Network port number and protocol number (encyclopedia)

Network port number

effect

The main function of a port number is to represent the services provided by a specific process in a computer. Computers in the network represent their identities through IP addresses. It can only represent a specific computer, but one computer can provide many services at the same time, such as database services, FTP services, web services, etc. We use The port number is used to distinguish these different services provided by the same computer. For example, the common port number 21 represents the FTP service, the port number 23 represents the Telnet service, and the port number 25 refers to the SMTP service. Port numbers are generally used as 4-digit integers. Port numbers cannot be repeated on the same computer. Otherwise, exceptions such as port number conflicts will occur. 

Usage rules

The port addresses in the TCP and UDP segment structures are both 16 bits, and can have port numbers in the range of 0---65535. There are the following usage regulations for these 65536 port numbers:

• Port numbers less than 256 are defined as common ports, and servers are generally identified by common port numbers. The services provided by any TCP/IP implementation use port numbers between 1---1023, which are managed by ICANN; the port numbers from 1024---49151 are registered ports and also become "user ports". Designated by IANA for special service use;
• The client only needs to ensure that the port number is unique on the local machine. The client port number is also called a temporary port number because its existence time is very short;
• Most TCP/IP implementations assign ephemeral port numbers between 1024---5000. Port numbers greater than 5000 are reserved for other servers. 

It can be divided into 2 major categories according to port number:

1. Well-KnownPorts: range from 0 to 1023 .

2. Dynamic Ports : range from 1024 to 65535.

        a. Registered Ports: from 1024 to 49151.

        b. Dynamic and/or Private Ports: from 49152 to 65535.
 

The port number

Port 0: Invalid port, usually used for analyzing operating systems.
Port 1: Transmission Control Protocol port service multiplexer. Port 2: Management utility. Port 3:
Compression process. Port
5: Remote job login.
Port 7: Echo.
Port 9: Drop
Port 11: Online User
Port 13: Time
Port 17: Daily Quote Port
18: Message Sending Protocol Port 19
: Character Generator
Port 20: FTP File Transfer Protocol (Default Data Port)
Port 21: FTP File Transfer Protocol (Control)
Port 22: SSH remote login protocol
Port 23: telnet (terminal emulation protocol), the Trojan Tiny Telnet Server opens this port
Port 24: Reserved for personal mail system
Port 25: The port opened by the SMTP server, used to send emails
Port 27 : NSW user system FE
29 port: MSG ICP
port 31: MSG verification, Trojan Master Paradise, Hackers Paradise open this port
33 port: Display support protocol
35 port: Reserved for personal printer service
37 port: Time
38 port: Routing access protocol
39 Port: Resource Location Protocol
41 Port: Graphics
Port 42: Host name service
Port 43: who is service
Port 44: MPM (message processing module) flag protocol
Port 45: Message processing module
Port 46: Message processing module (default sending port)
Port 47: NI FTP
Port 48: Digital audio Backend service
port 49: TACACS login host protocol
Port 50: Remote Mail Checking Protocol
Port 51: IMP (Interface Information Processor) Logical Address Maintenance Port
52: Xerox Network Services System Time Protocol Port
53: DNS Domain Name Server
Port 54: Xerox Network Services System Ticket Exchange
Port 55: ISI Graphics Language
Port 56: Xerox Network Services System Authentication
Port 57: Reserved for Personal Terminal Access
Port 58: Xerox Network Services System Mail Port
59: Reserved for Personal File Services
Port 60: Undefined
Port 61: NI Mail
Port 62: Asynchronous Communication Adapter Service
Port 63: Whois++
Port 64: Communication Interface Port
65: TACACS Database Service
Port 66: Oracle SQL*NET
Port 67: Bootstrap Protocol Server Port 68
: Bootstrap Protocol Client Port
69: Small File Transfer Protocol
Port 70: Information Retrieval Protocol
Port 71: Remote Job Service
Port 72: Remote Job Service
Port 73: Remote Job Service
Port 74: Remote Job Service
Port 75: Reserved for personal dial-out service
Port 76: Distributed external object storage
Port 77: Reserved for personal remote job input service
Port 78: Modified TCP
Port 79: Query Remote host online user and other information
Port 80: http, used for web browsing, Trojan Executor opens this port
Port 81: HOST2 name service
Port 82: Transfer utility Port
83: Modular intelligent terminal ML device
Port 84: Public tracking device
Port 85 : Modular intelligent terminal ML device
port 86: Micro Focus Cobol programming language
port 87: reserved for personal terminal connection
port 88: Kerberros security authentication system
port 89: SU/MIT telnet (terminal emulation gateway)
port 90: DNSIX security attribute tag Figure
91 Port: MIT Dover Spool
Port 92: Network Printing Protocol
Port 93: Device Control Protocol
Port 94: Tivoli Object Scheduling Port 96:
DIXIE Protocol Specification Port
97: Fast Remote Virtual File Protocol Port
98: TAC News Protocol
Port 99: Backdoor ncx99 opens this port
Port 100: Unknown purpose
Port 101: NIC Host Name Service
Port 102: Message Transfer Agent
103 port: Genesis point-to-point transmission network
105 port: Mailbox name service
106 port: 3COM-TSMUX open port
107 port: Remote Telnet service
108 port: SNA gateway access service
109 port: POP2 server opens this port for receiving mail
110 port: The POP3 server opens this port, used to receive mail
. Port 111: All ports of SUN's RPC service.
Port 112: McIDAS data transfer protocol.
Port 113: Authentication service, used to identify users connected to TCP.
Port 114: Audio news multipoint service
port 115. : Simple File Transfer Service
Port 116: ANSA REX Notification
Port 117: UUCP Path Service
Port 118: SQL Service
Port 119: NEWS Newsgroup Transfer Protocol, carrying USENET communication
Port 121: Trojan BO jammerkillahV Open Port
122 Port: SMAKY Network
Port 123: Network Time Protocol , which worms will use, is generally closed . Port 128 :
GSS Service port 134: INGRES-Network Service






