System Ports

Sun Answerbook & Alt HTTP

Port 8888 historically hosted Sun Microsystems' AnswerBook DWhttpd server, a technical documentation platform. Nowadays, it is more frequently utilized as an unofficial alternative HTTP port to circumvent conflicts with standard port 80, or to obscure the service slightly. While Sun's original protocol is obsolete, this port remains widely active, mainly for web services, development environments, or embedded system interfaces.

Google Desktop Search

Port 4664 is primarily associated with Google Desktop Search, an application developed by Google to index and enable quick search functionality over a user's local files and emails. This port facilitates communication and management of search queries between the user interface and the local indexing service. Though Google Desktop was discontinued, references to this port can still be found in legacy environments or within archived software setups.

IBM HTTP Server Admin

**IBM HTTP Server** (IHS) uses port 8008 as a default port for administrative access. This port facilitates management, monitoring, and configuration of the server remotely through a web-based interface or command-line tools. Admins leverage this port to control and maintain Apache-based HTTP servers optimized by IBM, which are often part of larger enterprise web infrastructure deployments.

Microsoft Global Catalog (GC)

Port 3268 is primarily used by Microsoft Domain Controllers to provide access to the Global Catalog service. This service allows fast searches across an entire Active Directory forest using LDAP. It contains a partial, read-only replica of all objects in the directory, facilitating user logins, address book lookups, and efficient query capabilities in large, multi-domain environments.

Microsoft EPMAP

Microsoft Endpoint Mapper (EPMAP), commonly operating on port 135, serves as the RPC (Remote Procedure Call) locator service. It allows clients to identify network services available on a Windows host, facilitating communication with components like DHCP, DNS, WINS, and Distributed Component Object Model (DCOM). By mapping UUIDs to network addresses, EPMAP acts as a directory, enabling dynamic discovery of RPC services essential for remote management and inter-process communication in Windows environments.

WebSphere HTTP Transport (default)

Port 9080 is commonly used by IBM WebSphere Application Server's HTTP Transport as the default HTTP listener port. It facilitates web-based communication between clients and the application server, typically used to serve dynamic content, REST/SOAP APIs, or facilitate internal administrative functions during development and testing phases.

Telnet

_Telnet is an unencrypted, text-based protocol operating over TCP port 23, primarily utilized for remote command-line access to network equipment and servers. Its simplicity allows administrators to manage systems by directly interfacing with their command-line shells; however, due to the lack of security features such as encryption and strong authentication, it has largely been superseded by more secure alternatives._

NSClient Monitoring Agent

NSClient++ (also known as NSClient or NC_Net Client) is a monitoring agent designed primarily to extend the functionality of popular network monitoring solutions such as Nagios, OP5, and Opsview. It enables the collection, aggregation, and distribution of performance metrics, health status information, and service checks from Windows-based systems, facilitating comprehensive infrastructure monitoring.

Symon Event Engine

Symon Communications Event and Query Engine operates over HTTP, enabling event delivery, monitoring, and query capabilities for enterprise communication systems. It's primarily used within Symon software solutions for managing real-time data feeds, alerts, and communication workflows, often in environments needing rapid message dissemination and operational insight.

Radmin Remote Administration

Radmin is a remote control software solution for remote desktop management and access. It enables administrators and users to connect to remote computers for tasks such as troubleshooting, configuration, or support. While primarily used for legitimate remote administration, its powerful capabilities have also made it a tool of choice exploited by cybercriminals and malware, frequently associated with unauthorized access if not properly secured.

WebSphere Admin Console (SSL)

Port 9043 is primarily used for secure access (SSL) to the IBM WebSphere Application Server's administrative console. It allows administrators to manage server configurations, deploy applications, monitor server status, and perform troubleshooting tasks through an encrypted web interface.

Iperf

Iperf is a widely used network benchmarking tool designed to measure the maximum achievable bandwidth on IP networks. Supporting both TCP and UDP protocols, Iperf enables detailed network performance assessments, including throughput, delay, jitter, and data loss statistics. It’s commonly utilized by network administrators and engineers to diagnose network bottlenecks and optimize performance across various network topologies.

Reverse Gossip Transport Protocol (RGTP)

RGTP is a protocol designed to facilitate access to the General-purpose Reverse-Ordered Gossip Gathering System (GROGGS), a bulletin board service initially developed at Cambridge University. It allows users to retrieve, post, and manage discussion threads in a reverse chronological order, maximizing the relevance of recent gossip messages within the academic community's Phoenix system.

BMC Control-M Server

Port 6005 is primarily used by BMC Software's Control-M, a workload automation tool that orchestrates batch jobs across diverse enterprise systems. This port serves as the default communication socket between various Control-M server processes, though administrators can customize it during installation. Control-M's use of this port enables efficient job scheduling, monitoring, and inter-process communication, helping ensure smooth and reliable execution of complex automation workflows.

Freeciv

Port 5555 is unofficially associated with the popular free and open-source turn-based strategy game Freeciv, along with services such as Hewlett-Packard Data Protector, McAfee EndPoint Encryption Database Server, and SAP applications. Primarily, Freeciv uses this port for network gameplay sessions, where players connect to dedicated servers enabling multiplayer matches across various systems.

