| Port No. | Protocol | Service | Description |
|---|
| 0 | tcp/udp | # | Reserved |
| 1 | tcp/udp | tcpmux | TCP Port Service Multiplexer |
| 1 |
udp |
# |
Sockets des Troie |
| 2 | tcp/udp | compressnet | Management Utility |
| 2 |
tcp |
# |
Death |
| 3 | tcp/udp | compressnet | Compression Process |
| 3 |
tcp/udp |
compressnet |
Midnight Commander
Sometimes this program is assigned to this port |
| 4 | tcp/udp | # | Unassigned |
| 4 |
tcp |
# |
Self-Certifying File System(SFS)
sfssd acceps connections on TCP port 4 and
passes them to the appropriate SFS daemon.
SFS is a secure, global file system with
completely decentralized control. SFS uses
NFS 3 as the underlying protocol for file access. |
| 4 |
tcp |
# |
Midnight Commander
Sometimes this program is assigned to this prot |
| 5 | tcp/udp | rje | Remote Job Entry |
| 6 | tcp/udp | # | Unassigned |
| 7 | tcp/udp | echo | Echo |
| 8 | tcp/udp | # | Unassigned |
| 9 | tcp/udp | discard | Discard |
| 10 | tcp/udp | # | Unassigned |
| 11 | tcp/udp | systat | Active Users |
| 12 | tcp/udp | # | Unassigned |
| 13 | tcp/udp | daytime | Daytime (RFC 867) |
| 14 | tcp/udp | # | Unassigned |
| 15 | tcp | # | Unassigned [was netstat] |
| 15 | tcp/udp | # | Unassigned |
| 17 | tcp/udp | qotd | Quote of the Day |
| 18 | tcp/udp | msp | Message Send Protocol |
| 19 | tcp/udp | chargen | Character Generator |
| 20 | tcp/udp | ftp-data | File Transfer [Default Data] |
| 20 |
tcp |
# |
Randex |
| 21 | tcp/udp | ftp | File Transfer [Control] |
| 21 |
tcp |
# |
Senna Spy FTP server |
| 21 |
tcp |
# |
Back Construction, Blade Runner,
Cattivik FTP Server, CC Invader, Dark FTP,
Doly Trojan, Fore, Invisible FTP,
Juggernaut 42, Larva, MotIv FTP,
Net Administrator, Ramen,
Senna Spy FTP server, The Flu, Traitor 21,
WebEx, WinCrash |
| 22 | tcp/udp | ssh | SSH Remote Login Protocol |
| 22 |
tcp |
# |
Shaft |
| 22 |
udp |
# |
pcAnywhere(Used in older versions,
though newer version still use it for
backwards
compatibility.) |
| 23 | tcp/udp | telnet | Telnet |
| 23 |
tc |
# |
Fire HacKer, Tiny Telnet Server - TTS,
Truva Atl, MindControl |
| 24 | tcp/udp | # | any private mail system |
| 25 | tcp/udp | smtp | Simple Mail Transfer |
| 25 |
tcp |
# |
Ajan, Antigen, Barok,
Email Password Sender - EPS, EPS II, Gip,
Gris, Happy99, Hpteam mail, Hybris, I love you,
Kuang2, Magic Horse, MBT (Mail Bombing Trojan),
Moscow Email trojan, Naebi, NewApt worm,
ProMail trojan, Shtirlitz, Stealth, Tapiras,
Terminator, WinPC, WinSpy |
| 26 | tcp/udp | # | Unassigned |
| 26 |
tcp |
# |
W32.Netsky |
| 27 | tcp/udp | nsw-fe | NSW User System FE |
| 28 | tcp/udp | # | Unassigned |
| 29 | tcp/udp | msg-icp | MSG ICP |
| 30 | tcp/udp | # | Unassigned |
| 30 |
tcp |
# |
Agent 40421 |
| 31 | tcp/udp | msg-auth | MSG Authentication |
| 31 |
tcp |
# |
Agent 31, Hackers Paradise, Masters Paradise |
| 32 | tcp/udp | # | Unassigned |
| 33 | tcp/udp | dsp | Display Support Protocol |
| 34 | tcp/udp | # | Unassigned |
| 35 | tcp/udp | # | any private printer server |
| 36 | tcp/udp | # | Unassigned |
| 37 | tcp/udp | time | Time |
| 37 |
tcp/udp |
# |
W32.Sober |
| 38 | tcp/udp | rap | Route Access Protocol |
| 39 | tcp/udp | rlp | Resource Location Protocol |
| 39 |
tcp/udp |
# |
Upfudoor |
| 40 | tcp/udp | # | Unassigned |
| 40 |
tcp |
# |
Midnight Commander
Sometimes access FTP servers running at this port. |
| 41 | tcp/udp | graphics | Graphics |
| 41 |
tcp |
# |
RAT: Deep Throat
Puts an FTP service at port 41 (TCP).
