HTTP App Server - Admin HTTP App Server - Admin HTTPS App Server - Admin HTTPS Photon Relay Photon Relay Photon Relay Debug Photon Relay Debug ABBS ABBS LysKOM Protocol A LysKOM Protocol A RAdmin Port RAdmin Port AT&T Intercom AT&T Intercom SMAR Ethernet Port 1 SMAR Ethernet Port 1 SMAR Ethernet Port 2 SMAR Ethernet Port 2 Parallel for GAUSS (tm) Parallel for GAUSS (tm) Back Door Setup, BioNet Lite, Blazer5, Bubbel, ICKiller, Ra1d, Sockets des Troie Back Door Setup, Sockets des Troie radio free ethernet radio free ethernet cd00r, Linux Rootkit IV (4), Shaft Buttman Buttman
4661 TCP
4661 UDP kar2ouche 4666 4672 4672 4752 4752 TCP TCP UDP TCP UDP
4800 TCP
4800 UDP iims 4801 4801 4802 4802 4827 4827 4836 4837 4837 4838 4838 4839 4839 4848 4848 4849 4849 4868 4868 4869 4869 4885 4885 4894 4894 4899 4899 4950 4983 4983 4987 4987 4988 4988 4989 4989 TCP UDP TCP UDP TCP UDP TCP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP TCP UDP TCP UDP TCP UDP TCP UDP iwec iwec ilss ilss htcp htcp varadero-0 varadero-0 varadero-1 varadero-1 varadero-2 varadero-2 appserv-http appserv-http appserv-https appserv-https phrelay phrelay phrelaydbg phrelaydbg abbs abbs lyskom lyskom radmin-port radmin-port att-intercom att-intercom smar-se-port1 smar-se-port1 smar-se-port2 smar-se-port2 parallel parallel commplex-main commplex-main commplex-link commplex-link rfe rfe
ICQ Trogen (Lm), ICQTrojan
5000 TCP 5000 5001 5001 5002 5002 UDP TCP UDP TCP UDP
11/09/2012
Page 114 of 144
5003 TCP
fmpro-internal
5003 UDP fmpro-internal 5004 5004 5005 5005 5006 5006 5007 5007 5008 5008 5010 5010 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP avt-profile-1 avt-profile-1 avt-profile-2 avt-profile-2 wsm-server wsm-server wsm-server-ssl wsm-server-ssl synapsis-edge synapsis-edge telelpathstart telelpathstart telelpathattack telelpathattack zenginkyo-1 zenginkyo-1 zenginkyo-2 zenginkyo-2 mice mice htuilsrv htuilsrv scpi-telnet scpi-telnet scpi-raw scpi-raw
FileMaker, Inc. - Proprietary transport FileMaker, Inc. - Proprietary name binding avt-profile-1 avt-profile-1 avt-profile-2 avt-profile-2 wsm server wsm server wsm server ssl wsm server ssl Synapsis EDGE Synapsis EDGE TelepathStart TelepathStart TelepathAttack TelepathAttack zenginkyo-1 zenginkyo-1 zenginkyo-2 zenginkyo-2 mice server mice server Htuil Server for PLD2 Htuil Server for PLD2 SCPI-TELNET SCPI-TELNET SCPI-RAW SCPI-RAW
Aladino
Solo One of the Last Trojans - OOTLT, One of the Last Trojans - OOTLT, modified
5011 TCP 5011 5020 5020 5021 5021 5022 5022 5023 5023 5024 5024 5025 5025 5031 5032 5033 5042 5042 UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP TCP TCP TCP UDP
WM Remote KeyLogger Net Metropolitan, NetMetro Net Metropolitan, NetMetro NetMetro
asnaacceler8db asnaacceler8db mmcc
5050 TCP
5050 UDP mmcc 5051 5051 5052 5052 5055 5055 5056 5056 5057 5057 5060 5060 5061 5061 5064 5064 5065 5065 5066 5066 5069 5069 5071 5071 5081 5081 5093 5093 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP ita-agent ita-agent ita-manager ita-manager unot unot intecom-ps1 intecom-ps1 intecom-ps2 intecom-ps2 sip sip sip-tls sip-tls ca-1 ca-1 ca-2 ca-2 stanag-5066 stanag-5066 i-net-2000-npr i-net-2000-npr powerschool powerschool sdl-ets sdl-ets sentinel-lm sentinel-lm
asnaacceler8db asnaacceler8db multimedia conference control RoxRat tool multimedia conference control tool ITA Agent ITA Agent ITA Manager ITA Manager UNOT UNOT Intecom PS 1 Intecom PS 1 Intecom PS 2 Intecom PS 2 SIP SIP SIP-TLS SIP-TLS Channel Access 1 Channel Access 1 Channel Access 2 Channel Access 2 STANAG-5066-SUBNET-INTF STANAG-5066-SUBNET-INTF I/Net 2000-NPR I/Net 2000-NPR PowerSchool PowerSchool SDL - Ent Trans Server SDL - Ent Trans Server Sentinel LM Sentinel LM
11/09/2012
Page 115 of 144
5099 5099 5101 5101 5137 5137 5145 5145
sentlm-srv2srv sentlm-srv2srv talarian-tcp talarian-udp ctsd ctsd rmonitor_secure rmonitor_secure atmp
5150 TCP
5150 UDP atmp 5151 TCP 5151 UDP 5152 TCP 5152 UDP 5154 TCP 5154 UDP 5155-5164 5165 TCP 5165 UDP 5190 TCP 5190 UDP 5191 TCP 5191 UDP 5192 TCP 5192 UDP 5193 TCP 5193 UDP 5200 TCP 5200 UDP 5201 TCP 5201 UDP 5202 TCP 5202 UDP 5203 TCP 5203 UDP 5222 TCP 5222 UDP 5225 TCP 5225 UDP 5226 TCP 5226 UDP 5236 TCP 5236 UDP 5250 TCP 5250 UDP 5264 TCP 5264 UDP 5265 TCP 5265 UDP 5269 TCP 5269 UDP 5272 TCP 5272 UDP 5277 TCP 5282 TCP 5282 UDP 5300 TCP 5300 UDP 5301 TCP 5301 UDP 5302 TCP 5302 UDP 5303 TCP 5303 UDP 5304 TCP esri_sde esri_sde sde-discovery sde-discovery bzflag bzflag ife_icorp ife_icorp aol aol aol-1 aol-1 aol-2 aol-2 aol-3 aol-3 targus-getdata targus-getdata targus-getdata1 targus-getdata1 targus-getdata2 targus-getdata2 targus-getdata3 targus-getdata3 xmpp-client xmpp-client hp-server hp-server hp-status hp-status padl2sim padl2sim igateway igateway 3com-njack-1 3com-njack-1 3com-njack-2 3com-njack-2 xmpp-server xmpp-server pk pk transmit-port transmit-port hacl-hb hacl-hb hacl-gs hacl-gs hacl-cfg hacl-cfg hacl-probe hacl-probe hacl-local
SentLM Srv2Srv SentLM Srv2Srv Talarian_TCP Talarian_UDP MyCTS server port MyCTS server port RMONITOR SECURE RMONITOR SECURE Ascend Tunnel Management Protocol Ascend Tunnel Management Protocol ESRI SDE Instance ESRI SDE Remote Start ESRI SDE Instance Discovery ESRI SDE Instance Discovery BZFlag game server BZFlag game server Unassigned ife_1corp ife_1corp America-Online America-Online AmericaOnline1 AmericaOnline1 AmericaOnline2 AmericaOnline2 AmericaOnline3 AmericaOnline3 TARGUS GetData TARGUS GetData TARGUS GetData 1 TARGUS GetData 1 TARGUS GetData 2 TARGUS GetData 2 TARGUS GetData 3 TARGUS GetData 3 XMPP Client Connection XMPP Client Connection HP Server HP Server HP Status HP Status
OptixLite
MBomber
iGateway iGateway 3Com Network Jack Port 1 3Com Network Jack Port 1 3Com Network Jack Port 2 3Com Network Jack Port 2 XMPP Server Connection XMPP Server Connection PK PK WinShell Marimba Transmitter Port Marimba Transmitter Port # HA cluster heartbeat # HA cluster heartbeat # HA cluster general services # HA cluster general services # HA cluster configuration # HA cluster configuration # HA cluster probing # HA cluster probing # HA Cluster Commands
11/09/2012
Page 116 of 144
5304 5305 5305 5306 5306 5307 5307 5308 5308 5309 5309 5310 5310 5311 5311 5314 5314 5315 5315 5321 5333
UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP TCP
hacl-local hacl-test hacl-test sun-mc-grp sun-mc-grp sco-aip sco-aip cfengine cfengine jprinter jprinter outlaws outlaws tmlogin tmlogin opalis-rbt-ipc opalis-rbt-ipc hacl-poll hacl-poll
# HA Cluster Test Sun MC Group Sun MC Group SCO AIP SCO AIP CFengine CFengine J Printer J Printer Outlaws Outlaws TM Login TM Login opalis-rbt-ipc opalis-rbt-ipc HA Cluster UDP Polling HA Cluster UDP Polling Firehotcker Backage, NetDemon wCrat - WC Remote Administration Tool, WC Remote Administration Tool - wCrat Multicast DNS Multicast DNS Rendezvous Message Exchange Rendezvous Message Exchange Excerpt Search Excerpt Search Excerpt Search Secure Excerpt Search Secure MFTP MFTP HPOMS-CI-LSTN HPOMS-CI-LSTN HPOMS-DPS-LSTN HPOMS-DPS-LSTN NetSupport NetSupport Systemics Sox Systemics Sox Foresyte-Clear Foresyte-Clear Foresyte-Sec Foresyte-Sec Salient Data Server Salient Data Server Salient User Manager Salient User Manager ActNet ActNet Continuus Continuus WWIOTALK WWIOTALK StatusD StatusD NS Server NS Server SNS Gateway SNS Gateway SNS Agent SNS Agent MCNTP Back Construction, Blade Runner, Mneah, BackConstruction, BladeRunner, DeepThroat
5343 TCP 5353 TCP mdns 5353 UDP mdns 5354 TCP rmx
5354 UDP rmx 5400 TCP excerpt 5400 UDP excerpt 5401 TCP excerpts
Blade Runner, BackConstruction Back Construction, Blade Runner, Mneah, BackConstruction, BladeRunner, DeepThroat
5401 UDP excerpts 5402 TCP 5402 5403 5403 5404 5404 5405 5405 5406 5406 5407 5407 5408 5408 5409 5409 5410 5410 5411 5411 5412 5412 5413 5413 5414 5414 5415 5415 5416 5416 5417 5417 5418 UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP mftp mftp hpoms-ci-lstn hpoms-ci-lstn hpoms-dps-lstn hpoms-dps-lstn netsupport netsupport systemics-sox systemics-sox foresyte-clear foresyte-clear foresyte-sec foresyte-sec salient-dtasrv salient-dtasrv salient-usrmgr salient-usrmgr actnet actnet continuus continuus wwiotalk wwiotalk statusd statusd ns-server ns-server sns-gateway sns-gateway sns-agent sns-agent mcntp
11/09/2012
Page 117 of 144
5418 5419 5419 5420 5420 5421 5421 5422 5422 5423 5423 5426 5426 5427 5427 5428 5428
UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
mcntp dj-ice dj-ice cylink-c cylink-c netsupport2 netsupport2 salient-mux salient-mux virtualuser virtualuser devbasic devbasic sco-peer-tta sco-peer-tta telaconsole telaconsole base
5429 TCP
5429 UDP base 5430 5430 5431 5431 5432 5432 TCP UDP TCP UDP TCP UDP radec-corp radec-corp park-agent park-agent postgresql postgresql dttl
5435 TCP
5435 UDP dttl 5454 5454 5455 5455 5456 5456 5461 5461 5462 5462 5463 5463 5465 5465 5500 5500 5501 5501 5502 5502 5503 5503 5504 5504 5512 5521 5534 5550 5553 5553 5554 5554 5555 5555 5556 5557 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP TCP TCP TCP TCP UDP TCP UDP TCP UDP TCP TCP apc-5454 apc-5454 apc-5455 apc-5455 apc-5456 apc-5456 silkmeter silkmeter ttl-publisher ttl-publisher ttlpriceproxy ttlpriceproxy netops-broker netops-broker fcp-addr-srvr1 fcp-addr-srvr1 fcp-addr-srvr2 fcp-addr-srvr2 fcp-srvr-inst1 fcp-srvr-inst1 fcp-srvr-inst2 fcp-srvr-inst2 fcp-cics-gw1 fcp-cics-gw1
MCNTP DJ-ICE DJ-ICE Cylink-C Cylink-C Net Support 2 Net Support 2 Salient MUX Salient MUX VIRTUALUSER VIRTUALUSER DEVBASIC DEVBASIC SCO-PEER-TTA SCO-PEER-TTA TELACONSOLE TELACONSOLE Billing and Accounting System Exchange Billing and Accounting System Exchange RADEC CORP RADEC CORP PARK AGENT PARK AGENT PostgreSQL Database PostgreSQL Database Data Tunneling Transceiver Linking (DTTL) Data Tunneling Transceiver Linking (DTTL) APC 5454 APC 5454 APC 5455 APC 5455 APC 5456 APC 5456 SILKMETER SILKMETER TTL Publisher TTL Publisher TTL Price Proxy TTL Price Proxy NETOPS-BROKER NETOPS-BROKER fcp-addr-srvr1 fcp-addr-srvr1 fcp-addr-srvr2 fcp-addr-srvr2 fcp-srvr-inst1 fcp-srvr-inst1 fcp-srvr-inst2 fcp-srvr-inst2 fcp-cics-gw1 fcp-cics-gw1 Illusion Mailer illusion Mailer The Flu, TheFlu Xtcp, Xtcp2
sgi-eventmond sgi-eventmond sgi-esphttp sgi-esphttp personal-agent personal-agent
SGI Eventmond Port SGI Eventmond Port SGI ESP HTTP SGI ESP HTTP Personal Agent Personal Agent
ServeMe, Noxcape Daodan BO Facil BO Facil
11/09/2012
Page 118 of 144
5566 TCP udpplus 5566 UDP udpplus 5569 TCP 5599 TCP esinstall