Mac OS X Server Web Cache

Port 16080 is commonly associated with Apple's Mac OS X Server and typically used for the HTTP service featuring a performance cache. This optimizes web content delivery, reducing server load and enhancing end-user experience through accelerated caching mechanisms. Though unofficial, it functions similarly to standard web service ports but is tailored for Apple's server environment.

Dell OpenManage

Dell OpenManage HTTPS service listens on port 1311 to provide administrators with secure access to Dell servers' management consoles. It utilizes HTTPS encryption to ensure communication confidentiality and typically facilitates hardware monitoring, firmware updates, status alerts, and remote server administration via a web interface. This port is essential for managing Dell PowerEdge servers using Dell OpenManage Server Administrator (OMSA).

HTTP RPC Endpoint Mapper

Port 593 is primarily used for Remote Procedure Call (RPC) communications over HTTP, facilitating DCOM (Distributed Component Object Model) services within Microsoft ecosystems. It enables client-server communication, component activation, and method invocation, typically in distributed enterprise applications and Exchange servers. Since it multiplexes RPC traffic over HTTP, it also helps traverse firewall restrictions while maintaining interoperability between networked services.

Commplex-Link

**Commplex-Link** is a port commonly utilized for generic network communication by various embedded devices and legacy systems. While initially registered for specific communication hardware, many software applications repurpose this port for diagnostic interfaces, proprietary protocols, and testing network throughput.

Men & Mice DNS

Men & Mice DNS services enable centralized, unified management of complex DNS infrastructures, integrating traditional DNS with modern network demands. This port facilitates DNS protocol communication specific to Men & Mice products, supporting efficient IP address management and enhancing visibility over DNS traffic.

Applix TM1 Admin

Port 5495 is primarily used by the Applix TM1 Admin server, which is part of IBM's Cognos TM1 suite for enterprise planning, budgeting, and forecasting solutions. This port facilitates administrative communications with TM1 server instances, enabling configuration, model management, and service orchestration for business intelligence workflows.

WebSphere SOAP Connector

The WebSphere Application Server uses port 8880 by default to enable SOAP-based communication between clients and the server. This connector facilitates remote management, deployment, and configuration interfaces using SOAP, a common protocol supporting structured information exchange. It primarily assists in integrating administrative tools and automated systems with WebSphere's application management capabilities.

Mac OS X Server Admin

Port 311 was historically used by Mac OS X Server's Admin tool, which provided a web-based management interface for AppleShare IP services. This allowed system administrators to configure and control server-side functions, including file sharing, web services, and user management, from any standard web browser with appropriate authentication. Over time, its utility diminished as Apple transitioned to new server management paradigms.

Mac OS X Server Admin

Port 660 is utilized primarily for the remote management and administration of Mac OS X Server instances. It serves as a communication endpoint for macOS administrators to configure, monitor, and troubleshoot macOS server systems. This port helps facilitate administrative access and management functions, often through dedicated Apple utilities or command-line tools.

Cisco XRemote

Port 9001 is traditionally associated with Cisco's XRemote router configuration, primarily utilized for device management and remote console access over serial interfaces. It facilitates administrative operations on Cisco routers, providing a means to configure, troubleshoot, and maintain network infrastructure remotely, especially in legacy network environments.

Kerberos Admin

**Kerberos administration** typically uses port 749 to perform administrative tasks such as managing principals, policies, and key databases within a Kerberos authentication infrastructure. This port facilitates secure and centralized identity management for distributed network environments.

Webmin

Webmin is a web-based system configuration tool designed for Unix-like systems, allowing administrators to manage server functions through an intuitive web interface rather than command-line operations.

MIT ML Device

Port 83 is allocated to the MIT ML Device protocol, historically associated with early MIT research networking hardware. While not widely adopted in modern production environments, it sometimes appears in legacy systems or specialized academic projects. Due to its limited current use, detailed information is sparse, but it represents an example of early experimental network protocol assignments.

WebSphere Admin Console

The WebSphere Application Server Administration Console is a web-based interface that allows administrators to configure, deploy, monitor, and manage applications and resources on IBM WebSphere servers. It plays a critical role in enterprise environments running Java EE applications.

Microsoft-DS / SMB

Port 445 is primarily used for Microsoft Directory Services (Microsoft-DS), supporting file sharing, printer sharing, and access to Active Directory via the Server Message Block (SMB) protocol over TCP. It has replaced older NetBIOS ports, facilitating more efficient direct communication, and is widely deployed across Windows environments for seamless network resource access.

IBM Netcool Impact HTTP

Port 5104 is primarily used by IBM Tivoli Netcool/Impact, a key policy-driven analytics and event management component within the IBM Tivoli system management suite. It typically hosts an HTTP service for receiving API calls, handling event processing, and integrating operational data to support real-time decision-making and automation.

eklogin Kerberos Remote Login

Port 2105 is used by eklogin, a version of the classic Unix remote login (rlogin) service that incorporates Kerberos encryption. It facilitates secure, authenticated remote terminal access by leveraging Kerberos to verify user identities and encrypt the login session. This port aims to provide a safer alternative to traditional rlogin, reducing risks from credential exposure and session hijacking over untrusted networks.

