------------------------------------------------
PORTS REFERENCE LIST ---------------
------------------------------------------------
=================================
This is the most up to date port and process list from Diamondcs.com.au:
New Port REF updates available from here:
http://tds.diamondcs.com.au/portref.txt
-------------------------------------------------------------------------------
!download this great port lookup file below to your desktop!.
- ONLINE PORT SEARCH - Updated 1/27/2004 -
http://lists.gpick.com/portlist/lookup.asp
Port Reference is available for download as a Windows HTML Help (.chm) file.
The help file is available in two formats, double page, like the web site, and single page,
with the lookup at the top of the port list.
---------------------------------------------------------------------------------
Read this review of the top PORT monitoring tools available:
QUOTE
One of the most frequently fielded questions among security analysts is,
"Do I have a Trojan-horse program if I've found a port open on my computer?"
Variations of this question litter security mailing lists, but the answer is always the same: Trace the port number to the program that's opening the port, and investigate the program.
The process of tracing an open port to its causative agent is called port enumeration (or port mapping).
Of course, the answer assumes that you have an adequate understanding of port numbers, a good port-enumeration tool, and the ability to research whether the found program is malicious.
Let's take a look at port enumeration in general, then review 11 Windows port enumerators.
"Do I have a Trojan-horse program if I've found a port open on my computer?"
Variations of this question litter security mailing lists, but the answer is always the same: Trace the port number to the program that's opening the port, and investigate the program.
The process of tracing an open port to its causative agent is called port enumeration (or port mapping).
Of course, the answer assumes that you have an adequate understanding of port numbers, a good port-enumeration tool, and the ability to research whether the found program is malicious.
Let's take a look at port enumeration in general, then review 11 Windows port enumerators.
http://www.winnetmag.com/WindowsSecurity/A...rity_40313.html
------------------------------------------------------------------------------------
Dont forget to read the Anti-Trojan guide:
http://www.bluetack.co.uk/forums/index.php...p?showtopic=770
-------------------------------------------------------------------------------------
Tried and tested PORT TOOLS : (port to process mappers)
free tools -
TCPview- (Window$ 98/ME/XP) - {TCPview pro is not compatible with Norton Antivirus..TCpView free is though.}
http://www.sysinternals.com/ntw2k/source/tcpview.shtml
Netstat Viewer - Window$ (98-ME-XP) - simple easy to use netstat GUI .
http://www.misec.net/freeware/
F-PORT - fport supports Window$ NT4/2000/XP- command line program.
http://www.foundstone.com/index.htm?subnav...ddesc/fport.htm
the best- $$$
Port Explorer-
http://www.diamondcs.com.au/portexplorer/
------------------------------------------------------------------------------------
One of the best PORT information security pages:
http://www.chebucto.ns.ca/~rakerman/trojan...port-table.html
This page documents DANGEROUS TCP/IP ports, that are used by trojan horse and backdoor programs or that expose system vulnerabilities, that hackers use to break into your network.
These are ports that you definitely want closed, possibly with firewall alarms set on them to detect any external probes or internal compromise.
Please note that trojans can use the same port number as legitimate services; therefore, just because a port shows up, it doesn't necessarily mean that it has been trojanized.
this search page is also worth a look for tcp/udp trojans info and more:
http://www.emsisoft.com/en/kb/portlist/Default.aspx
Commonly used ports:
http://www.vtestaconsultants.com/commonports.htm
Port scans:
http://www.by-users.co.uk/faqs/security/portscans/
===============================================
DELIMITER=":"
0:(Reserved)
1:TCP-MUX - TCP Port Service Multiplexer. Common start for port-scans
2:COMPRESSNET - Management Utility, RAT: Death
3:COMPRESSNET - Compression Process
4:SFSSD - Self-Certifying File System Daemon
5:RJE - Remote Job Entry (RFC 725)
7:Echo Protocol (RFC 862), RAT: GForce
9:Discard Protocol (RFC 863)
11:SYSSTAT - System Status, Active Users, RAT: NetSlayer
12:RAT: Red Horse
13:Daytime Protocol (RFC 867)
15:NETSTAT - Network Status
17:QOTD - Quote of the Day Protocol (RFC 865)
18:MSP - Message Send Protocol (RFC 1312)
19:CHARGEN - Character Generator (RFC 864), RAT: Infector
20:FTP-DATA - File Transfer Protocol [Data] (RFC 354), RAT: Senna Spy FTP server
21:FTP - File Transfer Protocol [Control] (RFC 354), RAT: Back Construction, Blade Runner, Doly Trojan, Fore, Invisible FTP, Juggernaut, Reverse Trojan, Larva, MotIv FTP, Net Administrator, Senna Spy FTP server, Traitor 21, WebEx, WinCrash, NerTe, LittleWitch FTP, NMKB, MaLPaYo, FTP.Owned FTP, Diems Mutter, TrojMax, FreddyK, LMR, PaSzCzuS
22:SSH - SSH (Secure Shell) Remote Login Protocol, RAT: Shaft, Shadow Remote, Bingle
23:Telnet Protocol (RFC 854), WinGate, RAT: Fire HacKer, Tiny Telnet Server - TTS, Truva Atl, RTB666, TelnetPro 1.0, Swarm, Baron Night, AlphaDog, MMX, Net Coach, PEST, Manipulator Lite, Mind Control
24:PMS - Private Mail System
25:SMTP - Simple Mail Transfer Protocol (RFC 913), RAT: Ajan, Antigen, Email Password Sender - EPS, EPS II, Gip, Gris, Happy99, Hpteam mail, I love you, Kuang2, Magic Horse, MBT (Mail Bombing Trojan), Moscow Email trojan, Naebi, NewApt worm, ProMail trojan, Shtirlitz, Stealth, Tapiras, Terminator, WinPC, WinSpy, Under7 Pro
27:NSW-FE - NSW User System FE
28:RAT: Googs, FTP.Rewind
29:MSG-ICP - Messege ICP
31:MSG Authentication, RAT: Agent 31, Hackers Paradise, Masters Paradise
33:DSP - Display Support Protocol
35:PPS - Private Printer Server
36:RAT: Dizer
37:Time Protocol (RFC 868)
38:RAP - Internet Route Access Protocol (RFC 1476)
39:RLP - Resource Location Protocol (RFC 887)
41:Graphics Protocol (RFC 493), RAT: Deep Throat, Foreplay or Reduced Foreplay
42:NAMESERVER - Host Name Server (RFC 953)
43:WHOIS - Who Is (RFC 812)
44:MPM-FLAGS - MPM FLAGS Protocol
45:MPM - Message Processing Module (Receive)
46:MPM-SND - Message Processeing Module (Send)
47:NI-FTP - NI FTP (File Transfer Protocol)
48:AUDITD - Digital Audit Daemon, RAT: DRAT
49:BBN-LOGIN - Login Host Protocol (TACACS) (RFC 1492)
50:RE-MAIL-CK - Remote Mail Checking Protocol (RFC 1339), RAT: DRAT
51:LA-MAINT - IMP Logical Address Maintenance, RAT: FLB
52:XNS-TIME - XNS Time Protocol, RAT: Muska52
53:DOMAIN - Domain Name Server, RAT: Muska52
54:XNS-CH - XNS Clearinghouse, RAT: Muska52
55:ISI-GL - ISI Graphics Language, RAT: Muska52
56:XNS-AUTH - XNS Authentication
57:MTP - Private terminal access
58:XNS-MAIL - XNS Mail, RAT: DMSetup
59:PFS - Private File System, RAT: DMSetup
61:NI-MAIL
62:ACAS - ACA Services
63:WHOIS++ - whois++ (RFC 1834)
64:COVIA - Communications Integrator (CI)
65:TACACS-DS - TACACS-Database Service
66:SQL*NET - Oracle SQL*NET, RAT: Albareki, Storm, Dark Sill
67:BOOTPS - Bootstrap Protocol Server (RFC 951)
68:BOOTPC - Bootstrap Protocol Client (RFC 951)
69:TFTP - Trivial File Transfer Protocol (RFC 1986), RAT: Pasana
70:GOPHER - Gopher (RFC 1436)
71:NETRJS-1 - Remote Job Service
72:NETRJS-2 - Remote Job Service
73:NETRJS-3 - Remote Job Service
74:NETRJS-4 - Remote Job Service
75:PDOS - Private dial out service
76:DEOS - Distributed External Object Store
77:RJE - Private RJE (Remote Job Entry) service
78:VETTCP
79:Name/Finger Protocol (RFC 742), RAT: CDK, Firehotcker