UDPPlus UDPPlus Robo-Hack Enterprise Security Remote Install Enterprise Security Remote Install Enterprise Security Manager Enterprise Security Manager Enterprise Security Agent Enterprise Security Agent A1-MSC A1-MSC A1-BS A1-BS A3-SDUNode A3-SDUNode A4-SDUNode A4-SDUNode pcANYWHEREdata pcANYWHEREdata pcANYWHEREstat pcANYWHEREstat PC Crasher PC Crasher PC Crasher
5599 UDP esinstall 5600 5600 5601 5601 5602 5602 5603 5603 5604 5604 5605 5605 5631 5631 5632 5632 5636 5637 5638 5673 5673 5674 5674 5675 5675 5676 5676 5677 5677 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP TCP TCP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP esmmanager esmmanager esmagent esmagent a1-msc a1-msc a1-bs a1-bs a3-sdunode a3-sdunode a4-sdunode a4-sdunode pcanywheredata pcanywheredata pcanywherestat pcanywherestat
jms jms hyperscsi-port hyperscsi-port v5ua v5ua raadmin raadmin questdb2-lnchr questdb2-lnchr rrac
5678 TCP
5678 UDP rrac 5679 5679 5688 5688 5695 5713 5713 5714 5714 5715 5715 5716 5716 5717 5717 5720 5720 5729 5729 5730 5730 5741 5741 5742 5742 5745 5745 5746 TCP UDP TCP UDP TCP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP dccm dccm ggz ggz proshareaudio proshareaudio prosharevideo prosharevideo prosharedata prosharedata prosharerequest prosharerequest prosharenotify prosharenotify ms-licensing ms-licensing openmail openmail unieng unieng ida-discover1 ida-discover1 ida-discover2 ida-discover2 fcopy-server fcopy-server fcopys-server
JACL Message Server JACL Message Server HyperSCSI Port HyperSCSI Port V5UA application port V5UA application port RA Administration RA Administration Quest Central DB2 Launchr Quest Central DB2 Launchr Remote Replication Agent Connection Remote Replication Agent Connection Direct Cable Connect Manager Direct Cable Connect Manager GGZ Gaming Zone GGZ Gaming Zone Assassin proshare conf audio proshare conf audio proshare conf video proshare conf video proshare conf data proshare conf data proshare conf request proshare conf request proshare conf notify proshare conf notify MS-Licensing MS-Licensing Openmail User Agent Layer Openmail User Agent Layer Steltor's calendar access Steltor's calendar access IDA Discover Port 1 IDA Discover Port 1 IDA Discover Port 2 IDA Discover Port 2 fcopy-server fcopy-server fcopys-server
WinCrash
WinCrash WinCrash
11/09/2012
Page 119 of 144
5746 UDP fcopys-server 5755 TCP openmailg 5755 UDP openmailg 5757 TCP x500ms
5757 UDP x500ms 5760 TCP 5766 TCP openmailns 5766 UDP openmailns 5767 TCP s-openmail
fcopys-server OpenMail Desk Gateway server OpenMail Desk Gateway server OpenMail X.500 Directory Server OpenMail X.500 Directory Server Portmap Remote Root Linux Exploit OpenMail NewMail Server OpenMail NewMail Server OpenMail Suer Agent Layer (Secure) OpenMail Suer Agent Layer (Secure) OpenMail CMTS Server OpenMail CMTS Server NetAgent NetAgent DALI Port DALI Port Y3K RAT, Y3KRat Y3KRat
5767 UDP s-openmail 5768 TCP 5768 UDP 5771 TCP 5771 UDP 5777 TCP 5777 UDP 5802 TCP 5810 TCP 5813 TCP 5813 UDP 5814 TCP 5814 UDP 5838 TCP 5858 TCP 5859 TCP 5859 UDP 5880 TCP 5881 TCP 5881 UDP 5882 TCP 5882 UDP 5883 TCP 5883 UDP 5884 TCP 5884 UDP 5885 TCP 5885 UDP 5886 TCP 5886 UDP 5887 TCP 5887 UDP 5888 TCP 5888 UDP 5889 TCP 5890 TCP 5968 TCP 5968 UDP 5969 TCP 5969 UDP 5987 TCP 5987 UDP 5988 TCP 5988 UDP 5989 TCP 5989 UDP 5991 TCP 5991 UDP 5999 TCP 5999 UDP 6000-6063 6000 TCP 6006 TCP 6064 TCP openmailpxy openmailpxy netagent netagent dali-port dali-port
icmpd icmpd spt-automation spt-automation
ICMPD ICMPD Support Automation Support Automation Y3KRat Y3KRat
wherehoo wherehoo
WHEREHOO WHEREHOO Y3K RAT, Y3KRat Y3KRat Y3KRat Y3K RAT, Y3KRat Y3K RAT, Y3KRat Y3KRat Y3KRat Y3KRat Y3KRat Y3KRat Y3KRat Y3KRat Y3KRat Y3KRat Y3KRat Y3K RAT, Y3KRat Y3K RAT, Y3KRat Y3K RAT, Y3KRat Y3KRat
mppolicy-v5 mppolicy-v5 mppolicy-mgr mppolicy-mgr wbem-rmi wbem-rmi wbem-http wbem-http wbem-https wbem-https nuxsl nuxsl cvsup cvsup x11 x11 x11 ndl-ahp-svc
mppolicy-v5 mppolicy-v5 mppolicy-mgr mppolicy-mgr WBEM RMI WBEM RMI WBEM HTTP WBEM HTTP WBEM HTTPS WBEM HTTPS NUXSL NUXSL CVSup CVSup X Window System X Window System X Window System NDL-AHP-SVC
The Thing Bad Blood
11/09/2012
Page 120 of 144
6064 6065 6065 6066 6066 6067 6067 6068 6068 6069 6069 6070 6070 6071 6071 6072 6072 6073 6073 6085 6085 6100 6100 6101 6101 6102 6102 6103 6103 6104 6104 6105 6105 6106 6106 6107 6107
ndl-ahp-svc winpharaoh winpharaoh ewctsp ewctsp srb srb gsmp gsmp trip trip messageasap messageasap ssdtp ssdtp diagnose-proc diagnose-proc directplay8 directplay8 konspire2b konspire2b synchronet-db synchronet-db synchronet-rtc synchronet-rtc synchronet-upd synchronet-upd rets rets dbdb dbdb primaserver primaserver mpsserver mpsserver etc-control etc-control 6108 TCP sercommscadmin 6108 UDP sercommscadmin 6109 TCP globecast-id 6109 UDP globecast-id 6110 TCP softcm 6110 UDP softcm 6111 TCP spc
NDL-AHP-SVC WinPharaoh WinPharaoh EWCTSP EWCTSP SRB SRB GSMP GSMP TRIP TRIP Messageasap Messageasap SSDTP SSDTP DIAGNOSE-PROC DIAGNOSE-PROC DirectPlay8 DirectPlay8 konspire2b p2p network konspire2b p2p network SynchroNet-db SynchroNet-db SynchroNet-rtc SynchroNet-rtc SynchroNet-upd SynchroNet-upd RETS RETS DBDB DBDB Prima Server Prima Server MPS Server MPS Server ETC Control ETC Control Sercomm-SCAdmin Sercomm-SCAdmin GLOBECAST-ID GLOBECAST-ID HP SoftBench CM HP SoftBench CM HP SoftBench Sub-Process Control HP SoftBench Sub-Process Control dtspcd dtspcd Backup Express Backup Express Meta Corporation License Manager Meta Corporation License Manager Aspen Technology License Manager Aspen Technology License Manager Watershed License Manager Watershed License Manager StatSci License Manager - 1 StatSci License Manager - 1 StatSci License Manager - 2 StatSci License Manager - 2 Lone Wolf Systems License
6111 UDP spc 6112 6112 6123 6123 TCP UDP TCP UDP dtspcd dtspcd backup-express backup-express meta-corp
6141 TCP
6141 UDP meta-corp 6142 TCP aspentec-lm
6142 UDP aspentec-lm 6143 6143 6144 6144 6145 6145 TCP UDP TCP UDP TCP UDP watershed-lm watershed-lm statsci1-lm statsci1-lm statsci2-lm statsci2-lm
11/09/2012
Page 121 of 144
6146 TCP
lonewolf-lm
6146 UDP lonewolf-lm 6147 TCP montage-lm 6147 UDP montage-lm 6148 TCP ricardo-lm
6148 UDP ricardo-lm 6149 6149 6253 6253 6272 6300 6300 TCP UDP TCP UDP TCP TCP UDP tal-pod tal-pod crip crip bmc-grx bmc-grx emp-server1
Manager Lone Wolf Systems License Manager Montage License Manager Montage License Manager Ricardo North America License Manager Ricardo North America License Manager tal-pod tal-pod CRIP CRIP Secret Service BMC GRX BMC GRX Empress Software Connectivity Server 1 Empress Software Connectivity Server 1 Empress Software Connectivity Server 2 Empress Software Connectivity Server 2 sFlow traffic monitoring sFlow traffic monitoring gnutella-svc gnutella-svc gnutella-rtr gnutella-rtr Metatude Dialogue Server Metatude Dialogue Server clariion-evr01 clariion-evr01 The Thing, Thething
6321 TCP
6321 UDP emp-server1 6322 TCP emp-server2
6322 UDP emp-server2 6343 6343 6346 6346 6347 6347 6382 6382 6389 6389 6400 6401 6402 6403 6404 6405 6406 6407 6408 6409 6410 6455 6456 6471 6471 6500 6500 6501 6501 6502 6502 6503 6503 6505 6505 6506 6506 6507 6507 6508 6508 6509 6509 6510 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP TCP TCP TCP TCP TCP TCP TCP TCP TCP TCP TCP TCP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP sflow sflow gnutella-svc gnutella-svc gnutella-rtr gnutella-rtr metatude-mds metatude-mds clariion-evr01 clariion-evr01 info-aps info-was info-eventsvr info-cachesvr info-filesvr info-pagesvr info-processvr reserved1 reserved2 reserved3 reserved4 skip-cert-recv skip-cert-send lvision-lm lvision-lm boks boks boks_servc boks_servc boks_servm boks_servm boks_clntd boks_clntd badm_priv badm_priv badm_pub badm_pub bdir_priv bdir_priv bdir_pub bdir_pub mgcs-mfp-port mgcs-mfp-port mcer-port
SKIP Certificate Receive SKIP Certificate Send LVision License Manager LVision License Manager BoKS Master BoKS Master BoKS Servc BoKS Servc BoKS Servm BoKS Servm BoKS Clntd BoKS Clntd BoKS Admin Private Port BoKS Admin Private Port BoKS Admin Public Port BoKS Admin Public Port BoKS Dir Server, Private Port BoKS Dir Server, Private Port BoKS Dir Server, Public Port BoKS Dir Server, Public Port MGCS-MFP Port MGCS-MFP Port MCER Port
11/09/2012
Page 122 of 144
6510 UDP 6543 TCP 6543 UDP 6547 TCP 6547 UDP 6548 TCP 6548 UDP 6549 TCP 6549 UDP 6550 TCP 6550 UDP 6556 TCP 6558 TCP 6558 UDP 6566 TCP 6566 UDP 6580 TCP 6580 UDP 6581 TCP 6581 UDP 6582 TCP 6582 UDP 6628 TCP 6628 UDP 6631 TCP 6631 UDP 6655 TCP 6660 TCP 6661 TCP 6665-6669 6666 TCP 6667 TCP 6669 TCP 6670 TCP
mcer-port lds-distrib lds-distrib apc-6547 apc-6547 apc-6548 apc-6548 apc-6549 apc-6549 fg-sysupdate fg-sysupdate xdsxdm xdsxdm sane-port sane-port parsec-master parsec-master parsec-peer parsec-peer parsec-game parsec-game afesc-mc afesc-mc mach mach
MCER Port lds_distrib lds_distrib APC 6547 APC 6547 APC 6548 APC 6548 APC 6549 APC 6549 fg-sysupdate fg-sysupdate AutoSpy
SANE Control Port SANE Control Port Parsec Masterserver Parsec Masterserver Parsec Peer-to-Peer Parsec Peer-to-Peer Parsec Gameserver Parsec Gameserver AFE Stock Channel M/C AFE Stock Channel M/C Mitchell telecom host Mitchell telecom host Aqua LameSpy TEMan, Weia-Meia
ircu ircu ircu ircu vocaltec-gold
IRCU IRCU IRCU IRCU Vocaltec Global Online Directory Vocaltec Global Online Directory DeepThroat vision_server vision_server vision_elmd vision_elmd HostControl KTI/ICAD Nameserver KTI/ICAD Nameserver BackDoor-G, SubSeven, SubSARI, VP Killer, DeepThroat, Noknok Funny trojan, SubSeven SubSeven Dark Connection Inside, NetBus worm, LameRemote, ProjectMayhem Dark FTP, EGO, Maniac rootkit, Moses, ScheduleAgent, SubSeven, The Thing (modified), Trinity, WinSatan Host Control, Vampire BackWeb Server, Foreplay or Reduced Foreplay, Deep Throat, WinNuke eXtreame, DeepThroat
6670 UDP vocaltec-gold 6671 6672 6672 6673 6673 6699 6701 6701 TCP TCP UDP TCP UDP TCP TCP UDP vision_server vision_server vision_elmd vision_elmd kti-icad-srvr kti-icad-srvr
6711 TCP 6712 6713 6714 6714 6723 6767 6767 6768 6768 6771 6776 6788 6788 6789 6789 6790 6790 TCP TCP TCP UDP TCP TCP UDP TCP UDP TCP TCP TCP UDP TCP UDP TCP UDP
ibprotocol ibprotocol bmc-perf-agent bmc-perf-agent bmc-perf-mgrd bmc-perf-mgrd
Internet Backplane Protocol Internet Backplane Protocol BMC PERFORM AGENT BMC PERFORM AGENT BMC PERFORM MGRD BMC PERFORM MGRD Mstream UandMe, NTRC
Deep Throat, Foreplay or Reduced Foreplay 2000 Cracks, SubSeven, BackDoor-G, VP Killer smc-http smc-http smc-https smc-https hnmp hnmp SMC-HTTP SMC-HTTP SMC-HTTPS SMC-HTTPS HNMP HNMP
Doly
11/09/2012
Page 123 of 144
