TCP Port 901 – smpnameres
TCP port 901 is assigned to smpnameres by IANA. Referenced in 2035 IDS rules, with moderate malware activity observed in monitored traffic.
Reference information for TCP and UDP network ports, including service assignments, IDS rule references, malware activity indicators, and security context.
UDP Port 664 – asf-secure-rmcp
UDP port 664 is assigned to asf-secure-rmcp by IANA. Referenced in 1 IDS rule, with no notable malware activity in monitored traffic.
TCP Port 902 – ideafarm-door
TCP port 902 is assigned to ideafarm-door by IANA. Referenced in 1 IDS rule, with low malware activity observed in monitored traffic.
TCP Port 666 – doom
TCP port 666 is assigned to doom by IANA. Referenced in 6 IDS rules, with high malware activity observed in monitored traffic.
TCP Port 972
TCP port 972 has no IANA registration but appears in 2048 IDS rules, with moderate malware activity observed in monitored traffic.
UDP Port 666 – doom
UDP port 666 is assigned to doom by IANA. Referenced in 1 IDS rule, with low malware activity observed in monitored traffic.
TCP Port 989 – ftps-data
TCP port 989 is assigned to ftps-data by IANA. Referenced in 5 IDS rules, with no notable malware activity in monitored traffic.
TCP Port 705 – agentx
TCP port 705 is assigned to agentx by IANA. Referenced in 1 IDS rule, with no notable malware activity in monitored traffic.
TCP Port 990 – ftps
TCP port 990 is assigned to ftps by IANA. Referenced in 5 IDS rules, with no notable malware activity in monitored traffic.
TCP Port 749 – kerberos-adm
TCP port 749 is assigned to kerberos-adm by IANA. Referenced in 6 IDS rules, with no notable malware activity in monitored traffic.
TCP Port 751 – pump
TCP port 751 is assigned to pump by IANA. Referenced in 6 IDS rules, with no notable malware activity in monitored traffic.
TCP Port 587 – SMTP Submission (Authenticated Mail Sending)
Port 587 is the standard port for authenticated message submission, the dedicated channel email clients use to hand outgoing mail to a mail provider for
TCP Port 777 – multiling-http
TCP port 777 is assigned to multiling-http by IANA. Referenced in 3 IDS rules, with low malware activity observed in monitored traffic.
UDP Port 587 – SMTP Submission (Authenticated Mail Sending)
UDP port 587 is assigned to submission by IANA. Referenced in 0 IDS rules, with no notable malware activity in monitored traffic.
TCP Port 778
TCP port 778 has no IANA registration but appears in 3 IDS rules, with low malware activity observed in monitored traffic.
TCP Port 591 – http-alt
TCP port 591 is assigned to http-alt by IANA. Referenced in 2035 IDS rules, with moderate malware activity observed in monitored traffic.
TCP Port 801 – device
TCP port 801 is assigned to device by IANA. Referenced in 2035 IDS rules, with moderate malware activity observed in monitored traffic.
UDP Port 389 – LDAP (Lightweight Directory Access Protocol)
UDP port 389 is assigned to ldap by IANA. Referenced in 1 IDS rule, with no notable malware activity in monitored traffic.
TCP Port 500 – ISAKMP / IKE (IPsec Key Exchange)
Port 500 is the standard port for IKE (Internet Key Exchange), the protocol that IPsec VPN endpoints use to negotiate the cryptographic keys and security
TCP Port 427 – svrloc
TCP port 427 is assigned to svrloc by IANA. Referenced in 1 IDS rule, with no notable malware activity in monitored traffic.
UDP Port 500 – ISAKMP / IKE (IPsec Key Exchange)
UDP port 500 is assigned to isakmp by IANA. Referenced in 23 IDS rules, with no notable malware activity in monitored traffic.
UDP Port 427 – svrloc
UDP port 427 is assigned to svrloc by IANA. Referenced in 1 IDS rule, with no notable malware activity in monitored traffic.
TCP Port 512 – exec
TCP port 512 is assigned to exec by IANA. Referenced in 3 IDS rules, with no notable malware activity in monitored traffic.
TCP Port 442 – cvc-hostd
TCP port 442 is assigned to cvc-hostd by IANA. Referenced in 1 IDS rule, with low malware activity observed in monitored traffic.
TCP Port 513 – login
TCP port 513 is assigned to login by IANA. Referenced in 8 IDS rules, with no notable malware activity in monitored traffic.