Foreplay |
| 42 | tcp/udp | name | Host Name Server |
| 42 | tcp/udp | nameserver | Host Name Server |
| 43 | tcp/udp | nicname | Who Is |
| 44 | tcp/udp | mpm-flags | MPM FLAGS Protocol |
| 45 | tcp/udp | mpm | Message Processing Module [recv] |
| 46 | tcp/udp | mpm-snd | MPM [default send] |
| 47 | tcp/udp | ni-ftp | NI FTP |
| 48 | tcp/udp | auditd | Digital Audit Daemon |
| 48 |
tcp |
# |
DRAT |
| 49 | tcp/udp | tacacs | Login Host Protocol (TACACS) |
| 50 | tcp/udp | re-mail-ck | Remote Mail Checking Protocol |
| 48 |
tcp |
# |
DRAT |
| 51 | tcp/udp | la-maint | IMP Logical Address Maintenance |
| 52 | tcp/udp | xns-time | XNS Time Protocol |
| 53 | tcp/udp | domain | Domain Name Server |
| 54 | tcp/udp | xns-ch | XNS Clearinghouse |
| 55 | tcp/udp | isi-gl | ISI Graphics Language |
| 56 | tcp/udp | xns-auth | XNS Authentication |
| 57 | tcp/udp | # | any private terminal access |
| 58 | tcp/udp | xns-mail | XNS Mail |
| 58-59 |
tcp |
# |
DMSetup |
| 59 | tcp/udp | # | any private file service |
| 60 | tcp/udp | # | Unassigned |
| 61 | tcp/udp | ni-mail | NI MAIL |
| 62 | tcp/udp | acas | ACA Services |
| 63 | tcp/udp | whois++ | whois++ |
| 64 | tcp/udp | covia | Communications Integrator (CI) |
| 65 | tcp/udp | tacacs-ds | TACACS-Database Service |
| 66 | tcp/udp | sql*net | Oracle SQL*NET |
| 67 | tcp/udp | bootps | Bootstrap Protocol Server |
| 68 | tcp/udp | bootpc | Bootstrap Protocol Client |
| 69 | tcp/udp | tftp | Trivial File Transfer |
| 69 |
tcp |
# |
W32.Evala.Worm, W32.Mockbot |
| 69 |
udp |
# |
W32.Blaster.Worm, W32.Bolgi.Worm, W32.Cycle |
| 70 | tcp/udp | gopher | Gopher |
| 70 |
tcp |
# |
W32.Evala.Worm |
| 71 | tcp/udp | netrjs-1 | Remote Job Service |
| 72 | tcp/udp | netrjs-2 | Remote Job Service |
| 73 | tcp/udp | netrjs-3 | Remote Job Service |
| 74 | tcp/udp | netrjs-4 | Remote Job Service |
| 75 | tcp/udp | # | any private dial out service |
| 76 | tcp/udp | deos | Distributed External Object Store |
| 77 | tcp/udp | # | any private RJE service |
| 78 | tcp/udp | vettcp | vettcp |
| 79 | tcp/udp | finger | Finger |
| 79 |
tcp |
# |
RAT:Firehotcker
Requires VB
CDK |
| 80 | tcp/udp | http | World Wide Web HTTP |
| 80 | tcp/udp | www | World Wide Web HTTP |
| 80 | tcp/udp | www-http | World Wide Web HTTP |
| 80 |
tcp |
# |
711 trojan (Seven Eleven), AckCmd, Back End,
Back Orifice 2k Plug-Ins, Cafeini, CGI Backdoor,
Executor, God Message, God Message Creator,
Hooker, IISworm, MTX, NCX,
Reverse WWW Tunnel Backdoor, RingZero,
Seeker, WAN Remote, Web Server CT,
WebDownloader, Xeory, Zombam, W32.Yaha,
Ketch, Mydoom, W32.Welchia,
W32.HLLW.Doomjuice, W32.HLLW.Heycheck,
W32.Gaobot, W32.HLLW.Polybot, W32.Beagle,
W32.Spybot |
| 80 |
udp |
# |
W32.Beagle |
| 81 | tcp/udp | hosts2-ns | HOSTS2 Name Server |
| 81 |
tcp |
# |
RemoConChubo, Xeory, W32.Beagle |
| 81 |
udp |
# |
W32.Beagle |
| 82 | tcp/udp | xfer | XFER Utility |
| 82 |
tcp |
# |
W32.Netsky |
| 83 | tcp/udp | mit-ml-dev | MIT ML Device |
| 84 | tcp/udp | ctf | Common Trace Facility |
| 85 | tcp/udp | mit-ml-dev | MIT ML Device |
| 86 | tcp/udp | mfcobol | Micro Focus Cobol |
| 87 | tcp/udp | # | any private terminal link |
| 88 | tcp/udp | kerberos | Kerberos |
| 88 |
tcp |
# |
PWSteal.Likmet |
| 89 | tcp/udp | su-mit-tg | SU/MIT Telnet Gateway |
| 90 | tcp/udp | dnsix | DNSIX Securit Attribute Token Map |
| 91 | tcp/udp | mit-dov | MIT Dover Spooler |
| 92 | tcp/udp | npp | Network Printing Protocol |
| 93 | tcp/udp | dcp | Device Control Protocol |
| 94 | tcp/udp | objcall | Tivoli Object Dispatcher |
| 95 | tcp/udp | supdup | SUPDUP |
| 96 | tcp/udp | dixie | DIXIE Protocol Specification |
| 97 | tcp/udp | swift-rvf | Swift Remote Virtural File Protocol |
| 98 | tcp/udp | tacnews | TAC News |
| 99 | tcp/udp | metagram | Metagram Relay |
| 99 |
tcp |
# |
Hidden Port, NCX |