Port 135: DCOM service, exploited by shock wave virus, cannot be closed.
Port 136: Naming system
. Port 137: NETBIOS protocol application, open for sharing.
Port 138: NETBIOS protocol application, open for sharing. Port 139: NETBIOS protocol application, open port 140 for
sharing :
EMFIS data service
port 141: EMFIS control service
port 143: Interim mail access protocol
port 144: UMA software open port
145 port: UAAC protocol
port 149: AED 512 simulation service
port 150: SQL (Structured Query Language) - Network
port 152: Background File Transfer Protocol
Port 156: SQL (Structured Query Language) Service
Port 158: PC Mail Server
Port 159: NSS-Routing Port
160: SGMP-Trap Port
161: Simple Network Management Protocol Port
162: SNMP Trap
Port 163: CMIP/ TCP management
port 164: CMIP/TCP proxy
port 166: Sirius system port
169: send
port 170: network PS
177 port: x display management control protocol, through which intruders access the X-windows console
port 178: NextStep Window service
179 Port: Border Gateway Protocol
Port 180: Chart
Port 181: Unified
Port 184: OC Server
Port 185: Remote-KIS
Port 186: KIS Protocol
Port 187: Application Communication Interface Port 189
: Queue File Transfer Port
190: Gateway Entry Control Protocol
Port 191: Prospero Directory Service
Port 192: OSU Network Monitoring system
port 193: Spider Remote control protocol
port 194: Multi-line chat protocol Port
197: Directory Address Service Port
198: Directory Address Service Monitor
port 200: IBM System Resource Controller
Port 201: AppleTalk (network protocol used by Mac machines) Routing guarantee
202 port: AppleTalk (network protocol used by Mac machine) Name Binding
203 port: AppleTalk (network protocol used by Mac machine) Unused port
204 port: AppleTalk (network protocol used by Mac machine) Echo
205 port: AppleTalk ( Port 206: AppleTalk (network protocol used by Mac) Unused port
206: AppleTalk (network protocol used by Mac) Area information
Port 207: AppleTalk (network protocol used by Mac) Unused port
208: AppleTalk (network protocol used by Mac) ) Unused ports Port
209: Fast Mail Transfer Protocol
Port 210: ANSI (American National Standards Institute) Z39.50
Port 211: Texas Instruments 914C/G Terminal Port
213: IPX (the protocol used by Ethernet) Port
218: Netix Message Recording Protocol
Port 219: Unisys ARPs
Port 220: Interactive Mail Access Protocol v3
Port 223: Certificate Distribution Center
Port 224: masq Dialer port
241: Reserved port (224-241)
245 port: Link port
246: Display system protocol
257 port: Secure electronic transaction system
258 port: Yak Winsock Personal chat port
259: Effective short-range remote control
port 260 port: Open port
261 port :IIOP TLS/SSL based naming service
266 port: SCSI (Small Computer System Interface) on ST
267 port: Tobit David service layer
268 port: Tobit David replication
281 port: Personal link
282 port: Cable port A/X
286 port: FXP Communication
Port 308: Novastor Backup
Port 313: Magenta Logic Port
318: PKIX Timestamps 333 Port:
Texar Secure Port 344 Port:
Prospero Data Access Protocol
345 Port: Perf Analysis Workbench
346 Port: Zebra Server
347 port: Fatmen server
348 port: Cabletron management protocol
358 port: Shrink Internet-enabled home appliance protocol
359 port: Network security risk management protocol 362 port
: SRS sending
363 port: RSVP tunnel
372 port: list processing
373 port: Legend company
374 port: Legend
Port 376: AmigaEnvoy Network Query Protocol
Port 377: NEC Port
378: NEC Port 379
: TIA/EIA/IS-99 Modem Client Port
380: TIA/EIA/IS-99 Modem Server
Port 381: HP (HP )Performance Data Collector
Port 382: HP (HP) Performance Data Control Node Port
383: HP (HP) Performance Data Alert Management
Port 384: Remote Network Server System
Port 385: IBM Application Port
386: ASA Information Router Definition File.
387 Port: Appletalk update routing.
Port 389: Lightweight Directory Access Protocol
Port 395: Network Monitoring Control Protocol
Port 396: Novell (Novell Company of the United States) Netware (network operating system produced by Novell Company) over IP
Port 400: Workstation Solution
Port 401: Continuous Power
402 Port: Genie Protocol
Port 406: Interactive Mail Support Protocol
Port 408: Prospero Resource Manager Port
409: Prospero Resource Node Management. Port
410: DEC (Data Equipment Corporation) Remote Debugging Protocol
Port 411: Remote MT Protocol
Port 412: Trap Protocol Port
413 Port: Storage Management Service Agreement
Port 414: Information Query
Port 415: B Network
Port 423: IBM Operational Planning and Control Start Port
424: IBM Operational Planning and Control Tracking Port
425: Intelligent Computer Aided Design
Port 427: Service Starting Location
Port 434: Mobile IP Proxy
Port 435: Mobile IP Management
Port 443: TLS/SSL-based web browsing port, which can provide encryption and another HTTP transmission through a secure port.
Port 444: Simple Network Memory Paging Protocol
Port 445: Microsoft-DS, open for sharing , Sasser virus uses, port 446 should generally be closed
: DDM-Remote Relational Database Access
Port 447: DDM-Distributed File Management
Port 448: DDM-Use Secure Access to Remote Database
Port 456: Trojan HACKERS PARADISE Open this port
Port 458: apple The quick time software opens port
459: ampr-rcmd command
port 464: k password service
port 469: broadcast control protocol
Port 470: scx-agent
472 port: ljk-login
481 port: Ph service Port
487: Simple asynchronous file transfer
489 port: nest-protocol
491 port: go-login
499 port: ISO ILL protocol
500 port: Internet key exchange, Lsass open port, cannot close