80:WWW-HTTP - World Wide Web HTTP (Hyper Text Transfer Protocol) (RFC 1945), RAT: AckCmd, Back End, CGI Backdoor, Executor, Hooker, RingZero, RTB666, NerTe, 23, Keylog.ev0, m invisible webserver lite, IIEx, Haan, ItAdEm, Task-X, HTTP, Back Attack
81:HOSTS2-NS - HOSTS2 Name Server, RAT: RemoConChubo, 23
82:XFER Utility
83:MIT-ML-DEV
84:CTF - Common Trace Facility
85:MIT-ML-DEV - MIT ML Device
86:MFCOBOL - Micro Focus Cobol
87:LINK - Private terminal link
88:KERBEROS, RAT: Deaths Corner
89:SU-MIT-TG - SU/MIT Telnet Gateway
90:DNSIX - DNSIX Securit Attribute Token Map, RAT: NetGod
91:MIT Dover Spooler, RAT: Delf.cc
92:NPP - Network Printing Protocol, RAT: Delf.cc
93:DCP - Device Control Protocol
94:OBJCALL - Tivoli Object Dispatcher
95:SUPDUP
96:DIXIE - DIXIE Protocol Specification (RFC 1249)
97:SWIFT-RVF - Swift Remote Virtural File Protocol
98:TAC News, RAT: Delf.cc
99:Metagram Relay, RAT: Hidden port, Delf.cc
100:NEWACCT - [unauthorized use], RAT: Manipulator, Googs, Back Atack
101:HOSTNAMES - NIC Host Name Server, RAT: Udps, Back Atack
102:ISO-TSAP Class 0, RAT: Carved, Back Atack
103:Genesis Point-to-Point Trans Net, Webster Dictionary / x400, RAT: Back Atack
104:X400-SND - x400-snd, ACR-NEMA Digital Imag. & Comm. 300, RAT: Back Atack
105:CSNET-NS - Mailbox Name Nameserver
106:3COM-TSMUX
107:RTELNET - Remote Telnet Service
108:SNAGAS - SNA Gateway Access Server
109:POP - Post Office Protocol - Version 2 (RFC 937)
110:POP3 - Post Office Protocol - Version 3 (RFC 1081), RAT: ProMail trojan, Latinus or variant, Vagr
111:SUNRPC - SUN Remote Procedure Call (RFC 1050)
112:MCIDAS - McIDAS Data Transmission Protocol, RAT: Keylog.PEST
113:IDENT - Identification/Authentication Service (RFC 1413), RAT: Invisible Identd Deamon, Kazimas, Cyn
114:AUDIONEWS - Audio News Multicast
115:SFTP - Simple File Transfer Protocol (RFC 913)
116:ANSANOTIFY - ANSA REX Notify
117:UUCP-PATH - UUCP Path Service
118:SQL Services
119:NNTP - Network News Transfer Protocol (RFC 977), RAT: Happy99
120:CFDPTKT
121:ERPC - Encore Expedited Remote Pro.Call, RAT: BO JammerkillahV, HAW
122:SMAKYNET, RAT: Skun
123:NTP - Network Time Protocol (RFC 958), RAT: Net Controller, Gift, Wintrix, Freeze, Propel, ZUD, Ass4ss1n, Peeper, Madfind
124:ANSATRADER - ANSA REX Trader
125:LOCUS-MAP - Locus PC-Interface Net Map Ser
126:UNITARY - Unisys Unitary Login
127:LOCUS-CON - Locus PC-Interface Conn Server
128:GSS-XLICEN - GSS X License Verification
129:PWDGEN - Password Generator Protocol
130:Cisco FNATIVE
131:Cisco TNATIVE, RAT: Delf.cc
132:Cisco SYSMAINT
133:STATSRV - Statistics Service, RAT: Farnaz
134:INGRES-NET - INGRES-NET Service
135:DCE endpoint resolution, RPC-LOCATOR - RPC (Remote Procedure Location Service
136:PROFILE - PROFILE Naming System
137:NBNS - NETBIOS Name Service
138:NBDGM - NETBIOS Datagram Service, RAT: LazyAdmin
139:NBSSN - NETBIOS Session Service
140:EMFIS-DATA - EMFIS Data Service
141:EMFIS-CNTL - EMFIS Control Service
142:BL-IDM - Britton-Lee IDM, RAT: NetTaxi
143:IMAP - Interactive Mail Access Protocol v2 (RFC 1064), RAT: Back Atack
144:NEWS
145:UAAC Protocol
146:ISO-IP0, RAT: Infector
147:ISO-IP
148:CRONUS - CRONUS-SUPPORT, Jargon
149:AED-512 - AED 512 Emulation Service
150:SQL-NET
151:HEMS
152:BFTP - Background File Transfer Program
153:SGMP
154:NETSC-PROD - NETSC
155:NETSC-DEV - NETSC
156:SQLSRV - SQL Service
157:KNET-CMP - KNET/VM Command/Message Protocol
158:PCMAIL-SRV - PCMail Server
159:NSS-ROUTING - NSS-Routing
160:SGMP-TRAPS - SGMP-TRAPS, RAT: Infector II
161:SNMP - Simple Network Management Protocol (RFC 1067)
162:SNMPTRAP - SNMPTRAP (Simple Network Management Protocol) (RFC 1067)
163:CMIP-MAN - CMIP/TCP Manager
164:CMIP-AGENT - CMIP/TCP Agent
165:XNS-COURIER - Xerox
166:S-NET - Sirius Systems
167:NAMP
168:RSVD
169:SEND
170:PRINT-SRV - Network PostScript, RAT: A-trojan
171:MULTIPLEX - Network Innovations Multiplex
172:CL/1 - Network Innovations CL/1
173:XYPLEX-MUX - Xyplex
174:MAILQ
175:VMNET
176:GENRAD-MUX - GENRAD-MUX
177:XDMCP - X Display Manager Control Protocol
178:NEXTSTEP - NextStep Window Server
179:BGP - Border Gateway Protocol (RFC 1105), RAT: Delf.cc
180:RIS - Intergraph
181:UNIFY - Unify
182:AUDIT - Unisys Audit SITP
183:OCBINDER - OCBinder
184:OCSERVER - OCServer
185:REMOTE-KIS - Remote-KIS
186:KIS - KIS Protocol
187:ACI - Application Communication Interface
188:MUMPS - Plus Five's MUMPS
189:QFT - Queued File Transport
190:GACP - Gateway Access Control Protocol
191:PROSPERO - Prospero Directory Service
192:OSU-NMS - OSU Network Monitoring System
193:SRMP - Spider Remote Monitoring Protocol
194:IRC - Internet Relay Chat Protocol (RFC 1459)
195:DN6-NLM-AUD - DNSIX Network Level Module Audit
196:DN6-SMM-RED - DNSIX Session Mgt Module Audit Redir
197:DLS - Directory Location Service
198:DLS-MON - Directory Location Service Monitor
199:SMUX
200:SRC - IBM System Resource Controller, RAT: Cyberspy, Rebate
201:AT-RTMP - AppleTalk Routing Maintenance, RAT: One, Kernel32
202:AT-NBP - AppleTalk Name Binding
203:AT-3 - AppleTalk Unused
204:AT-ECHO - AppleTalk Echo
205:AT-5 - AppleTalk Unused
206:AT-ZIS - AppleTalk Zone Information
207:AT-7 - AppleTalk Unused
208:AT-8 - AppleTalk Unused
209:QMTP - The Quick Mail Transfer Protocol
210:Z39.50 - ANSI Z39.50, RAT: FTP.Anal FTP
211:914C/G - Texas Instruments 914C/G Terminal, RAT: One
212:ANET - ATEXSSTR
213:IPX
214:VMPWSCS - VM PWSCS
215:SOFTPC - Insignia Solutions
216:CAILIC - Computer Associates Int'l License Server
217:DBASE - dBASE Unix
218:MPP - Netix Message Posting Protocol (RFC 1204)
219:UARPS - Unisys ARPs
220:IMAP3 - Interactive Mail Access Protocol v3
221:FLN-SPX - Berkeley rlogind with SPX auth, RAT: Snape
222:RSH-SPX - Berkeley rshd with SPX auth, RAT: NeuroticKat, Snape
223:CDC - Certificate Distribution Center
242:Direct
243:SUR-MEAS - Survey Measurement
244:Dayna
245:LINK - LINK
246:DSP3270 - Display Systems Protocol
256:RAP
257:Secure Electronic Transaction
258:Yak Winsock Personal Chat
259:Efficient Short Remote Operations
260:Openport
261:IIOP Name Service over TLS/SSL
262:ARCISDMS - Arcisdms
263:HDAP
280:HTTP-MGMT - http-mgmt
281:Personal Link
282:CABLEPORT-AX - Cable Port A/X
285:RAT: Webcam Trojan
299:RAT: One
303:RAT: Nova
304:RAT: Nova
305:RAT: Nova
306:RAT: Nova
309:ENTRUSTTIME - EntrustTime
314:RAT: Blaire
333:RAT: NeoPets
334:RAT: Backage
344:PDAP - Prospero Data Access Protocol
345:PAWSERV - Perf Analysis Workbench, RAT: Cang, XZ
346:ZSERV - Zebra server
347:FATSERV - Fatmen Server
348:CSI-SGWP - Cabletron Management Protocol
350:MATIP Type A
351:MATIP Type B
352:DTG-STE-SB - DTAG
370:RAT: NeuroticKat
371:CLEAR- Clearcase
372:ULISTSERV - Unix Listserv
373:LEGENT-1 - Legent Corporation
374:LEGENT-2 - Legent Corporation
375:HASSLE
376:NIP - Amiga Envoy Network Inquiry Proto
377:TNETOS - NEC Corporation
378:DSETOS - NEC Corporation
379:IS99C - TIA/EIA/IS-99 modem client
380:IS99S - TIA/EIA/IS-99 modem server
381:HP-COLLECTOR - HP Performance Data Collector
382:HP-MANAGED-NODE - HP Performance Data Managed Node
383:HP-ALARM-MGR - HP Performance Data Alarm Manager
384:ARNS - A Remote Network Server System
385:IBM-APP - IBM Application
386:ASA - ASA Message Router Object Def.
387:AURP - Appletalk Update-Based Routing Pro.
388:UNIDATA-LDM - Unidata LDM Version 4
389:LDAP - Lightweight Directory Access Protocol (RFC 1777)
390:UIS
391:SYNOTICS-RELAY - SynOptics SNMP Relay Port
392:SYNOTICS-BROKER - SynOptics Port Broker Port
393:DIS - Data Interpretation System
394:EMBL-NDT - EMBL Nucleic Data Transfer
395:NETCP - NETscout Control Protocol
396:NETWARE-IP - Novell Netware over IP
397:MPTN - Multi Protocol Trans. Net.
398:KRYPTOLAN
399:ISO-TSAP-C2 - ISO Transport Class 2 Non-Control over TCP
400:WORK-SOL - Workstation Solutions
401:UPS - Uninterruptible Power Supply, RAT: One
402:Genie Protocol
403:DECAP
404:NCED, RAT: Orbit
405:NCLD
406:IMSP - Interactive Mail Support Protocol
407:TIMBUKTU - Timbuktu
408:PRM-SM - Prospero Resource Manager Sys. Man.
409:PRM-NM - Prospero Resource Manager Node Man.
