| 6063 |
X Windows System mit.edu |
| 6064 |
NDL-AHP-SVC |
| 6065 |
WinPharaoh |
| 6066 |
EWCTSP |
| 6067 |
SRB |
| 6068 |
GSMP |
| 6069 |
TRIP |
| 6070 |
Messageasap |
| 6071 |
SSDTP |
| 6072 |
DIAGNOSE-PROC |
| 6073 |
DirectPlay8 |
| 6100 |
SynchroNet-db |
| 6101 |
SynchroNet-rtc |
| 6102 |
SynchroNet-upd |
| 6103 |
RETS |
| 6104 |
DBDB |
| 6105 |
Prima Server |
| 6106 |
MPS Server |
| 6107 |
ETC Control |
| 6108 |
Sercomm-SCAdmin |
| 6109 |
GLOBECAST-ID |
| 6110 |
HP SoftBench CM |
| 6111 |
HP SoftBench Sub-Process Control |
| 6112 |
dtspcd |
| 6123 |
Backup Express |
| 6141 |
Meta Corporation License Manager |
| 6142 |
Aspen Technology License Manager |
| 6143 |
Watershed License Manager |
| 6144 |
StatSci License Manager - 1 |
| 6145 |
StatSci License Manager - 2 |
| 6146 |
Lone Wolf Systems License Manager |
| 6147 |
Montage License Manager |
| 6148 |
Ricardo North America License Manager |
| 6149 |
tal-pod |
| 6253 |
CRIP |
| 6321 |
Empress Software Connectivity Server 1 |
| 6322 |
Empress Software Connectivity Server 2 |
| 6389 |
clariion-evr01 |
| 6400 |
saegatesoftware.com |
| 6401 |
saegatesoftware.com |
| 6402 |
saegatesoftware.com |
| 6403 |
saegatesoftware.com |
| 6404 |
saegatesoftware.com |
| 6405 |
saegatesoftware.com |
| 6406 |
saegatesoftware.com |
| 6407 |
saegatesoftware.com |
| 6408 |
saegatesoftware.com |
| 6409 |
saegatesoftware.com |
| 6410 |
saegatesoftware.com |
| 6455 |
osmosys.incog.com |
| 6456 |
osmosys.incog.com |
| 6471 |
LVision License Manager |
| 6500 |
BoKS Master |
| 6501 |
BoKS Servc |
| 6502 |
BoKS Servm |
| 6503 |
BoKS Clntd |
| 6505 |
BoKS Admin Private Port |
| 6506 |
BoKS Admin Public Port |
| 6507 |
BoKS Dir Server Private Port |
| 6508 |
BoKS Dir Server Public Port |
| 6547 |
apc-tcp-udp-1 |
| 6548 |
apc-tcp-udp-2 |
| 6549 |
apc-tcp-udp-3 |
| 6550 |
fg-sysupdate |
| 6558 |
xdsxdm |
| 6669 |
Internet Relay Chat acrux.com |
| 6670 |
Vocaltec Global Online Directory |
| 6672 |
vision_server |
| 6673 |
vision_elmd |
| 6699 |
Napster |
| 6700 |
Napster |
| 6701 |
KTI/ICAD Nameserver |
| 6702 |
Carracho (client) |
| 6767 |
BMC PERFORM AGENT |
| 6768 |
BMC PERFORM MGRD |
| 6790 |
HNMP |
| 6831 |
ambit-lm |
| 6838 |
DDOS communication UDP |
| 6841 |
Netmo Default |
| 6842 |
Netmo HTTP |
| 6850 |
ICCRUSHMORE |
| 6888 |
MUSE |
| 6961 |
JMACT3 |
| 6962 |
jmevt2 |
| 6963 |
swismgr1 |
| 6964 |
swismgr2 |
| 6965 |
swistrap |
| 6966 |
swispol |
| 6969 |
acmsoda |
| 6998 |
IATP-highPri |
| 6999 |
IATP-normalPri |
| 7000 |
file server itself |
| 7001 |
callbacks to cache managers |
| 7002 |
users & groups database |
| 7003 |
volume location database |
| 7004 |
AFS/Kerberos authentication service |
| 7005 |
volume managment server |