509 port: trap
510 port: FirstClass protocol
512 port: remote process execution
513 port: remote login
514 port: cmd command
515 port: spooler
516 port: visual data
518 port: chat
519 port: unix time
520 Port: Extended File Name Server
525 Port: Time Service
526 Port: New Date
529 Port: Online Chat System Service
530 Port: Remote Procedure Call
531 Port: Chat
532 Port: Read News
533 Port: Emergency Broadcast Port
534 Port: MegaMedia Management Terminal
Port 537: Network Streaming Protocol
Port 542: Business
Port 543: Kerberos (software) v4/v5
Port 544: krcmd command
Port 546: DHCPv6 client
Port 547: DHCPv6 Server
port 552: Device sharing
Port 554: Real Time Stream control protocol
Port 555: Trojan PhAse1.0, Stealth Spy, IniKiller open this port
556 port: Remote file server
Port 563: Network news based on TLS/SSL Transport protocol
port 564: plan 9 file service
port 565: whoami query
port 566: streettalk port
567: banyan-rpc (remote procedure call) port
568: DPA membership
port 569: MSN membership
port 570: demon (debug supervisor program)
Port 571: udemon (debugging supervisory program)
Port 572: Sonar
Port 573: banyan-VIP
574 Port: FTP software proxy system
Port 581: Bundle Discovery Protocol
Port 582: SCC Security
Port 583: Philips video conferencing
Port 584: Key server
Port 585: IMAP4+SSL (Use 993 instead)
Port 586: Password change
Port 587: Apply
Port 589: Eye connection Port
595: CAB protocol
Port 597: PTC name service
Port 598: SCO Network Server Management 3
Port 599: Aeolon Core Protocol
Port 600: Sun IPC (Inter-Process Communication) Server
Port 601: Reliable System Login Service
Port 604: Channel
Port 606: Cray Unified Resource Management
Port 608: Sender-Transfer /Provide file transfer
port 609: npmp-trap
610: npmp-local
611: npmp-gui (Graphical User Interface)
612: HMMP Guide
613: HMMP Operations
614: SSL (Secure Socket Protocol Layer) shell (shell)
615 port: Internet configuration management
616 port: SCO (Unix system) system management server
617 port: SCO desktop management server
619 port: Compaq (Compaq) EVM
620 port: SCO server management
623 port: ASF remote management Control Protocol
Port 624: Crypto Management
Port 631: IPP (Internet Printing Protocol)
Port 633: Service Update (Sterling Software) Port
637: LAN Server
Port 641: repcmd command
Port 647: DHCP (Dynamic Host Configuration Protocol) Failover
Port 648: Registration Registration Protocol (RRP)
Port 649: Cadview-3d software protocol
Port 666: Trojan Attack FTP, Satanz Backdoor open this port
. Port 808: ccproxy http/gopher/ftp (over http) protocol
port 1001: Trojan Silencer, WebEx open port
1011: Trojan Doly open port
1024: The beginning of the dynamic port, Trojan yai opens port
1025: inetinfo.exe (Internet information service) Trojan netspy opens port
1026: inetinfo.exe (Internet information service)
1027 port: Application layer gateway service
1030 port: Application layer gateway service
1031 port: BBN IAD
1033 Port: Local Network Information Port
1034 Port: Synchronization Notification
Port 1036: Secure Partial Transport Protocol
1070 Port: Trojan Psyber Stream, Streaming Audio Open Port
1071 Port: Network Service Open Port
1074 Port: Network Service Open Port
1080 Port: Socks This Protocol Pass through the firewall as a tunnel, allowing people behind the firewall to access the INTERNET through an IP address.
Port 1110: Kaspersky Anti-Virus opens this port.
Port 1125: Kaspersky Anti-Virus opens this port. Port 1203: Port 1204
where the license is valid.
Port: Login request listening port
1206 Port: Anthony data port
1222 port: SNI R&D network port
Port 1233: Common appendix server port
1234 Port: Trojan SubSeven2.0, Ultors Trojan open this port
1243 Port: Trojan SubSeven1.0/1.9 ​​open this port
1245 Port: Trojan Vodoo, GabanBus, NetBus, Vodoo open this port
1273 Port: EMC-Gateway Port
1289: JWalk Server Port
1290: WinJa Server Port
1333: Password Policy (Network Service) (svchost.exe)
1334 Port: Network Service (svchost.exe)
1335 Port: Digital Justice Protocol
1336 Port: Instant Chat protocol (svchost.exe)
Port 1349: Registered network protocol port Port
1350: Registered network protocol port Port
1371: Fujitsu configuration protocol port 1372 Port:
Fujitsu configuration protocol port
1374 Port: EPI software system port
1376 port: IBM Personal-Personal Software Port
1377: Cichlid license management port
1378: Elan license management port
1380: Telesis network license management port
1381: Apple network license management port
1386: CheckSum license management port
1387: System open port ( rundll32.exe)
1388 port: database cache port
1389 port: Document management port
1390 port: Storage controller port
1391 port: Storage access server port
1392 port: Print management port
1393 port: Network login server port
1394 port: Network login client port
1395 port: PC workstation management software port
Port 1396: DVL Active Mail Port
1397 Port: Audio Active Mail Port
1398: Video Active Mail Port 1399 Port:
Cadkey License Management Port
1433 Port: Microsoft's SQL Service Open Port
1434 Port: Microsoft's SQL Service Monitoring Port
1492 Port: Trojan FTP99CMP opens this port
Port 1509: Trojan Psyber Streaming Server opens this port
Port 1512: Microsoft Windows Network Name Service
Port 1524: Many attack scripts install a backdoor SHELL on this port Port
1600: Trojan Shivka-Burka opens this port
Port 1645: Remote Authentication Dial-up User Service
Port 1701: Layer 2 Tunneling Protocol
Port 1731: NetMeeting Audio Call Control
Port 1801: Microsoft Message Queuing Server
Port 1807: Trojan SpySender opens this port