410:DECLADEBUG - DECLadebug Remote Debug Protocol
411:RMT - Remote MT Protocol
412:SYNOPTICS-TRAP - Trap Convention Port, Direct Connect Peer-2-Peer File Sharing
413:SMSP - SMSP
414:INFOSEEK - InfoSeek
415:BNET - BNet
416:Silverplatter, RAT: Monator
417:Onmux
418:Hyper-G
419:ARIEL1
420:SMPTE - SMPTE, RAT: Breach, Exploiter, Freddy K, Girlfriend
421:ARIEL2, RAT: TCP Wrappers trojan
422:ARIEL3
423:OPC-JOB-START - IBM Operations Planning and Control Start
424:OPC-JOB-TRACK - IBM Operations Planning and Control Track
425:ICAD-EL
426:SMARTSDP - smartsdp
427:SVRLOC - Server Location
428:OCS_CMU
429:OCS_AMU
430:UTMPSD
431:UTMPCD
432:IASD
433:NNSP
434:MobileIP-Agent
435:MOBILIP-MN
436:DNA-CML
437:COMSCM
438:DSFGW
439:DASP
440:SGCP
441:DECVMS-SYSMGT
442:CVC_HOSTD
443:HTTPS - HTTPS (Hyper Text Transfer Protocol Secure) - SSL (Secure Socket Layer)
444:SNPP - Simple Network Paging Protocol (RFC 1568)
445:MICROSOFT-DS
446:DDM-RDB
447:DDM-DFM
448:DDM-BYTE
449:AS Server Mapper
450:TSERVER
451:SFS-SMP-NET - Cray Network Semaphore server
452:SFS-CONFIG - Cray SFS config server, RAT: OMPN Flash, OMPN Magic
453:CREATIVESERVER - CreativeServer
454:CONTENTSERVER - ContentServer, RAT: DTCold
455:CREATIVEPARTNR - CreativePartnr, RAT: Hackers Paradise, Fatal Connections
456:MACON-TCP - macon-tcp, RAT: Hackers Paradise, Daniel, Keylog.Clandestine 2
457:SCOHELP
458:APPLEQTC - Apple Quick Time
459:AMPR-RCMD
460:SKRONK
461:DATASURFSRV
462:DATASURFSRVSEC
463:ALPES
464:KPASSWD
465:SSMTP - SMTP Protocol over TLS/SSL (was ssmtp)
466:DIGITAL-VRC
467:MYLEX-MAPD
468:PHOTURIS
469:RCP - Radio Control Protocol
470:SCX-PROXY
471:MONDEX
472:LJK-LOGIN
473:HYBRID-POP
474:TN-TL-W1
475:TCPNETHASPSRV
476:TN-TL-FD1
477:SS7NS
478:SPSC
479:IAFSERVER
480:IAFDBASE
481:PH - Ph service
482:BGS-NSI
483:ULPNET
484:INTEGRA-SME - Integra Software Management Environment
485:POWERBURST - Air Soft Power Burst
486:AVIAN
487:SAFT
488:GSS-HTTP
489:NEST-PROTOCOL
490:MICOM-PFS
491:GO-LOGIN
492:TICF-1 - Transport Independent Convergence for FNA
493:TICF-2 - Transport Independent Convergence for FNA
494:POV-RAY
495:INTECOURIER
496:PIM-RP-DISC
497:DANTZ
498:SIAM
499:ISO ILL Protocol
500:ISAKMP, RAT: Optix Pro
501:STMF
502:ASA-APPL-PROTO, RAT: Optix Pro
503:INTRINSA, RAT: Optix Pro
504:CITADEL
505:MAILBOX-LM
506:OHIMSRV
507:CRS
508:XVTTP
509:SNARE
510:FCP - FirstClass Protocol
511:MYNET
512:EXEC - Remote Process Execution
513:LOGIN - Remote Login via Telnet, RAT: Grlogin
514:SHELL - Automatic Remote Process Execution, cmd, RAT: RPC Backdoor, Whacky
515:PRINTER - Printer Spooler
516:videotex
517:TALK - like tenex link, but across
518:NTALK
519:UTIME - Unix Time
520:EFS - Extended File Server, RIP
521:RIPNG
522:ULP
523:IBM-DB2
523:IBM-DB2
524:NCP
525:TIMED - Time Server
526:TEMPO - newdate
527:Stock IXChange
528:Customer IXChange
529:IRC-SERV
529:IRC-SERV
530:COURIER - rpc
531:CONFERENCE - chat, RAT: Trojan.SemiSoft, Net.666, Rasmin
532:NETNEWS - readnews
533:NETWALL - Emergency Broadcasts
534:MM-ADMIN - MegaMedia Admin
535:IIOP
536:OPALIS-RDV
537:NMSP - Networked Media Streaming Protocol
538:GDOMAP
539:APERTUS-LDP - Apertus Technologies Load Determination
540:UUCP - UUCP Daemon
541:UUCP - UUCP-RLOGIN - uucp (Unix to Unix Copy) - rlogin (Remote Login)
542:COMMERCE
543:KLOGIN - Kerberos Authenticated Login, RAT: Cang
544:KSHELL - krcmd
545:APPLEQTCSRVR - Apple qtcsrvr
546:DHCP-CLIENT - DHCP (Dynamic Host Configuration Protocol) Client
547:DHCP-SERVER - DHCP (Dynamic Host Configuration Protocol) Server
548:AFPOVERTCP - AFP over TCP
549:IDFP
550:NEW-RWHO
551:CYBERCASH
552:DEVICESHARE
553:PIRP
554:RTSP - Real Time Stream Control Protocol
555:DSF - DSF, RAT: Net Administrator, Phase Zero, Phase-0, Stealth Spy
556:REMOTEFS - rfs (Remote File System) server
557:OPENVMS-SYSIPC - openvms-sysipc
558:SDNSKMP
559:TEEDTAP
560:RMONITOR
561:MONITOR
562:CHSHELL
563:NNTPS - NNTP Protocol over TLS/SSL (was snntp)
564:9PFS - plan 9 file service, RAT: Oracle
565:WHOAMI
566:STREETTALK
567:BANYAN-RPC, RAT: hRat
568:Microsoft Shuttle
569:Microsoft Rome
570:demon
571:udemon
572:sonar
573:Banyan-VIP
574:FTP-AGENT - FTP Software Agent System
575:VEMMI
576:IPCD
577:VNAS
578:IPDD
579:DECBSRV
580:SNTP-HEARTBEAT
581:BDP - Bundle Discovery Protocol (RFC 2701)
582:SCC-Security
583:Philips-VC - Philips Video-Conferencing
584:KeyServer
585:IMAP4-SSL
586:PASSWORD-CHG - Password Change
587:SUBMISSION
600:IPCSERVER - Sun IPC server
605:RAT: Secret Service
606:URM - Cray Unified Resource Manager
607:NQS
608:SIFT-UFT - Sender-Initiated/Unsolicited File Transfer
609:NPMP-TRAP
610:NPMP-LOCAL
611:NPMP-GUI
612:HMMP-IND
613:HMMP-OP
614:SSLSHELL
615:SCO-INETMGR - Internet Configuration Manager
616:SCO-SYSMGR - SCO System Administration Server
617:SCO-DTMGR - SCO Desktop Administration Server
618:DEI-ICDA
619:DIGITAL-EVM
620:SCO-WEBSRVRMGR - SCO WebServer Manager
621:ESCP-IP
623:RAT: RTB666
633:SERVSTAT - Service Status update (Sterling Software)
634:GINAD
635:RLZDBASE - RLZ DBase
636:LDAPS - ldap Protocol over TLS/SSL (was sldap)
637:LANSERVER
650:RAT: Assasin
654:RAT: HoaVeLu
660:RAT: Zaratustra
661:RAT: NokNok
665:RAT: Cyn
666:Doom (Id Software), RAT: Peur de Rien FTP, Attack FTP, Back Construction, Cain & Abel, NokNok, Satans Back Door - SBD, ServU, Shadow Phyre, F-BackDoor, Worm.Grifin Remote Control, Uprising, Dimbus, TiVedo, MAD, Storm, Ulysses, Beast, Plateau, MaLPaYo, Dracula, Cyn, Dark Sill, InetWatch, DXM SMTP, Slawek
667:DISCLOSURE - campaign contribution disclosures, RAT: SniperNet, Slawek
668:MECOMM
669:MEREGISTER - MeRegister, RAT: DP trojan
670:VACDSM-SWS
671:VACDSM-APP
672:VPPS-QUA
673:CIMPLEX, RAT: Hornet
674:ACAP
680:RAT: RTB666
692:RAT: GayOL, Lightning
693:RAT: Lightning
704:ELCSD - errlog copy/server daemon
705:AGENTX - AgentX
709:ENTRUST-KMSH - EntrustManager
710:ENTRUST-ASH - Entrust Administration Service Handler
715:RAT: Anal Rape
717:RAT: DDoS.RAT.HLHSI
729:NETVIEWDM1 - IBM NetView DM/6000 Server/Client
730:NETVIEWDM2 - IBM NetView DM/6000 send/tcp, RAT: Keylog.typ0
731:NETVIEWDM3 - IBM NetView DM/6000 receive/tcp
741:NETGW
742:NETRCS - Network based Rev. Cont. Sys.
744:FLEXLM - Flexible License Manager
747:FUJITSU-DEV - Fujitsu Device Control
748:RIS-CM - Russell Info Sci Calendar Manager
749:KERBEROS-ADM - kerberos administration
750:RFILE - RFILE
751:PUMP - PUMP
752:QRH - QRH
753:RRH - RRH
754:TELL - SEND, RAT: DTCold
758:NLOGIN - NLOGIN
759:CON - CON
760:NS - NS
761:RXE - RXE
762:QUOTAD - QUOTAD
763:CYCLESERV - CYCLESERV
764:OMSERV - OMSERV
765:WEBSTER - WEBSTER
767:PHONEBOOK - phone
769:VID - VID
770:CADLOCK - CADLOCK
771:RTIP - RTIP
772:CYCLESERV2 - CYCLESERV2
773:SUBMIT - SUBMIT
774:RPASSWD - RPASSWD
775:ENTOMB - ENTOMB
776:WPAGES - WPAGES
777:RAT: AimSpy, Undetected, Tiny, CS Trojan
780:WPGS - WPGS
786:CONCERT - Concert
789:RAT: AIM Robber
798:RAT: Oracle
800:MDBS_DAEMON - MDBS_DAEMON, RAT: NeuroticKitten, Pilot
801:DEVICE - DEVICE
808:RAT: WinHole
831:RAT: NeuroticKat
886:ICLCNET-LOCATE - ICL coNETion locate server
887:ICLCNET_SVINFO - ICL coNETion server info
888:ACCESSBUILDER - AccessBuilder, CDDATABASE - CDDataBase, RAT: LANfiltrator
890:RAT: DSK Lite
891:RAT: DSK Lite
901:RAT: Net-Devil
902:RAT: Net-Devil
903:RAT: Net-Devil
910:RAT: DTCold
911:XACT-BACKUP - xact-backup, RAT: Dark Shadow, NetCrack, Keylog.Dreamscape, Dua ti choi, Mind Control
912:RAT: NetCrack
929:RAT: Avone
939:RAT: Avone
954:RAT: Hydroleak
963:RAT: Splitter
989:FTPS-DATA - FTP Protocol, data, over TLS/SSL
990:FTPS - FTP Protocol, control, over TLS/SSL
991:NAS - Netnews Administration System, RAT: Snape
992:TELNETS - telnet Protocol over TLS/SSL, RAT: Snape
993:IMAPS - Imap4 Protocol over TLS/SSL
994:IRCS - irc Protocol over TLS/SSL
995:POP3S - Pop3 (Post Office Protocol) over TLS/SSL
996:VSINET - vsinet
997:MAITRD - MAITRD, RAT: Matrix
998:BUSBOY - BUSBOY
999:PUPROUTER - PUPROUTER, RAT: Deep Throat, Foreplay or Reduced Foreplay, WinSatan, LANfiltrator
1000:CADLOCK - CADLOCK, RAT: Der Spaeher 3, Theef, U321, Destruktor, Nucker
1001:RAT: Der Spaeher 3, Le Guardien, Silencer, WebEx, Theef, One, Priority, Lula, Eljefe, Havoc, Darkscan, RFM, Winsock Commander, Keylog.RemoteCon, Jinmozhe, Yello, Adele
1002:RAT: XQDoor
1003:RAT: Darkscan, FTP.Avanzado, Jinmozhe
1005:RAT: Theef
1010:RAT: Doly Trojan
1011:RAT: Doly Trojan, Arturik, Inclined
1012:RAT: Doly Trojan
1015:RAT: Doly Trojan, JoTroj
1016:RAT: Doly Trojan
1020:RAT: Vampire
1023:RESERVED - Reserved
1024:OLD_FINGER - old_finger, RAT: Psyber Streaming Server, NetSpy, R.A.T, Alex
1025:BLACKJACK - network blackjack, LISTEN - listen, RAT: Gaura
1026:NTERM - nterm
1027:RAT: Latinus, FTS
1028:RAT: HacKErZ
1029:ICQ Instant Messenger, RAT: Latinus
1030:IAD1 - BBN IAD, RAT: Clandestine, Igloo
1031:IAD2 - BBN IAD, RAT: UltimateRAT
1032:IAD3 - BBN IAD, RAT: G.R.O.B
1033:RAT: Netspy
1036:RAT: Way 2002
1037:RAT: MoSucker
1039:RAT: Happy
1040:RAT: Infiltration
1042:RAT: Bla, Rasmin
1045:RAT: Rasmin
1046:RAT: Quetnek
1047:NEOD1 - Sun's NEO Object Request Broker
1048:NEOD2 - Sun's NEO Object Request Broker
1049:/sbin/initd, RAT: NewFuture
1050:RAT: MiniCommand
1052:RAT: NK
1054:RAT: AckCmd
1058:NIM - nim
1059:NIMREG - nimreg
1062:RAT: Newon
1067:INSTL_BOOTS - Installation Bootstrap Proto. Serv.
