A free known port scan does not mean that you don't have trojans.
There are a total of 130,000 ports on your system - 65,536 TCP based
ports (for popular services like telnet, ftp, http), and another 65,536
UDP based ports (fast, but not as reliable, datagram services).
The free service is intended to find the most likely trouble spots, and is
good in checking things like firewall configurations. If you need to
know the status of every port on your system, checking for trojans and
such, you can go to the command line and run "netstat -a -n" at the
command prompt, and you will be given a list of all open connections,
and any ports accepting new connections (in the listening state).
Remember, we've set up the port scan to test common problems, firewall
configurations, and so on, from an external point of view. Since scanning
all 130,000 ports would take many hours, we limit the free test to the common
known services. Further, it is virtually impossible to reliably
scan UDP based services. This is because there is no way to detect the
different between an Open UDP port, and a situation where we lost
packets on the network due to congestion, collisions, etc. Only YOU
can tell if you have a UDP port by running "netstat" or an equivalent
program.
The following table lists all the ports that we check for.
Please note that we list the known service for a port.
For example, port 23 is officially telnet. But just because the
port is officially listed as telnet doesn't mean it is. In many
cases, trojans are known to co-opt a known port for their own use.
| Port Name | Port Number | Description |
| tcpmux | 1/tcp | TCP Port Service Multiplexer [rfc-1078] |
| compressnet | 2/tcp | Management Utility |
| compressnet | 3/tcp | Compression Process |
| rje | 5/tcp | Remote Job Entry |
| discard | 9/tcp | sink null |
| systat | 11/tcp | Active Users |
| qotd | 17/tcp | Quote of the Day |
| msp | 18/tcp | Message Send Protocol |
| chargen | 19/tcp | ttytst source Character Generator |
| ftp-data | 20/tcp | File Transfer [Default Data] |
| ftp | 21/tcp | File Transfer [Control] |
| ssh | 22/tcp | Secure Shell Login |
| priv-mail | 24/tcp | any private mail system |
| smtp | 25/tcp | Simple Mail Transfer |
| nsw-fe | 27/tcp | NSW User System FE |
| msg-icp | 29/tcp | MSG ICP |
| msg-auth | 31/tcp | MSG Authentication |
| dsp | 33/tcp | Display Support Protocol |
| priv-print | 35/tcp | any private printer server |
| time | 37/tcp | timserver |
| rap | 38/tcp | Route Access Protocol |
| rlp | 39/tcp | Resource Location Protocol |
| nameserver | 42/tcp | Host Name Server |
| whois | 43/tcp | nicname |
| mpm-flags | 44/tcp | MPM FLAGS Protocol |
| mpm | 45/tcp | Message Processing Module [recv] |
| mpm-snd | 46/tcp | MPM [default send] |
| ni-ftp | 47/tcp | NI FTP |
| auditd | 48/tcp | Digital Audit Daemon |
| tacacs | 49/tcp | Login Host Protocol (TACACS) |
| re-mail-ck | 50/tcp | Remote Mail Checking Protocol |
| la-maint | 51/tcp | IMP Logical Address Maintenance |
| xns-time | 52/tcp | XNS Time Protocol |
| domain | 53/tcp | Domain Name Server |
| xns-ch | 54/tcp | XNS Clearinghouse |
| isi-gl | 55/tcp | ISI Graphics Language |
| xns-auth | 56/tcp | XNS Authentication |
| priv-term | 57/tcp | any private terminal access |
| xns-mail | 58/tcp | XNS Mail |
| priv-file | 59/tcp | any private file service |
| ni-mail | 61/tcp | NI MAIL |
| acas | 62/tcp | ACA Services |
| via-ftp | 63/tcp | VIA Systems - FTP & whois++ |
| covia | 64/tcp | Communications Integrator (CI) |
| tacacs-ds | 65/tcp | TACACS-Database Service |
| sql*net | 66/tcp | Oracle SQL*NET |
| bootps | 67/tcp | Bootstrap Protocol Server |
| bootpc | 68/tcp | Bootstrap Protocol Client |
| tftp | 69/tcp | Trivial File Transfer |
| netrjs-1 | 71/tcp | Remote Job Service |
| netrjs-2 | 72/tcp | Remote Job Service |
| netrjs-3 | 73/tcp | Remote Job Service |
| netrjs-4 | 74/tcp | Remote Job Service |
| priv-dial | 75/tcp | any private dial out service |
| deos | 76/tcp | Distributed External Object Store |
| priv-rje | 77/tcp | any private RJE service, netrjs |
| http | 80/tcp | World Wide Web HTTP |
| hosts2-ns | 81/tcp | HOSTS2 Name Server |
| xfer | 82/tcp | XFER Utility |
| mit-ml-dev | 83/tcp | MIT ML Device |
| ctf | 84/tcp | Common Trace Facility |
| mit-ml-dev | 85/tcp | MIT ML Device |
| mfcobol | 86/tcp | Micro Focus Cobol |
| priv-term-l | 87/tcp | any private terminal link, ttylink |
| kerberos-sec | 88/tcp | Kerberos (v5) |
| su-mit-tg | 89/tcp | SU/MIT Telnet Gateway |
| dnsix | 90/tcp | DNSIX Securit Attribute Token Map |
| mit-dov | 91/tcp | MIT Dover Spooler |
| npp | 92/tcp | Network Printing Protocol |
| dcp | 93/tcp | Device Control Protocol |
| objcall | 94/tcp | Tivoli Object Dispatcher |
| supdup | 95/tcp | BSD supdupd(8) |
| dixie | 96/tcp | DIXIE Protocol Specification |
| swift-rvf | 97/tcp | Swift Remote Virtural File Protocol |
| linuxconf | 98/tcp | linuxconf |