Port 1900: Can be exploited for DDoS attacks, generally closed
Port 1912: Kingsoft PowerWord open this port
Port 1981: Trojan ShockRave opens this port
1999 Port: Trojan BackDoor, yai opens this port
2000 Port: Trojan GirlFriend 1.3, Millenium 1.0 opens this port
2001 Port: Trojan Millenium 1.0, Trojan Cow, Black Hole 2001 opens this port
2003 Port: GNU Query
Port 2023: Trojan Pass Ripper opens this port
2049 Port: NFS program often runs on this port
2115 Port: Trojan Bugs opens this port
2140 Port: Trojan Deep Throat 1.0/3.0, The Invasor opens this port
2500 Port: Application fixed port session replication RPC Client
Port 2504: Network Load Balancing
Port 2565: Trojan Striker opens this port Port
2583: Trojan Wincrash 2.0 opens this port Port
2801: Trojan Phineas Phucker opens this port Port
2847: Norton Anti-Virus Service opens this port Port
3024: Trojan WinCrash Open this port
3128 Port: squid http proxy server open this port
3129 Port: Trojan Master Paradise open this port
3150 Port: Trojan The Invasor, deep throat open this port
3210 Port: Trojan SchoolBus open this port
3306 Port: MySQL open this port
Port 3333: Trojan Prosiak opens this port
3389 Port: WINDOWS 2000 terminal opens this port
3456 Port: inetinfo.exe (Internet Information Service) open port, VAT default data
3457 port: VAT default control
3527 port: Microsoft message queue server
3700 port: The Trojan Portal of Doom opens this port. Port
3996: The Trojan RemoteAnything opens this port.
Port 4000: Tencent QQ client opens this port. Port
4060: The Trojan RemoteAnything opens this port. Port
4092: The Trojan WinCrash opens this
port. Port 4133: NUTS Bootp server
port 4134: NIFTY-Serve HMI protocol
4141 port: Workflow server
4142 port: Document server
4143 port: Document replication
4145 port: VVR control
4321 port: Remote Who Is query
4333 port: Micro sql server
4349 port: File system port record
4350 port: Network device
Port 4351: PLCY Network Service
Port 4453: NSS Alarm Management
Port 4454: NSS Agent Management
Port 4455: PR Chat User
Port 4456: PR Chat Server
Port 4457: PR Registration
4480 port: Proxy+ HTTP proxy port
4500 port: Lsass open port, cannot be closed
4547 port: Lanner license management 4555 port
: RSIP port
4590 port: Trojan ICQTrojan opens this port
4672 port: Remote file access server
4752 port: Simple network audio server
4800 Port: Icona Quick Messaging System
4801 Port: Icona Web Chat
4802 Port: Icona Licensing System Server
4848 Port: App Server-Admin HTTP
4849 Port: App Server-Admin HTTPS
4950 Port: Trojan IcqTrojan Open 5000 Port
5000 Port: Trojan blazer5, Sockets de Troie opens port 5000, generally
5001 port should be closed : Trojan Sockets de Troie opens 5001 port
5006 port: wsm server
5007 port: wsm server ssl
5022 port: mice server
5050 port: Multimedia Conference Control Protocol
5051 port: ITA proxy
5052 port: ITA management
port 5137: MyCTS server port
5150 port: Ascend channel management protocol
5154 port: BZFlag game server
port 5190: America-Online (America Online)
5191 port: AmericaOnline1 (America Online)
5192 port: AmericaOnline2 (America Online)
5193 port: AmericaOnline3 (America Online)
5222 port: Jabber client connection
5225 port: HP (Hewlett Packard Company) server
5226 port: HP (Hewlett Packard Company)
5232 port : SGI Drawing Software Port
5250 Port: i Gateway
5264 Port: 3Com Network Port 1
5265 Port: 3Com Network Port 2
5269 Port: Jabber Server Connection
5306 Port: Sun MC Group
5321 Port: Trojan Sockets de Troie Open 5321 Port
5400 Port: Trojan Blade Runner opens this port
5401 Port: Trojan Blade Runner opens this port
5402 Port: Trojan Blade Runner opens this port
5405 Port: Network Support
5409 Port: Salient Data Server
5410 Port: Salient User Management
5415 Port: NS Server
5416 Port: SNS Gateway
Port 5417: SNS proxy
5421 port: Network support 2
Port 5423: Virtual user
Port 5427: SCO-PEER-TTA (Unix system)
Port 5432: PostgreSQL database
Port 5550: Trojan xtcp opens this port
5569 Port: Trojan Robo-Hack opens this port
5599 Port: Company remote security installation
5600 Port: Company Security Management
5601 Port: Company Security Agent
5631 Port: pcANYWHERE (software) data
5632 Port: pcANYWHERE ( Software) Data
Port 5673: JACL Message Server
Port 5675: V5UA Application Port Port
5676: RA Management Port
5678: Remote Replication Agent Connection
Port 5679: Direct Cable Connection Port
5720: MS-License
Port 5729: Openmail User Agent Layer
Port 5730: Steltor's Calendar access
port 5731: netscape (Netscape) suiteware
5732 port: netscape (Netscape) suiteware
5742 port: Trojan WinCrash1.03 opens this port
5745 port: fcopy-server
5746 port: fcopys-server
5755 port: OpenMail (mail server) Desktop Gateway Server
Port 5757: OpenMail (Mail Server) X.500 Directory Server
Port 5766: OpenMail (Mail Server) NewMail Server
Port 5767: OpenMail (Mail Server) Request Agent (Security)
Port 5768: OpenMail (mail server) CMTS server
port 5777: DALI port
5800 port: Virtual network computing Port
5801: Virtual network computing Port
5802: Virtual network computing HTTP access, d
5803 port: Virtual network computing HTTP access, d
5900 port: Virtual network computer shows 0
5901 port: Virtual network computer shows 1
5902 port: Virtual network computer shows 2
5903 port: Virtual network computer shows 3
6000 port: X Window System
6001 port: X Window Server
6002 port: X Window Server
6003 port: X Window server
6004 port: X Window server
6005 port: X Window server
6006 port: X Window server
6007 port: X Window server
6008 port:
X Window server 6009 port:

Port 6379: Redis Database Port
6456 Port: SKIP Certificate Sending
Port 6471: LVision License Manager
6505 Port: BoKS Management Private Port
6506 Port: BoKS Management Public Port 6507
Port: BoKS Dir Server, Private Port
6508 Port: BoKS Dir Server, Public Port
6509: MGCS-MFP Port
6510: MCER Port
6566: SANE Control Port
6580: Parsec Master Server Port
6581: Parsec Peer Network Port
6582: Parsec Game Server
Port 6588: AnalogX HTTP Proxy Port
6631: Mitchell Telecom Host
port 6667: Internet multi-line chat
6668 port: Internet multi-line chat
6670 port: Trojan Deep Throat opens this port
6671 port: Trojan Deep Throat 3.0 opens this port
6699 port: Napster file (MP3) sharing service
6701 port: KTI/ICAD Name server
port 6788: SMC software-HTTP
Port 6789: SMC software-HTTPS
Port 6841: Netmo software default open port
6842 port: Netmo HTTP service
Port 6883: Trojan DeltaSource opens this port.
Port 6939: Trojan Indoctrination opens this port.
Port 6969: Trojan Gatecrasher and Priority open this port. Port
6970: real audio opens this port. Port
7000: Trojan Remote Grab opens this port. Port
7002: User & Group. Database
port 7003: Volume location database
port 7004: AFS/Kerberos authentication service
7005 port: Volume management service
7006 port: Error explanation service
7007 port: Basic supervision process 7008
port: Server-Server update program
7009 port: Remote cache management service
port 7011 : Talon software discovery port
7012 port: Talon software engine
port 7013: Microtalon discovery
port 7014: Microtalon communication port
7015: Talon web server
port 7020: DP service
port 7021: DP service management
port 7100: X-shaped service
port 7121: Virtual Prototype License management
port 7300: Trojan NetMonitor opens this port
7301 port: Trojan NetMonitor opens this port
7306 port: Trojan NetMonitor, NetSpy1.0 opens this port
Port 7307: Trojan NetMonitor opens this port
7308 Port: Trojan NetMonitor opens this port
7323 Port: Sygate server side
7511 Port: Trojan Smart Gene opens this port
7588 Port: Sun License Management
7597 Port: Trojan Quaz opens this port
7626 Port: Trojan Glacier opens this port
7633 Port: PMDF Management
7674 Port: iMQ SSL Channel
7675 Port: iMQ Channel
7676 Port: Trojan Giscier opens this port
7720 Port: Med Image Portal
7743 Port: Sakura Script Delivery Protocol
7789 Port: Trojan ICKiller opens this port
Port 7797: Propel connector port
7798 port: Propel encoder port
8000 port: Tencent QQ server opens this port
8001 port: VCOM channel
8007 port: Apache (similar to iis) jServ protocol 1.x
8008 port: HTTP Alternate
port 8009: Apache (similar to iis) JServ protocol 1.3
8010 port: Wingate proxy opens this port
8011 port: Trojan way2.4 opens this port
8022 port: OA-system
8080 port: WWW proxy opens this port
8081 port: ICECap console
8082 Port: BlackIce (anti-hacking software) alerts are sent to this port
8118 Port: Privoxy HTTP proxy
8121 Port: Apollo data port
8122 Port: Apollo software management port
8181 Port: Imail
8225 Port: Trojan Gray Pigeon opens this port
8311 Port: Trojan The first love opens this port.
Port 8351: Server looking for
port 8416: eSpeech Session protocol.
Port 8417: eSpeech RTP protocol.
Port 8473: Virtual point-to-point.
Port 8668: Network Address Translation.
Port 8786: Message client.
Port 8787: Message server.