1068:INSTL_BOOTC - Installation Bootstrap Proto. Cli.
1080:SOCKS - Proxy, RAT: WinHole, Broser
1081:RAT: WinHole
1082:RAT: WinHole
1083:ANSOFT-LM-1 - Anasoft License Manager, RAT: WinHole
1084:ANSOFT-LM-2 - Anasoft License Manager
1090:RAT: Xtreme
1095:RAT: RAT
1097:RAT: RAT
1098:RAT: RAT
1099:RAT: Blood Fest Evolution, RAT
1101:RAT: Rths
1102:RAT: Rths
1103:RAT: Rths
1104:RAT: Rths
1105:RAT: Rths
1106:RAT: Rths
1107:RAT: Rths
1108:RAT: Rths
1109:KPOP - kpop, RAT: Rths
1110:NFSD-STATUS - Cluster status info, RAT: Rths
1111:LMSOCIALSERVER - LM Social Server, RAT: RemoteXS, Nemesis, X-Filer, NetSpy II, Way, Rths, Dzyckz
1112:RAT: Rths
1113:RAT: Rths
1114:RAT: TransScout, Way, Rths
1115:RAT: TransScout, Lurker, Rths
1116:RAT: TransScout, Lurker
1117:RAT: TransScout
1119:RAT: CNGhost
1122:RAT: Last2000
1123:MURRAY - Murray
1130:RAT: NokNok
1133:RAT: Dindang
1134:RAT: Dindang
1155:NFA - Network File Access
1158:RAT: Stang
1170:RAT: Psyber Stream Server - PSS, Streaming Audio Server, Voice
1180:MC-CLIENT - Millicent Client Proxy
1182:RAT: Dobol
1183:RAT: GirlBoy, PSW.Remote Fake Login
1190:RAT: Ojo
1200:RAT: NoBackO, TMS
1201:RAT: NoBackO
1207:RAT: SoftWar
1212:LUPA - lupa, RAT: Kaos, NeoPets, Red-Spy
1214:KaZaA - KaZaA P2P File Sharing, RAT: RemoteControl, Muniu, Hawk
1215:RAT: Force, RemoteControl, Muniu
1216:RAT: RemoteControl, Muniu, Hawk
1217:RAT: RemoteControl, Muniu, Hawk
1218:RAT:Schneckenkorn
1219:RAT:Schneckenkorn, x2a
1221:RAT: Spy, FLB, RVC
1222:NERV - SNI R&D network, FLB
1234:RAT: Ultors Trojan, HackIT (Holzpferd), Kilo, Fade, Remote Operations, NetAmine, NuclearScan, FeRAT, PWD
1243:RAT: BackDoor-G, SubSeven , SubSeven Apocalypse, Tiles, Mainline, HackWorld
1245:RAT: VooDoo Doll, Ultors Trojan
1248:HERMES - hermes
1254:RAT: Monk
1255:RAT: Scarab, Happy, Global Killer
1256:RAT: Project nEXT, RexxRave
1257:RAT: Sub Seven 2.1, Frenzy
1263:RAT: Rewind
1266:RAT: Global Killer, Rewind
1269:RAT: Mavericks Matrix
1274:RAT: Mavericks Matrix
1275:RAT: Fredisoft
1276:RAT: Mavericks Matrix
1309:RAT: Jittar
1313:BMC_PATROLDB - BMC_PATROLDB, RAT: NETrojan
1314:PDPS - Photoscript Distributed Printing System
1324:RAT: Shador
1337:RAT: Joker DDoS, rSocks
1338:RAT: Millenium Worm
1342:VMOTELNET - VMODEM telnet redirect
1345:VPJP - VPJP
1346:ALTA-ANA-LM - Alta Analytics License Manager
1347:BBN-MMC - Multi Media Conferencing
1348:BBN-MMX - Multi Media Conferencing
1349:SBOOK - Registration Network Protocol, RAT: Back Orifice DLL
1350:EDITBENCH - Registration Network Protocol
1351:EQUATIONBUILDER - Digital Tool Works (MIT)
1352:LOTUSNOTE - Lotus Note
1353:RELIEF - Relief Consulting
1354:RIGHTBRAIN - RightBrain Software, RAT: SkullBurrow Proxy
1355:INTUITIVE EDGE - Intuitive Edge
1356:CUILLAMARTIN - CuillaMartin Company
1357:PEGBOARD - Electronic PegBoard
1358:CONNLCLI - CONNLCLI
1359:FTSRV - FTSRV
1360:MIMER - MIMER
1361:LINX - LinX
1362:TIMEFLIES - TimeFlies
1363:NDM-REQUESTER - Network DataMover Requester
1364:NDM-SERVER - Network DataMover Server
1365:ADAPT-SNA - Network Software Associates
1366:NETWARE-CSP - Novell NetWare Comm Service Platform
1367:DCS - DCS
1368:SCREENCAST - ScreenCast
1369:GV-US - GlobalView to Unix Shell
1370:US-GV - Unix Shell to GlobalView
1371:FC-CLI - Fujitsu Config Protocol
1372:FC-SER - Fujitsu Config Protocol
1373:CHROMAGRAFX - Chromagrafx
1374:MOLLY - EPI Software Systems
1375:BYTEX - Bytex
1376:IBM-PPS - IBM Person to Person Software
1377:CICHLID - Cichlid License Manager
1378:ELAN - Elan License Manager
1379:DBREPORTER - Integrity Solutions
1380:TELESIS-LICMAN - Telesis Network License Manager
1381:APPLE-LICMAN - Apple Network License Manager
1382:UDT_OS - UDT_OS
1383:GWHA - GW Hannaway Network License Manager
1384:OS-LICMAN - Objective Solutions License Manager
1385:ATEX_ELMD - Atex Publishing License Manager
1386:CHECKSUM - CheckSum License Manager
1387:CADSI-LM - Computer Aided Design Software Inc LM
1388:OBJECTIVE-DBC - Objective Solutions DataBase Cache
1389:ICLPV-DM - Document Manager
1390:ICLPV-SC - Storage Controller
1391:ICLPV-SAS - Storage Access Server
1392:ICLPV-PM - Print Manager
1393:ICLPV-NLS - Network Log Server
1394:ICLPV-NLC - Network Log Client, RAT: Gofriller, BackDoor
1395:ICLPV-WSM - PC Workstation Manager software
1396:DVL-ACTIVEMAIL - DVL Active Mail
1397:AUDIO-ACTIVMAIL - Audio Active Mail
1398:VIDEO-ACTIVMAIL - Video Active Mail
1399:CADKEY-LICMAN - Cadkey License Manager
1400:CADKEY-TABLET - Cadkey Tablet Daemon, RAT: Remote Hack
1401:GOLDLEAF-LICMAN - Goldleaf License Manager
1402:PRM-SM-NP - Prospero Resource Manager
1403:PRM-NM-NP - Prospero Resource Manager
1404:IGI-LM - Infinite Graphics License Manager
1405:IBM-RES - IBM Remote Execution Starter
1406:NETLABS-LM - NetLabs License Manager
1407:DBSA-LM - DBSA License Manager
1408:SOPHIA-LM - Sophia License Manager
1409:HERE-LM - Here License Manager
1410:HIQ - HiQ License Manager, RAT: Destruktor
1411:AF - AudioFile
1412:INNOSYS - InnoSys, RAT: RemoteControl, Hawk
1413:INNOSYS-ACL - Innosys-ACL
1414:IBM-MQSERIES - IBM MQSeries
1415:DBSTAR - DBStar
1416:NOVELL-LU6.2 - Novell LU6.2
1417:TIMBUKTU-SRV1 - Timbuktu Service 1 Port
1418:TIMBUKTU-SRV2 - Timbuktu Service 2 Port
1419:TIMBUKTU-SRV3 - Timbuktu Service 3 Port
1420:TIMBUKTU-SRV4 - Timbuktu Service 4 Port, RAT: SubRoot
1421:GANDALF-LM - Gandalf License Manager
1422:AUTODESK-LM - Autodesk License Manager
1423:ESSBASE - Essbase Arbor Software
1424:HYBRID - Hybrid Encryption Protocol
1425:ZION-LM - Zion Software License Manager
1426:SAIS - Satellite-data Acquisition System 1
1427:MLOADD - mloadd monitoring tool
1428:INFORMATIK-LM - Informatik License Manager
1429:NMS - Hypercom NMS
1430:TPDU - Hypercom TPDU
1431:RGTP - Reverse Gossip Transport
1432:BLUEBERRY-LM - Blueberry Software License Manager
1433:MS-SQL-S - Microsoft-SQL-Server
1434:MS-SQL-M - Microsoft-SQL-Monitor
1435:IBM-CICS - IBM CICS
1436:SAISM - Satellite-data Acquisition System 2
1437:TABULA - Tabula
1438:EICON-SERVER - Eicon Security Agent/Server
1439:EICON-X25 - Eicon X25/SNA Gateway
1440:EICON-SLP - Eicon Service Location Protocol (RFC 2165)
1441:CADIS-1 - Cadis License Management
1442:CADIS-2 - Cadis License Management
1443:IES-LM - Integrated Engineering Software
1444:MARCAM-LM - Marcam License Management
1445:PROXIMA-LM - Proxima License Manager
1446:ORA-LM - Optical Research Associates License Manager
1447:APRI-LM - Applied Parallel Research LM
1448:OC-LM - OpenConnect License Manager
1449:PEPORT - PEport
1450:DWF - Tandem Distributed Workbench Facility
1451:INFOMAN - IBM Information Management
1452:GTEGSC-LM - GTE Government Systems License Manager
1453:GENIE-LM - Genie License Manager
1454:INTERHDL_ELMD - interHDL License Manager
1455:ESL-LM - ESL License Manager
1456:DCA - DCA
1457:VALISYS-LM - Valisys License Manager
1458:NRCABQ-LM - Nichols Research Corp.
