| Port No. | Protocol | Service | Description |
| 700 | tcp/udp | epp | Extensible Provisioning Protocol |
| 700 |
tcp/udp |
buddyphone |
This Internet telephony product communicates
over this port as well as the TCP range 5000-5111. |
| 701 | tcp/udp | lmp | Link Management Protocol (LMP) |
| 702 | tcp/udp | iris-beep | IRIS over BEEP |
| 703 | tcp/udp | # | Unassigned |
| 701 |
tcp/udp |
# |
Marotob |
| 704 | tcp/udp | elcsd | errlog copy/server daemon |
| 705 | tcp/udp | agentx | AgentX |
| 706 | tcp/udp | silc | SILC |
| 707 | tcp/udp | borland-dsj | Borland DSJ |
| 708 | tcp/udp | # | Unassigned |
| 709 | tcp/udp | entrust-kmsh | Entrust Key Management Service Handler |
| 710 | tcp/udp | entrust-ash | Entrust Administration Service Handler |
| 711 | tcp/udp | cisco-tdp | Cisco TDP |
| 712 | tcp/udp | tbrpf | TBRPF |
| 713-728 | tcp/udp | # | Unassigned |
| 729 | tcp/udp | netviewdm1 | IBM NetView DM/6000 Server/Client |
| 730 | tcp/udp | netviewdm2 | IBM NetView DM/6000 send tcp |
| 731 | tcp/udp | netviewdm3 | IBM NetView DM/6000 receive tcp |
| 732-740 | tcp/udp | # | Unassigned |
| 741 | tcp/udp | netgw | netGW |
| 742 | tcp/udp | netrcs | Network based Rev. Cont. Sys. |
| 743 | tcp/udp | # | Unassigned |
| 744 | tcp/udp | flexlm | Flexible License Manager |
| 745-746 | tcp/udp | # | Unassigned |
| 747 | tcp/udp | fujitsu-dev | Fujitsu Device Control |
| 748 | tcp/udp | ris-cm | Russell Info Sci Calendar Manager |
| 749 | tcp/udp | kerberos-adm | kerberos administration |
| 750 | tcp | rfile | |
| 750 | udp | loadav | |
| 750 | udp | kerberos-iv | kerberos version iv |
| 751 | tcp/udp | pump | |
| 752 | tcp/udp | qrh | |
| 753 | tcp/udp | rrh | |
| 754 | tcp/udp | tell | send |
| 755-756 | tcp/udp | # | Unassigned |
| 758 | tcp/udp | nlogin | |
| 759 | tcp/udp | con | |
| 760 | tcp/udp | ns | |
| 761 | tcp/udp | rxe | |
| 762 | tcp/udp | quotad | |
| 763 | tcp/udp | cycleserv | |
| 764 | tcp/udp | omserv | |
| 765 | tcp/udp | webster | |
| 766 | tcp/udp | # | Unassigned |
| 767 | tcp/udp | phonebook | phone |
| 768 | tcp/udp | # | Unassigned |
| 769 | tcp/udp | vid | |
| 770 | tcp/udp | cadlock | |
| 771 | tcp/udp | rtip | |
| 772 | tcp/udp | cycleserv2 | |
| 773 | tcp | submit | |
| 773 | udp | notify | |
| 774 | tcp | rpasswd | |
| 774 | udp | acmaint_dbd | |
| 775 | tcp | entomb | |
| 775 | udp | acmaint_transd | |
| 776 | tcp/udp | wpages | |
| 777 | tcp/udp | multiling-http | Multiling HTTP |
| 777 |
tcp |
# |
AimSpy, Undetected, NetCrack |
| 778 |
tcp |
# |
NetCrack |
| 778-779 | tcp/udp | # | Unassigned |
| 780 | tcp/udp | wpgs | |
| 781-785 | tcp/udp | # | Unassigned |
| 786 | tcp/udp | # | Unassigned |
| 787 | tcp/udp | # | Unassigned |
| 788-799 | tcp/udp | # | Unassigned |
| 800 | tcp/udp | mdbs_daemon | |
| 801 | tcp/udp | device | |
| 802-809 | tcp/udp | # | Unassigned |
| 808 |
tcp |
# |
WinHole |
| 810 | tcp | fcp-udp | FCP |