| 7006 |
error interpretation service |
| 7007 |
basic overseer process |
| 7008 |
server-to-server updater |
| 7009 |
remote cache manager service |
| 7010 |
onlinet uninterruptable power supplies |
| 7011 |
Talon Discovery Port |
| 7012 |
Talon Engine |
| 7013 |
Microtalon Discovery |
| 7014 |
Microtalon Communications |
| 7015 |
Talon Webserver |
| 7020 |
DP Serve |
| 7021 |
DP Serve Admin |
| 7070 |
ARCP |
| 7099 |
lazy-ptop |
| 7100 |
X Font Service |
| 7121 |
Virtual Prototypes License Manager |
| 7141 |
vnet.ibm.com |
| 7170 |
Audio (inclusive) for incoming traffic
only |
| 7174 |
Clutild |
| 7200 |
FODMS FLIP |
| 7201 |
DLIP |
| 7390 |
The Swiss Exchange swx.ch |
| 7395 |
winqedit |
| 7426 |
OpenView DM Postmaster Manager |
| 7427 |
OpenView DM Event Agent Manager |
| 7428 |
OpenView DM Log Agent Manager |
| 7429 |
OpenView DM rqt communication |
| 7430 |
OpenView DM xmpv7 api pipe |
| 7431 |
OpenView DM ovc/xmpv3 api pipe |
| 7437 |
Faximum |
| 7491 |
telops-lmd |
| 7511 |
pafec-lm |
| 7544 |
FlowAnalyzer DisplayServer |
| 7545 |
FlowAnalyzer UtilityServer |
| 7566 |
VSI Omega |
| 7570 |
Aries Kfinder |
| 7588 |
Sun License Manager |
| 7597 |
TROJAN WORM |
| 7633 |
PMDF Management |
| 7640 |
CUSeeMe |
| 7648 |
CUCME live video/audio server |
| 7649 |
CUCME live video/audio server |
| 7650 |
CUCME live video/audio server |
| 7651 |
CUCME live video/audio server |
| 7777 |
cbt |
| 7778 |
Interwise |
| 7781 |
accu-lmgr |
| 7786 |
MINIVEND |
| 7932 |
Tier 2 Data Resource Manager |
| 7933 |
Tier 2 Business Rules Manager |
| 7967 |
Supercell |
| 7979 |
Micromuse-ncps |
| 7980 |
Quest Vista |
| 7983 |
DDOS communication UDP |
| 7999 |
iRDMI2 |
| 8000 |
iRDMI |
| 8001 |
VCOM Tunnel |
| 8002 |
Teradata ORDBMS |
| 8008 |
HTTP Alternate |
| 8032 |
ProEd |
| 8033 |
MindPrint |
| 8080 |
HTTP |
| 8130 |
INDIGO-VRMI |
| 8131 |
INDIGO-VBCP |
| 8160 |
Patrol |
| 8161 |
Patrol SNMP |
| 8200 |
TRIVNET |
| 8201 |
TRIVNET |
| 8204 |
LM Perfworks |
| 8205 |
LM Instmgr |
| 8206 |
LM Dta |
| 8207 |
LM SServer |
| 8208 |
LM Webwatcher |
| 8351 |
Server Find |
| 8376 |
Cruise ENUM |
| 8377 |
Cruise SWROUTE |
| 8378 |
Cruise CONFIG |
| 8379 |
Cruise DIAGS |
| 8380 |
Cruise UPDATE |
| 8400 |
cvd |
| 8401 |
sabarsd |
| 8402 |
abarsd |
| 8403 |
admind |
| 8450 |
npmp |
| 8473 |
Virtual Point to Point |
| 8554 |
RTSP Alternate |
| 8733 |
iBus |
| 8763 |
MC-APPSERVER |
| 8764 |
OPENQUEUE |
| 8765 |
Ultraseek HTTP |
| 8804 |
truecm |
| 8880 |
CDDBP |
| 8888 |
NewsEDGE server UDP (UDP 1) |
| 8889 |
NewsEDGE server broadcast |
| 8890 |
NewsEDGE client broadcast |
| 8891 |
Desktop Data UDP 3: NESS application |
| 8892 |
Desktop Data UDP 4: FARM product |
| 8893 |