1459:PROSHARE1 - Proshare Notebook Application
1460:PROSHARE2 - Proshare Notebook Application
1461:IBM_WRLESS_LAN - IBM Wireless LAN
1462:WORLD-LM - World License Manager
1463:NUCLEUS - Nucleus
1464:MSL_LMD - MSL License Manager
1465:PIPES - Pipes Platform
1466:OCEANSOFT-LM - Ocean Software License Manager
1467:CSDMBASE - CSDMBASE
1468:CSDM - CSDM
1469:AAL-LM - Active Analysis Limited License Manager, RAT: VC
1470:UAIACT - Universal Analytics
1471:CSDMBASE - csdmbase
1472:CSDM - csdm
1473:OPENMATH - OpenMath
1474:TELEFINDER - Telefinder
1475:TALIGENT-LM - Taligent License Manager
1476:CLVM-CFG - clvm-cfg
1477:MS-SNA-SERVER - ms-sna-server
1478:MS-SNA-BASE - ms-sna-base
1479:DBEREGISTER - dberegister
1480:PACERFORUM - PacerForum
1481:AIRS - AIRS
1482:MITEKSYS-LM - Miteksys License Manager, RAT: Syskbot
1483:AFS - AFS License Manager, RAT: Syskbot
1484:CONFLUENT - Confluent License Manager, RAT: Syskbot
1485:LANSOURCE - LANSource, RAT: Syskbot
1486:NMS_TOPO_SERV - nms_topo_serv
1487:LOCALINFOSRVR - LocalInfoSrvr
1488:DOCSTOR - DocStor
1489:DMDOCBROKER - dmdocbroker
1490:INSITU-CONF - insitu-conf
1491:ANYNETGATEWAY - anynetgateway
1492:STONE-DESIGN-1 - stone-design-1, RAT: FTP99CMP
1493:NETMAP_LM - netmap_lm
1494:ICA - ica
1495:CVC - cvc
1496:LIBERTY-LM - liberty-lm
1497:RFX-LM - rfx-lm
1498:WATCOM-SQL - Watcom-SQL
1499:FHC - Federico Heinz Consultora
1500:VLSI-LM - VLSI License Manager
1501:SAISCM - Satellite-data Acquisition System 3
1502:SHIVADISCOVERY - Shiva
1503:IMTC-MCS - Databeam
1504:EVB-ELM - EVB Software Engineering License Manager
1505:FUNKPROXY - Funk Software Inc.
1506:UTCD - Universal Time daemon (utcd)
1507:SYMPLEX - symplex
1508:DIAGMOND - diagmond
1509:ROBCAD-LM - Robcad Ltd. License Manager, RAT: Psyber Streaming Server
1510:MVX-LM - Midland Valley Exploration Ltd. Lic. Man.
1511:3L-L1 - 3l-l1
1512:WINS - Microsoft's Windows Internet Name Service
1513:FUJITSU-DTC - Fujitsu Systems Business of America Inc
1514:FUJITSU-DTCNS - Fujitsu Systems Business of America Inc
1515:IFOR-PROTOCOL - ifor-Protocol
1516:VPAD - Virtual Places Audio data
1517:VPAC - Virtual Places Audio control
1518:VPVD - Virtual Places Video data
1519:VPVC - Virtual Places Video control
1520:ATM-ZIP-OFFICE - atm zip office
1521:NCUBE-LM - nCube License Manager
1522:RNA-LM - Ricardo North America License Manager
1523:CICHILD-LM - cichild
1524:INGRESLOCK - ingres, RAT: Trinoo
1525:ORASRV - Oracle, PROSPERO-NP - Prospero Directory Service
1526:PDAP-NP - Prospero Data Access Prot non-priv
1527:TLISRV - Oracle
1528:MCIAUTOREG
1529:COAUTHOR - Oracle, RAT: Sky Rat, Sky Rat [Show]
1530:RAP-SERVICE
1531:RAP-LISTEN
1532:MIROCONNECT
1533:Virtual Places Software, RAT: Back Atack
1534:MICROMUSE-LM
1535:AMPR-INFO
1536:AMPR-INTER
1537:SDSC-LM
1538:3DS-LM
1539:Intellistor License Manager
1540:RDS
1541:RDS2
1542:GRIDGEN-ELMD
1543:SIMBA-CS
1544:ASPECLMD
1545:VISTIUM-SHARE
1546:ABBACCURAY
1547:LAPLINK
1548:Axon License Manager
1549:Shiva Hose
1550:3M-IMAGE-LM - Image Storage license manager 3M Company
1551:HECMTL-DB
1552:PCIARRAY, RAT: Uprising
1553:SNA-CS
1554:CACI-LM - CACI Products Company License Manager
1555:LIVELAN
1556:ASHWIN - AshWin CI Tecnologies
1557:ARBORTEXT-LM - ArborText License Manager
1558:XINGMPEG
1559:WEB2HOST
1560:ASCI-VAL - asci-val, RAT: Duddie
1561:FACILITYVIEW
1562:PCONNECTMGR
1563:CADABRA-LM - Cadabra License Manager
1564:PAY-PER-VIEW
1565:WINDDLB
1566:CORELVIDEO
1567:JLICELMD
1568:TSSPMAP
1569:ETS
1570:ORBIXD
1571:RDB-DBS-DISP - Oracle Remote Data Base
1572:Chipcom License Manager
1573:ITSCOMM-NS
1574:MVEL-LM
1575:ORACLENAMES
1576:MOLDFLOW-LM
1577:HYPERCUBE-LM
1578:Jacobus License Manager, RAT: Shadow Phyre
1579:IOC-SEA-LM
1580:TN-TL-R1
1581:VMF-MSG-PORT
1582:MSIMS, TAMS-LM - Toshiba America Medical Systems
1583:SIMBAEXPRESS
1584:TN-TL-FD2
1585:INTV
1586:IBM-ABTACT
1587:PRA_ELMD
1588:TRIQUEST-LM
1589:VQP
1590:GEMINI-LM
1591:NCPM-PM
1592:COMMONSPACE
1593:MAINSOFT-LM
1594:SIXTRAK
1595:RADIO
1596:RADIO-SM
1597:ORBPLUS-IIOP
1598:PICKNFS
1599:SIMBASERVICES
1600:ISSD, RAT: Shivka-Burka, Direct Connection
1601:AAS, RAT: Direct Connection
1602:INSPECT, RAT: Direct Connection
1603:PICODBC
1604:ICABROWSER
1605:SLP - Salutation Manager (Salutation Protocol)
1606:SLM-API - Salutation Manager (SLM-API)
1607:STT
1608:SMART-LM - Smart Corp. License Manager
1609:ISYSG-LM
1610:TAURUS-WH
1611:ILL - Inter Library Loan
1612:NETBILL-TRANS - NetBill Transaction Server
1613:NETBILL-KEYREP - NetBill Key Repository
1614:NETBILL-CRED - NetBill Credential Server
1615:NETBILL-AUTH - NetBill Authorization Server
1616:NETBILL-PROD - NetBill Product Server
1617:NIMROD-AGENT - Nimrod Inter-Agent Communication
1618:SKYTELNET - skyt
1619:XS-OPENSTORAGE - xs-openstorage
1620:FAXPORTWINPORT - faxportwinport
1621:SOFTDATAPORT - softdataphone
1622:ONTIME - ontime
1623:JALEOSND - jaleosnd
1624:UDP-SR-PORT - udp-sr-port
1625:SVS-OMAGENT - svs-omagent
1634:RAT: NetCrack
1636:CNCP - CableNet Control Protocol
1637:CNAP - CableNet Admin Protocol
1638:CNIP - CableNet Info Protocol
1639:CERT-INITIATOR - cert-initiator
1640:CERT-RESPONDER - cert-responder
1641:INVISION
1642:ISIS-AM
1643:ISIS-AMBC
1644:SAISEH - Satellite-data Acquisition System 4
1645:DATAMETRICS
1646:SA-MSG-PORT
1647:RSAP
1648:CONCURRENT-LM
1649:INSPECT
1650:NDK
1651:SHIVA_CONFSRVR
1652:XNMP
1653:ALPHATECH - alphatech-lm
1654:STARGATEALERTS - stargatealerts
1655:DEC-MBADMIN - dec-mbadmin
1656:DEC-MBADMIN-H - dec-mbadmin-h
1657:FUJITSU-MMPDC - fujitsu-mmpdc
1658:SIXNETUDR - sixnetudr
1659:SM-LG - Silicon Grail License Manager
1660:SKIP-MC-GIKREQ - skip-mc-gikreq
1661:NETVIEW-AIX-1, RAT: d0ped
1662:NETVIEW-AIX-2
1663:NETVIEW-AIX-3
1664:NETVIEW-AIX-4
1665:NETVIEW-AIX-5
1666:NETVIEW-AIX-6
1667:NETVIEW-AIX-7, RAT: Jerwin
1668:NETVIEW-AIX-8, RAT: Jerwin
1669:NETVIEW-AIX-9
1670:NETVIEW-AIX-10
1671:NETVIEW-AIX-11
1672:NETVIEW-AIX-12
1673:PROSHARE-MC-1 - Intel Proshare Multicast
1674:PROSHARE-MC-2 - Intel Proshare Multicast
1675:PDP - Pacific Data Products
1676:NETCOMM1
1677:GROUPWISE
1678:PROLINK
1679:DARCORP-LM
1680:MICROCOM-SBP
1681:SD-ELMD
1682:LANYON-LANTERN