6796 6831 6831 6838 6841 6841 6842 6842 6850 6850 6883 6888 6888 6912 6913 6939 6953 6953 6961 6961 6962 6962 6963 6963 6964 6964 6965 6965 6966 6966
TCP TCP UDP UDP TCP UDP TCP UDP TCP UDP TCP TCP UDP TCP TCP TCP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
SubSeven ambit-lm ambit-lm netmo-default netmo-default netmo-http netmo-http iccrushmore iccrushmore muse muse ambit-lm ambit-lm Mstream Netmo Default Netmo Default Netmo HTTP Netmo HTTP ICCRUSHMORE ICCRUSHMORE Delta Source DarkStar (??) MUSE MUSE Shit Heep, ShitHeep ShitHeep Danny Indoctrination Lithium Lithium jmact3 jmact3 jmevt2 jmevt2 swismgr1 swismgr1 swismgr2 swismgr2 swistrap swistrap swispol swispol acmsoda acmsoda iatp-highpri iatp-highpri iatp-normalpri iatp-normalpri afs3-fileserver afs3-fileserver afs3-callback afs3-callback afs3-prserver afs3-prserver afs3-vlserver afs3-vlserver afs3-kaserver JMACT3 JMACT3 jmevt2 jmevt2 swismgr1 swismgr1 swismgr2 swismgr2 swistrap swistrap swispol swispol acmsoda acmsoda GateCrasher, Danton IATP-highPri IATP-highPri IATP-normalPri IATP-normalPri file server itself Exploit Translation Server, Kazimas, Remote Grab, SubSeven 2000 Cracks, Net Controller, IRC 3, GateCrasher, Danton, Priority, 2000Cracks, Bigorna
6969 TCP 6969 6970 6998 6998 6999 6999 UDP TCP TCP UDP TCP UDP
7004 TCP
7004 UDP afs3-kaserver 7005 7005 7006 7006 7007 7007 7008 7008 7009 7009 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP afs3-volser afs3-volser afs3-errors afs3-errors afs3-bos afs3-bos afs3-update afs3-update afs3-rmtsys afs3-rmtsys ups-onlinet
7010 TCP
7010 UDP ups-onlinet 7011 TCP talon-disc 7011 UDP talon-disc
file server itself callbacks to cache managers Freak2k, Freak88, NetSnooper Gold callbacks to cache managers users & groups database users & groups database volume location database volume location database AFS/Kerberos authentication service AFS/Kerberos authentication service volume managment server volume managment server error interpretation service error interpretation service basic overseer process basic overseer process server-to-server updater server-to-server updater remote cache manager service remote cache manager service onlinet uninterruptable power supplies onlinet uninterruptable power supplies Talon Discovery Port Talon Discovery Port
11/09/2012
Page 124 of 144
7012 7012 7013 7013 7014 7014 7015 7015 7020 7020 7021 7021 7028 7030 7030 7070 7070 7099 7099 7100 7100 7119
TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP TCP UDP TCP UDP TCP UDP TCP UDP TCP
talon-engine talon-engine microtalon-dis microtalon-dis microtalon-com microtalon-com talon-webserver talon-webserver dpserve dpserve dpserveadmin dpserveadmin op-probe op-probe arcp arcp lazy-ptop lazy-ptop font-service font-service virprot-lm
Talon Engine Talon Engine Microtalon Discovery Microtalon Discovery Microtalon Communications Microtalon Communications Talon Webserver Talon Webserver DP Serve DP Serve DP Serve Admin DP Serve Admin Uknown Trojan ObjectPlanet probe ObjectPlanet probe ARCP ARCP lazy-ptop lazy-ptop X Font Service X Font Service Massaker Virtual Prototypes License Manager Virtual Prototypes License Manager Lohoboyshik Clutild Clutild FODMS FLIP FODMS FLIP DLIP DLIP Registry A & M Protocol Registry A $ M Protocol ITACTIONSERVER 1 ITACTIONSERVER 1 ITACTIONSERVER 2 ITACTIONSERVER 2 The Swiss Exchange The Swiss Exchange The Swiss Exchange The Swiss Exchange The Swiss Exchange The Swiss Exchange The Swiss Exchange The Swiss Exchange The Swiss Exchange The Swiss Exchange The Swiss Exchange The Swiss Exchange mind-file system server mind-file system server mrss-rendezvous server mrss-rendezvous server winqedit winqedit
7121 TCP
7121 UDP virprot-lm 7158 TCP 7174 TCP 7174 UDP 7200 TCP 7200 UDP 7201 TCP 7201 UDP 7215 TCP 7227 TCP 7227 UDP 7280 TCP 7280 UDP 7281 TCP 7281 UDP 7300-7390 7300 TCP 7301 TCP 7302 TCP 7303 TCP 7304 TCP 7305 TCP 7306 TCP 7307 TCP 7308 TCP 7309 TCP 7323 TCP 7391 TCP 7391 UDP 7392 TCP 7392 UDP 7395 TCP 7395 UDP 7410 TCP 7424 TCP 7424 UDP 7426 TCP clutild clutild fodms fodms dlip dlip ramp ramp itactionserver1 itactionserver1 itactionserver2 itactionserver2 swx swx swx swx swx swx swx swx swx swx swx swx mindfilesys mindfilesys mrssrendezvous mrssrendezvous winqedit winqedit
Massaker
SubSeven
NetMonitor, Coced NetMonitor, Coced NetMonitor NetMonitor NetMonitor NetMonitor NetMonitor, NetSpy NetMonitor, Remote Process Monitor NetMonitor, X Spy NetMonitor Sygate Backdoor
Phoenix Host Control Host Control pmdmgr OpenView DM Postmaster Manager OpenView DM Postmaster Manager OpenView DM Event Agent Manager OpenView DM Event Agent
7426 UDP pmdmgr 7427 TCP oveadmgr
11/09/2012
Page 125 of 144
7427 UDP oveadmgr 7428 TCP ovladmgr
7428 UDP ovladmgr 7429 TCP opi-sock
7429 UDP opi-sock 7430 TCP xmpv7 7430 UDP xmpv7 7431 TCP pmd
7431 UDP pmd 7437 7437 7491 7491 7500 7500 7501 7501 TCP UDP TCP UDP TCP UDP TCP UDP faximum faximum telops-lmd telops-lmd silhouette silhouette ovbus ovbus ovhpas
7510 TCP
7510 UDP ovhpas 7511 7511 7544 7544 7545 7545 7566 7566 7570 7570 7588 7588 7597 7609 7614 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP TCP TCP pafec-lm pafec-lm nta-ds nta-ds nta-us nta-us vsi-omega vsi-omega aries-kfinder aries-kfinder sun-lm sun-lm
Manager OpenView DM Log Agent Manager OpenView DM Log Agent Manager OpenView DM rqt communication OpenView DM rqt communication OpenView DM xmpv7 api pipe OpenView DM xmpv7 api pipe OpenView DM ovc/xmpv3 api pipe OpenView DM ovc/xmpv3 api pipe Faximum Faximum telops-lmd telops-lmd Silhouette User Silhouette User HP OpenView Bus Daemon HP OpenView Bus Daemon HP OpenView Application Server HP OpenView Application Server pafec-lm pafec-lm FlowAnalyzer DisplayServer FlowAnalyzer DisplayServer FlowAnalyzer UtilityServer FlowAnalyzer UtilityServer VSI Omega VSI Omega Aries Kfinder Aries Kfinder Sun License Manager Sun License Manager
Genue
Qaz Snid Wollf indi Instrument Neutral Distributed Interface Instrument Neutral Distributed Interface Binghe, Glacier, Hyne pmdfmgt pmdfmgt imqtunnels imqtunnels imqtunnel imqtunnel imqbrokerd imqbrokerd medimageportal medimageportal sstp-1 PMDF Management PMDF Management BlackStar, Ghost iMQ SSL tunnel iMQ SSL tunnel iMQ Tunnel iMQ Tunnel iMQ Broker Rendezvous iMQ Broker Rendezvous Glacier MedImage Portal MedImage Portal Sakura Script Transfer Protocol Sakura Script Transfer Protocol cbt cbt Interwise Interwise VSTAT
7624 TCP
7624 UDP indi 7626 7633 7633 7648 7674 7674 7675 7675 7676 7676 7718 7720 7720 TCP TCP UDP TCP TCP UDP TCP UDP TCP UDP TCP TCP UDP
7743 TCP
7743 UDP sstp-1 7777 7777 7778 7778 7779 TCP UDP TCP UDP TCP cbt cbt interwise interwise vstat
God Message, The Thing (modified), Tini
11/09/2012
Page 126 of 144
7779 7781 7781 7786 7786 7788 7789 7797 7797 7798 7798 7826 7845 7845 7846 7846 7887 7891 7913 7913 7932 7932 7933 7933 7967 7967 7979 7979 7980 7980 7983 7997 7999 7999 8000 8000 8001 8001 8002 8002 8008 8008 8011 8012 8012 8022 8022 8032 8032 8033 8033
UDP TCP UDP TCP UDP TCP TCP TCP UDP TCP UDP TCP TCP UDP TCP UDP TCP TCP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP TCP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP TCP UDP TCP UDP TCP UDP TCP UDP
vstat accu-lmgr accu-lmgr minivend minivend
VSTAT accu-lmgr accu-lmgr MINIVEND MINIVEND Last, Matrix Back Door Setup, ICKiller, Mozilla
pnet-conn pnet-conn pnet-enc pnet-enc apc-7845 apc-7845 apc-7846 apc-7846
Propel Connector port Propel Connector port Propel Encoder port Propel Encoder port MiniOblivion APC 7845 APC 7845 APC 7846 APC 7846 SmallFun The ReVeNgEr
qo-secure qo-secure t2-drm t2-drm t2-brm t2-brm supercell supercell micromuse-ncps micromuse-ncps quest-vista quest-vista
irdmi2 irdmi2 irdmi irdmi vcom-tunnel vcom-tunnel teradataordbms teradataordbms http-alt http-alt
oa-system oa-system pro-ed pro-ed mindprint mindprint http-alt http-alt radan-http radan-http xprint-server xprint-server
8080 TCP 8080 8088 8088 8100 8100 8110 8111 8115 8115 8116 8116 8118 8118 UDP TCP UDP TCP UDP TCP TCP TCP UDP TCP UDP TCP UDP
mtl8000-matrix mtl8000-matrix cp-cluster cp-cluster privoxy privoxy
QuickObjects secure port QuickObjects secure port Tier 2 Data Resource Manager Tier 2 Data Resource Manager Tier 2 Business Rules Manager Tier 2 Business Rules Manager Supercell Supercell Micromuse-ncps VagrNocker Micromuse-ncps Quest Vista Quest Vista Mstream VagrNocker iRDMI2 iRDMI2 iRDMI XConsole iRDMI VCOM Tunnel VCOM Tunnel Teradata ORDBMS Teradata ORDBMS HTTP Alternate HTTP Alternate Way Ptakks Ptakks oa-system oa-system ProEd ProEd MindPrint MindPrint Brown Orifice, Generic backdoor, HTTP Alternate (see port 80) RemoConChubo, Reverse WWW Tunnel Backdoor, RingZero HTTP Alternate (see port 80) Radan HTTP Radan HTTP Xprint Server Xprint Server LoseLove LoseLove MTL8000 Matrix MTL8000 Matrix Check Point Clustering Check Point Clustering Privoxy HTTP proxy Privoxy HTTP proxy
11/09/2012
Page 127 of 144
8121 TCP 8121 UDP 8122 TCP 8122 UDP 8123-8129 8130 TCP 8130 UDP 8131 TCP 8131 UDP 8132 TCP 8132 UDP 8160 TCP 8160 UDP 8161 TCP 8161 UDP 8199 TCP 8199 UDP 8200 TCP 8200 UDP 8201 TCP 8201 UDP 8204 TCP 8204 UDP 8205 TCP 8205 UDP 8206 TCP 8206 UDP 8207 TCP 8207 UDP 8208 TCP 8208 UDP 8301 TCP 8302 TCP 8351 TCP 8351 UDP 8372 TCP 8376 TCP 8376 UDP 8377 TCP 8377 UDP 8378 TCP 8378 UDP 8379 TCP 8379 UDP 8380 TCP 8380 UDP 8400 TCP 8400 UDP 8401 TCP 8401 UDP 8402 TCP 8402 UDP 8403 TCP 8403 UDP 8416 TCP 8416 UDP 8417 TCP 8417 UDP 8443 TCP 8443 UDP 8444 TCP 8444 UDP 8450 TCP 8450 UDP 8473 TCP 8473 UDP 8500 TCP
apollo-data apollo-data apollo-admin apollo-admin indigo-vrmi indigo-vrmi indigo-vbcp indigo-vbcp dbabble dbabble patrol patrol patrol-snmp patrol-snmp vvr-data vvr-data trivnet1 trivnet1 trivnet2 trivnet2 lm-perfworks lm-perfworks lm-instmgr lm-instmgr lm-dta lm-dta lm-sserver lm-sserver lm-webwatcher lm-webwatcher
Apollo Data Port Apollo Data Port Apollo Admin Port Apollo Admin Port Unassigned INDIGO-VRMI INDIGO-VRMI INDIGO-VBCP INDIGO-VBCP dbabble dbabble Patrol Patrol Patrol SNMP Patrol SNMP VVR DATA VVR DATA TRIVNET TRIVNET TRIVNET TRIVNET LM Perfworks LM Perfworks LM Instmgr LM Instmgr LM Dta LM Dta LM SServer LM SServer LM Webwatcher LM Webwatcher LoseLove LoseLove
server-find server-find cruise-enum cruise-enum cruise-swroute cruise-swroute cruise-config cruise-config cruise-diags cruise-diags cruise-update cruise-update cvd cvd sabarsd sabarsd abarsd abarsd admind admind espeech espeech espeech-rtp espeech-rtp pcsync-https pcsync-https pcsync-http pcsync-http npmp npmp vp2p vp2p fde