| metagram | 99/tcp | Metagram Relay |
| newacct | 100/tcp | [unauthorized use] |
| hostname | 101/tcp | hostnames NIC Host Name Server |
| iso-tsap | 102/tcp | tsap ISO-TSAP Class 0 |
| gppitnp | 103/tcp | Genesis Point-to-Point Trans Net, or x400 ISO Email |
| acr-nema | 104/tcp | ACR-NEMA Digital Imag. & Comm. 300 |
| csnet-ns | 105/tcp | Mailbox Name Nameserver |
| pop3pw | 106/tcp | Eudora compatible PW changer |
| rtelnet | 107/tcp | Remote Telnet |
| snagas | 108/tcp | SNA Gateway Access Server |
| pop-2 | 109/tcp | PostOffice V.2 |
| pop-3 | 110/tcp | PostOffice V.3 |
| sunrpc | 111/tcp | portmapper, rpcbind |
| mcidas | 112/tcp | McIDAS Data Transmission Protocol |
| auth | 113/tcp | ident, tap, Authentication Service |
| audionews | 114/tcp | Audio News Multicast |
| sftp | 115/tcp | Simple File Transfer Protocol |
| ansanotify | 116/tcp | ANSA REX Notify |
| uucp-path | 117/tcp | UUCP Path Service |
| sqlserv | 118/tcp | SQL Services |
| nntp | 119/tcp | Network News Transfer Protocol |
| erpc | 121/tcp | Encore Expedited Remote Pro.Call |
| ntp | 123/tcp | Network Time Protocol |
| ansatrader | 124/tcp | ANSA REX Trader |
| locus-map | 125/tcp | Locus PC-Interface Net Map Ser |
| unitary | 126/tcp | Unisys Unitary Login |
| locus-con | 127/tcp | Locus PC-Interface Conn Server |
| gss-xlicen | 128/tcp | GSS X License Verification |
| pwdgen | 129/tcp | Password Generator Protocol |
| cisco-fna | 130/tcp | cisco FNATIVE |
| cisco-tna | 131/tcp | cisco TNATIVE |
| cisco-sys | 132/tcp | cisco SYSMAINT |
| statsrv | 133/tcp | Statistics Service |
| ingres-net | 134/tcp | INGRES-NET Service |
| loc-srv | 135/tcp | NCS local location broker |
| profile | 136/tcp | PROFILE Naming System |
| netbios-ns | 137/tcp | NETBIOS Name Service |
| netbios-dgm | 138/tcp | NETBIOS Datagram Service |
| netbios-ssn | 139/tcp | NETBIOS Session Service |
| emfis-data | 140/tcp | EMFIS Data Service |
| emfis-cntl | 141/tcp | EMFIS Control Service |
| bl-idm | 142/tcp | Britton-Lee IDM |
| imap2 | 143/tcp | Interim Mail Access Protocol v2 |
| news | 144/tcp | NewS window system |
| uaac | 145/tcp | UAAC Protocol |
| cronus | 148/tcp | CRONUS-SUPPORT |
| aed-512 | 149/tcp | AED 512 Emulation Service |
| bftp | 152/tcp | Background File Transfer Program |
| sqlsrv | 156/tcp | SQL Service |
| knet-cmp | 157/tcp | KNET/VM Command/Message Protocol |
| pcmail-srv | 158/tcp | PCMail Server |
| snmptrap | 162/tcp | snmp-trap |
| cmip-man | 163/tcp | CMIP/TCP Manager |
| cmip-agent | 164/tcp | CMIP/TCP Agent |
| xns-courier | 165/tcp | Xerox |
| s-net | 166/tcp | Sirius Systems |
| print-srv | 170/tcp | Network PostScript |
| multiplex | 171/tcp | Network Innovations Multiplex |
| cl-1 | 172/tcp | Network Innovations CL/1 |
| xdmcp | 177/tcp | X Display Mgr. Control Proto |
| nextstep | 178/tcp | NextStep Window Server |
| bgp | 179/tcp | Border Gateway Protocol |
| ris | 180/tcp | Intergraph |
| audit | 182/tcp | Unisys Audit SITP |
| kis | 186/tcp | KIS Protocol |
| aci | 187/tcp | Application Communication Interface |
| mumps | 188/tcp | Plus Five's MUMPS |
| qft | 189/tcp | Queued File Transport |
| gacp | 190/tcp | Gateway Access Control Protocol |
| prospero | 191/tcp | Prospero Directory Service |
| osu-nms | 192/tcp | OSU Network Monitoring System |
| srmp | 193/tcp | Spider Remote Monitoring Protocol |
| irc | 194/tcp | Internet Relay Chat |
| dn6-nlm-aud | 195/tcp | DNSIX Network Level Module Audit |
| dn6-smm-red | 196/tcp | DNSIX Session Mgt Module Audit Redir |
| dls | 197/tcp | Directory Location Service |
| dls-mon | 198/tcp | Directory Location Service Monitor |
| smux | 199/tcp | SNMP Unix Multiplexer |
| src | 200/tcp | IBM System Resource Controller |
| at-rtmp | 201/tcp | AppleTalk Routing Maintenance |
| at-nbp | 202/tcp | AppleTalk Name Binding |
| at-3 | 203/tcp | AppleTalk Unused |
| at-echo | 204/tcp | AppleTalk Echo |
| at-5 | 205/tcp | AppleTalk Unused |
| at-zis | 206/tcp | AppleTalk Zone Information |
| at-7 | 207/tcp | AppleTalk Unused |
| at-8 | 208/tcp | AppleTalk Unused |
| tam | 209/tcp | Trivial Authenticated Mail Protocol |
| z39.50 | 210/tcp | wais, ANSI Z39.50 |
| 914c-g | 211/tcp | Texas Instruments 914C/G Terminal |
| anet | 212/tcp | ATEXSSTR |
| softpc | 215/tcp | Insignia Solutions |
| atls | 216/tcp | Access Technology License Server |
| dbase | 217/tcp | dBASE Unix |
| mpp | 218/tcp | Netix Message Posting Protocol |
| uarps | 219/tcp | Unisys ARPs |
| imap3 | 220/tcp | Interactive Mail Access Protocol v3 |
| fln-spx | 221/tcp | Berkeley rlogind with SPX auth |
| rsh-spx | 222/tcp | Berkeley rshd with SPX auth |
| cdc | 223/tcp | Certificate Distribution Center |
| sur-meas | 243/tcp | Survey Measurement |
| dsp3270 | 246/tcp | Display Systems Protocol |
| set | 257/tcp | secure electronic transaction |
| yak-chat | 258/tcp | yak winsock personal chat |
| esro-gen | 259/tcp | efficient short remote operations |