8888 port: Nginx server port
8954 port: Cumulus management port
9000 port: CS listening
port 9001 port: ETL service management
9002 port: dynamic id verification
9021 port: Pangolin verification
9022 port: PrivateArk remote agent
9023 port: secure network login -1
9024 Port: Secure network login-2
9025 port: Secure network login-3
9026 port: Secure network login-4
9101 port: Bacula controller
9102 port: Bacula file background
9103 port: Bacula storage email background
9111 port: DragonIDS console

9200 port: Elasticsearch server port
9217 port: FSC communication port
9281 port: software transfer port 1
9282 port: software transfer port 2
9346 port: C technology listening port
9400 port: Trojan Incommand 1.0 opens this port
9401 port: Trojan Incommand 1.0 opens this port
Port 9402: Trojan Incommand 1.0 opens this port
9594 Port: Information System
Port 9595: Ping Discovery Service
9800 Port: WebDav source port
9801 Port: Sakura Script Transfer Protocol-2
9802 Port: WebDAV Source TLS/SSL
9872 Port: Trojan Portal of Doom Open this port
9873 Port: Trojan Portal of Doom open this port
9874 Port: Trojan Portal of Doom open this port
9875 Port: Trojan Portal of Doom open this port
9899 Port: Trojan InIkiller open this port
9909 Port: Domain name time
9911 Port: SYPECom Transport protocol
port 9989: Trojan iNi-Killer opens this port
9990 port: OSM Applet program server
9991 port: OSM event server
10000 port: Network Data Management Protocol
Port 10001: SCP Construct Port
10005 Port: Secure Remote Login
10008 Port: Octopus Multiplexer
10067 Port: Trojan iNi-Killer Open this port
10113 Port: NetIQ Endpoint
10115 Port: NetIQ Endpoint
10116 Port: NetIQVoIP Authenticator
10167 Port: Trojan iNi -Killer opens this port
11000 Port: Trojan SennaSpy opens this port
11113 Port: Kingsoft PowerWord opens this port
11233 Port: Trojan Progenic trojan opens this port
12076 Port: Trojan Telecommando opens this port
12223 Port: Trojan Hack'99 KeyLogger opens this port
12345 Port: Trojan NetBus1.60/1.70, GabanBus opens this port
12346 Port: Trojan NetBus1.60/1.70, GabanBus opens this port
12361 Port: Trojan Whack-a-mole opens this port
13223 Port: PowWow client, is of Tribal Voice Chat program
port 13224: PowWow server, which is the chat program of Tribal Voice.
Port 16959: Trojan Subseven opens this port.
Port 16969: Trojan Priority opens this port.
Port 17027: Outbound connection.
Port 19191: Trojan Blue Flame opens this port.
Port 20000: The Trojan Millennium opens this port.
Port 20001: The Trojan Millennium opens this port.
Port 20034: The Trojan NetBus Pro opens this port.