TCP Port 443 – HTTPS (HTTP over TLS)
Port 443 is the standard port for HTTPS, the encrypted version of the Hypertext Transfer Protocol.
TCP Port 514 – syslog / rsh (Network Logging / Legacy Remote Shell)
Port 514 is one of the few ports that registers two genuinely different protocols, one per transport.
UDP Port 443 – HTTPS (HTTP over TLS)
UDP port 443 is assigned to https by IANA. Referenced in 3 IDS rules, with low malware activity observed in monitored traffic.
UDP Port 514 – syslog / rsh (Network Logging / Legacy Remote Shell)
UDP port 514 is assigned to syslog by IANA. Referenced in 0 IDS rules, with no notable malware activity in monitored traffic.
TCP Port 444 – snpp
TCP port 444 is assigned to snpp by IANA. Referenced in 2 IDS rules, with no notable malware activity in monitored traffic.
TCP Port 515 – printer
TCP port 515 is assigned to printer by IANA. Referenced in 4 IDS rules, with no notable malware activity in monitored traffic.
TCP Port 445 – SMB / Microsoft-DS (Windows File Sharing)
Port 445 is the primary port for SMB, the Server Message Block protocol that Windows networks use for file sharing, printer sharing
UDP Port 518 – ntalk
UDP port 518 is assigned to ntalk by IANA. Referenced in 1 IDS rule, with no notable malware activity in monitored traffic.
UDP Port 445 – SMB / Microsoft-DS (Windows File Sharing)
UDP port 445 is assigned to microsoft-ds by IANA. Referenced in 1 IDS rule, with no notable malware activity in monitored traffic.
TCP Port 541 – uucp-rlogin
TCP port 541 is assigned to uucp-rlogin by IANA. Referenced in 6 IDS rules, with no notable malware activity in monitored traffic.
TCP Port 446 – ddm-rdb
TCP port 446 is assigned to ddm-rdb by IANA. Referenced in 1 IDS rule, with low malware activity observed in monitored traffic.
TCP Port 547 – dhcpv6-server
TCP port 547 is assigned to dhcpv6-server by IANA. Referenced in 1 IDS rule, with low malware activity observed in monitored traffic.
TCP Port 447 – ddm-dfm
TCP port 447 is assigned to ddm-dfm by IANA. Referenced in 5 IDS rules, with high malware activity observed in monitored traffic.
TCP Port 548 – afpovertcp
TCP port 548 is assigned to afpovertcp by IANA. Referenced in 1 IDS rule, with no notable malware activity in monitored traffic.
TCP Port 449 – as-servermap
TCP port 449 is assigned to as-servermap by IANA. Referenced in 4 IDS rules, with low malware activity observed in monitored traffic.
TCP Port 554 – rtsp
TCP port 554 is assigned to rtsp by IANA. Referenced in 2 IDS rules, with no notable malware activity in monitored traffic.
TCP Port 457 – scohelp
TCP port 457 is assigned to scohelp by IANA. Referenced in 1 IDS rule, with no notable malware activity in monitored traffic.
TCP Port 555 – dsf
TCP port 555 is assigned to dsf by IANA. Referenced in 2036 IDS rules, with moderate malware activity observed in monitored traffic.
TCP Port 465 – SMTPS (Implicit-TLS Mail Submission)
Port 465 is the standard port for SMTPS, mail submission over an implicit TLS connection.
UDP Port 465 – SMTPS (Implicit-TLS Mail Submission)
UDP port 465 is assigned to igmpv3lite by IANA. Referenced in 0 IDS rules, with no notable malware activity in monitored traffic.
TCP Port 488 – gss-http
TCP port 488 is assigned to gss-http by IANA. Referenced in 8 IDS rules, with high malware activity observed in monitored traffic.
TCP Port 139 – NetBIOS Session Service (SMB over NetBIOS)
Port 139 is the standard port for the NetBIOS Session Service, the connection-oriented half of the original NetBIOS networking stack on which Windows file
UDP Port 139 – NetBIOS Session Service (SMB over NetBIOS)
UDP port 139 is assigned to netbios-ssn by IANA. Referenced in 1 IDS rule, with no notable malware activity in monitored traffic.
TCP Port 143 – IMAP (Internet Message Access Protocol)
Port 143 is the standard port for IMAP, the Internet Message Access Protocol.