| nsiiops | 261/tcp | iiop name service over tls/ssl |
| cableport-ax | 282/tcp | cable port a/x |
| novastorbakcup | 308/tcp | novastor backup |
| asip-webadmin | 311/tcp | appleshare ip webadmin |
| pdap | 344/tcp | Prospero Data Access Protocol |
| pawserv | 345/tcp | Perf Analysis Workbench |
| zserv | 346/tcp | Zebra server |
| fatserv | 347/tcp | Fatmen Server |
| csi-sgwp | 348/tcp | Cabletron Management Protocol |
| matip-type-a | 350/tcp | MATIP Type A |
| matip-type-b | 351/tcp | MATIP Type B or bhoetty |
| dtag-ste-sb | 352/tcp | DTAG, or bhoedap4 |
| cloanto-net-1 | 356/tcp | Cloanto Net 1 |
| tenebris_nts | 359/tcp | Tenebris Network Trace Service |
| srssend | 362/tcp | SRS Send |
| dtk | 365/tcp | Deception Tool Kit (lame -- see www.all.net) |
| ulistserv | 372/tcp | Unix Listserv |
| legent-1 | 373/tcp | Legent Corporation (now Computer Associates Intl.) |
| legent-2 | 374/tcp | Legent Corporation (now Computer Associates Intl.) |
| nip | 376/tcp | Amiga Envoy Network Inquiry Proto |
| tnETOS | 377/tcp | NEC Corporation |
| dsETOS | 378/tcp | NEC Corporation |
| is99c | 379/tcp | TIA/EIA/IS-99 modem client |
| is99s | 380/tcp | TIA/EIA/IS-99 modem server |
| hp-collector | 381/tcp | hp performance data collector |
| hp-managed-node | 382/tcp | hp performance data managed node |
| hp-alarm-mgr | 383/tcp | hp performance data alarm manager |
| arns | 384/tcp | A Remote Network Server System |
| ibm-app | 385/tcp | IBM Application |
| asa | 386/tcp | ASA Message Router Object Def. |
| aurp | 387/tcp | Appletalk Update-Based Routing Pro. |
| unidata-ldm | 388/tcp | Unidata LDM Version 4 |
| ldap | 389/tcp | Lightweight Directory Access Protocol |
| synotics-relay | 391/tcp | SynOptics SNMP Relay Port |
| synotics-broker | 392/tcp | SynOptics Port Broker Port |
| dis | 393/tcp | Data Interpretation System |
| embl-ndt | 394/tcp | EMBL Nucleic Data Transfer |
| netcp | 395/tcp | NETscout Control Protocol |
| netware-ip | 396/tcp | Novell Netware over IP |
| mptn | 397/tcp | Multi Protocol Trans. Net. |
| iso-tsap-c2 | 399/tcp | ISO-TSAP Class 2 |
| work-sol | 400/tcp | Workstation Solutions |
| ups | 401/tcp | Uninterruptible Power Supply |
| genie | 402/tcp | Genie Protocol |
| imsp | 406/tcp | Interactive Mail Support Protocol |
| prm-sm | 408/tcp | Prospero Resource Manager Sys. Man. |
| prm-nm | 409/tcp | Prospero Resource Manager Node Man. |
| decladebug | 410/tcp | DECLadebug Remote Debug Protocol |
| rmt | 411/tcp | Remote MT Protocol |
| synoptics-trap | 412/tcp | Trap Convention Port |
| opc-job-start | 423/tcp | IBM Operations Planning and Control Start |
| opc-job-track | 424/tcp | IBM Operations Planning and Control Track |
| svrloc | 427/tcp | Server Location |
| nnsp | 433/tcp | Usenet, Network News Transfer |
| https | 443/tcp | secure http (SSL) |
| snpp | 444/tcp | Simple Network Paging Protocol |
| ddm-ssl | 448/tcp | ddm-byte |
| as-servermap | 449/tcp | AS Server Mapper |
| sfs-smp-net | 451/tcp | Cray Network Semaphore server |
| sfs-config | 452/tcp | Cray SFS config server |
| appleqtc | 458/tcp | apple quick time |
| kpasswd5 | 464/tcp | Kerberos (v5) |
| smtps | 465/tcp | smtp protocol over TLS/SSL (was ssmtp) |
| photuris | 468/tcp | Photuris Key Management |
| rcp | 469/tcp | Radio Control Protocol |
| integra-sme | 484/tcp | Integra Software Management Environment |
| powerburst | 485/tcp | Air Soft Power Burst |
| saft | 487/tcp | saft Simple Asynchronous File Transfer |
| ticf-1 | 492/tcp | Transport Independent Convergence for FNA |
| ticf-2 | 493/tcp | Transport Independent Convergence for FNA |
| iso-ill | 499/tcp | ISO ILL Protocol |
| fcp | 510/tcp | FirstClass Protocol |
| exec | 512/tcp | BSD rexecd(8) |
| login | 513/tcp | BSD rlogind(8) |
| shell | 514/tcp | BSD rshd(8) |
| printer | 515/tcp | spooler (lpd) |
| talk | 517/tcp | like tenex link, but across |
| ntalk | 518/tcp | (talkd) |
| utime | 519/tcp | unixtime |
| efs | 520/tcp | extended file name server |
| timed | 525/tcp | timeserver |
| tempo | 526/tcp | newdate |
| stx | 527/tcp | Stock IXChange |
| custix | 528/tcp | Customer IXChange |
| courier | 530/tcp | rpc |
| conference | 531/tcp | chat |
| netnews | 532/tcp | readnews |
| netwall | 533/tcp | for emergency broadcasts |
| mm-admin | 534/tcp | MegaMedia Admin |
| nmsp | 537/tcp | Networked Media Streaming Protocol |
| apertus-ldp | 539/tcp | Apertus Technologies Load Determination |
| uucp | 540/tcp | uucpd |
| klogin | 543/tcp | Kerberos (v4/v5) |
| kshell | 544/tcp | krcmd Kerberos (v4/v5) |
| ekshell | 545/tcp | Kerberos encrypted remote shell -kfall |
| dhcpv6-client | 546/tcp | DHCPv6 Client |
| dhcpv6-server | 547/tcp | DHCPv6 Server |
| afpovertcp | 548/tcp | AFP over TCP |
| new-rwho | 550/tcp | new-who |
| rtsp | 554/tcp | Real Time Stream Control Protocol |
| remotefs | 556/tcp | rfs, rfs_server, Brunhoff remote filesystem |
| rmonitor | 560/tcp | rmonitord |