Port 22122: Fastdfs server default port
21554 Port: Trojan GirlFriend opens this port
22222 Port: Trojan Prosiak opens this port
23444 Port: Trojan Network Bull opens this port 23456 Port
: Trojan Evil FTP, Ugly FTP opens this port
25793 Port: Vocaltec address server
Port 26262: K3 software-server
Port 26263: K3 software client
Port 26274: Trojan Delta opens this port

Port 27017: mongoDB database default port
27374 Port: Trojan Subseven 2.1 opens this port
30100 Port: Trojan NetSphere opens this port
30129 Port: Trojan Masters Paradise opens this port 30303 Port
: Trojan Socket23 opens this port
30999 Port: Trojan Kuang opens this port
31337 Port: Trojan BO (Back Orifice) opens this port
31338 Port: Trojan BO (Back Orifice), DeepBO opens this port
31339 Port: Trojan NetSpy DK opens this port
31666 Port: Trojan BOWhack opens this port
31789 Port: Hack-a-tack
Port 32770: sun solaris RPC service opens this port
33333 port: Trojan Prosiak opens this port
33434 port: route tracking
34324 port: Trojan Tiny Telnet Server, BigGluck, TN opens this port
36865 port: KastenX software port
38201 port: Galaxy7 software data channel
Port 39681: TurboNote default port
40412 Port: Trojan The Spy opens this port
40421 Port: Trojan Masters Paradise opens this port
40422 Port: Trojan Masters Paradise opens this port
Port 40423: The Trojan Masters Paradise opens this port
40426 Port: The Trojan Masters Paradise opens this port
40843 Port: CSCC Firewall
43210 Port: The Trojan SchoolBus 1.0/2.0 opens this port
43190 Port: IP-PROVISION
44321 Port: PCP server (pmcd)
44322 port : PCP server (pmcd) proxy
44334 port: Micro personal firewall port
44442 port: ColdFusion software port
44443 port: ColdFusion software port
44445 port: Trojan Happypig opens this port
45576 port: E-generation time professional agent opens this port
47262 port: Trojan Delta Open this port
47624 port: Direct Play server
47806 port: ALC protocol
48003 port: Nimbus gateway
50505 port: Trojan Sockets de Troie open this port
50766 port: Trojan Fore open this port
53001 port: Trojan Remote Windows Shutdown open this port
54320 port: The Trojan bo2000 opens this port.
Port 54321: The Trojan SchoolBus 1.0/2.0 opens this port.
Port 61466: The Trojan Telecommando opens this port.
Port 65000: Trojan Devil 1.03 opens this port.
Port 65301: PC Anywhere software opens this port. 