UDP Port 143 – IMAP (Internet Message Access Protocol)
UDP port 143 has no IANA registration but appears in 0 IDS rules, with no notable malware activity observed in monitored traffic.
UDP Port 111 – sunrpc / portmap (RPC Service Directory)
UDP port 111 is assigned to sunrpc by IANA. Referenced in 32 IDS rules, with no notable malware activity in monitored traffic.
TCP Port 146 – iso-tp0
TCP port 146 is assigned to iso-tp0 by IANA. Referenced in 1 IDS rule, with low malware activity observed in monitored traffic.
TCP Port 113 – auth
TCP port 113 is assigned to auth by IANA. Referenced in 2 IDS rules, with no notable malware activity in monitored traffic.
TCP Port 159 – nss-routing
TCP port 159 is assigned to nss-routing by IANA. Referenced in 1 IDS rule, with low malware activity observed in monitored traffic.
TCP Port 117 – uucp-path
TCP port 117 is assigned to uucp-path by IANA. Referenced in 1 IDS rule, with low malware activity observed in monitored traffic.
TCP Port 161 – SNMP (Simple Network Management Protocol)
Port 161 is the standard port for SNMP, the Simple Network Management Protocol that network monitoring systems use to query and manage network-attached devices.
TCP Port 119 – nntp
TCP port 119 is assigned to nntp by IANA. Referenced in 13 IDS rules, with no notable malware activity in monitored traffic.
UDP Port 161 – SNMP (Simple Network Management Protocol)
UDP port 161 is assigned to snmp by IANA. Referenced in 14 IDS rules, with no notable malware activity in monitored traffic.
TCP Port 133 – statsrv
TCP port 133 is assigned to statsrv by IANA. Referenced in 1 IDS rule, with low malware activity observed in monitored traffic.
TCP Port 162 – SNMP Trap (Asynchronous Notifications)
Port 162 is the standard receiver port for SNMP traps, the asynchronous notification messages that managed network devices send to a designated SNMP manager.
TCP Port 135 – epmap
TCP port 135 is assigned to epmap by IANA. Referenced in 10 IDS rules, with no notable malware activity in monitored traffic.
UDP Port 162 – SNMP Trap (Asynchronous Notifications)
UDP port 162 is assigned to snmptrap by IANA. Referenced in 5 IDS rules, with no notable malware activity in monitored traffic.
UDP Port 135 – epmap
UDP port 135 is assigned to epmap by IANA. Referenced in 8 IDS rules, with no notable malware activity in monitored traffic.
UDP Port 177 – xdmcp
UDP port 177 is assigned to xdmcp by IANA. Referenced in 2 IDS rules, with no notable malware activity in monitored traffic.
TCP Port 136 – profile
TCP port 136 is assigned to profile by IANA. Referenced in 1 IDS rule, with no notable malware activity in monitored traffic.
TCP Port 179 – bgp
TCP port 179 is assigned to bgp by IANA. Referenced in 3 IDS rules, with no notable malware activity in monitored traffic.
TCP Port 137 – NetBIOS Name Service (NetBIOS-NS)
Port 137 is the standard port for the NetBIOS Name Service, the component of the legacy NetBIOS protocol suite responsible for name resolution on local
TCP Port 189 – qft
TCP port 189 is assigned to qft by IANA. Referenced in 1 IDS rule, with low malware activity observed in monitored traffic.
UDP Port 137 – NetBIOS Name Service (NetBIOS-NS)
UDP port 137 is assigned to netbios-ns by IANA. Referenced in 6 IDS rules, with no notable malware activity in monitored traffic.
TCP Port 311 – asip-webadmin
TCP port 311 is assigned to asip-webadmin by IANA. Referenced in 2035 IDS rules, with moderate malware activity observed in monitored traffic.
TCP Port 138 – netbios-dgm
TCP port 138 is assigned to netbios-dgm by IANA. Referenced in 1 IDS rule, with no notable malware activity in monitored traffic.
TCP Port 383 – hp-alarm-mgr
TCP port 383 is assigned to hp-alarm-mgr by IANA. Referenced in 2035 IDS rules, with moderate malware activity observed in monitored traffic.
UDP Port 138 – netbios-dgm
UDP port 138 is assigned to netbios-dgm by IANA. Referenced in 2 IDS rules, with no notable malware activity in monitored traffic.
TCP Port 389 – LDAP (Lightweight Directory Access Protocol)
Port 389 is the standard port for LDAP, the Lightweight Directory Access Protocol used to query and update directory services across a network.