| chshell | 562/tcp | chcmd |
| 9pfs | 564/tcp | plan 9 file service |
| ms-shuttle | 568/tcp | Microsoft shuttle |
| ms-rome | 569/tcp | Microsoft rome |
| meter | 570/tcp | demon |
| umeter | 571/tcp | udemon |
| ftp-agent | 574/tcp | FTP Software Agent System |
| bdp | 581/tcp | Bundle Discovery Protocol |
| philips-vc | 583/tcp | Philips Video-Conferencing |
| imap4-ssl | 585/tcp | IMAP4+SSL (use of 585 is not recommended, |
| http-alt | 591/tcp | FileMaker, Inc. - HTTP Alternate |
| http-rpc-epmap | 593/tcp | HTTP RPC Ep Map |
| ptcnameservice | 597/tcp | PTC Name Service |
| sco-websrvrmg3 | 598/tcp | SCO Web Server Manager 3 |
| acp | 599/tcp | Aeolon Core Protocol |
| ipcserver | 600/tcp | Sun IPC server |
| urm | 606/tcp | Cray Unified Resource Manager |
| sift-uft | 608/tcp | Sender-Initiated/Unsolicited File Transfer |
| qmqp | 628/tcp | Qmail Quick Mail Queueing |
| cups | 631/tcp | http://www.cups.org (Common UNIX Printing System) |
| ldapssl | 636/tcp | LDAP over SSL |
| doom | 666/tcp | doom Id Software |
| resvc | 691/tcp | The Microsoft Exchange 2000 Server Routing Service |
| elcsd | 704/tcp | errlog copy/server daemon |
| entrustmanager | 709/tcp | EntrustManager - NorTel DES auth network see 389/tcp |
| netviewdm1 | 729/tcp | IBM NetView DM/6000 Server/Client |
| netviewdm2 | 730/tcp | IBM NetView DM/6000 send/tcp |
| netviewdm3 | 731/tcp | IBM NetView DM/6000 receive/tcp |
| netcp | 740/tcp | NETscout Control Protocol |
| netrcs | 742/tcp | Network based Rev. Cont. Sys. |
| flexlm | 744/tcp | Flexible License Manager |
| fujitsu-dev | 747/tcp | Fujitsu Device Control |
| ris-cm | 748/tcp | Russell Info Sci Calendar Manager |
| kerberos-adm | 749/tcp | Kerberos 5 admin/changepw |
| kerberos | 750/tcp | kdc Kerberos (v4) |
| kerberos_master | 751/tcp | Kerberos `kadmin' (v4) |
| krb_prop | 754/tcp | kerberos/v5 server propagation |
| krbupdate | 760/tcp | kreg Kerberos (v4) registration |
| kpasswd | 761/tcp | kpwd Kerberos (v4) "passwd" |
| phonebook | 767/tcp | phone |
| hp-collector | 781/tcp | hp performance data collector |
| hp-managed-node | 782/tcp | hp performance data managed node |
| hp-alarm-mgr | 783/tcp | hp performance data alarm manager |
| supfilesrv | 871/tcp | SUP server |
| rsync | 873/tcp | Rsync server ( http://rsync.samba.org ) |
| accessbuilder | 888/tcp | or Audio CD Database |
| ftps-data | 989/tcp | ftp protocol, data, over TLS/SSL |
| samba-swat | 901/tcp | Samba SWAT tool. Also used by ISS RealSecure. |
| oftep-rpc | 950/tcp | Often RPC.statd (on Redhat Linux) |
| rndc | 953/tcp | RNDC is used by BIND 9 (& probably other NS) |
| ftps | 990/tcp | ftp protocol, control, over TLS/SSL |
| telnets | 992/tcp | telnet protocol over TLS/SSL |
| imaps | 993/tcp | imap4 protocol over TLS/SSL |
| ircs | 994/tcp | irc protocol over TLS/SSL |
| pop3s | 995/tcp | POP3 protocol over TLS/SSL |
| xtreelic | 996/tcp | XTREE License Server |
| ufsd | 1008/tcp | ufsd # UFS-aware server |
| kdm | 1024/tcp | K Display Manager (KDE version of xdm) |
| listen | 1025/tcp | listener RFS remote_file_sharing |
| nterm | 1026/tcp | remote_login network_terminal |
| iad1 | 1030/tcp | BBN IAD |
| iad2 | 1031/tcp | BBN IAD |
| iad3 | 1032/tcp | BBN IAD |
| instl_boots | 1067/tcp | Installation Bootstrap Proto. Serv. |
| instl_bootc | 1068/tcp | Installation Bootstrap Proto. Cli. |
| ansoft-lm-1 | 1083/tcp | Anasoft License Manager |
| ansoft-lm-2 | 1084/tcp | Anasoft License Manager |
| xaudio | 1103/tcp | Xaserver # X Audio Server |
| kpop | 1109/tcp | Pop with Kerberos |
| nfsd-status | 1110/tcp | Cluster status info |
| msql | 1112/tcp | mini-sql server |
| supfiledbg | 1127/tcp | SUP debugging |
| cce3x | 1139/tcp | ClearCommerce Engine 3.x ( www.clearcommerce.com) |
| nfa | 1155/tcp | Network File Access |
| skkserv | 1178/tcp | SKK (kanji input) |
| nerv | 1222/tcp | SNI R&D network |
| msg | 1241/tcp | remote message server |
| alta-ana-lm | 1346/tcp | Alta Analytics License Manager |
| bbn-mmc | 1347/tcp | multi media conferencing |
| bbn-mmx | 1348/tcp | multi media conferencing |
| sbook | 1349/tcp | Registration Network Protocol |
| editbench | 1350/tcp | Registration Network Protocol |
| equationbuilder | 1351/tcp | Digital Tool Works (MIT) |
| lotusnotes | 1352/tcp | Lotus Note |
| relief | 1353/tcp | Relief Consulting |
| rightbrain | 1354/tcp | RightBrain Software |
| intuitive-edge | 1355/tcp | Intuitive Edge |
| cuillamartin | 1356/tcp | CuillaMartin Company |
| pegboard | 1357/tcp | Electronic PegBoard |
| ndm-requester | 1363/tcp | Network DataMover Requester |
| ndm-server | 1364/tcp | Network DataMover Server |
| adapt-sna | 1365/tcp | Network Software Associates |
| netware-csp | 1366/tcp | Novell NetWare Comm Service Platform |
| gv-us | 1369/tcp | GlobalView to Unix Shell |
| us-gv | 1370/tcp | Unix Shell to GlobalView |
| fc-cli | 1371/tcp | Fujitsu Config Protocol |