| 810 | udp | fcp-udp | FCP Datagram |
| 811-827 | tcp/udp | # | Unassigned |
| 828 | tcp/udp | itm-mcell-s | itm-mcell-s |
| 829 | tcp/udp | pkix-3-ca-ra | PKIX-3 CA/RA |
| 830-846 | tcp/udp | # | Unassigned |
| 847 | tcp/udp | dhcp-failover2 | dhcp-failover 2 |
| 848 | tcp/udp | gdoi | GDOI |
| 849-859 | tcp/udp | # | Unassigned |
| 860 | tcp/udp | iscsi | iSCSI |
| 861-872 | tcp/udp | # | Unassigned |
| 873 | tcp/udp | rsync | rsync |
| 874-885 | tcp/udp | # | Unassigned |
| 886 | tcp/udp | iclcnet-locate | ICL coNETion locate server |
| 887 | tcp/udp | iclcnet_svinfo | ICL coNETion server info |
| 887 |
tcp |
# |
W32.Huayu |
| 888 | tcp/udp | accessbuilder | AccessBuilder |
| 888 | tcp | cddbp | CD Database Protocol |
| 889-899 | tcp/udp | # | Unassigned |
| 890 |
tcp |
# |
Dsklite |
| 900 | tcp/udp | omginitialrefs | OMG Initial Refs |
| 901 | tcp/udp | smpnameres | SMPNAMERES |
| 901 |
tcp |
swat |
SWAT is an HTTP interface to SAMBA. |
| 901 |
tcp/udp |
# |
ISS RealSecure
The IDS sensor listens on this port
for communication from the console. |
| 902 | tcp/udp | ideafarm-chat | IDEAFARM-CHAT |
| 903 | tcp/udp | ideafarm-catch | IDEAFARM-CATCH |
| 904-910 | tcp/udp | # | Unassigned |
| 905 |
tcp/udp |
# |
NetDevil |
| 911 | tcp/udp | xact-backup | xact-backup |
| 911 |
tcp |
# |
Dark Shadow |
| 912 | tcp/udp | apex-mesh | APEX relay-relay service |
| 913 | tcp/udp | apex-edge | APEX endpoint-relay service |
| 914-988 | tcp/udp | # | Unassigned |
| 989 | tcp/udp | ftps-data | "ftp protocol, data, over TLS/SSL" |
| 990 | tcp/udp | ftps | "ftp protocol, control, over TLS/SSL" |
| 991 | tcp/udp | nas | Netnews Administration System |
| 992 | tcp/udp | telnets | telnet protocol over TLS/SSL |
| 993 | tcp/udp | imaps | imap4 protocol over TLS/SSL |
| 994 | tcp/udp | ircs | irc protocol over TLS/SSL |
| 995 | tcp/udp | pop3s | pop3 protocol over TLS/SSL (was spop3) |
| 996 | tcp/udp | vsinet | vsinet |
| 997 | tcp/udp | maitrd | |
| 998 | tcp | busboy | |
| 998 | udp | puparp | |
| 999 | tcp | garcon | |
| 999 | udp | applix | Applix ac |
| 999 | tcp/udp | puprouter | |
| 999 |
tcp |
# |
RAT: Deep Throat
Puts a keylogger at port 999 (TCP).
This will record all of a user's keystrokes. |
| 999 |
tcp |
# |
Foreplay, WinSatan |
| 1000 | tcp/udp | cadlock2 | |
| 1000 |
tcp |
# |
Der Spaher / Der Spaeher, Direct Connection, Nibu |
| 1001-1009 | tcp/udp | # | Unassigned |
| 1001 |
tcp |
# |
Der Spaher / Der Spaeher, Le Guardien, Silencer, WebEx, Ghoice, Nibu, W32.Dumaru |
| 1008 | udp | # | Possibly used by Sun Solaris???? |
| 1010 | tcp/udp | surf | surf |
| 1010-1012 |
tcp |
# |
Doly Trojan |
| 1011-1022 | tcp/udp | # | Reserved |
| 1011 |
tcp |
# |
Augudor |
| 1012 |
tcp |
# |
Backdoor.Urat |
| 1015-1016 |
tcp |
# |
Doly Trojan |
| 1020 |
tcp |
# |
Vampire |
| 1022 |
tcp |
# |
W32.Sasser |
| 1023 | tcp/udp | # | Reserved |
| 1023 |
tcp |
# |
W32.Sasser |