Server Find Server Find NetBoy Cruise ENUM Cruise ENUM Cruise SWROUTE Cruise SWROUTE Cruise CONFIG Cruise CONFIG Cruise DIAGS Cruise DIAGS Cruise UPDATE Cruise UPDATE cvd cvd sabarsd sabarsd abarsd abarsd admind admind eSpeech Session Protocol eSpeech Session Protocol eSpeech RTP Protocol eSpeech RTP Protocol PCsync HTTPS PCsync HTTPS PCsync HTTP PCsync HTTP npmp npmp Virtual Point to Point Virtual Point to Point Flight Data Exchange
11/09/2012
Page 128 of 144
8500 8554 8554 8555 8555 8611 8611 8612 8612 8613 8613 8614 8614 8685 8720 8733 8733 8734 8763 8763 8764 8764 8765 8765 8786 8786 8787 8787 8804 8804 8811 8812 8879 8880 8880 8888 8888 8889 8889 8890 8890
UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP TCP TCP UDP TCP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP TCP TCP TCP UDP TCP UDP TCP UDP TCP UDP
fde rtsp-alt rtsp-alt d-fence d-fence canon-bjnp1 canon-bjnp1 canon-bjnp2 canon-bjnp2 canon-bjnp3 canon-bjnp3 canon-bjnp4 canon-bjnp4
Flight Data Exchange RTSP Alternate (see port 554) RTSP Alternate (see port 554) SYMAX D-FENCE SYMAX D-FENCE Canon BJNP Port 1 Canon BJNP Port 1 Canon BJNP Port 2 Canon BJNP Port 2 Canon BJNP Port 3 Canon BJNP Port 3 Canon BJNP Port 4 Canon BJNP Port 4 Unin68 Connection
ibus ibus mc-appserver mc-appserver openqueue openqueue ultraseek-http ultraseek-http msgclnt msgclnt msgsrvr msgsrvr truecm truecm
iBus iBus AutoSpy MC-APPSERVER MC-APPSERVER OPENQUEUE OPENQUEUE Ultraseek HTTP Ultraseek HTTP Message Client Message Client Message Server Message Server truecm truecm
Back Orifice 2000
Force FraggleRock Lite Hack Office Armageddon cddbp-alt cddbp-alt ddi-tcp-1 ddi-udp-1 ddi-tcp-2 ddi-udp-2 ddi-tcp-3 ddi-udp-3 ddi-tcp-4 CDDBP CDDBP NewsEDGE server TCP (TCP 1) NewsEDGE server UDP (UDP 1) Desktop Data TCP 1 NewsEDGE server broadcast Desktop Data TCP 2 NewsEDGE client broadcast Desktop Data TCP 3: NESS application Desktop Data UDP 3: NESS application Desktop Data TCP 4: FARM product Desktop Data UDP 4: FARM product Desktop Data TCP 5: NewsEDGE/Web application Desktop Data UDP 5: NewsEDGE/Web application Desktop Data TCP 6: COAL application Desktop Data UDP 6: COAL application Last jmb-cds1 jmb-cds1 jmb-cds2 jmb-cds2 manyone-http manyone-http manyone-xml manyone-xml cumulus-admin cumulus-admin JMB-CDS 1 JMB-CDS 1 JMB-CDS 2 JMB-CDS 2 manyone-http manyone-http manyone-xml manyone-xml Cumulus Admin Port Cumulus Admin Port
8891 TCP
8891 UDP ddi-udp-4 8892 TCP ddi-tcp-5
8894 UDP ddi-udp-7 8899 8900 8900 8901 8901 8910 8910 8911 8911 8954 8954 TCP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
11/09/2012
Page 129 of 144
8988 8989 8999 8999 9000 9000 9001 9001 9002 9002 9020 9020 9021 9021 9022 9022 9023 9023 9024 9024 9025 9025 9026 9026 9080 9080 9090 9090 9091 9091 9100 9100 9101 9101 9102 9102 9103 9103 9104 9104 9160 9160 9161 9161 9162 9162 9163 9163 9164 9164
TCP TCP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
BacHack Rcon, Recon, Xcon bctp bctp cslistener cslistener etlservicemgr etlservicemgr dynamid dynamid tambora tambora panagolin-ident panagolin-ident paragent paragent swa-1 swa-1 swa-2 swa-2 swa-3 swa-3 swa-4 swa-4 glrpc glrpc websm websm xmltec-xmlmail xmltec-xmlmail pdl-datastream pdl-datastream bacula-dir bacula-dir bacula-fd bacula-fd bacula-sd bacula-sd peerwire peerwire netlock1 netlock1 netlock2 netlock2 netlock3 netlock3 netlock4 netlock4 netlock5 netlock5 wap-wsp Brodos Crypto Trade Protocol Brodos Crypto Trade Protocol CSlistener CSlistener ETL Service Manager ETL Service Manager DynamID authentication DynamID authentication TAMBORA TAMBORA Pangolin Identification Pangolin Identification PrivateArk Remote Agent PrivateArk Remote Agent Secure Web Access - 1 Secure Web Access - 1 Secure Web Access - 2 Secure Web Access - 2 Secure Web Access - 3 Secure Web Access - 3 Secure Web Access - 4 Secure Web Access - 4 Groove GLRPC Groove GLRPC WebSM WebSM xmltec-xmlmail xmltec-xmlmail Printer PDL Data Stream Printer PDL Data Stream Bacula Director Bacula Director Bacula File Daemon Bacula File Daemon Bacula Storage Daemon Bacula Storage Daemon PeerWire PeerWire NetLOCK1 NetLOCK1 NetLOCK2 NetLOCK2 NetLOCK3 NetLOCK3 NetLOCK4 NetLOCK4 NetLOCK5 NetLOCK5 WAP connectionless session service WAP connectionless session service WAP session service WAP session service WAP secure connectionless session service WAP secure connectionless session service WAP secure session service WAP secure session service WAP vCard WAP vCard WAP vCal WAP vCal WAP vCard Secure
Netministrator, Aristotles
9200 TCP
9200 UDP wap-wsp 9201 TCP wap-wsp-wtp 9201 UDP wap-wsp-wtp 9202 TCP wap-wsp-s
9202 UDP wap-wsp-s 9203 9203 9204 9204 9205 9205 9206 TCP UDP TCP UDP TCP UDP TCP wap-wsp-wtp-s wap-wsp-wtp-s wap-vcard wap-vcard wap-vcal wap-vcal wap-vcard-s
11/09/2012
Page 130 of 144
9206 9207 9207 9210 9210
UDP TCP UDP TCP UDP
wap-vcard-s wap-vcal-s wap-vcal-s oma-mlp oma-mlp oma-mlp-s
9211 TCP
9211 UDP oma-mlp-s 9217 9217 9281 9281 9282 9282 9283 9283 9284 9284 9285 9285 9287 9287 9292 9292 9301 9321 9321 9325 9343 9343 9344 9344 9346 9346 9374 9374 9396 9396 9397 9397 9400 9401 9402 9500 9500 TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP TCP UDP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP TCP TCP TCP UDP fsc-port fsc-port swtp-port1 swtp-port1 swtp-port2 swtp-port2 callwaveiam callwaveiam visd visd n2h2server n2h2server cumulus cumulus armtechdaemon armtechdaemon guibase guibase mpidcmgr mpidcmgr mphlpdmc mphlpdmc ctechlicensing ctechlicensing fjdmimgr fjdmimgr fjinvmgr fjinvmgr mpidcagt mpidcagt
WAP vCard Secure WAP vCal Secure WAP vCal Secure OMA Mobile Location Protocol OMA Mobile Location Protocol OMA Mobile Location Protocol Secure OMA Mobile Location Protocol Secure FSC Communication Port FSC Communication Port SofaWare transport port 1 SofaWare transport port 1 SofaWare transport port 2 SofaWare transport port 2 CallWaveIAM CallWaveIAM VERITAS Information Serve VERITAS Information Serve N2H2 Filter Service Port N2H2 Filter Service Port Cumulus Cumulus ArmTech Daemon ArmTech Daemon LoseLove guibase guibase Mstream MpIdcMgr MpIdcMgr Mphlpdmc Mphlpdmc C Tech Licensing C Tech Licensing fjdmimgr fjdmimgr fjinvmgr fjinvmgr MpIdcAgt MpIdcAgt InCommand InCommand InCommand
ismserver ismserver mngsuite
9535 TCP
9535 UDP mngsuite 9561 9563 9580 9594 9594 9595 9595 9600 9600 9612 9612 9696 9697 9747 9747 9753 9753 9800 TCP TCP TCP TCP UDP TCP UDP TCP UDP TCP UDP TCP TCP TCP UDP TCP UDP TCP
ismserver ismserver Management Suite Remote Control Management Suite Remote Control CRatPro CRatPro TheefLE
msgsys msgsys pds pds micromuse-ncpw micromuse-ncpw streamcomm-ds streamcomm-ds
Message System Message System Ping Discovery Service Ping Discovery Service MICROMUSE-NCPW MICROMUSE-NCPW StreamComm User Directory StreamComm User Directory Danton, Ghost Danton, Ghost
l5nas-parchan l5nas-parchan rasadv rasadv davsrc
L5NAS Parallel Channel L5NAS Parallel Channel rasadv rasadv WebDav Source Port
11/09/2012
Page 131 of 144
9800 UDP davsrc 9801 TCP sstp-2
9801 UDP sstp-2 9802 9802 9870 9872 9873 9874 9875 9875 9876 9876 9877 TCP UDP TCP TCP TCP TCP TCP UDP TCP UDP TCP davsrcs davsrcs
WebDav Source Port Sakura Script Transfer Protocol-2 Sakura Script Transfer Protocol-2 WebDAV Source TLS/SSL WebDAV Source TLS/SSL Remote Computer Control Center, R3C Portal of Doom - POD, PortalOfDoom Portal of Doom - POD, PortalOfDoom Portal of Doom - POD, PortalOfDoom Portal of Doom - POD, PortalOfDoom Cyber Attacker, Rux SmallBigBrother TransScout, SmallBigBrother, TransmissionScout SmallBigBrother
sapv1 sapv1 sd sd
Session Announcement v1 Session Announcement v1 Session Director Session Director
9878 TCP 9879 9888 9888 9898 9898 9899 9899 9900 9900 9900 9909 9909 9911 9911 9950 9950 9951 9951 9952 9952 9989 9990 9990 9991 9991 9992 9992 9993 9993 9994 9994 9995 9995 9996 9996 9997 9997 9998 9998 9999 9999 TCP TCP UDP TCP UDP TCP UDP TCP UDP SCTP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP cyborg-systems cyborg-systems monkeycom monkeycom sctp-tunneling sctp-tunneling iua iua iua domaintime domaintime sype-transport sype-transport apc-9950 apc-9950 apc-9951 apc-9951 apc-9952 apc-9952 osm-appsrvr osm-appsrvr osm-oev osm-oev palace-1 palace-1 palace-2 palace-2 palace-3 palace-3 palace-4 palace-4 palace-5 palace-5 palace-6 palace-6 distinct32 distinct32 distinct distinct ndmp CYBORG Systems CYBORG Systems MonkeyCom MonkeyCom SCTP TUNNELING SCTP TUNNELING IUA IUA IUA domaintime domaintime SYPECom Transport Protocol SYPECom Transport Protocol APC 9950 APC 9950 APC 9951 APC 9951 APC 9952 APC 9952
Ini-Killer OSM Applet Server OSM Applet Server OSM Event Server OSM Event Server OnLive-1 OnLive-1 OnLive-2 OnLive-2 OnLive-3 OnLive-3 Palace-4 Palace-4 Palace-5 Palace-5 Palace-6 Palace-6 Distinct32 Distinct32 distinct distinct Network Data Management Protocol Network Data Management Protocol SCP Configuration Port SCP Configuration Port MVS Capacity MVS Capacity
The Prayer 1, ForcedEntry, Infra OpwinTRojan
10000 TCP
10000 UDP ndmp 10001 10001 10005 10007 10007 TCP UDP TCP TCP UDP scp-config scp-config mvs-capacity mvs-capacity
DTr OpwinTRojan
11/09/2012
Page 132 of 144
10008 10008 10013 10067 10067 10080 10080 10085 10086 10100 10101 10101 10102 10102 10103 10103 10113 10113 10114 10114 10115 10115 10116 10116
TCP UDP TCP TCP UDP TCP UDP TCP TCP TCP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
octopus octopus
Octopus Multiplexer Octopus Multiplexer
Cheese worm, Lion Amanda PortalOfDoom Portal of Doom - POD, PortalOfDoom
amanda amanda
Amanda Amanda Syphillis Syphillis Control Total, Gift trojan BrainSpy, Silencer, NewSilencer
ezmeeting-2 ezmeeting-2 ezproxy-2 ezproxy-2 ezrelay ezrelay netiq-endpoint netiq-endpoint netiq-qcheck netiq-qcheck netiq-endpt netiq-endpt netiq-voipa netiq-voipa bmc-perf-sd
10128 TCP
10128 UDP bmc-perf-sd 10167 10167 10252 10252 10260 10260 10288 10288 10520 10528 10607 10666 10666 10752 10990 10990 11000 11000 11001 11001 11011 11050 11051 TCP UDP TCP UDP TCP UDP TCP UDP TCP TCP TCP TCP UDP TCP TCP UDP TCP UDP TCP UDP TCP TCP TCP
eZmeeting eZmeeting eZproxy eZproxy eZrelay eZrelay NetIQ Endpoint NetIQ Endpoint NetIQ Qcheck NetIQ Qcheck NetIQ Endpoint NetIQ Endpoint NetIQ VoIP Assessor NetIQ VoIP Assessor BMC-PERFORM-SERVICE DAEMON BMC-PERFORM-SERVICE DAEMON
PortalOfDoom Portal of Doom - POD, PortalOfDoom apollo-relay apollo-relay axis-wimp-port axis-wimp-port blocks blocks Apollo Relay Port Apollo Relay Port Axis WIMP Port Axis WIMP Port Blocks Blocks Acid Shivers Host Control, HostControl Coma Ambush Ambush LINUX mounts Backdoor rmiaux rmiaux irisa irisa metasys metasys Auxiliary RMI Port Auxiliary RMI Port IRISA IRISA Metasys Metasys