1683:NCMP-HIP
1684:SNARESECURE
1685:N2NREMOTE
1686:CVMON
1687:NSJTP-CTRL
1688:NSJTP-DATA
1689:FIREFOX
1690:NG-UMDS
1691:EMPIRE-EMPUMA - empire-empuma
1692:SSTSYS-LM - sstsys-lm
1693:RRITR
1694:RRIMWM
1695:RRILWM
1696:RRIFMM
1697:RRISAT
1698:RSVP-ENCAP-1 - RSVP-ENCAPSULATION-1
1699:RSVP-ENCAP-2 - RSVP-ENCAPSULATION-2
1700:MPS-RAFT, RAT: Udps, SubRoot
1701:L2F
1702:DESKSHARE
1703:HB-ENGINE
1704:BCS-BROKER
1705:SLINGSHOT
1706:JETFORM
1707:VDMPLAY
1708:GAT-LMD
1709:CENTRA
1710:IMPERA
1711:PPTCONFERENCE - pptconference
1712:REGISTRAR - resource monitoring service
1713:ConferenceTalk
1714:SESI-LM
1715:HOUDINI-LM
1716:XMSG
1717:FJ-HDNET
1718:H323GATEDISC - h323gatedisc
1719:H323GATESTAT - h323gatestat
1720:H323HOSTCALL - h323hostcall
1721:CAICCI
1722:HKS-LM - HKS License Manager
1723:PPTP
1724:CSBPHONEMASTER - csbphonemaster
1725:IDEN-RALP - iden-ralp
1726:IBERIAGAMES - IBERIAGAMES
1727:WINDDX - winddx
1728:TELINDUS - TELINDUS
1729:CITYNL - CityNL License Management
1730:ROKETZ - roketz
1731:MSICCP - MSICCP
1732:PROXIM - proxim
1733:SIPAT - sipat
1734:CAMBERTX-LM - Camber Corporation License Management
1735:PRIVATECHAT - PrivateChat
1736:STREETSTREAM - street-stream
1737:ULTIMAD - ultimad
1738:GAMEGEN1 - GameGen1
1739:WEBACCESS - webaccess
1740:ENCORE - encore
1741:CISCO-NET-MGMT - cisco-net-mgmt
1742:3COM-NSD - 3Com-nsd
1743:CINEGRFX-LM - Cinema Graphics License Manager
1744:NCPM-FT - ncpm-ft
1745:REMOTE-WINSOCK - remote-winsock
1746:FTRAPID-1 - ftrapid-1
1747:FTRAPID-2 - ftrapid-2
1748:ORACLE-EM1 - Oracle-em1
1749:ASPEN-SERVICES - aspen-services
1750:SSLP - Simple Socket Library's PortMaster
1751:SWIFTNET - SwiftNet
1752:LOFR-LM - Leap of Faith Research License Manager
1753:TRANSLOGIC-LM - Translogic License Manager
1754:ORACLE-EM2 - Oracle-em2
1755:MS-STREAMING - ms-streaming
1756:CAPFAST-LMD - capfast-lmd
1757:CNHRP - cnhrp
1758:TFTP-MCAST - tftp-mcast
1759:SPSS-LM - SPSS License Manager
1760:WWW-LDAP-GW - www-ldap-gw
1761:CFT-0 - cft-0
1762:CFT-1 - cft-1
1763:CFT-2 - cft-2
1764:CFT-3 - cft-3
1765:CFT-4 - cft-4
1766:CFT-5 - cft-5
1767:CFT-6 - cft-6
1768:CFT-7 - cft-7
1769:BMC-NET-ADM - bmc-net-adm
1770:BMC-NET-SVC - bmc-net-svc
1771:VAULTBASE - vaultbase
1772:ESSWEB-GW - EssWeb Gateway
1773:KMSCONTROL - KMSControl
1774:GLOBAL-DTSERV - global-dtserv
1776:FEMIS - Federal Emergency Management Information System
1777:POWERGUARDIAN - powerguardian, RAT: Scarab
1778:PRODIGY-INTERNET - prodigy-internet
1779:PHARMASOFT - pharmasoft
1780:DPKEYSERV - dpkeyserv
1781:ANSWERSOFT-LM - answersoft-lm
1782:HP-HCIP - hp-hcip
1783:FJRIS - Fujitsu Remote Install Service
1784:FINLE-LM - Finle License Manager
1785:WINDLM - Wind River Systems License Manager
1786:FUNK-LOGGER - funk-logger
1787:FUNK-LICENSE - funk-license
1788:PSMOND - psmond
1789:HELLO - hello
1790:NMSP - Narrative Media Streaming Protocol
1791:EA1 - EA1
1792:IBM-DT-2 - ibm-dt-2
1793:RSC-ROBOT - rsc-robot
1794:CERA-BCM - cera-bcm
1795:DPI-PROXY - dpi-proxy
1796:VOCALTEC-ADMIN - Vocaltec Server Administration
1797:UMA - UMA
1798:ETP - Event Transfer Protocol
1799:NETRISK - NETRISK
1800:ANSYS-LM - ANSYS-License manager
1801:MSMQ - Microsoft Message Que
1802:CONCOMP1 - ConComp1
1803:HP-HCIP-GWY - HP-HCIP-GWY
1804:ENL - ENL
1805:ENL-NAME - ENL-Name
1806:MUSICONLINE - Musiconline
1807:FHSP - Fujitsu Hot Standby Protocol, RAT: SpySender, Sysroot
1808:ORACLE-VP2 - Oracle-VP2
1809:ORACLE-VP1 - Oracle-VP1
1810:JERAND-LM - Jerand License Manager
1811:SCIENTIA-SDB - Scientia-SDB
1812:RADIUS - RADIUS
1813:RADIUS-ACCT - RADIUS Accounting
1814:TDP-SUITE - TDP Suite
1815:MMPFT - MMPFT
1818:ETFTP - Enhanced Trivial File Transfer Protocol
1819:PLATO-LM - Plato License Manager
1820:MCAGENT - mcagent
1821:DONNYWORLD - donnyworld
1822:ES-ELMD - es-elmd
1823:UNISYS-LM - Unisys Natural Language License Manager
1824:METRICS-PAS - metrics-pas
1833:RAT: Tcc
1834:RAT: Tcc
1835:RAT: Tcc
1836:RAT: Tcc
1837:RAT: Tcc
1850:RAT: Black Angel
1863:MSN Messenger - MSN Messenger Application
1871:RAT: Serpa, SerialPager
1900:SSDP - SSDP (UDP)
1901:FJICL-TEP-A - Fujitsu ICL Terminal Emulator Program A
1902:FJICL-TEP-B - Fujitsu ICL Terminal Emulator Program B, RAT: XQDoor
1903:LINKNAME - Local Link Name Resolution
1904:FJICL-TEP-C - Fujitsu ICL Terminal Emulator Program C
1905:SUGP - Secure UP.Link Gateway Protocol
1906:TPMD - TPortMapperReq
1907:INTRASTAR - IntraSTAR, RAT: hRat
1908:DAWN - Dawn
1909:GLOBAL-WLINK - Global World Link
1911:MTP - Starlight Networks Multimedia Transport Protocol, RAT: AWD
1913:ARMADP - armadp
1914:ELM-MOMENTUM - Elm-Momentum
1915:FACELINK - FACELINK
1916:PERSOFT - Persoft Persona
1917:NOAGENT - nOAgent
1918:CAN-NDS - Candle Directory Service - NDS
1919:CAN-DCH - Candle Directory Service - DCH
1920:CAN-FERRET - Candle Directory Service - FERRET
1941:RAT: Hanky Panky
1944:CLOSE-COMBAT - close-combat
1945:DIALOGIC-ELMD - dialogic-elmd
1946:TEKPLS - tekpls
1947:HLSERVER - hlserver
1948:EYE2EYE - eye2eye
1949:ISMAEASDAQLIVE - ISMA Easdaq Live
1950:ISMAEASDAQTEST - ISMA Easdaq Test
1951:BCS-LMSERVER - bcs-lmserver
1966:RAT: Fake FTP
1967:RAT: FYEO, WM FTP
1969:RAT: OpC BO
1973:DLSRAP - Data Link Switching Remote Access Protocol
1978:RAT: HideDoor, Feri, Deadcow
1979:RAT: ZSpyII, Mima, HideDoor, SpyServer
1980:RAT: ZSpyII
1981:RAT: Bowl, Shockrave, Ullysse, Habibti, Infinaeon
1983:RAT: Q-taz, Leszcz, T.O.D
1984:RAT: Q-taz, BDMania
1985:FOLIOCORP - Folio Remote Server, HSRP - Cisco Hot Standby Router Protocol (RFC 2281), RAT: Skun
1986:LICENSEDAEMON - cisco license management, RAT: Muska52, Akosch, Prosty, Snurzi
1987:TR-RSRB-P1 - cisco RSRB Priority 1 port, RAT: DNS
1988:TR-RSRB-P2 - cisco RSRB Priority 2 port
1989:TR-RSRB-P3 - cisco RSRB Priority 3 port
1989:MHSNET - MHSnet system
1990:STUN-P1 - cisco STUN Priority 1 port
1991:STUN-P2 - cisco STUN Priority 2 port
1992:STUN-P3 - cisco STUN Priority 3 port
1992:IPSENDMSG - IPsendmsg
1993:SNMP-TCP-PORT - cisco SNMP TCP port, RAT: TrojanProxy.Win32.WinProxy
1994:STUN-PORT - cisco serial tunnel port
1995:PERF-PORT - cisco perf port
1996:TR-RSRB-PORT - cisco Remote SRB port