| fc-ser | 1372/tcp | Fujitsu Config Protocol |
| molly | 1374/tcp | EPI Software Systems |
| ibm-pps | 1376/tcp | IBM Person to Person Software |
| cichlid | 1377/tcp | Cichlid License Manager |
| elan | 1378/tcp | Elan License Manager |
| dbreporter | 1379/tcp | Integrity Solutions |
| telesis-licman | 1380/tcp | Telesis Network License Manager |
| apple-licman | 1381/tcp | Apple Network License Manager |
| gwha | 1383/tcp | GW Hannaway Network License Manager |
| os-licman | 1384/tcp | Objective Solutions License Manager |
| atex_elmd | 1385/tcp | Atex Publishing License Manager |
| checksum | 1386/tcp | CheckSum License Manager |
| cadsi-lm | 1387/tcp | Computer Aided Design Software Inc LM |
| objective-dbc | 1388/tcp | Objective Solutions DataBase Cache |
| iclpv-dm | 1389/tcp | Document Manager |
| iclpv-sc | 1390/tcp | Storage Controller |
| iclpv-sas | 1391/tcp | Storage Access Server |
| iclpv-pm | 1392/tcp | Print Manager |
| iclpv-nls | 1393/tcp | Network Log Server |
| iclpv-nlc | 1394/tcp | Network Log Client |
| iclpv-wsm | 1395/tcp | PC Workstation Manager software |
| dvl-activemail | 1396/tcp | DVL Active Mail |
| audio-activmail | 1397/tcp | Audio Active Mail |
| video-activmail | 1398/tcp | Video Active Mail |
| cadkey-licman | 1399/tcp | Cadkey License Manager |
| cadkey-tablet | 1400/tcp | Cadkey Tablet Daemon |
| goldleaf-licman | 1401/tcp | Goldleaf License Manager |
| prm-sm-np | 1402/tcp | Prospero Resource Manager |
| prm-nm-np | 1403/tcp | Prospero Resource Manager |
| igi-lm | 1404/tcp | Infinite Graphics License Manager |
| ibm-res | 1405/tcp | IBM Remote Execution Starter |
| netlabs-lm | 1406/tcp | NetLabs License Manager |
| dbsa-lm | 1407/tcp | DBSA License Manager |
| sophia-lm | 1408/tcp | Sophia License Manager |
| here-lm | 1409/tcp | Here License Manager |
| hiq | 1410/tcp | HiQ License Manager |
| af | 1411/tcp | AudioFile |
| ibm-mqseries | 1414/tcp | IBM MQSeries |
| novell-lu6.2 | 1416/tcp | Novell LU6.2 |
| timbuktu-srv1 | 1417/tcp | Timbuktu Service 1 Port |
| timbuktu-srv2 | 1418/tcp | Timbuktu Service 2 Port |
| timbuktu-srv3 | 1419/tcp | Timbuktu Service 3 Port |
| timbuktu-srv4 | 1420/tcp | Timbuktu Service 4 Port |
| gandalf-lm | 1421/tcp | Gandalf License Manager |
| autodesk-lm | 1422/tcp | Autodesk License Manager |
| essbase | 1423/tcp | Essbase Arbor Software |
| hybrid | 1424/tcp | Hybrid Encryption Protocol |
| zion-lm | 1425/tcp | Zion Software License Manager |
| sas-1 | 1426/tcp | Satellite-data Acquisition System 1 |
| mloadd | 1427/tcp | mloadd monitoring tool |
| informatik-lm | 1428/tcp | Informatik License Manager |
| nms | 1429/tcp | Hypercom NMS |
| tpdu | 1430/tcp | Hypercom TPDU |
| rgtp | 1431/tcp | Reverse Gossip Transport |
| blueberry-lm | 1432/tcp | Blueberry Software License Manager |
| ms-sql-s | 1433/tcp | Microsoft-SQL-Server |
| ms-sql-m | 1434/tcp | Microsoft-SQL-Monitor |
| sas-2 | 1436/tcp | Satellite-data Acquisition System 2 |
| eicon-server | 1438/tcp | Eicon Security Agent/Server |
| eicon-x25 | 1439/tcp | Eicon X25/SNA Gateway |
| eicon-slp | 1440/tcp | Eicon Service Location Protocol |
| cadis-1 | 1441/tcp | Cadis License Management |
| cadis-2 | 1442/tcp | Cadis License Management |
| ies-lm | 1443/tcp | Integrated Engineering Software |
| marcam-lm | 1444/tcp | Marcam License Management |
| proxima-lm | 1445/tcp | Proxima License Manager |
| ora-lm | 1446/tcp | Optical Research Associates License Manager |
| apri-lm | 1447/tcp | Applied Parallel Research LM |
| oc-lm | 1448/tcp | OpenConnect License Manager |
| dwf | 1450/tcp | Tandem Distributed Workbench Facility |
| infoman | 1451/tcp | IBM Information Management |
| gtegsc-lm | 1452/tcp | GTE Government Systems License Man |
| genie-lm | 1453/tcp | Genie License Manager |
| interhdl_elmd | 1454/tcp | interHDL License Manager |
| esl-lm | 1455/tcp | ESL License Manager |
| valisys-lm | 1457/tcp | Valisys License Manager |
| nrcabq-lm | 1458/tcp | Nichols Research Corp. |
| proshare1 | 1459/tcp | Proshare Notebook Application |
| proshare2 | 1460/tcp | Proshare Notebook Application |
| ibm_wrless_lan | 1461/tcp | IBM Wireless LAN |
| world-lm | 1462/tcp | World License Manager |
| msl_lmd | 1464/tcp | MSL License Manager |
| pipes | 1465/tcp | Pipes Platform |
| oceansoft-lm | 1466/tcp | Ocean Software License Manager |
| aal-lm | 1469/tcp | Active Analysis Limited License Manager |
| uaiact | 1470/tcp | Universal Analytics |
| taligent-lm | 1475/tcp | Taligent License Manager |
| miteksys-lm | 1482/tcp | Miteksys License Manager |
| afs | 1483/tcp | AFS License Manager |
| confluent | 1484/tcp | Confluent License Manager |
| fhc | 1499/tcp | Federico Heinz Consultora |
| vlsi-lm | 1500/tcp | VLSI License Manager |
| sas-3 | 1501/tcp | Satellite-data Acquisition System 3 |
| shivadiscovery | 1502/tcp | Shiva |
| imtc-mcs | 1503/tcp | Databeam |
| evb-elm | 1504/tcp | EVB Software Engineering License Manager |