Senna Spy Trojan Generator
Amanda Host Control, HostControl Host Control, HostControl vce Viral Computing Environment (VCE) Viral Computing Environment (VCE) smsqp smsqp Progenic trojan, Secret Agent, AntiNuke Cyn Cyn Noknok Noknok imip imip imip-channels imip-channels arena-server IMIP IMIP IMIP Channels Port IMIP Channels Port Arena Server Listen
11111 TCP
11111 UDP vce 11201 11201 11223 11225 11225 11306 11306 11319 11319 11320 11320 11321 TCP UDP TCP TCP UDP TCP UDP TCP UDP TCP UDP TCP smsqp smsqp
11/09/2012
Page 133 of 144
11321 11367 11367 11371 11371 11600 11600 11720 11720 11751 11751 11831 11967 11967 11991
UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP TCP UDP TCP
arena-server atm-uhas atm-uhas hkp hkp tempest-port tempest-port h323callsigalt h323callsigalt intrepid-ssl intrepid-ssl sysinfo-sp sysinfo-sp entextxid
Arena Server Listen ATM UHAS ATM UHAS OpenPGP HTTP Keyserver OpenPGP HTTP Keyserver Tempest Protocol Port Tempest Protocol Port h323 Call Signal Alternate h323 Call Signal Alternate Intrepid SSL Intrepid SSL Katux, Latinus, Pest SysInfo Service Protocol SysInfo Sercice Protocol PitfallSurprise IBM Enterprise Extender SNA XID Exchange IBM Enterprise Extender SNA XID Exchange IBM Enterprise Extender SNA COS Network Priority IBM Enterprise Extender SNA COS Network Priority IBM Enterprise Extender SNA COS High Priority IBM Enterprise Extender SNA COS High Priority IBM Enterprise Extender SNA COS Medium Priority IBM Enterprise Extender SNA COS Medium Priority IBM Enterprise Extender SNA COS Low Priority IBM Enterprise Extender SNA COS Low Priority DBISAM Database Server Regular DBISAM Database Server Regular DBISAM Database Server Admin DBISAM Database Server Admin Frenzy Gjamer
12000 TCP
12000 UDP entextxid 12001 TCP entextnetwk
12001 UDP entextnetwk 12002 TCP entexthigh
12002 UDP entexthigh 12003 TCP entextmed
12003 UDP entextmed 12004 TCP entextlow
12004 UDP entextlow 12005 TCP dbisamserver1
12005 UDP dbisamserver1 12006 TCP dbisamserver2
12006 UDP dbisamserver2 12043 12076 12109 12109 12172 12172 12223 12310 TCP TCP TCP UDP TCP UDP TCP TCP
rets-ssl rets-ssl hivep hivep
RETS over SSL RETS over SSL HiveP HiveP Hack99 KeyLogger Precursor Adore sshd, cron / crontab, Whack Job, ValvNet, Pie Bill Gates, NetBus worm, NetBus Toy, NetBus, Mypic, GabanBus, Fat Bitch trojan, Ashley, X-bill, Fade, icmp_pipe.c Fat Bitch trojan, NetBus, GabanBus, X-bill Bionet BioNet, Webhead Whack-a-mole Whack-a-mole Whack-a-mole KheSanh KheSanh Bionet Buttman DUN Control, Buttman ButtMan Buttman
12345 TCP 12345 12346 12348 12349 12361 12362 12363 12389 12389 12478 12623 12623 12624 12625
italk
Italk Chat System Italk Chat System
UDP italk TCP TCP TCP TCP TCP TCP TCP UDP TCP TCP UDP TCP TCP
11/09/2012
Page 134 of 144
12625 12631 12701 12753 12753 12754 12904 12973 12975
UDP TCP TCP TCP tsaf UDP tsaf TCP TCP TCP TCP
Buttman Whack Job Eclipse 2000 tsaf port tsaf port Mstream Akropolis, Rocks QR keylogger/remote access QR keylogger/remote access Senna Spy Trojan Generator, Senna Spy Trojan Generator BitchController, Hacker Brasil - HBR PsychWard PsychWard I-ZIPQD I-ZIPQD PowWow Client PowWow Client PowWow Server PowWow Server
13000 TCP 13010 13013 13014 13160 13160 13223 13223 13224 13224 13473 13700 TCP TCP TCP TCP UDP TCP UDP TCP UDP TCP TCP
i-zipqd i-zipqd powwow-client powwow-client powwow-server powwow-server
Hack99 KeyLogger
Chupacabra Kuang 2 The Virus bprd BPRD Protocol (VERITAS NetBackup) BPRD Protocol (VERITAS NetBackup) BPDBM Protocol (VERITAS NetBackup) BPDBM Protocol (VERITAS NetBackup) BP Java MSVC Protocol BP Java MSVC Protocol Veritas Network Utility Veritas Network Utility AFTP bpcd bpcd vopied vopied dsmcc-config dsmcc-config dsmcc-session dsmcc-session dsmcc-passthru dsmcc-passthru dsmcc-download dsmcc-download dsmcc-ccp VERITAS NetBackup VERITAS NetBackup VOPIED Protocol VOPIED Protocol DSMCC Config DSMCC Config DSMCC Session Messages DSMCC Session Messages DSMCC Pass-Thru Messages DSMCC Pass-Thru Messages DSMCC Download Protocol DSMCC Download Protocol DSMCC Channel Change Protocol DSMCC Channel Change Protocol SUA De-Registered (2001 June 06) SUA sage Best! Config Server 1 sage Best! Config Server 1 sage Best! Config Server 2 sage Best! Config Server 2 Eurosol Eurosol vcs-app vcs-app gcm-app gcm-app vrts-tdd vrts-tdd VCS Application VCS Application GCM Application GCM Application Veritas Traffic Director Veritas Traffic Director CyberSpy HellDriver
13720 TCP
13720 UDP bprd 13721 TCP bpdbm
13721 UDP bpdbm 13722 13722 13724 13724 13753 13782 13782 13783 13783 13818 13818 13819 13819 13820 13820 13821 13821 TCP UDP TCP UDP TCP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP bpjava-msvc bpjava-msvc vnetd vnetd
13822 TCP
13822 UDP dsmcc-ccp 14001 14001 14001 14033 14033 14034 14034 14100 14100 14141 14141 14145 14145 14149 14149 14194 14286 TCP UDP SCTP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP TCP sua sua sua sage-best-com1 sage-best-com1 sage-best-com2 sage-best-com2
11/09/2012
Page 135 of 144
14500 14501 14502 14503 14504 14936 14936 14937 14937 15000 15000 15092 15104 15345 15345 15363 15363 15382 15432 15555 15858 16161 16161 16322 16360 16360 16361 16361 16367 16367 16368 16368 16384 16384 16484 16660 16661 16772 16959 16969 16982 16991 16991 17007 17007 17166 17185 17185 17219 17219 17300 17449 17499 17500 17569 17593 17777 18000 18000 18181 18181 18182 18182 18183 18183 18184 18184
TCP TCP TCP TCP TCP TCP UDP TCP UDP TCP UDP TCP TCP TCP UDP TCP UDP TCP TCP TCP TCP TCP UDP TCP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP TCP TCP TCP TCP TCP TCP TCP UDP TCP UDP TCP TCP UDP TCP UDP TCP TCP TCP TCP TCP TCP TCP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP
PC Invader, PCInvader PC Invader, PCInvader PC Invader, PCInvader PC Invader, PCInvader PCInvader hde-lcesrvr-1 hde-lcesrvr-1 hde-lcesrvr-2 hde-lcesrvr-2 hydap hydap hde-lcesrvr-1 hde-lcesrvr-1 hde-lcesrvr-2 hde-lcesrvr-2 Hypack Data Aquisition Hypack Data Aquisition
NetDemon Host Control, HostControl Mstream
xpilot xpilot 3link 3link
XPilot Contact Port XPilot Contact Port 3Link Negotiation 3Link Negotiation SubZero Cyn ICMIBC CDK
sun-sea-port sun-sea-port netserialext1 netserialext1 netserialext2 netserialext2 netserialext3 netserialext3 netserialext4 netserialext4 connected connected
Solaris SEA Port Solaris SEA Port LastDoor netserialext1 netserialext1 netserialext2 netserialext2 netserialext3 netserialext3 netserialext4 netserialext4 Connected Corp Connected Corp Mosucker Stracheldracht, Stacheldraht Dfch ICQ Revenge SubSeven Portal Of Doom, Priority, Progenic AcidShiver
intel-rci-mp intel-rci-mp isode-dua isode-dua soundsvirtual soundsvirtual chipper chipper
INTEL-RCI-MP INTEL-RCI-MP
Mosaic Sounds Virtual Sounds Virtual Chipper Chipper Kaung 2 The Virus, Kuang2 the virus Kid Terror CrazzyNet CrazzyNet Infector Audiodoor Nephron biimenu biimenu opsec-cvp opsec-cvp opsec-ufp opsec-ufp opsec-sam opsec-sam opsec-lea opsec-lea Beckman Instruments, Inc. Beckman Instruments, Inc. OPSEC CVP OPSEC CVP OPSEC UFP OPSEC UFP OPSEC SAM OPSEC SAM OPSEC LEA OPSEC LEA
11/09/2012
Page 136 of 144
18185 18185 18186 18186 18187 18187 18241 18241 18463 18463 18667 18753 18769 18769 18888 18888 19191 19191 19194 19194 19283 19283 19315 19315 19398 19398 19410 19410 19411 19411 19412 19412 19540 19540 19541 19541 19604 19605 19864 19991 20000 20000 20001 20001 20002 20005 20023 20034 20034 20139 20168 20202 20202 20203 20222 20222 20331 20432 20432 20433 20670 20670 20999 20999 21212
TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP TCP TCP TCP TCP UDP TCP UDP TCP TCP TCP TCP UDP TCP TCP TCP UDP TCP TCP UDP TCP TCP UDP UDP TCP UDP TCP UDP TCP
opsec-omi opsec-omi ohsc ohsc opsec-ela opsec-ela checkpoint-rtm checkpoint-rtm ac-cluster ac-cluster
OPSEC OMI OPSEC OMI Occupational Health SC Occupational Health Sc OPSEC ELA OPSEC ELA Check Point RTM Check Point RTM AC Cluster AC Cluster Knark Shaft
ique ique apc-necmp apc-necmp opsec-uaa opsec-uaa ua-secureagent ua-secureagent keysrvr keysrvr keyshadow keyshadow mtrgtrans mtrgtrans hp-sco hp-sco hp-sca hp-sca hp-sessmon hp-sessmon sxuptp sxuptp jcp jcp
IQue Protocol IQue Protocol APCNECMP APCNECMP OPSEC UAA OPSEC UAA UserAuthority SecureAgent UserAuthority SecureAgent Key Server for SASSAFRAS Key Server for SASSAFRAS Key Shadow for SASSAFRAS Key Shadow for SASSAFRAS mtrgtrans mtrgtrans hp-sco hp-sco hp-sca hp-sca HP-SESSMON HP-SESSMON SXUPTP SXUPTP JCP Client JCP Client
BlueFire
dnp dnp microsan microsan
DNP DNP MicroSAN MicroSAN
Metal Metal ICQ Revenge Dfch Millenium Insect, Millenium, Millenium (Lm) AcidkoR Mosucker VP Killer NetRex, Whack Job, NetBus 2.0 Pro #skanbotz IRC-SubSeven Trojan W32.HLLW.Lovgate.C@mm
nburn_id nburn_id
NetBurner ID Port NetBurner ID Port
ipdtp-port ipdtp-port ipulse-ics ipulse-ics
IPD Tunneling Port IPD Tunneling Port Logged!, Chupacabra iPulse-ICS iPulse-ICS BLA trojan Shaft Shaft Shaft
track track athand-mmp athand-mmp
Track Track At Hand MMP AT Hand MMP Schwindler Girl Friend, Kidterror, GirlFriend, Kid Terror, Matrix
21544 TCP
11/09/2012
Page 137 of 144
21554 TCP 21579 21584 21590 21590 21684 21800 21800 21845 21845 TCP TCP TCP UDP TCP TCP UDP TCP UDP
Exploiter, Schwindler, Kid Terror, FreddyK, Winsp00fer Breach Breach vofr-gateway vofr-gateway tvpm tvpm webphone webphone netspeak-is VoFR Gateway VoFR Gateway Intruse TVNC Pro Multiplexing TVNC Pro Multiplexing webphone webphone NetSpeak Corp. Directory Services NetSpeak Corp. Directory Services NetSpeak Corp. Connection Services NetSpeak Corp. Connection Services NetSpeak Corp. Automatic Call Distribution NetSpeak Corp. Automatic Call Distribution NetSpeak Corp. Credit Processing System NetSpeak Corp. Credit Processing System Latinus snapenetio snapenetio optocontrol optocontrol SNAPenetIO SNAPenetIO OptoControl OptoControl AcidShiver Cyn Donald Dick, Ruler, Prosiak Rux wnn6 wnn6 wnn6 wnn6 Bla AcidShiver, Bla vocaltec-wconf vocaltec-phone aws-brf Vocaltec Web Conference Vocaltec Internet Phone Intruzzo Telerate Information Platform LAN Telerate Information Platform LAN Breach Breach brf-gw Telerate Information Platform WAN Telerate Information Platform WAN NetTrash, Olive, Oxon, Infinaeon NetTrash, Infinaeon Logged Amanda Konik Asylum Evil FTP, Ugly FTP, Whack Job, EvilFTP, VagrNocker Donald Dick, DonaldDick Donald Dick, DonaldDick Donald Dick, DonaldDick InetSpy Infector
21846 TCP
21846 UDP netspeak-is 21847 TCP netspeak-cs
21847 UDP netspeak-cs 21848 TCP netspeak-acd
21848 UDP netspeak-acd 21849 TCP netspeak-cps