Desktop Data UDP 5: NewsEDGE/Web
application |
| 8894 |
Desktop Data UDP 6: COAL application |
| 8900 |
JMB-CDS 1 |
| 8901 |
JMB-CDS 2 |
| 9000 |
CSlistener |
| 9090 |
WebSM |
| 9160 |
NetLOCK1 |
| 9161 |
NetLOCK2 |
| 9162 |
NetLOCK3 |
| 9163 |
NetLOCK4 |
| 9164 |
NetLOCK5 |
| 9200 |
WAP connectionless session service |
| 9201 |
WAP session service |
| 9202 |
WAP secure connectionless session service |
| 9203 |
WAP secure session service |
| 9204 |
WAP vCard |
| 9205 |
WAP vCal |
| 9206 |
WAP vCard Secure |
| 9207 |
WAP vCal Secure |
| 9321 |
guibase |
| 9325 |
DDOS communication UDP |
| 9343 |
MpIdcMgr |
| 9344 |
Mphlpdmc |
| 9374 |
fjdmimgr |
| 9396 |
fjinvmgr |
| 9397 |
MpIdcAgt |
| 9500 |
ismserver |
| 9535 |
Remote man server |
| 9594 |
Message System |
| 9595 |
Ping Discovery Service |
| 9600 |
MICROMUSE-NCPW |
| 9753 |
rasadv |
| 9876 |
Session Director |
| 9888 |
CYBORG Systems |
| 9898 |
MonkeyCom |
| 9899 |
SCTP TUNNELING |
| 9900 |
IUA |
| 9909 |
domaintime |
| 9950 |
APCPCPLUSWIN1 |
| 9951 |
APCPCPLUSWIN2 |
| 9952 |
APCPCPLUSWIN3 |
| 9992 |
Palace |
| 9993 |
Palace |
| 9994 |
Palace |
| 9995 |
Palace |
| 9996 |
Palace |
| 9997 |
Palace |
| 9998 |
Distinct32 |
| 9999 |
distinct |
| 10000 |
Network Data Management Protocol |
| 10001 |
rscsl |
| 10002 |
rscs2 |
| 10003 |
rscs3 |
| 10004 |
rscs4 |
| 10005 |
rscs5 |
| 10006 |
rscs6 |
| 10007 |
MVS Capacity |
| 10008 |
rscs8 |
| 10009 |
rscs9 |
| 10010 |
rscsa |
| 10011 |
rscsb |
| 10012 |
qmaster |
| 10067 |
Portal of Doom remote access backdoor |
| 10080 |
Amanda |
| 10113 |
NetIQ Endpoint |
| 10114 |
NetIQ Qcheck |
| 10115 |
Ganymede Endpoint |
| 10128 |
BMC-PERFORM-SERVICE DAEMON |
| 10167 |
Portal of Doom remote access backdoor |
| 10288 |
Blocks |
| 10498 |
DDOS Communication UDP |
| 11000 |
IRISA |
| 11001 |
Metasys |
| 11111 |
Viral Computing Environment (VCE) |
| 11367 |
ATM UHAS |
| 11720 |
h323 Call Signal Alternate |
| 12000 |
IBM Enterprise Extender SNA XID Exchange |
| 12001 |
IBM Enterprise Extender SNA COS Network
Priority |
| 12002 |
IBM Enterprise Extender SNA COS High
Priority |
| 12003 |
IBM Enterprise Extender SNA COS Medium
Priority |
| 12004 |
IBM Enterprise Extender SNA COS Low
Priority |
| 12172 |
HiveP |
| 12753 |
tsaf port |
| 13160 |
I-ZIPQD |
| 13223 |
PowWow Client |
| 13224 |
PowWow Server |
| 13720 |
BPRD Protocol (VERITAS NetBackup) |
| 13721 |
BPBRM Protocol (VERITAS NetBackup) |
| 13722 |
BP Java MSVC Protocol |
| 13782 |
VERITAS NetBackup |
| 13783 |
VOPIED Protocol |
| 13818 |
DSMCC Config |
| 13819 |
DSMCC Session Messages |
| 13820 |
DSMCC Pass-Thru Messages |
| 13821 |
DSMCC Download Protocol |
| 13822 |
DSMCC Channel Change Protocol |
| 14001 |
ITU SCCP (SS7) |
| 16360 |