| funkproxy | 1505/tcp | Funk Software, Inc. |
| utcd | 1506/tcp | Universal Time daemon (utcd) |
| robcad-lm | 1509/tcp | Robcad, Ltd. License Manager |
| mvx-lm | 1510/tcp | Midland Valley Exploration Ltd. Lic. Man. |
| wins | 1512/tcp | Microsoft's Windows Internet Name Service |
| fujitsu-dtc | 1513/tcp | Fujitsu Systems Business of America, Inc |
| fujitsu-dtcns | 1514/tcp | Fujitsu Systems Business of America, Inc |
| vpad | 1516/tcp | Virtual Places Audio data |
| vpac | 1517/tcp | Virtual Places Audio control |
| vpvd | 1518/tcp | Virtual Places Video data |
| vpvc | 1519/tcp | Virtual Places Video control |
| atm-zip-office | 1520/tcp | atm zip office |
| ncube-lm | 1521/tcp | nCube License Manager |
| rna-lm | 1522/tcp | Ricardo North America License Manager |
| ingreslock | 1524/tcp | ingres |
| orasrv | 1525/tcp | oracle or Prospero Directory Service non-priv |
| pdap-np | 1526/tcp | Prospero Data Access Prot non-priv |
| tlisrv | 1527/tcp | oracle |
| support | 1529/tcp | prmsd gnatsd # cygnus bug tracker |
| virtual-places | 1533/tcp | Virtual Places Software |
| intellistor-lm | 1539/tcp | Intellistor License Manager |
| axon-lm | 1548/tcp | Axon License Manager |
| shivahose | 1549/tcp | Shiva Hose |
| 3m-image-lm | 1550/tcp | Image Storage license manager 3M Company |
| pptp | 1723/tcp | Point-to-point tunnelling protocol |
| pcm | 1827/tcp | PCM Agent (AutoSecure Policy Compliance Manager |
| licensedaemon | 1986/tcp | cisco license management |
| tr-rsrb-p1 | 1987/tcp | cisco RSRB Priority 1 port |
| tr-rsrb-p2 | 1988/tcp | cisco RSRB Priority 2 port |
| tr-rsrb-p3 | 1989/tcp | cisco RSRB Priority 3 port |
| stun-p1 | 1990/tcp | cisco STUN Priority 1 port |
| stun-p2 | 1991/tcp | cisco STUN Priority 2 port |
| stun-p3 | 1992/tcp | cisco STUN Priority 3 port |
| snmp-tcp-port | 1993/tcp | cisco SNMP TCP port |
| stun-port | 1994/tcp | cisco serial tunnel port |
| perf-port | 1995/tcp | cisco perf port |
| tr-rsrb-port | 1996/tcp | cisco Remote SRB port |
| gdp-port | 1997/tcp | cisco Gateway Discovery Protocol |
| x25-svc-port | 1998/tcp | cisco X.25 service (XOT) |
| tcp-id-port | 1999/tcp | cisco identification port |
| dc | 2001/tcp | or nfr20 web queries |
| cfingerd | 2003/tcp | GNU finger |
| deslogin | 2005/tcp | encrypted symmetric telnet/login |
| search | 2010/tcp | Or nfr411 |
| raid-cc | 2011/tcp | raid |
| nfs | 2049/tcp | networked file system |
| distrib-net-losers | 2064/tcp | A group of lamers working on a silly closed-source client for solving the RSA cryptographic challenge. This is the keyblock proxy port. |
| dlsrpn | 2065/tcp | Data Link Switch Read Port Number |
| dlswpn | 2067/tcp | Data Link Switch Write Port Number |
| eklogin | 2105/tcp | Kerberos (v4) encrypted rlogin |
| ekshell | 2106/tcp | Kerberos (v4) encrypted rshell |
| rkinit | 2108/tcp | Kerberos (v4) remote initialization |
| kx | 2111/tcp | X over kerberos |
| kip | 2112/tcp | IP over kerberos |
| kauth | 2120/tcp | Remote kauth |
| ats | 2201/tcp | Advanced Training System Program |
| ivs-video | 2232/tcp | IVS Video default |
| ivsd | 2241/tcp | IVS Daemon |
| compaqdiag | 2301/tcp | Compaq remote diagnostic/management |
| cvspserver | 2401/tcp | CVS network server |
| rtsserv | 2500/tcp | Resource Tracking system server |
| rtsclient | 2501/tcp | Resource Tracking system client |
| hp-3000-telnet | 2564/tcp | HP 3000 NS/VT block mode telnet |
| zebrasrv | 2600/tcp | zebra service |
| zebra | 2601/tcp | zebra vty |
| ripd | 2602/tcp | RIPd vty |
| ripngd | 2603/tcp | RIPngd vty |
| ospfd | 2604/tcp | OSPFd vty |
| bgpd | 2605/tcp | BGPd vty |
| webster | 2627/tcp | Network dictionary |
| sybase | 2638/tcp | Sybase database |
| listen | 2766/tcp | System V listener port |
| www-dev | 2784/tcp | world wide web - development |
| iss-realsec | 2998/tcp | ISS RealSecure IDS Remote Console Admin port |
| ppp | 3000/tcp | User-level ppp daemon |
| nessusd | 3001/tcp | Nessus Security Scanner (www.nessus.org) Daemon |
| deslogin | 3005/tcp | encrypted symmetric telnet/login |
| cfs | 3049/tcp | cryptographic file system (nfs) (proposed) |
| distrib-net-proxy | 3064/tcp | Stupid closed source distributed.net project proxy port |
| sj3 | 3086/tcp | SJ3 (kanji input) |
| ccmail | 3264/tcp | cc:mail/lotus |
| mysql | 3306/tcp | mySQL |
| dec-notes | 3333/tcp | DEC Notes |
| msrdp | 3389/tcp | Micro$oft Remote Display Protocol |
| bmap | 3421/tcp | Bull Apprise portmapper |
| prsvp | 3455/tcp | RSVP Port |
| vat | 3456/tcp | VAT default data |
| vat-control | 3457/tcp | VAT default control |
| track | 3462/tcp | software distribution |
| udt_os | 3900/tcp | Unidata UDT OS |
| mapper-nodemgr | 3984/tcp | MAPPER network node manager |
| mapper-mapethd | 3985/tcp | MAPPER TCP/IP server |
| mapper-ws_ethd | 3986/tcp | MAPPER workstation server |
| netcheque | 4008/tcp | NetCheque accounting |
| nuts_dem | 4132/tcp | NUTS Daemon |