21849 UDP netspeak-cps 21957 22000 22000 22001 22001 22068 22115 22222 22223 22273 22273 22456 22457 22555 22555 22784 TCP TCP UDP TCP UDP TCP TCP TCP TCP TCP UDP TCP TCP TCP UDP TCP
22800 TCP
22800 UDP aws-brf 22845 TCP 22847 TCP 22951 TCP
22951 UDP brf-gw 23005 23006 23023 23032 23321 23432 TCP TCP TCP TCP TCP TCP
23456 TCP 23476 23476 23477 23777 24000 24000 24001 TCP UDP TCP TCP TCP med-ltp UDP med-ltp TCP med-fsp-rx
med-ltp med-ltp med-fsp-rx
11/09/2012
Page 138 of 144
24001 24002 24002 24003 24003 24004 24004 24005 24005 24006 24006 24242 24242 24249 24249 24289 24307 24386 24386 24554 24554 24677 24677 24678 24678 24922 24922 25000 25000 25001 25001 25002 25002 25003 25003 25004 25004 25005 25005 25006 25006 25007 25007 25008 25008 25009 25009 25123 25386 25486 25555 25556 25685 25686 25793 25793 25901 25901 25903 25903 25982 26000 26000 26208 26208 26260 26260
UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP TCP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP TCP TCP TCP TCP TCP TCP TCP UDP TCP UDP TCP UDP TCP TCP UDP TCP UDP TCP UDP
med-fsp-rx med-fsp-tx med-fsp-tx med-supp med-supp med-ovw med-ovw med-ci med-ci med-net-svc med-net-svc filesphere filesphere vista-4gl vista-4gl
med-fsp-rx med-fsp-tx med-fsp-tx med-supp med-supp med-ovw med-ovw med-ci med-ci med-net-svc med-net-svc fileSphere fileSphere Vista 4GL Vista 4GL Latinus Wildek
intel_rci intel_rci binkp binkp flashfiler flashfiler proactivate proactivate snip snip icl-twobase1 icl-twobase1 icl-twobase2 icl-twobase2 icl-twobase3 icl-twobase3 icl-twobase4 icl-twobase4 icl-twobase5 icl-twobase5 icl-twobase6 icl-twobase6 icl-twobase7 icl-twobase7 icl-twobase8 icl-twobase8 icl-twobase9 icl-twobase9 icl-twobase10 icl-twobase10
Intel RCI Intel RCI BINKP BINKP FlashFiler FlashFiler Turbopower Proactivate Turbopower Proactivate Simple Net Ident Protocol Simple Net Ident Protocol icl-twobase1 icl-twobase1 icl-twobase2 icl-twobase2 icl-twobase3 icl-twobase3 icl-twobase4 icl-twobase4 icl-twobase5 icl-twobase5 icl-twobase6 icl-twobase6 icl-twobase7 icl-twobase7 icl-twobase8 icl-twobase8 icl-twobase9 icl-twobase9 icl-twobase10 icl-twobase10 Goy'Z TroJan MoonPie MoonPie FreddyK FreddyK Moonpie Moonpie
vocaltec-hos vocaltec-hos niobserver niobserver niprobe niprobe quake quake wnn6-ds wnn6-ds ezproxy ezproxy
Vocaltec Address Server Vocaltec Address Server NIObserver NIObserver NIProbe NIProbe Moonpie quake quake wnn6-ds wnn6-ds eZproxy eZproxy
11/09/2012
Page 139 of 144
26261 TCP 26261 UDP 26262 TCP 26262 UDP 26263 TCP 26263 UDP 26264 TCP 26264 UDP 26274 TCP 26274 UDP 26681 TCP 2700027009 27160 TCP 27184 TCP 27184 UDP 27345 TCP 27345 UDP 27374 TCP 27444 27504 27504 27573 27665
ezmeeting ezmeeting k3software-svr k3software-svr k3software-cli k3software-cli gserver gserver
eZmeeting eZmeeting K3 Software-Server K3 Software-Server K3 Software-Client K3 Software-Client Gserver Gserver Delta Delta Source Voice Spy
flex-lm
FLEX LM (1-10) MoonPie Alvgus Alvgus
imagepump imagepump
ImagePump ImagePump Bad Blood, Ttfloader, The Saint, SubSeven Muie, SubSeven, Seeker, Ramen, Lion, Fake SubSeven, EGO, Webhead, Muerte Trinoo Kopek HTTP Head Port Kopek HTTP Head Port SubSeven Trinoo TW Authentication/Key Distribution and Attribute Certificate Services Hack'a'Tack Hack'a'Tack HackaTack, Hack'a'Tack Hack'a'Tack 2K Hack'a'Tack Hack'a'Tack Hack'a'Tack Hack'a'Tack Hack'a'Tack Hack'a'Tack Hack'a'Tack Hack'a'Tack Hack'a'Tack Hack'a'Tack Exploiter Host Control, NetTrojan BackGate ovasOn DuckToy, Katux, Latinus, Pest The Unexplained The Unexplained Trojan Spirit 2001a Trojan Spirit 2001a Trojan Spirit 2001a Infector TerrOr32
UDP TCP kopek-httphead UDP kopek-httphead TCP TCP tw-auth-key tw-auth-key
27999 TCP 27999 28429 28430 28431 28431 28432 28432 28433 28433 28434 28434 28435 28435 28436 28436 28678 29104 29292 29369 29559 29891 29891 29976 29980 29984 30000 30001 30001 30002 30002 30003 30005 30029 30100 30101 30102 30103 30103 30133 UDP TCP TCP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP TCP TCP TCP TCP TCP UDP TCP TCP TCP TCP TCP UDP TCP UDP TCP TCP TCP TCP TCP TCP TCP UDP TCP
pago-services1 pago-services1 pago-services2 pago-services2
Pago Services 1 Pago Services 1 Pago Services 2 Pago Services 2
Lamers Death, LamersDeath Backdoor JZ AOLTrojan NetSphere NetSphere NetSphere NetSphere NetSphere Trojan Spirit 2001a, NetSphere Sockets de troie, Socket 23, Socket 25, Sockets
11/09/2012
Page 140 of 144
30303 30700 30947 30974 30999 31221 31320 31320 31335 31335 31336
TCP TCP TCP TCP TCP TCP TCP UDP TCP UDP TCP
31337 TCP
31337 UDP 31338 31338 31339 31399 31415 31416 31416 31554 31557 31620 31620 31631 31666 31745 31765 31765 31785 31787 31788 31789 31789 31790 31791 31791 31792 31887 31889 32001 32100 32418 32768 32768 32769 32769 32770 32770 32771 32771 32772 32772 32773 32773 32774 32774 32791 32896 32896 33270 33291 TCP UDP TCP TCP TCP TCP UDP TCP TCP TCP UDP TCP TCP TCP TCP UDP TCP TCP TCP TCP UDP TCP TCP UDP TCP TCP TCP TCP TCP TCP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP TCP UDP TCP TCP
xqosd xqosd
XQoS network monitor XQoS network monitor
des Troie Mantis Intruse Intruse Kaung 2, Kuang2 Knark LittleWitch LittleWitch Trinoo Trinoo Bo Whack, Butt Funnel ADM worm, cron / crontab, bindshell, Sm4ck, Linux Rootkit IV (4), Gummo, Freak88, Freak2k, Beeone, Baron Night, Back Orifice russian, Back Orifice (Lm), Back Fire, BO2, BO spy, BO client, BO Facil, Sockdmini, BackOrifice, Khaled, OPC, icmp_pipe.c Back Orifice, Back fire, Deep BO, BackOrifice, OPC Back Orifice, Butt Funnel, NetSpy (DK) Back Orifice, Deep BO NetSpy (DK), NetSpy (DK) NetSpy DK Lithium Lithium Lithium Schwindler Xanadu
lm-mon lm-mon
lm mon lm mon CleptoManicos BOWhack Buschtrommel
gamesmith-port gamesmith-port
GameSmith Port GameSmith Port HackaTack, Hack'a'Tack HackaTack, Hack'a'Tack HackaTack Hack'a'Tack HackaTack, Hack'a'Tack HackaTack Hack'a'Tack HackaTack, Hack'a'Tack HackaTack BDDT BDDT Donald Dick Peanut Brittle, Project nEXT, ProjectNext AcidBattery Hacker's Paradise
filenet-tms filenet-tms filenet-rpc filenet-rpc filenet-nch filenet-nch filenet-rmi filenet-rmi filenet-pa filenet-pa filenet-cm filenet-cm filenet-re filenet-re idmgratm idmgratm
Filenet TMS Filenet TMS Filenet RPC Filenet RPC Filenet NCH Filenet NCH FileNET RMI FileNet RMI FileNET Process Analyzer FileNET Process Analyzer FileNET Component Manager FileNET Component Manager FileNET Rules Engine FileNET Rules Engine Attachmate ID Manager Attachmate ID Manager
Acropolis, Akropolis, Rocks
Trinity RemoteHak
11/09/2012
Page 141 of 144
33331 33331 33333 33333 33434 33434 33567 33568 33577 33777 33911
TCP UDP TCP UDP TCP UDP TCP TCP TCP TCP TCP
diamondport diamondport
DiamondCentral Interface DiamondCentral Interface Blakharaz, Prosiak, Blackharaz Blackharaz
traceroute traceroute
traceroute use traceroute use Lion, T0rn Rootkit Lion, T0rn Rootkit Son of PsychWard, SonOfPsychward Son of PsychWard Spirit 2000, Spirit 2001
34249 TCP
turbonote-2
34249 UDP turbonote-2 34324 TCP 34378 34378 34379 34379 34444 34555 34763 34980 34980 35000 35555 35600 36794 36865 36865 37237 37266 TCP UDP TCP UDP TCP UDP TCP TCP UDP TCP UDP TCP TCP TCP UDP TCP TCP p-net-local p-net-local p-net-remote p-net-remote
TurboNote Relay Server Default Port TurboNote Relay Server Default Port BigGluck, TN, Tiny Telnet Server, Big Gluck, TelnetServer P-Net on IP local P-Net on IP local P-Net on IP remote P-Net on IP remote Donald Dick Trinoo (for Windows) Infector
ethercat ethercat
EtherCAT Port EhterCAT Port Infector Trinoo (for Windows) Subsari BugBear
kastenxpipe kastenxpipe
KastenX Pipe KastenX Pipe Mantis The Killer Trojan
37475 TCP
neckar
37475 UDP neckar 37651 37653 38201 38201 38741 39507 39681 39681 40308 40412 TCP TCP TCP UDP TCP TCP TCP UDP TCP TCP
science + computing's Venus Administration Port science + computing's Venus Administration Port Yet Another Trojan - YAT YAT
galaxy7-data galaxy7-data
Galaxy7 Data Tunnel Galaxy7 Data Tunnel CyberSpy Busters
turbonote-1 turbonote-1
TurboNote Default Port TurboNote Default Port Subsari The Spy, TheSpy Agent 40421, Masters Paradise, MastersParadise Masters Paradise, MastersParadise Masters Paradise Masters Paradise Masters Paradise
40421 TCP 40422 40423 40425 40426 40841 40841 40842 40842 40843 40843 40999 41111 41111 41337 41626 TCP TCP TCP TCP TCP UDP TCP UDP TCP UDP TCP TCP UDP TCP TCP
cscp cscp csccredir csccredir csccfirewall csccfirewall fs-qos fs-qos
CSCP CSCP CSCCREDIR CSCCREDIR CSCCFIREWALL CSCCFIREWALL DiemsMutter Foursticks QoS Protocol Foursticks QoS Protocol Storm Shah Remote Boot Tool - RBT, Remote Boot Tool RBT Remote Boot
41666 TCP 41666 UDP
11/09/2012
Page 142 of 144
41794 41794 41795 41795 43188 43188 43189 43189 43190 43190 44321 44321 44322 44322 44444 44575 44818 44818 45054 45054 45559 45673 45678 45678 45966 45966 46626 46882 47000 47000 47017 47262 47262 47557 47557 47624 47624 47806 47806
TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP UDP TCP TCP TCP UDP TCP UDP TCP TCP TCP UDP TCP UDP TCP TCP TCP UDP TCP TCP UDP TCP UDP TCP UDP TCP UDP
crestron-cip crestron-cip crestron-ctp crestron-ctp reachout reachout ndm-agent-port ndm-agent-port ip-provision ip-provision pmcd pmcd pmcdproxy pmcdproxy
Crestron Control Port Crestron Control Port Crestron Terminal Port Crestron Terminal Port REACHOUT REACHOUT NDM-AGENT-PORT NDM-AGENT-PORT IP-PROVISION IP-PROVISION PCP server (pmcd) PCP server (pmcd) PCP server (pmcd) proxy PCP server (pmcd) proxy Prosiak Exploiter
rockwell-encap rockwell-encap invision-ag invision-ag
Rockwell Encapsulation Rockwell Encapsulation InVision AG InVision AG Maniac rootkit Acropolis, Akropolis, Rocks
eba eba ssr-servermgr ssr-servermgr
EBA PRISE EBA PRISE SSRServerMgr SSRServerMgr Psychward Psychward
mbus mbus
Message Bus Message Bus T0rn Rootkit Delta Delta Source
dbbrowse dbbrowse directplaysrvr directplaysrvr ap ap bacnet
47808 TCP
47808 UDP bacnet 48000 48000 48001 48001 48002 48002 48003 48003 48004 48006 48556 48556 48619 48619 49000 TCP UDP TCP UDP TCP UDP TCP UDP TCP TCP TCP UDP TCP UDP TCP nimcontroller nimcontroller nimspooler nimspooler nimhub nimhub nimgtw nimgtw
Databeam Corporation Databeam Corporation Direct Play Server Direct Play Server ALC Protocol ALC Protocol Building Automation and Control Networks Building Automation and Control Networks Nimbus Controller Nimbus Controller Nimbus Spooler Nimbus Spooler Nimbus Hub Nimbus Hub Nimbus Gateway Nimbus Gateway Fraggle Rock Fraggle Rock, Fragglerock
com-bardac-dw com-bardac-dw iqobject iqobject
com-bardac-dw com-bardac-dw iqobject iqobject Fraggle Rock
Portas Dinmicas e/ou Privadas

