1524=ingreslock - ingres
1525=prospero-np - prospero directory service non-priv
1526=pdap-np - prospero data access prot non-priv
1527=tlisrv - oracle
1528=mciautoreg - micautoreg
1529=coauthor - oracle
1530=rap-service - rap-service
1531=rap-listen - rap-listen
1532=miroconnect - miroconnect
1533=virtual-places - virtual places software
1534=micromuse-lm - micromuse-lm
1535=ampr-info - ampr-info
1536=ampr-inter - ampr-inter
1537=sdsc-lm - isi-lm
1538=3ds-lm - 3ds-lm
1539=intellistor-lm - intellistor license manager
1540=rds - rds
1541=rds2 - rds2
1542=gridgen-elmd - gridgen-elmd
1543=simba-cs - simba-cs
1544=aspeclmd - aspeclmd
1545=vistium-share - vistium-share
1546=abbaccuray - abbaccuray
1547=laplink - laplink
1548=axon-lm - axon license manager
1549=shivahose - shiva hose
1550=3m-image-lm - image storage license manager 3m company
1551=hecmtl-db - hecmtl-db
1552=pciarray - pciarray
1553=sna-cs - sna-cs
1554=caci-lm - caci products company license manager
1555=livelan - livelan
1556=ashwin - ashwin ci tecnologies
1557=arbortext-lm - arbortext license manager
1558=xingmpeg - xingmpeg
1559=web2host - web2host
1560=asci-val - asci-val
1561=facilityview - facilityview
1562=pconnectmgr - pconnectmgr
1563=cadabra-lm - cadabra license manager
1564=pay-per-view - pay-per-view
1565=winddlb - windd
1566=corelvideo - corelvideo
1567=jlicelmd - jlicelmd
1568=tsspmap - tsspmap
1569=ets - ets
1570=orbixd - orbixd
1571=rdb-dbs-disp - oracle remote data base
1572=chip-lm - chipcom license manager
1573=itscomm-ns - itscomm-ns
1574=mvel-lm - mvel-lm
1575=oraclenames - oraclenames
1576=moldflow-lm - moldflow-lm
1577=hypercube-lm - hypercube-lm
1578=jacobus-lm - jacobus license manager
1579=ioc-sea-lm - ioc-sea-lm
1580=tn-tl-r1 - tn-tl-r1
1581=vmf-msg-port - vmf-msg-port
1582=tams-lm - toshiba america medical systems
1583=simbaexpress - simbaexpress
1584=tn-tl-fd2 - tn-tl-fd2
1585=intv - intv
1586=ibm-abtact - ibm-abtact
1587=pra_elmd - pra_elmd
1588=triquest-lm - triquest-lm
1589=vqp - vqp
1590=gemini-lm - gemini-lm
1591=ncpm-pm - ncpm-pm
1592=commonspace - commonspace
1593=mainsoft-lm - mainsoft-lm
1594=sixtrak - sixtrak
1595=radio - radio
1596=radio-sm - radio-sm
1597=orbplus-iiop - orbplus-iiop
1598=picknfs - picknfs
1599=simbaservices - simbaservices
1600=issd -
1601=aas - aas
1602=inspect - inspect
1603=picodbc - pickodbc
1604=icabrowser - icabrowser
1605=slp - salutation manager (salutation protocol)
1606=slm-api - salutation manager (slm-api)
1607=stt - stt
1608=smart-lm - smart corp. license manager
1609=isysg-lm - isysg-lm
1610=taurus-wh - taurus-wh
1611=ill - inter library loan
1612=netbill-trans - netbill transaction server
1613=netbill-keyrep - netbill key repository
1614=netbill-cred - netbill credential server
1615=netbill-auth - netbill authorization server
1616=netbill-prod - netbill product server
1617=nimrod-agent - nimrod inter-agent communication
1618=skytelnet - skytelne
1619=xs-openbackup - xs-openbackup
1620=faxportwinport - faxportwinport
1621=softdataphone - softdataphone
1622=ontime - ontime
1623=jaleosnd - jaleosnd
1624=udp-sr-port - udp-sr-port
1625=svs-omagent - svs-omagent
1636=cncp - cablenet control protocol
1637=cnap - cablenet admin protocol
1638=cnip - cablenet info protocol
1639=cert-initiator - cert-initiator
1640=cert-responder - cert-responder
1641=invision - invision
1642=isis-am - isis-am
1643=isis-ambc - isis-ambc
1644=saiseh - satellite-data acquisition system 4
1645=datametrics - datametrics
1646=sa-msg-port - sa-msg-port
1647=rsap - rsap
1648=concurrent-lm - concurrent-lm