| nuts_bootp | 4133/tcp | NUTS Bootp Server |
| wincim | 4144/tcp | pc windows compuserve.com protocol |
| rwhois | 4321/tcp | Remote Who Is |
| msql | 4333/tcp | mini-sql server |
| krb524 | 4444/tcp | Kerberos 5 to 4 ticket xlator |
| fax | 4557/tcp | FlexFax FAX transmission service |
| hylafax | 4559/tcp | HylaFAX client-server protocol |
| rfa | 4672/tcp | remote file access server |
| fics | 5000/tcp | Free Internet Chess Server |
| rfe | 5002/tcp | Radio Free Ethernet |
| mmcc | 5050/tcp | multimedia conference control tool |
| aol | 5190/tcp | America-Online |
| aol-1 | 5191/tcp | AmericaOnline1 |
| aol-2 | 5192/tcp | AmericaOnline2 |
| aol-3 | 5193/tcp | AmericaOnline3 |
| sgi-dgl | 5232/tcp | SGI Distributed Graphics |
| hacl-hb | 5300/tcp | HA cluster heartbeat |
| hacl-gs | 5301/tcp | HA cluster general services |
| hacl-cfg | 5302/tcp | HA cluster configuration |
| hacl-probe | 5303/tcp | HA cluster probing |
| pcduo-old | 5400/tcp | RemCon PC-Duo - old port |
| pcduo | 5405/tcp | RemCon PC-Duo - new port |
| postgres | 5432/tcp | postgres database server |
| secureidprop | 5510/tcp | ACE/Server services |
| sdlog | 5520/tcp | ACE/Server services |
| sdserv | 5530/tcp | ACE/Server services |
| sdreport | 5540/tcp | ACE/Server services |
| sdadmind | 5550/tcp | ACE/Server services |
| canna | 5680/tcp | Canna (Japanese Input) |
| proshareaudio | 5713/tcp | proshare conf audio |
| prosharevideo | 5714/tcp | proshare conf video |
| prosharedata | 5715/tcp | proshare conf data |
| prosharerequest | 5716/tcp | proshare conf request |
| prosharenotify | 5717/tcp | proshare conf notify |
| vnc | 5900/tcp | Virtual Network Computer |
| vnc-1 | 5901/tcp | Virtual Network Computer Display :1 |
| vnc-2 | 5902/tcp | Virtual Network Computer Display :2 |
| ncd-pref-tcp | 5977/tcp | NCD preferences tcp port |
| ncd-diag-tcp | 5978/tcp | NCD diagnostic tcp port |
| ncd-conf-tcp | 5979/tcp | NCD configuration tcp port |
| ncd-pref | 5997/tcp | NCD preferences telnet port |
| ncd-diag | 5998/tcp | NCD diagnostic telnet port |
| ncd-conf | 5999/tcp | NCD configuration telnet port |
| X11 | 6000/tcp | X Window server |
| X11:1 | 6001/tcp | X Window server |
| X11:2 | 6002/tcp | X Window server |
| X11:3 | 6003/tcp | X Window server |
| X11:4 | 6004/tcp | X Window server |
| X11:5 | 6005/tcp | X Window server |
| X11:6 | 6006/tcp | X Window server |
| X11:7 | 6007/tcp | X Window server |
| X11:8 | 6008/tcp | X Window server |
| X11:9 | 6009/tcp | X Window server |
| arcserve | 6050/tcp | ARCserve agent |
| isdninfo | 6105/tcp | isdninfo |
| isdninfo | 6106/tcp | i4lmond |
| softcm | 6110/tcp | HP SoftBench CM |
| spc | 6111/tcp | HP SoftBench Sub-Process Control |
| dtspc | 6112/tcp | CDE subprocess control |
| meta-corp | 6141/tcp | Meta Corporation License Manager |
| aspentec-lm | 6142/tcp | Aspen Technology License Manager |
| watershed-lm | 6143/tcp | Watershed License Manager |
| statsci1-lm | 6144/tcp | StatSci License Manager - 1 |
| statsci2-lm | 6145/tcp | StatSci License Manager - 2 |
| lonewolf-lm | 6146/tcp | Lone Wolf Systems License Manager |
| montage-lm | 6147/tcp | Montage License Manager |
| ricardo-lm | 6148/tcp | Ricardo North America License Manager |
| netop-rc | 6502/tcp | NetOp Remote Control (by Danware Data A/S) |
| irc-serv | 6666/tcp | internet relay chat server |
| irc | 6667/tcp | Internet Relay Chat |
| irc | 6668/tcp | Internet Relay Chat |
| napster | 6699/tcp | Napster File (MP3) sharing software |
| afs3-fileserver | 7000/tcp | file server itself, msdos |
| afs3-callback | 7001/tcp | callbacks to cache managers |
| afs3-prserver | 7002/tcp | users & groups database |
| afs3-vlserver | 7003/tcp | volume location database |
| afs3-kaserver | 7004/tcp | AFS/Kerberos authentication service |
| afs3-volser | 7005/tcp | volume managment server |
| afs3-errors | 7006/tcp | error interpretation service |
| afs3-bos | 7007/tcp | basic overseer process |
| afs3-update | 7008/tcp | server-to-server updater |
| afs3-rmtsys | 7009/tcp | remote cache manager service |
| ups-onlinet | 7010/tcp | onlinet uninterruptable power supplies |
| font-service | 7100/tcp | X Font Service |
| fodms | 7200/tcp | FODMS FLIP |
| icb | 7326/tcp | Internet Citizen's Band |
| qaz | 7597/tcp | Quaz trojan worm |
| jserv | 8007/tcp | Apache JServ Protocol 1.x |
| ajp13 | 8009/tcp | Apache JServ Protocol 1.3 |
| http-proxy | 8080/tcp | Common HTTP proxy/second web server port |
| blackice-icecap | 8081/tcp | ICECap user console |
| blackice-alerts | 8082/tcp | BlackIce Alerts sent to this port |
| sun-answerbook | 8888/tcp | Sun Answerbook HTTP server |
| seosload | 8892/tcp | From the new Computer Associates eTrust ACX |
| zeus-admin | 9090/tcp | Zeus admin server |
| jetdirect | 9100/tcp | HP JetDirect card |
| DragonIDSConsole | 9111/tcp | Dragon IDS Console |
| sd | 9876/tcp | Session Director |
| issa | 9991/tcp | ISS System Scanner Agent |