Port Type Keyword Description
49301 TCP 49683 TCP 49683 UDP OnLine KeyLogger HolzPferd HolzPferd
Trojan info
11/09/2012
Page 143 of 144
50000 50130 50505 50766 50776 51234 51966 51996 52317 53001 54283 54320 54321 54321 55165 55166 57341 57922 58008 58009 58339 59090 59211 59345
TCP TCP TCP TCP TCP TCP TCP TCP TCP TCP TCP TCP TCP UDP TCP TCP TCP TCP TCP TCP TCP TCP TCP TCP
60000 TCP 60000 60001 60008 60068 60411 60412 60552 61348 61466 61603 63485 63536 63878 63879 64101 64969 65000 65390 65421 65432 65432 65530 65534 65535 UDP TCP TCP TCP TCP TCP TCP TCP TCP TCP TCP TCP TCP TCP TCP TCP TCP TCP TCP TCP UDP TCP TCP TCP
SubSARI, Infector Enterprise Sockets des Troie Fore, Schwindler Fore, Remote Windows Shutdown Cyn Cafeini Cafeini Acid Battery 2000 Remote Windows Shutdown - RWS SubSeven Back Orifice 2000 Back Orifice 2000, PCInvader, School Bus Back Orifice, Back Orifice 2000 File Manager trojan, File Manager trojan, WM Trojan Generator WM Trojan Generator NetRaider Bionet Tron Tron Butt Funnel AcidReign DuckToy NewFuture Deep Throat, Foreplay or Reduced Foreplay, Sockets des Troie, DeepThroat, MiniBacklash MiniBacklash Trinity Lion, T0rn Rootkit Xzip 6000068 Connection Connection RoxRat Bunker-Hill TeleCommando Bunker-Hill Bunker-Hill InsaneNetwork AphexFTP AphexFTP Taskman / Task Manager Lithium Devil, Sockets des Troie, Stacheldraht Eclypse Jade The Traitor (= th3tr41t0r) The Traitor (= th3tr41t0r) Windows Mite /sbin/initd Adore worm, RC1 trojan, Sins
Lista ICMP
Type
0 3 4 5 8 9 10 11 12 13 14
Keyword
Echo Reply Destination Unreachable Source Quench Redirect Echo Request Router Advertisement Router Solicitation Time Exceeded Parameter Problem Timestamp Request Timestamp Reply Ping
Description
Trojan info
Ping Attack Ping NIS ICMP message type Nachi, W32Welchia
11/09/2012
Page 144 of 144
15 16 17 18 30 31 32 33 34 35 36 37 38 39 40
Information Request Information Reply Address Mask Request Address Mask Reply Traceroute Datagram Conversion Error Mobile Host Redirect IPv6 Where-Are-You IPv6 I-Am-Here Mobile Registration Request Mobile Registration Reply Domain Name Request Domain Name Reply SKIP Photuris
NIS ICMP message type
11/09/2012