1649=inspect - inspect
1650=nkd -
1651=shiva_confsrvr - shiva_confsrvr
1652=xnmp - xnmp
1653=alphatech-lm - alphatech-lm
1654=stargatealerts - stargatealerts
1655=dec-mbadmin - dec-mbadmin
1656=dec-mbadmin-h - dec-mbadmin-h 1657=fujitsu-mmpdc - fujitsu-mmpdc
1658=sixnetudr - sixnetudr
1659=sg-lm - silicon grail license manager
1660=skip-mc-gikreq - skip-mc-gikreq
1661=netview-aix-1 - netview-aix-1
1662=netview-aix-2 - netview-aix-2
1663=netview-aix-3 - netview-aix-3
1664=netview-aix-4 - netview-aix-4
1665=netview-aix-5 - netview-aix-5
1666=netview-aix-6 - netview-aix-6
1667=netview-aix-7 - netview-aix-7
1668=netview-aix-8 - netview-aix-8
1669=netview-aix-9 - netview-aix-9
1670=netview-aix-10 - netview-aix-10
1671=netview-aix-11 - netview-aix-11
1672=netview-aix-12 - netview-aix-12
1673=proshare-mc-1 - intel proshare multicast
1674=proshare-mc-2 - intel proshare multicast
1675=pdp - pacific data products
1676=nefcomm1 - netcomm1
1677=groupwise - groupwise
1723=pptp - pptp
1807=spysender
1812=radius - radius authentication protocol
1813=radacct - radius accounting protocol
1827=pcm - pcm agent
1981=shockrave
1986=licensedaemon - cisco license management
1987=tr-rsrb-p1 - cisco rsrb priority 1 port
1988=tr-rsrb-p2 - cisco rsrb priority 2 port
1989=mshnet - mhsnet system
1990=stun-p1 - cisco stun priority 1 port
1991=stun-p2 - cisco stun priority 2 port
1992=ipsendmsg - ipsendmsg
1993=snmp-tcp-port - cisco snmp tcp port
1994=stun-port - cisco serial tunnel port
1995=perf-port - cisco perf port
1996=tr-rsrb-port - cisco remote srb port
1997=gdp-port - cisco gateway discovery protocol
1998=x25-svc-port - cisco x.25 service (xot)
1999=tcp-id-port - cisco identification port
2000=callbook -
2001=dc -
2002=globe -
2003=cfinger - cfinger
2004=mailbox -
2005=berknet -
2006=invokator -
2007=dectalk -
2008=conf -
2009=news -
2010=search -
2011=raid-cc - raid
2012=ttyinfo -
2013=raid-am -
2014=troff -
2015=cypress -
2016=bootserver -
2017=cypress-stat -
2018=terminaldb -
2019=whosockami -
2020=xinupageserver -
2021=servexec -
2022=down -
2023=xinuexpansion3 -
2024=xinuexpansion4 -
2025=ellpack -
2026=scrabble -
2027=shadowserver -
2028=submitserver -
2030=device2 -
2032=blackboard -
2033=glogger -
2034=scoremgr -
2035=imsldoc -
2038=objectmanager -
2040=lam -
2041=interbase -
2042=isis - isis
2043=isis-bcast - isis-bcast
2044=rimsl -
2045=cdfunc -
2046=sdfunc -
2047=dls -
2048=dls-monitor - dls-monitor
2064=distrib-netassholes - a group of lamers working on a closed-source
client for solving the rsa cryptographic challenge
2065=dlsrpn - data link switch read port number
2067=dlswpn - data link switch write port number
2080=wingate winsock redirector service
2103=zephyr-clt - zephyr serv-hm conncetion
2104=zephyr host manager
2105=eklogin - kerberos (v4) encrypted rlogin
2106=ekshell - kerberos (v4) encrypted rshell
2108=rkinit - kerberos (v4) remote initialization
2111=kx - x over kerberos
2112=kip - ip over kerberos
2115=bugs
2120=kauth - remote kauth
2140=deep throat, the invasor
2155=illusion mailer
2201=ats - advanced training system program
2221=unreg-ab1 - allen-bradley unregistered port
2222=unreg-ab2 - allen-bradley unregistered port
2223=inreg-ab3 - allen-bradley unregistered port
2232=ivs-video - ivs video default
2241=ivsd - ivs daemon
2283=hvl rat5
2301=cim - compaq insight manager
2307=pehelp - pehelp
2401=cvspserver - cvs network server
2430=venus -
2431=venus-se -
2432=codasrv -
2433=codasrv-se -
2500=rtsserv - resource tracking system server
2501=rtsclient - resource tracking system client