TCP Port 68 – DHCP Client (Dynamic Host Configuration Protocol)
Port 68 is the client-side counterpart to port 67 in the Dynamic Host Configuration Protocol (DHCP) exchange.
TCP Port 104 – acr-nema
TCP port 104 is assigned to acr-nema by IANA. Referenced in 2 IDS rules, with low malware activity observed in monitored traffic.
UDP Port 68 – DHCP Client (Dynamic Host Configuration Protocol)
UDP port 68 is assigned to bootpc by IANA. Referenced in 5 IDS rules, with no notable malware activity in monitored traffic.
TCP Port 110 – POP3 (Post Office Protocol version 3)
Port 110 is the standard port for POP3, the Post Office Protocol version 3.
UDP Port 69 – tftp
UDP port 69 is assigned to tftp by IANA. Referenced in 12 IDS rules, with no notable malware activity in monitored traffic.
UDP Port 110 – POP3 (Post Office Protocol version 3)
UDP port 110 is assigned to pop3 by IANA. Referenced in 0 IDS rules, with no notable malware activity in monitored traffic.
TCP Port 70 – gopher
TCP port 70 is assigned to gopher by IANA. Referenced in 1 IDS rule, with no notable malware activity in monitored traffic.
TCP Port 111 – sunrpc / portmap (RPC Service Directory)
Port 111 is the standard port for the portmap service (also called rpcbind in modern implementations)
TCP Port 79 – finger
TCP port 79 is assigned to finger by IANA. Referenced in 16 IDS rules, with moderate malware activity observed in monitored traffic.
TCP Port 81
TCP port 81 has no IANA registration but appears in 2050 IDS rules, with moderate malware activity observed in monitored traffic.
TCP Port 82 – xfer
TCP port 82 is assigned to xfer by IANA. Referenced in 2036 IDS rules, with moderate malware activity observed in monitored traffic.
TCP Port 83 – mit-ml-dev
TCP port 83 is assigned to mit-ml-dev by IANA. Referenced in 2035 IDS rules, with moderate malware activity observed in monitored traffic.
TCP Port 36
TCP port 36 has no IANA registration but appears in 2035 IDS rules, with moderate malware activity observed in monitored traffic.
TCP Port 84 – ctf
TCP port 84 is assigned to ctf by IANA. Referenced in 2036 IDS rules, with moderate malware activity observed in monitored traffic.
TCP Port 42 – name
TCP port 42 is assigned to name by IANA. Referenced in 3 IDS rules, with no notable malware activity in monitored traffic.
TCP Port 85 – mit-ml-dev
TCP port 85 is assigned to mit-ml-dev by IANA. Referenced in 2035 IDS rules, with moderate malware activity observed in monitored traffic.
UDP Port 42 – name
UDP port 42 is assigned to name by IANA. Referenced in 1 IDS rule, with no notable malware activity in monitored traffic.
TCP Port 86 – mfcobol
TCP port 86 is assigned to mfcobol by IANA. Referenced in 2035 IDS rules, with moderate malware activity observed in monitored traffic.
UDP Port 49 – tacacs
UDP port 49 is assigned to tacacs by IANA. Referenced in 4 IDS rules, with no notable malware activity in monitored traffic.
TCP Port 87
TCP port 87 has no IANA registration but appears in 2035 IDS rules, with moderate malware activity observed in monitored traffic.
TCP Port 53 – DNS (Domain Name System)
Port 53 is the standard port for DNS, the Domain Name System that translates human-readable domain names like example.
TCP Port 88 – kerberos
TCP port 88 is assigned to kerberos by IANA. Referenced in 2037 IDS rules, with moderate malware activity observed in monitored traffic.
UDP Port 53 – DNS (Domain Name System)
UDP port 53 is assigned to domain by IANA. Referenced in 61 IDS rules, with high malware activity observed in monitored traffic.
UDP Port 88 – kerberos
UDP port 88 is assigned to kerberos by IANA. Referenced in 1 IDS rule, with low malware activity observed in monitored traffic.
TCP Port 67 – DHCP Server (Dynamic Host Configuration Protocol)
Port 67 is the standard server-side port for the Dynamic Host Configuration Protocol (DHCP), the technology that automatically assigns IP addresses
TCP Port 89 – su-mit-tg
TCP port 89 is assigned to su-mit-tg by IANA. Referenced in 2035 IDS rules, with moderate malware activity observed in monitored traffic.