1997:GDP-PORT - cisco Gateway Discovery Protocol
1998:X25-SVC-PORT - cisco X.25 service (XOT)
1999:TCP-ID-PORT - cisco identification port, RAT: BackDoor (Default), Transcout
2000:CALLBROOK - callbook, SEAGATE - Seagate Crystal Reports, RAT: Der Spaeher 3, Insane Network, Transscout, Froggys Trojan, Last2000, HAW, RE2000, Fear, Force, Evoloution, Winsock Commander, CS, Amitis, Adele
2001:DC - dc, SEAGATE - Seagate Crystal Reports, RAT: Der Spaeher 3, TrojanCow, TransScout, Senna Spy 2001 Trojan, Protoss, XQDoor, Codex Data Systems D.I.R.T., OIcqsearch
2002:GLOBE - globe, RAT: TransScout, Duddie, Sensive
2003:RAT: TransScout, Tech
2004:MAILBOX - mailbox, RAT: TransScout, OIcqsearch
2005:BERKNET - berknet, RAT: TransScout, Sequel, OIcqsearch
2006:INVOKATOR - invokator
2007:DECTALK - dectalk, RAT: OIcqsearch
2008:CONF - conf, RAT: OIcqsearch
2009:News, RAT: OIcqsearch
2010:Search, RAT: OIcqsearch
2011:RAID-CC, RAT: OIcqsearch
2012:TTYINFO, RAT: Net Control, OIcqsearch
2013:RAID-AM
2014:TROFF
2015:CYPRESS
2016:BOOTSERVER
2017:CYPRESS-STAT - cypress-stat
2018:TERMINALDB
2019:WHOSOCKAMI
2020:XINUPAGESERVER - xinupageserver, RAT: WRS
2021:SERVEXEC
2022:DOWN - down
2023:XINUEXPANSION3 - xinuexpansion3, RAT: Pass Ripper, Hack City Ripper Pro
2024:XINUEXPANSION4 - xinuexpansion4
2025:ELLPACK - ell pack, RAT: Shadow Phyre, KS Rain
2026:SCRABBLE - scrabble
2027:SHADOWSERVER - shadow server
2028:SUBMITSERVER - submit server
2030:DEVICE2 - device2
2032:BLACKBOARD - blackboard
2033:GLOGGER - glogger
2034:SCOREMANAGER - score manager
2035:IMSLDOC - imsldoc
2038:OBJECTMANAGER - object manager
2040:LAM - lab, RAT: Inferno Uploader, JackTrojan
2041:INTERBASE
2042:ISIS
2043:ISIS-BCAST
2044:RIMSL
2045:CDFUNC
2046:SDFUNC
2047:DLS
2048:DLS-MONITOR - dls-monitor
2049:SHILP, NFS - Sun Microsystems Network File System Protocol (RFC 1813)
2060:RAT: Protoss
2065:DLSRPN - Data Link Switch Read Port Number
2067:DLSWPN - Data Link Switch Write Port Number
2078:RAT: ZalivatoR
2080:RAT: WinHole
2086:Netscape/Corba Exploit
2102:ZEPHYR-SRV - Zephyr server
2103:ZEPHYR-CLT - Zephyr serv-hm connection
2104:ZEPHYR-HM - Zephyr hostmanager
2105:MINIPAY - MiniPay
2115:RAT: Bugs, Feap
2121:RAT: Burbulatorheads
2140:RAT: Deep Throat, The Invasor, Foreplay or Reduced Foreplay
2155:RAT: Illusion Mailer, Nirvana
2172:RAT: SubSeven
2177:RAT: Phantom FTP
2180:MC-GT-SRV - Millicent Vendor Gateway Server
2189:RAT: Mowang
2201:ATS - Advanced Training System Program
2202:IMTC-MAP - Int. Multimedia Teleconferencing Cosortium
2208:RAT: Screen Control
2213:KALI - Kali, RAT: Screen Control
2214:RAT: Screen Control
2215:RAT: Screen Control
2216:RAT: Screen Control
2221:UNREG-AB1 - Allen-Bradley unregistered port
2222:UNREG-AB2 - Allen-Bradley unregistered port
2223:UNREG-AB3 - Allen-Bradley unregistered port
2232:IVS-VIDEO - IVS Video default
2233:INFOCRYPT - INFOCRYPT
2234:DIRECTPLAY - DirectPlay
2235:SERCOMM-WLINK - Sercomm-WLink
2236:NANI
2237:OPTECH-PORT1-LM - Optech Port1 License Manager
2238:AVIVA-SNA - AVIVA SNA SERVER
2239:IMAGEQUERY - Image Query
2241:IVSD - IVS Daemon
2255:RAT: Nirvana
2279:XMQUERY
2280:LNVPOLLER
2281:LNVCONSOLE
2282:LNVALARM
2283:LNVSTATUS RAT: HVL Rat5
2284:LNVMAPS
2285:LNVMAILMON
2286:NAS-METERING
2287:DNA
2288:NETML
2299:RAT: Back Atack
2300:RAT: Xplorer
2307:PEHELP - pehelp
2308:SDHELP - sdhelp
2312:RAT: Izram
2332:RAT: Silent Spy
2337:RAT: Hobbit
2339:OBS!!! namnen har bytt plats, RAT: Voice Spy
2345:RAT: Doly Trojan
2376:RAT: Remote Control
2400:RAT: PortD
2401:CVSPSERVER - cvspserver
2421:RAT: x2a
2425:RAT: Madfind
2444:RAT: Earthquake
2500:RTSSERV - Resource Tracking system server
2501:RTSCLIENT - Resource Tracking system client
2525:RAT: RemoteKit
2527:RAT: BLHouse
2564:HP-3000-TELNET - HP 3000 NS/VT block mode telnet
2565:RAT: Striker
2583:RAT: Wincrash 2
2584:RAT: Spie
2585:RAT: Nethack
2592:NETREK - netrek
2600:RAT: Digital RootBeer
2610:RAT: IP+
2684:RAT: Red-Spy, Slawek
2685:RAT: Red-Spy, Slawek
2699:RAT: Jittar
2700:TQDATA - tqdata
2702:SMS-XFER - SMS XFER, RAT: Black Diver
2707:RAT: Bigfoot
2716:RAT: The Prayer
2721:RAT: Phase Zero
2727:RAT: Hackers Heaven
2773:RAT: SubSeven , SubSeven 2.1 Gold
2784:WWW-DEV - world wide web - development
2785:AIC-NP - aic-np
2786:AIC-ONCRPC - Destiny MCD database
2787:PICCOLO - Cornerstone Software
2788:FRYESERV - NetWare Loadable Module - Seagate Software
2789:MEDIA-AGENT - Media Agent
2801:RAT: Phineas Phucker
2864:RAT: Denial
2904:RAT: VB Troyen
2908:MAO - mao
2909:FUNK-DIALOUT - Funk Dialout
2910:TDACCESS - TDAccess
2911:BLOCKADE - Blockade
2912:EPICON - Epicon
2945:RAT: Majesty
2968:RAT: Theef
2989:RAT: RAT
3000:HBCI - HBCI, RAT: Remote Shut, Theef, Xuegi, Izram
3001:REDWOOD-BROKER - Redwood Broker
3002:EXLM-AGENT - EXLM Agent
3010:GW - Telerate Workstation
3011:TRUSTED-WEB - Trusted Web
3024:RAT: WinCrash
3030:RAT: Tomato
3031:RAT: MicroSpy
3047:HLSERVER - Fast Security HL Server
3048:PCTRADER - Sierra Net PC Trader
3049:NSWS - NSWS
3065:RAT: Ice Storm Killerz
3082:RAT: Amoeba
3100:RAT: Brain Wiper
3128:Proxy, RAT: RingZero, Command Center
3129:RAT: Masters Paradise
3131:RAT: Subsari
3133:RAT: Yet Another
3134:RAT: Yet Another
3141:VMODEM - VMODEM
3142:RDC-WH-EOS - RDC WH EOS
3143:SEAVIEW - Sea View
3144:TARANTELLA - Tarantella
3145:CSI-LFAP - CSI-LFAP
3150:RAT: Deep Throat, The Invasor
3169:RAT: Turkojan
3180:MS-BRK-SRV - Millicent Broker Server
3215:RAT: XHX
3256:RAT: Worm.Dax
3264:CCMAIL - cc:mail/lotus
3265:ALTAV-TUNNEL - Altav Tunnel
3266:NS-CFG-SERVER - NS CFG Server
3267:IBM-DIAL-OUT - IBM Dial Out
3268:MSFT-GC - Microsoft Global Catalog
3269:MSFT-GC-SSL - Microsoft Global Catalog with LDAP/SSL
3270:VERISMART - Verismart
3271:CSOFT-PREV - CSoft Prev Port
3272:USER-MANAGER - Fujitsu User Manager
3273:SXMP - Simple Experimental Multiplexed Protocol
3274:ORDINOX-SERVER - Ordinox Server
3275:SAMD - SAMD
3276:MAXIM-ASICS - Maxim ASICs
3306:SQL Server
3330:RAT: Worm.Randex
3331:RAT: Delf, Worm.Randex
3332:RAT: Delf, Worm.Randex
3333:EGGDROP - Common for eggdrop bot, DEC-NOTES - DEC Notes, RAT: Delf, Hanuman, Laodai
3344:RAT: Matrix
3347:RAT: Control-it!