2564=hp-3000-telnet - hp 3000 ns/vt block mode telnet
2565=striker
2583=wincrash
2592=netrek[game] - netrek[game]
2600=digital rootbeer
2601=zebra - zebra vty
2602=ripd - ripd vty
2603=ripngd - ripngd vty
2604=ospfd - ospfd vty
2605=bgpd - bgpd vty
2627=webster -
2638=sybase database
2700=tqdata - tqdata
2766=listen - system v listener port
2784=www-dev - world wide web - development
2800=phineas phucker
2989=(udp) - rat
3000=unknown - unknown service
3001=nessusd - nessus security scanner
3005=deslogin - encrypted symmetric telnet
3006=deslogind -
3024=wincrash
3049=nsws -
3064=distrib-net-proxy - stupid closed source distrib.net proxy
3086=sj3 - sj3 (kanji input)
3128=ringzero -
3129=masters paradise -
3130=squid-ipc -
3141=vmodem - vmodem
3150=deep throat, the invasor
3155=http proxy
3264=ccmail - cc:mail/lotus
3295=port
3306=mysql
3333=dec-notes - dec notes
3421=bmap - bull apprise portmapper
3454=mira - apple remote access protocol
3455=prsvp - rsvp port
3456=vat - vat default data
3457=vat-control - vat default control
3459=eclipse 2000
3700=portal of doom
3791=eclypse
3801=(udp) - eclypse
3871=port
3900=udt_os - unidata udt os
3905=port
3908=port
3920=port
3921=port
3922=port
3923=port
3925=port
3975=port
3984=mapper-nodemgr - mapper network node manager
3985=mapper-mapethd - mapper tcp/ip server
3986=mapper-ws_ethd - mapper workstation server
3996=port
4000=unknown - unknown service
4001=port
4008=netcheque - netcheque accounting
4045=lockd - nfs lock daemon
4092=wincrash
4132=nuts_dem - nuts daemon
4133=nuts_bootp - nuts bootp server
4321=rwhois - remote who is
4333=msql - mini sql server
4343=unicall - unicall
4444=nv-video - nv video default
4500=sae-urn - sae-urn

4501=urn-x-cdchoice - urn-x-cdchoice
4557=fax - fax
4559=hylafax - hylafax cli-svr protocol
4567=file nail
4590=icqtrojan
4672=rfa - remote file access server
4899=radmin - remote administrator
5000=unknown - unknown service
5001=commplex-link -
5002=rfe - radio free ethernet
5003=claris-fmpro - claris filemaker pro
5004=avt-profile-1 - avt-profile-1
5005=avt-profile-2 - avt-profile-2
5010=telelpathstart - telepathstart
5011=telelpathattack - telepathattack
5031=netmetro
5050=mmcc - multimedia conference control tool
5075=iisadmin = iis administration web site
5145=rmonitor_secure -
5190=aol - america-online
5191=aol-1 - americaonline1
5192=aol-2 - americaonline2
5193=aol-3 - americaonline3
5232=sgi-dgl - sgi distributed graphics
5236=padl2sim
5300=hacl-hb - ha cluster heartbeat
5301=hacl-gs - ha cluster general services
5302=hacl-cfg - ha cluster configuration
5303=hacl-probe - ha cluster probing
5304=hacl-local
5305=hacl-test
5308=cfengine -
5321=firehotcker
5376=ms ftp
5400=blade runner, back construction
5401=blade runner, back construction
5402=blade runner, back construction
5432=postgres - postgres database server
5500=hotline server
5510=secureidprop - ace/server services
5512=illusion maker
5520=sdlog - ace/server services
5530=sdserv - ace/server services
5540=sdxauthd - ace/server services
5550=xtcp
5555=serveme
5556=bo
5557=bo
5569=robo-hack
5631=pcanywheredata -
5632=pcanywherestat -
5650=ms ftp port
5680=canna - canna (jap input)
5713=proshareaudio - proshare conf audio
5714=prosharevideo - proshare conf video
5715=prosharedata - proshare conf data
5716=prosharerequest - proshare conf request
5717=prosharenotify - proshare conf notify
5742=wincrash
5800=vnc - virtual network computing
5801=vnc - virtual network computing
5858=netrek[game] - netrek[game]
5900=vnc - virtual network computing