Agreement number

Protocol Number Protocol Description
0 HOPOPT IPv6 Hop-by-Hop Options
1 ICMP Internet Control Messages
2 IGMP Internet Group Management
3 GGP Gateway to Gateway
4 IP IP in IP (Encapsulation)
5 ST Stream
6 TCP Transport Control
7 CBT CBT
8 EGP External Gateway Protocol
9 IGP Any Private Interior Gateway (Cisco uses this for IGRP)
10 BBN-RCC-MON BBNRCC Monitoring
11 NVP-II Voice over Internet Protocol 12
PUP PUP
13 ARGUS ARGUS
14 EMCON EMCON
15 XNET Cross-Network Debugger
16 CHAOS Chaos
17 UDP User Datagram
18 MUX Multiplexing
19 DCN-MEAS DCN Measurement Subsystem
20 HMP Host Monitoring
21 PRM Packet Wireless Measurement
22 XNS-IDP XEROX NS IDP
23 TRUNK-1 1st Trunk
24 TRUNK-2 2nd Trunk
25 LEAF-1 Leaf 1
26 LEAF-2 Leaf 2
27 RDP Reliable Data Protocol
28 IRTP Internet Reliable Transactions
29 ISO-TP4 ISO Transport Protocol Category 4
30 NETBLT Bulk Data Transfer Protocol
31 MFE-NSP MFE Network Services Protocol
32 MERIT -INP MERIT inter-node protocol
33 SEP sequence exchange protocol
34 3PC third-party connection protocol
35 IDPR Inter - Domain Policy Routing Protocol 36
XTP Routing header 44 IPv6-Frag IPv6 fragment header 45 IDRP Interdomain Routing Protocol 46 RSVP Retention Protocol 47 GRE Generic Routing Encapsulation 48 MHRP Mobile Host Routing Protocol 49 BNA BNA 50 ESP IPv6 Encapsulation Security Payload 51 AH IPv6 Authentication Flag head















52 I-NLSP Integrated network layer security TUBA
53 SWIPE using encrypted IP
54 NARP NBMA address resolution protocol
55 MOBILE IP mobility
56 TLSP Transport layer security protocol (using Kryptonet key management)
57 SKIP SKIP
58 IPv6-ICMP for IPv6 ICMP
59 IPv6-NoNxt No Next Header for IPv6
60 IPv6-Opts Target Options for IPv6
61 Any Host Internal Protocol
62 CFTP CFTP
63 Any Local Network
64 SAT-EXPAK SATNET with Backend EXPAK
65 KRYPTOLAN Kryptolan
66 RVD MIT Remote Virtual Disk Protocol
67 IPPC Internet Pluribus Packet Core
68 Arbitrary Distributed File System
69 SAT-MON SATNET monitoring
70 VISA VISA protocol
71 IPCV Internet packet core tool
72 CPNX computer protocol network management
73 CPHB computer protocol detection signal
74 WSN Wangan computer network
75 PVP packet video protocol
76 BR-SAT-MON background SATNET monitoring
77 SUN-ND SUN ND PROTOCOL-Temporary
78 WB-MON WIDEBAND Monitoring
79 WB-EXPAK WIDEBAND EXPAK
80 ISO-IP ISO Internet Protocol
81 VMTP VMTP
82 SECURE-VMTP SECURE-VMTP
83 VINES VINES
84 TTP TTP
85 NSFNET-IGP NSFNET- IGP
86 DGP Heterogeneous Gateway Protocol
87 TCF TCF
88 EIGRP EIGRP
89 OSPFIGP OSPFIGP
90 Sprite-RPC Sprite RPC Protocol
91 LARP Locus Address Resolution Protocol
92 MTP Multicast Transmission Protocol
93 AX.25 AX.25 Frame
94 IPIP IP Encapsulation Protocol in IP
95 MICP Mobile Internet Control Protocol
96 SCC-SP Signal Communication Security Protocol
97 ETHERIP Ethernet Encapsulation in IP
98 ENCAP Encapsulation Header
99 Any dedicated encryption scheme
100 GMTP GMTP
101 IFMP Ipsilon Traffic Management Protocol
102 PNNI PNNI on IP
103 PIM Independent of protocol multicast
104 ARIS ARIS
105 SCPS SCPS
106 QNX QNX
107 A/N Active Network
108 IPComp IP Payload Compression Protocol
109 SNP Sitara Network Protocol
110 Compaq-Peer Compaq Peer-to-Peer Protocol
111 IPX-in-IP IPX
112 VRRP Virtual Router Redundancy Protocol
113 PGM PGM Reliable Transport Protocol
114 Any 0-hop protocol
115 L2TP Layer 2 Tunneling Protocol
116 DDX D-II Data Exchange (DDX)
117 IATP Interactive Agent Transfer Protocol
118 STP Scheduled Transfer Protocol
119 SRP SpectraLink Wireless Protocol
120 UTI UTI
121 SMP Simple Mail Protocol
122 SM SM
123 PTP Performance Transparency Protocol
124 ISIS Over IPv4
125 FIRE    
126 CRTP Combat Wireless Transport Protocol
127 CRUDP Combat Wireless User Datagram
128 SSCOPMCE    
129 IPLT    
130 SPS Security Packet Protection
131 PIPE Specialized IP Encapsulation in IP
132 SCTP Stream Control Transport Protocol
133 FC Fiber Channel
134-254 Unallocated
255 Reserved