Commonly Used Ports

[TwistedSnyper]

This Is Not For Hacking....This is for your own knowledge





Common Windows Ports



Port Usage Notes

20 FTP Data Only used as a source port
21 FTP Control
22 Secure Shell Remote login on OS X
23 Telnet Common port for attacks
25 SMTP (email) Send Anonymous E-mail
53 DNS Mainly uses UDP, not TCP
70 Gopher
79 Finger
80 HTTP (Web)
88 Kerberos
105 PH (directory)
106 Poppass (change password)
110 POP3 (email)
111 Remote Procedure Call Used for many Unix applications
113 AUTH
119 NNTP (News)
139 NETBIOS Session Windows access (ASIP 6)
143 IMAP (new email)
311 AppleShare Web Admin ASIP Tech note ASIP 6.1 and later
384 ARNS (tunneling)
387 AURP (tunneling)
389 LDAP (directory)
407 Timbuktu 5.2 or later Netopia technote Previous versions use other ports
427 SLP (service location) Only uses TCP for large responses
443 SSL (HTTPS) Draft
497 Retrospect UDP for finding clients
510 FirstClass server SoftArc
515 LPR (printing)
548 AFP (AppleShare)
554 RTSP (QuickTime server) Apple tech note Also uses UDP 6970+
591 FileMaker Pro Web FileMaker tech note Recommended alternate to 80
626 IMAP Admin Apple extension in ASIP 6
631 IPP (Internet Printing Protocol)
4443 AOL Instant Messenger direct connection
5003 FileMaker Pro FileMaker
5190 AOL Instant Messenger
5498 Hotline Tracker Hotline tech note UDP port 5499 for finding servers
6699 Napster/Macster client Apparent Used when server is in "firewall mode"
7070 Real Player
8080 Common HTTP alternate
19813 4D server ACI US



UDP Services used by Macs

Port Usage Notes

53 DNS Sometimes uses TCP
68 Dynamic Host Configuration Protocol used to obtain a Mac's IP
69 Trivial File Transfer Protocol
123 Network Time Protocol
137 Windows Name Service
138 Windows Datagram Service
161 Simple Network Management Protocol (SNMP)
458 QuickTime TV
497 Retrospect Finding clients on the network
514 Syslog
554 Real Time Streaming Protocol (QuickTime)
2049 Network File System (NFS)
3283 Apple Network Assistant TIL Note
5003 FileMaker Pro FileMaker tech note For obtaining host list
6970 QuickTime and RealPlayer TIL Note
7070 RTSP alternate (RealPlayer) Support Note

[MemorY]

Twisted Tx a lot ...now we wont have anyone askin "hey i got a #22 port open .is this a dangerous port ?... lol ...nice job

[TwistedSnyper]

No problem Memory. Yai i was gettin tired of that stuff too. So there u go if they ask about ports direct them to my tut.

[Syini666]

Thats a good list to start out with, but if you really want to know the full list of ports, check out RFC 1700 (http://www.rfc-editor.org/rfc/rfc1700.txt) for an exhaustive list of ports and the apps/services that use them. The RFC is a bit outdated, but still reasonably useful. lol, and as for the open ports comment, just about any open port is a danger really, because no program is perfect or completely secure, but that is besides the point. Also, the RFC is rather large, and contains more than just the port list, so don't open it and just hit print otherwise your going to have a huge pile of paper.

[VizjereiMage]

Good Work Twisted ;)Good Work Twisted ;)

[mark_boyle2002]

Excuse the poor formatting and popups due to the free host i am using but I have put a full list of registered ports on my website.

http://itdepartment.0catch.com

[Shrekkie]

This is IMO the best available port-list out there :

http://www.iana.org/assignments/port-numbers

Greetz,

[Magic-Guy]

Thnx man :) i have been searching for this list ...and thnx 2 mark_boyle2002 :*

[Lv4]

.:Shrekkie:. - yup that's perhaps the best list I have found out there for port numbers assignment.

Also, as Soggybottom pointed out on another thread, don't take those lists as the end all of what is running on those ports. Just about anything can be listening on any port, these are the lists of what SHOULD be running there. It's always a good idea to double check if in doubt.

[tonybradley]

I have always liked Kurt Seifried's list

TCP UDP Ports (http://www.seifried.org/security/ports/)

[thehorse13]

If you have a *nix box, a quick and dirty way to get this NFO is to view the /etc/services file.

--TH13

[Nimh]

Here is a port list from ISS:

http://www.iss.net/security_center/advice/Exploits/Ports/

Note quite as exhaustive as some of the others, but a the ports are listed in order.

~Nimh

[d00dz Attackin]

Great post :thumbsup:. Very usefull information. I have a site (very usefull because it give you information about each one) that has frequently seen TCP and UDP http://www.parkerpc.com/reference/trojanports.html ENJOY!!!. I can see you worked very hard on this, AWESOME Post. :). Am looking forward in seeing you post again.
Cya --d00dz AtTaCkiN--

[phishphreek]

Originally posted here (http://www.AntiOnline.com/showthread.php?threadid=#post) by thehorse13
If you have a *nix box, a quick and dirty way to get this NFO is to view the /etc/services file.

--TH13

I was just getting ready to post that.

You can also find these in Windows... but not all of them are in there.
When you install a new program, it will modify this file if the service is not already listed.

That can be found in

9x/ME
%systemdrive%\%systemroot%\services

example C:\WINDOWS\SERVICES

NT/2k/XP

%systemdrive%\%systemroot%\system32\drivers\etc\services
(for some reason... the formatting on this line is messed up and I can't fix it...)
example C:\WINNT\SYSTEM32\DRIVERS\ETC\SERVICES

You can view these without editing them...
from command prompt..

c:> type c:\winnt\system32\drivers\etc\services | more

yada yada yada...

[anjali]

how can we block the ports running on the server... ..

I use nmap to scan for open ports... it shows various ports like eg 10235.. now hw do i block this port.......

Regards

Anjali

[Sadpterpan]

There is a neat little help file out there somewhere I forget the link but if I find it i'll post, the filenames are: portref1.zip & portref2.zip. These contain a neat .chm help file that is a port lookup and port reference. find these if you need a good ref to ports.