netserialext1 |
| 16361 |
netserialext2 |
| 16367 |
netserialext3 |
| 16368 |
netserialext4 |
| 16991 |
INTEL-RCI-MP |
| 17007 |
isode-dua |
| 17219 |
Chipper |
| 18000 |
Beckman Instruments Inc. |
| 18181 |
OPSEC CVP |
| 18182 |
OPSEC UFP |
| 18183 |
OPSEC SAM |
| 18184 |
OPSEC LEA |
| 18185 |
OPSEC OMI |
| 18187 |
OPSEC ELA |
| 18463 |
AC Cluster |
| 18753 |
Shaft distributed attack tool handler -
agent |
| 18888 |
APCNECMP |
| 19283 |
Key Server for SASSAFRAS |
| 19315 |
Key Shadow for SASSAFRAS |
| 19410 |
hp-sco |
| 19411 |
hp-sca |
| 19412 |
HP-SESSMON |
| 19541 |
JCP Client |
| 20000 |
DNP |
| 20432 |
Shaft distributed attack agent |
| 20670 |
Track |
| 20999 |
AT Hand MMP |
| 21590 |
VoFR Gateway |
| 21845 |
webphone |
| 21846 |
NetSpeak Corp. Directory Services |
| 21847 |
NetSpeak Corp. Connection Services |
| 21848 |
NetSpeak Corp. Automatic Call
Distribution |
| 21849 |
NetSpeak Corp. Credit Processing System |
| 22000 |
SNAPenetIO |
| 22001 |
OptoControl |
| 22273 |
wnn6 |
| 22555 |
Vocaltec Internet Phone |
| 22800 |
Telerate Information Platform LAN |
| 22951 |
Telerate Information Platform WAN |
| 24000 |
med-ltp |
| 24001 |
med-fsp-rx |
| 24002 |
med-fsp-tx |
| 24003 |
med-supp |
| 24004 |
med-ovw |
| 24005 |
med-ci |
| 24006 |
med-net-svc |
| 24386 |
Intel RCI |
| 24554 |
BINKP |
| 25000 |
icl-twobase1 |
| 25001 |
icl-twobase2 |
| 25002 |
icl-twobase3 |
| 25003 |
icl-twobase4 |
| 25004 |
icl-twobase5 |
| 25005 |
icl-twobase6 |
| 25006 |
icl-twobase7 |
| 25007 |
icl-twobase8 |
| 25008 |
icl-twobase9 |
| 25009 |
icl-twobase10 |
| 25793 |
Vocaltec Address Server |
| 26000 |
quake |
| 26208 |
wnn6-ds |
| 27374 |
Linux.Ramen.Worm (RedHat Linux) |
| 27444 |
Trinoo distributed attack tool Master |
| 27999 |
Attribute Certificate Services |
| 31335 |
Trinoo distributed attack tool Bcast
Daemon registration port |
| 31337 |
Back Orifice(Trojanisches Pferd) |
| 31338 |
Deep Back Orifice (Trojanisches Pferd) |
| 31789 |
Hack-A-Tack Remote Access Trojan
(Trojanisches Pferd) |
| 31791 |
Hack-A-Tack Remote Access Trojan
(Trojanisches Pferd) |
| 32768 |
Filenet TMS |
| 32769 |
Filenet RPC |
| 32770 |
Filenet NCH |
| 32780 |
RPC |
| 33270 |
Trinity v3 distributed attack tool |
| 33434 |
traceroute use |
| 34555 |
Trinoo distributed attack tool Handler |
| 36865 |
KastenX Pipe |
| 40841 |
CSCP |
| 44818 |
Rockwell Encapsulation |
| 45678 |
EBA PRISE |
| 45966 |
SSRServerMgr |
| 47557 |
Databeam Corporation |
| 47624 |
Direct Play Server |
| 47806 |
ALC Protocol |
| 47808 |
Building Automation and Control Networks |
| 48000 |
Nimbus Controller |
| 48001 |
Nimbus Spooler |
| 48002 |
Nimbus Hub |
| 48003 |
Nimbus Gateway |
| 54321 |
Back Orifice 2000 (UDP) |