3355:RAT: Matrix, Hogle
3359:RAT: URCS
3410:RAT: Optix Pro
3416:RAT: SpySender
3417:RAT: SpySender
3418:RAT: XPosure
3421:BMAP - Bull Apprise portmapper
3427:RAT: FireBird
3454:MIRA - Apple Remote Access Protocol
3455:PRSVP - RSVP Port
3456:VAT - VAT default data, RAT: Terror trojan, Fear, Evoloution, Force
3457:VAT-CONTROL - VAT default control
3458:D3WINOSFI - D3WinOsfi
3459:INTEGRAL - Integral, RAT: Eclipse 2000, Sanctuary
3465:RAT: FireBird
3500:RAT: Servidor.e
3505:RAT: AutoSpY
3527:RAT: BLHouse
3547:RAT: Amitis
3587:RAT: ****Head trojan
3627:RAT: Delta Remote Access
3700:RAT: Portal of Doom
3721:RAT: Whirlpool
3723:RAT: Mantis
3737:RAT: HelioS
3791:RAT: Total Eclypse 1.0
3800:RAT: TrojanProxy.Win32.Small.a
3801:RAT: Total Solar Eclypse, TrojanProxy.Win32.Small.a
3802:RAT: TrojanProxy.Win32.Small.a
3900:UDT_OS - Unidata UDT OS
3984:MAPPER-NODEMGR - MAPPER network node manager
3985:MAPPER-MAPETHD - MAPPER TCP/IP server
3986:MAPPER-WS_ETHD - MAPPER workstation server
4000:TERABASE - Terabase,iChat Communications Hub, RAT: Psyber Streaming Server, SkyDance, Remote Anything, Zzmm, Silent Trigger
4001:iChat Rooms
4004:RAT: KBL FWB
4008:NETCHEQUE - NetCheque accounting
4009:CHIMERA-HWM - Chimera HWM
4010:SAMSUNG-UNIDEX - Samsung Unidex, RAT: Fearless Lite
4011:ALTSERVICEBOOT - Alternate Service Boot
4012:PDA-GATE - PDA Gate
4013:ACL-MANAGER - ACL Manager
4080:iChat Webserver
4092:RAT: WinCrash
4128:RAT: Infector II, Shadow Remote, RedShad
4132:NUTS_DEM - NUTS Daemon
4133:NUTS_BOOTP - NUTS Bootp Server
4134:NIFTY-HMI - NIFTY-Serve HMI Protocol
4141:OIRTGSVC - Workflow Server, RAT: rada-tat-RAT
4142:OIDOCSVC - Document Server
4143:OIDSR - Document Replication
4201:RAT: War Trojan
4210:RAT: Muska52, NetKey
4220:RAT: G-Hack
4225:RAT: Silent Spy
4242:RAT: Virtual Hacking Machine - VHM
4288:RAT: MoSucker
4300:RAT: Smokodoor
4321:RWHOIS - Remote Who Is, RAT: BoBo, Schoolbus 1.0
4343:UNICALL - UNICALL
4344:VINAINSTALL - VinaInstall
4369:RAT: Boiling
4420:RAT: G-Hack
4429:RAT: WINSF
4430:RAT: WINSF
4431:RAT: WINSF
4432:RAT: WINSF
4423:RAT: WINSF
4432:RAT: Acid, Black Dream
4433:RAT: Acid, Black Dream
4442:RAT: Oracle
4444:EGGDROP - Common for eggdrop bot, KRB524 - KRB524, NV-VIDEO - NV Video default, ADSUBTRACT - Ad-Subtract Pro, RAT: Prosiak, Swift Remote, AlexMessoMalex, Avone, Oracle, Controlmachine, Snake
4445:UPNOTIFYP - UPNOTIFYP, RAT: Oracle
4446:N1-FWP - N1-FWP
4447:N1-RMGMT - N1-RMGMT, RAT: Oracle
4448:ASC-SLMD - ASC Licence Manager
4449:ARCRYPTOIP - ARCrypto IP, RAT: Oracle
4450:CAMP - Camp
4451:CTISYSTEMMSG - CTI System Msg, RAT: Oracle
4452:CTIPROGRAMLOAD - CTI Program Load
4453:NSSALERTMGR - NSS Alert Manager
4454:NSSAGENTMGR - NSS Agent Manager
4481:RAT: Backstabb LITE
4500:SAE-URN - sae-urn
4501:URN-X-CDCHOICE - urn-x-cdchoice
4523:RAT: Celine
4527:RAT: BLHouse
4545:RAT: Remote Revise
4563:RAT: Clandestine
4567:RAT: FileNail, J4Y
4590:RAT: ICQ Trojan
4625:RAT: NiuNio-bek
4666:RAT: Mneah
4672:RFA - remote file access server
4714:RAT: Muska52
4747:RAT: Fosen, Symes
4748:RAT: Symes
4836:RAT: Buttman
4837:RAT: Buttman
4865:RAT: Backfire
4881:RAT: AIMVision
4950:RAT: ICQ Trojan(Lm)
4999:RAT: MaLPaYo, Ripjac, Remote Access
5000:COMMPLEX-MAIN - Complex Main, SSDP - Web-XML Parser for Universal Plug & Play, RAT: Back Door Setup, Blazer5, Bubbel, ICKiller, Sockets des Troie, Bionet Lite, Raid, Angel
5001:COMMPLEX-LINK - Complex Link, RAT: Back Door Setup, Sockets des Troie, Pinkle
5002:RFE - radio free ethernet, RAT: cd00r, Shaft
5003:CLARIS-FMPRO - Claris FileMaker Pro
5004:AVT-PROFILE-1 - avt-profile-1
5005:AVT-PROFILE-1 - avt-profile-2, RAT: Aladino
5010:TELELPATHSTART - TelepathStart, RAT: Solo
5011:TELELPATHATTACK - TelepathAttack, RAT: OOTLT, OOTLT modified
5020:ZENGINKYO-1 - zenginkyo-1
5021:ZENGINKYO-2 - zenginkyo-2
5025:RAT: WM Remote KeyLogger
5028:RAT: Shadow Phyre
5031:RAT: NetMetropolitan
5032:RAT: NetMetropolitan
5050:MMCC - multimedia conference control tool, RAT: R0xR4t
5051:RAT: Minicli
5060:SIP - Session Initiation Protocol (RFC 2543)
5145:RMONITOR_SECURE - rmonitor secure
5150:ATMP - Ascend Tunnel Management Protocol
5151:RAT: Optix Lite
5152:RAT: Institution
5155:RAT: Oracle
5180:RAT: Peeper
5190:AOL - America-Online, ICQ
5191:AOL-1 - AmericaOnline1
5192:AOL-2 - AmericaOnline2
5193:AOL-3 - AmericaOnline3
5236:PADL2SIM
5277:RAT:Winshell
5295:RAT: Gate Hell
5296:RAT: Gate Hell
5297:RAT: Gate Hell
5298:RAT: Gate Hell
5299:RAT: Gate Hell
5300:HA cluster heartbeat, RAT: Gate Hell
5301:HA cluster general services, RAT: Gate Hell
5302:HA cluster configuration
5303:HA cluster probing
5304:HA Cluster Commands
5305:HA Cluster Test
5306:Sun MC Group
5307:SCO AIP
5308:CFengine
5309:J Printer
5310:OUTLAWS - Outlaws
5311:TM Login
5321:RAT: Firehotcker
5328:RAT: Snow, Fx
5343:RAT: wCrat - WC Remote Administration Tool
5377:RAT: Iani
5400:EXCERPT - Excerpt Search, RAT: Blade Runner, Back Construction, Digital Spy
5401:EXCERPTS - Excerpt Search Secure, RAT: Blade Runner, Back Construction, Mneah, Digital Spy
5402:MFTP, RAT: Blade Runner, Back Construction, Mneah, Digital Spy
5403:HPOMS-CI-LSTN
5404:HPOMS-DPS-LSTN
5405:NetSupport
5406:Systemics Sox
5407:Foresyte-Clear
5408:Foresyte-Sec
5409:Salient Data Server
5410:Salient User Manager
5411:ACTNET - ActNet
5412:CONTINUUS
5413:WWIOTALK
5414:STATUSD
5415:NS Server
5416:SNS Gateway
5417:SNS Agent
5418:MCNTP - MCNTP, RAT: Darksky
5419:DJ-ICE - DJ-ICE, RAT: Darksky, Eagle Boy
5420:CYLINK-C - Cylink-C
5430:RAT: NetAdvance
5432:RAT: Gate Hell
5512:RAT: Illusion Mailer, Xtcp
5521:RAT: Illusion Mailer
5535:RAT: DarkNova
5550:RAT: Xtcp
5553:RAT: Keylog.XLog
5555:EGGDROP - Common for eggdrop bot, PERSONAL-AGENT - Personal Agent, RAT: ServeMe, NoXcape, ReMod, Sonitro, Stinky, Jeemp, Hale, Optix Pro, Sysbug
5556:RAT: BO Facil
5557:RAT: BO Facil
5558:RAT: easyServ, WildThing
5569:RAT: Robo-Hack
5597:RAT: Shadow Phyre
5600:ESMMANAGER - Enterprise Security Manager
5601:ESMAGENT - Enterprise Security Agent
5602:A1-MSC
5603:A1-BS
5604:A3-SDUNODE - A3-SDUNode
5605:A4-SDUNODEODE - A4-SDUNode
5631:PCANYWHEREDATA
5632:PCANYWHERESTAT
5637:RAT: PC Crasher
5638:RAT: PC Crasher
5639:RAT: PC Crasher
5651:RAT: Jeemp
5666:RAT: PC Crasher
5678:RRAC - Remote Replication Agent Connection
5679:DCCM - Direct Cable Connect Manager
5695:RAT: Assasin
5696:RAT: Assasin
5697:RAT: Assasin
5713:PROSHAREAUDIO - proshare conf audio
5714:PROSHAREVIDEO - proshare conf video, RAT: WinCrash
5715:PROSHAREDATA - proshare conf data
5716:PROSHAREREQUEST - proshare conf request
5717:PROSHARENOTIFY - proshare conf notify
5725:RAT: Stang
5729:OPENMAIL - Openmail User Agent Layer
5741:RAT: WinCrash
5742:RAT: WinCrash
5745:FCOPY-SERVER - fcopy-server
5755:OPENMAILG - OpenMail Desk Gateway server
5757:X500MS - OpenMail X.500 Directory Server
5760:RAT: Portmap Remote Root Linux Exploit
5766:OPENMAILNS - OpenMail NewMail Server
5767:S-OPENMAIL - OpenMail Suer Agent Layer (Secure)
5800:VNC - Virtual Network Computing
5802:RAT: Y3K RAT
5803:RAT: Y3K RAT
5838:RAT: Y3K RAT
5880:RAT: Y3K RAT
5882:RAT: Y3K RAT
5884:RAT: Y3K RAT
5885:RAT: AIMVision
5888:RAT: Y3K RAT, CIA
5889:RAT: Y3K RAT
5890:RAT: Y3K RAT
5902:RAT: XQDoor
5933:RAT: NOSecure
6000:X11 - X Window System, RAT: The tHing 1.6, RServer, Divux
6001:X11 - X Window System, RAT: Trojan Killer 2.2
6002:X11 - X Window System
6003:X11 - X Window System
6004:X11 - X Window System
6005:X11 - X Window System
6006:X11 - X Window System, RAT: Bad Blood
6007:X11 - X Window System
6008:X11 - X Window System
6009:X11 - X Window System
6010:X11 - X Window System
6011:X11 - X Window System
6012:X11 - X Window System
6013:X11 - X Window System
6014:X11 - X Window System
6015:X11 - X Window System
6016:X11 - X Window System, RAT: Shadow Phyre
6017:X11 - X Window System
6018:X11 - X Window System
6019:X11 - X Window System
6020:X11 - X Window System
6021:X11 - X Window System
6022:X11 - X Window System
6023:X11 - X Window System
6024:X11 - X Window System
6025:X11 - X Window System
6026:X11 - X Window System
6027:X11 - X Window System
6028:X11 - X Window System
6029:X11 - X Window System
6030:X11 - X Window System
6031:X11 - X Window System
6032:X11 - X Window System
6033:X11 - X Window System
6034:X11 - X Window System
6035:X11 - X Window System
6036:X11 - X Window System
6037:X11 - X Window System
6038:X11 - X Window System
6039:X11 - X Window System
6040:X11 - X Window System
6041:X11 - X Window System
6042:X11 - X Window System
6043:X11 - X Window System
6044:X11 - X Window System
6045:X11 - X Window System
6046:X11 - X Window System
6046:X11 - X Window System
6048:X11 - X Window System
6049:X11 - X Window System
6050:X11 - X Window System
6051:X11 - X Window System, RAT: Z-dem0n
6052:X11 - X Window System
6053:X11 - X Window System
6054:X11 - X Window System
6055:X11 - X Window System
6056:X11 - X Window Syst