5901=vnc-1 - virtual network computing display
5902=vnc-2 - virtual network computing display
5977=ncd-pref-tcp - ncd preferences
5978=ncd-diag-tcp - ncd diagnostics
5979=ncd-conf-tcp - ncd configuration
5997=ncd-pref - ncd preferences telnet
5998=ncd-diag - ncd diagnostics telnet
5999=ncd-conf - ncd configuration telnet
6000=x11 - x window system
6001=x11:1 - x window server
6002=x11:2 - x window server
6003=x11:3 - x window server
6004=x11:4 - x window server
6005=x11:5 - x window server
6006=x11:6 - x window server
6007=x11:7 - x window server
6008=x11:8 - x window server
6009=x11:9 - x window server
6110=softcm - hp softbench cm
6111=spc - hp softbench sub-process control
6112=dtspcd - dtspcd
6141=meta-corp - meta corporation license manager
6142=aspentec-lm - aspen technology license manager
6143=watershed-lm - watershed license manager
6144=statsci1-lm - statsci license manager - 1
6145=statsci2-lm - statsci license manager - 2
6146=lonewolf-lm - lone wolf systems license manager
6147=montage-lm - montage license manager
6148=ricardo-lm - ricardo north america license manager
6149=tal-pod - tal-pod
6400=the thing
6455=skip-cert-recv - skip certificate receive
6456=skip-cert-send - skip certificate send
6558=xdsxdm -
6660=irc-serv - irc-serv
6661=irc-serv - irc-serv
6662=irc-serv - irc-serv
6663=irc-serv - irc-serv
6664=irc-serv - irc-serv
6665=irc-serv - irc-serv
6666=irc-serv - irc-serv
6667=irc - irc
6668=irc - irc
6669=vampyre
6670=deepthroat
6671=irc-serv - irc-serv
6771=deepthroat
6776=backdoor-g, subseven
6912=shit heep
6939=indoctrination
6969=acmsoda - acmsoda
6970=gatecrasher, priority, irc 3
7000=afsserv - file server itself
7001=unknown - unknown service
7002=unknown - unknown service
7003=afs3-vlserver - volume location database
7004=afs3-kaserver - afs/kerberos authentication service
7005=afs3-volser - volume managment server
7006=afs3-errors - error interpretation service
7007=afs3-bos - basic overseer process
7008=afs3-update - server-to-server updater
7009=afs3-rmtsys - remote cache manager service
7010=ups-onlinet - onlinet uninterruptable power supplies
7100=font-service - x font service
7120=iisadmin = iis administration web site
7121=virprot-lm - virtual prototypes license manager
7200=fodms - fodms flip
7201=dlip - dlip
7300=netmonitor
7301=netmonitor
7306=netmonitor
7307=netmonitor
7308=netmonitor
7309=netmonitor
7326=icb - internet citizen's band
7648=cucme-1 - cucme live video/audio server
7649=cucme-2 - cucme live video/audio server
7650=cucme-3 - cucme live video/audio server
7651=cucme-4 - cucme live video/audio server
7770=irc
7777=cbt - cbt
7789=back door setup, ickiller
8000=generic - shared service port
8001=generic - shared service port
8002=generic - shared service port
8003=generic - shared service port
8004=generic - shared service port
8005=generic - shared service port
8006=generic - shared service port
8007=generic - shared service port
8008=generic - shared service port
8009=generic - shared service port
8010=generic - shared service port
8080=generic - shared service port
8081=generic - shared service port
8082=generic - shared service port
8083=generic - shared service port
8084=generic - shared service port
8085=generic - shared service port
8086=generic - shared service port
8087=generic - shared service port
8088=generic - shared service port
8100=generic - shared service port
8101=generic - shared service port
8102=generic - shared service port
8103=generic - shared service port
8104=generic - shared service port