List of TCP/UDP Ports

Uploaded by

Document Information

Original Description:

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

List of TCP/UDP Ports

Uploaded by

Copyright:

Available Formats

Lista de Portas - TCP/UDP

Lista de Portas TCP/UDP

21 UDP ftp 22 TCP ssh 22 UDP ssh 23 TCP telnet

23 UDP telnet 24 TCP 24 UDP

UDP TCP UDP TCP TCP UDP TCP

smtp nsw-fe nsw-fe msg-icp msg-icp msg-auth msg-auth dsp dsp

31 TCP 31 33 33 35 35 37 37 38 UDP TCP UDP TCP UDP TCP UDP TCP

time time rap

Lista de Portas - TCP/UDP

49 UDP tacacs 50 TCP re-mail-ck

50 UDP re-mail-ck 51 TCP la-maint

ni-mail ni-mail acas acas whois++ whois++ covia

SubSARI Deep Throat, Foreplay or Reduced Foreplay

ADM worm, Lion

Lista de Portas - TCP/UDP

76 UDP deos 77 77 78 78 79 79 TCP UDP TCP UDP TCP UDP

vettcp vettcp finger finger

World Wide Web HTTP

kerberos kerberos su-mit-tg su-mit-tg dnsix

Lista de Portas - TCP/UDP

103 UDP gppitnp 104 TCP acr-nema

109 UDP pop2 110 TCP pop3

Hidden Port, Mandragore, NCX

Invisible Identd Deamon, Kazimas

Attack Bot, God Message, JammerKillah

Lista de Portas - TCP/UDP

Faranz, port 146 - Infector, Farnaz

143 UDP imap 144 TCP uma

Lista de Portas - TCP/UDP

Lista de Portas - TCP/UDP

192 UDP osu-nms 193 TCP srmp

195 UDP dn6-nlm-aud 196 TCP dn6-smm-red

200 UDP src 201 TCP at-rtmp

Lista de Portas - TCP/UDP

206 207 207 208 208

UDP TCP UDP TCP UDP

at-zis at-7 at-7 at-8 at-8 qmtp

220 UDP imap3 221 TCP fln-spx

Lista de Portas - TCP/UDP

Lista de Portas - TCP/UDP

320 320 321 321 322 322 333 333 334

TCP UDP TCP UDP TCP UDP TCP UDP TCP

ptp-general ptp-general pip pip rtsps rtsps texar texar pdap

Lista de Portas - TCP/UDP

Lista de Portas - TCP/UDP

396 397 397 398 398

UDP TCP UDP TCP UDP

netware-ip mptn mptn kryptolan kryptolan iso-tsap-c2

408 UDP prm-sm 409 TCP prm-nm

409 UDP prm-nm 410 TCP decladebug

Breach, Incognito TCP Wrappers trojan

Lista de Portas - TCP/UDP

445 UDP microsoft-ds 446 TCP ddm-rdb

446 UDP ddm-rdb 447 TCP ddm-dfm

447 UDP ddm-dfm 448 TCP ddm-ssl

448 UDP ddm-ssl 449 TCP as-servermap 449 UDP as-servermap

Lista de Portas - TCP/UDP

450 UDP tserver 451 TCP sfs-smp-net

Fatal Connections Hackers Paradise

Lista de Portas - TCP/UDP

481 481 482 482 483 483

TCP UDP TCP UDP TCP UDP