| issc | 9992/tcp | ISS System Scanner Console |
| stel | 10005/tcp | Secure telnet |
| amandaidx | 10082/tcp | Amanda indexing |
| amidxtape | 10083/tcp | Amanda tape indexing |
| pksd | 11371/tcp | PGP Public Key Server |
| cce4x | 12000/tcp | ClearCommerce Engine 4.x (www.clearcommerce.com) |
| NetBus | 12345/tcp | NetBus backdoor trojan |
| NetBus | 12346/tcp | NetBus backdoor trojan |
| biimenu | 18000/tcp | Beckman Instruments, Inc. |
| btx | 20005/tcp | xcept4 (Interacts with German Telekom's CEPT videotext service) |
| wnn6 | 22273/tcp | Wnn6 (Japanese input) |
| wnn6_Cn | 22289/tcp | Wnn6 (Chinese input) |
| wnn6_Kr | 22305/tcp | Wnn6 (Korean input) |
| wnn6_Tw | 22321/tcp | Wnn6 (Taiwanse input) |
| hpnpd | 22370/tcp | Hewlett-Packard Network Printer daemon |
| wnn6_DS | 26208/tcp | Wnn6 (Dserver) |
| Trinoo_Master | 27665/tcp | Trinoo distributed attack tool Master server control port |
| Elite | 31337/tcp | Sometimes interesting stuff can be found here |
| sometimes-rpc3 | 32770/tcp | Sometimes an RPC port on my Solaris box |
| sometimes-rpc5 | 32771/tcp | Sometimes an RPC port on my Solaris box (rusersd) |
| sometimes-rpc7 | 32772/tcp | Sometimes an RPC port on my Solaris box (status) |
| sometimes-rpc9 | 32773/tcp | Sometimes an RPC port on my Solaris box (rquotad) |
| sometimes-rpc11 | 32774/tcp | Sometimes an RPC port on my Solaris box (rusersd) |
| sometimes-rpc13 | 32775/tcp | Sometimes an RPC port on my Solaris box (status) |
| sometimes-rpc15 | 32776/tcp | Sometimes an RPC port on my Solaris box (sprayd) |
| sometimes-rpc17 | 32777/tcp | Sometimes an RPC port on my Solaris box (walld) |
| sometimes-rpc19 | 32778/tcp | Sometimes an RPC port on my Solaris box (rstatd) |
| sometimes-rpc21 | 32779/tcp | Sometimes an RPC port on my Solaris box |
| sometimes-rpc23 | 32780/tcp | Sometimes an RPC port on my Solaris box |
| sometimes-rpc25 | 32786/tcp | Sometimes an RPC port (mountd) |
| sometimes-rpc27 | 32787/tcp | Sometimes an RPC port dmispd (DMI Service Provider) |
| coldfusion-auth | 44442/tcp | ColdFusion Advanced Security/Siteminder Authentication Port (by Allaire/Netegrity) |
| coldfusion-auth | 44443/tcp | ColdFusion Advanced Security/Siteminder Authentication Port (by Allaire/Netegrity) |
| dbbrowse | 47557/tcp | Databeam Corporation |
| bo2k | 54320/tcp | Back Orifice 2K Default Port |
| trojan | 1001/tcp | Silencer, WebEx |
| trojan | 1011/tcp | Doly Trojan |
| trojan | 1045/tcp | Rasmin Trojan |
| trojan | 1090/tcp | Xtreme Trojan |
| trojan | 1170/tcp | Psyber Stream Server Trojan |
| trojan | 1243/tcp | BackDoor-G, SubSeven Trojans |
| trojan | 1245/tcp | VooDoo Doll Trojan |
| trojan | 1807/tcp | SpySender Trojan |
| trojan | 1981/tcp | ShockRave Trojan |
| trojan | 2115/tcp | Bugs Trojan |
| trojan | 2140/tcp | Deep Throat, The Invasor Trojans |
| trojan | 2565/tcp | Striker Trojan |
| trojan | 2583/tcp | WinCrash |
| trojan | 2801/tcp | Phineas Phucker Trojan |
| trojan | 3024/tcp | WinCrash Trojan |
| trojan | 3129/tcp | Masters Paradise Trojan |
| trojan | 3150/tcp | Deep Throat, The Invasor Trojans |
| trojan | 3700/tcp | Portal of Doom Trojan |
| trojan | 4092/tcp | WinCrash Trojan |
| trojan | 4567/tcp | File Nail |
| trojan | 4590/tcp | ICQTrojan Trojan |
| trojan | 4950/tcp | ICQTrojan Trojan |
| trojan | 5321/tcp | Firehotcker Trojan |
| trojan | 5401/tcp | Blade Runner v1.x Trojan |
| trojan | 5402/tcp | Blade Runner v2.x Trojan |
| trojan | 5569/tcp | Robo-Hack Trojan |
| trojan | 5742/tcp | WinCrash Trojan |
| trojan | 6400/tcp | The Thing Trojan |
| trojan | 6670/tcp | Deep Throat 1,2,3.x Trojan |
| trojan | 6671/tcp | Deep Throat Trojan |
| trojan | 6776/tcp | BackDoor-G, SubSeven trojans |
| trojan | 6939/tcp | GateCrasher, Priority |
| trojan | 7300/tcp | NetMonitor Trojan |
| trojan | 7301/tcp | NetMonitor v1.x Trojan |
| trojan | 7306/tcp | NetMonitor v2.x Trojan |
| trojan | 7307/tcp | NetMonitor v3.x Trojan |
| trojan | 7308/tcp | NetMonitor v4.x Trojan |
| trojan | 7789/tcp | Back Door Setup, ICKiller Trojan |
| trojan | 9872/tcp | Portal of Doom Trojan |
| trojan | 9873/tcp | Portal of Doom v1.x Trojan |
| trojan | 9874/tcp | Portal of Doom v2.x Trojan |
| trojan | 9875/tcp | Portal of Doom v3.x Trojan |
| trojan | 9989/tcp | iNi-Killer Trojan |
| trojan | 10067/tcp | Portal of Doom v4.x Trojan |
| trojan | 10167/tcp | Portal of Doom v5.x Trojan |
| trojan | 11000/tcp | Senna Spy Trojan |
| trojan | 11223/tcp | Progenic trojan Trojan |
| trojan | 12223/tcp | Hack'99 KeyLogger Trojan |
| trojan | 12361/tcp | Whack-a-mole Trojan |
| trojan | 12362/tcp | Whack-a-mole Trojan |
| trojan | 13000/tcp | Senna Spy Trojan |
| trojan | 16969/tcp | Priority Trojan |
| trojan | 20001/tcp | Millenium Trojan |
| trojan | 20034/tcp | NetBus 2 Pro Trojan |
| trojan | 21544/tcp | GirlFriend Trojan |
| trojan | 22222/tcp | Prosiak Trojan |
| trojan | 23456/tcp | Evil FTP, Ugly FTP, WhackJob |