8105=generic - shared service port
8106=generic - shared service port
8107=generic - shared service port
8108=generic - shared service port
8109=generic - shared service port
8110=generic - shared service port
8181=generic - shared service port
8383=generic - shared service port
8450=npmp - npmp
8765=ultraseek
8807=demos nntp
8888=sitescope - sitescope remote server monitoring
8892=seosload - etrust acx
9000=unknown - unknown service
9001=unknown
9010=service
9090=zeus-admin - zeus admin server
9095=service
9100=jetdirect - hp jetdirect card
9200=wap - wireless application protocol
9201=wap - wireless application protocol
9202=wap - wireless application protocol
9203=wap - wireless application protocol
9400=incommand
9535=man -
9872=portal of doom
9873=portal of doom
9874=portal of doom
9875=portal of doom
9876=sd - session director
9989=ini-killer
9998=demos smtp
9999=distinct - distinct
10005=stel - secure telnet
10067=(udp) - portal of doom
10080=amanda - amanda backup util
10082=amanda-idx - amanda indexing
10083=amidxtape - amanda tape indexing
10101=brainspy
10167=(udp) - portal of doom
10520=acid shivers
10607=coma
11000=senna spy
11223=progenic trojan
11371=pksd - pgp pub. key server
12067=gjamer
12223=hackґ99 keylogger
12345=nb - netbus
12346=gabanbus, netbus, x-bill
12361=whack-a-mole
12362=whack-a-mole
12631=whackjob
13000=senna spy
13326=crossfire[game] - crossfire[game]
16660=stacheldraht master serverd
16969=priority
17007=isode-dua -
17300=kuang2 the virus
18000=biimenu - beckman instruments inc.
20000=millennium
20001=millennium backdoor
20005=btx - xcept4
20034=netbus 2 pro
20203=logged
21544=girlfriend
21845=webphone - webphoned 21846=info server - info server
21847=connect server - connect server
22222=prosiak
22273=wnn6 - wnn6 (jap. input)
22289=wnn6_cn - wnn6 (chi. input)
22305=wnn6_kr - wnn6 (kor. input)
22321=wnn6_tw - wnn6 (tai. input)
23456=evil ftp, ugly ftp , whack job
23476=donald dick
23477=donald dick
24326=netscape server
25000=icl-twobase1 - icl-twobase1
25001=icl-twobase2 - icl-twobase2
25002=icl-twobase3 - icl-twobase3
25003=icl-twobase4 - icl-twobase4
25004=icl-twobase5 - icl-twobase5
25005=icl-twobase6 - icl-twobase6
25006=icl-twobase7 - icl-twobase7
25007=icl-twobase8 - icl-twobase8
25008=icl-twobase9 - icl-twobase9
25009=icl-twobase10 - icl-twobase10
26000=quakexx
26001=quakexx
26002=quakexx
26208=wnn6_ds - wnn6 (dserver)
26274=(udp) - delta source
27119=quakexx
27444=trinoo_bcast - trinoo attack tool
27500=quakexx
27501=quakexx
27502=quakexx
27665=trinoo_master - trinoo attack tool
27910=quakexx
27911=quakexx
27912=quakexx
27913=quakexx
27920=quakexx
27960=quake3server - quake 3 arena server
29891=(udp) - the unexplained
29970=port
30029=aol trojan
30100=netsphere
30101=netsphere
30102=netsphere
30303=sockets de troie
30999=kuang2
31335=trinoo_register - trinoo attack tool
31336=whack
31337=bo - backorifice
31338=netspy dk
31457=tetrinet (tetris game)
31666=bo whack
31785=hackґaґtack
31787=hackґaґtack
31788=hackґaґtack
31789=hackґaґtack (udp)
31791=hackґaґtack (udp)
31792=hackґaґtack
32000=generic - shared service port
33333=prosiak
33911=spirit 2001a
34324=biggluck, tn
40193=netware
40412=the spy
40421=agent 40421, masters paradise
40422=masters paradise
40423=masters paradise
40426=masters paradise
43188=reachout -
44333=winroute
47262=(udp) - delta source
47557=dbbrowse - databeam corporation
50505=sockets de troie
50766=fore , schwindler
53001=remote window shutdown
54320=bo 2k
54321=schoolbus
60000=deep throat
61466=telecommando
65000=devil
65301=pcanywhere