Samba Web Admin (SWAT)

The Samba Web Administration Tool (SWAT) is a web-based graphical interface designed to simplify the configuration and management of Samba servers. It provides administrators with an accessible means to configure Samba shares, manage users, and adjust server settings directly from a browser, easing tasks that would otherwise require manual editing of configuration files.

TheosNet-Admin

TheosNet-Admin on port 2501 facilitates communication for The sMessenger client connections. This service enables administrative management and instant messaging functionalities within Theos systems, serving both as a command and control interface and messaging relay point.

Miralix Phone Monitor

Miralix Phone Monitor is typically used in conjunction with call center and telephony solutions to monitor, control, and manage interactions across multiple communication channels. It facilitates the integration of telephony events, allowing tracking and oversight of phone use within enterprise environments.

IBM Tivoli Monitoring

IBM Tivoli Monitoring Console over HTTPS provides a secure, web-based interface for monitoring and managing IT resources across an enterprise. It enables IT administrators to observe system health, performance, and application status, facilitating proactive management of hardware and software assets.

SMB over Microsoft-DS

Port 445 is primarily used for Microsoft Directory Services (Microsoft-DS), which facilitates file sharing, network browsing, and network communication via the Server Message Block (SMB) protocol over TCP/IP without requiring NetBIOS. It is essential for Windows-based file and printer sharing and is widely used in corporate environments for resource sharing and network management.

Remote Administrator

Port 3899 is primarily associated with Remote Administrator (Radmin), a remote desktop software suite by Famatech. It provides tools for remote management, technical support, and system administration, allowing administrators to securely control and access remote computers over a network or the internet.

QTSS Admin

Port 1220 is primarily used for administrative access to Apple’s QuickTime Streaming Server (QTSS). This port allows system administrators to manage streaming media services, configure server settings, and monitor streaming activities. Given its role, it is typically restricted to trusted network segments and secured against unauthorized access.

Remote Web Workplace

Remote Web Workplace (RWW) is a Microsoft web-based portal enabling remote access for administrators and users to internal resources such as desktops, email, and file shares. Typically integrated with Windows Small Business Server, it provides a central, browser-based interface designed to simplify connectivity and management tasks for offsite personnel.

ASF-RMCP

ASF Remote Management and Control Protocol (ASF-RMCP) is a standardized protocol enabling remote monitoring, management, and control of computer systems and devices at the platform hardware level. Primarily used by IT administrators, ASF-RMCP facilitates out-of-band management for devices regardless of their operating system status, making it valuable for maintenance, troubleshooting, and asset administration.

Xadmin Control Daemon

Xadmin Control Daemon is a network service typically employed for managing system configurations, device administration, or internal service management. It provides administrators remote capabilities to monitor, control, and update system parameters via both TCP and UDP protocols. While not a widely standardized service, it enables flexible network management that can be adapted by different organizations based on their internal needs.

AppleTalk Routing

AppleTalk Routing Maintenance (RTMP) port is used for maintaining and updating routing tables within AppleTalk networks. This service facilitates route discovery, management, and the dissemination of route updates ensuring seamless data delivery across interconnected Apple devices. Primarily, it helps routers to advertise their network reachability and adapt to topology changes dynamically.

Modbus Protocol

Port 502 is primarily associated with Modbus, a widely used industrial automation protocol. It facilitates communication between supervisory computers, controllers, and field devices like PLCs over TCP/IP networks.

Zephyr Notification Service (hm-serv)

Port 2105 is utilized for the Zephyr Notification Service, specifically for Project Athena, facilitating communication with the host manager service (hm-serv). Although port 2102 is the preferred port for such communication, port 2105 might be encountered in certain configurations or legacy setups to support messaging and notification delivery within academic or research environments originally developed at MIT.

BMC Control-M Server-Agent

Port 7006 is the default communication port used by BMC Software's Control-M for coordination between the Control-M/Server and the Control-M/Agent during workload automation processes. It facilitates seamless job scheduling, monitoring, and management within enterprise IT environments, although administrators often customize the port during installation for security and operational reasons.

Netnews Administration System

**NAS (Netnews Administration System)** is a protocol designed to manage and facilitate the administration of Usenet newsgroups, allowing for efficient control of news server configurations, moderation settings, and distribution policies. Operating over both TCP and UDP, it assists administrators in maintaining the integrity and smooth operation of news distribution networks.

BMC Control-M Server

Port 2370 is the default communication channel for the BMC Control-M automation suite, specifically enabling connectivity between the Control-M/Enterprise Manager and the Control-M/Server components. This port facilitates scheduling operations, job status updates, and overall orchestration within enterprise batch workloads. While the default is port 2370, organizations often customize it during installation to align with their network policies.

Opsware Satellite

Port 3001 is primarily associated with Opsware Satellite Servers, a component of the Opsware (later HP Server Automation) suite for managing large-scale server infrastructures. This port typically facilitates remote management and automation tasks, enabling administrators to deploy software, enforce compliance, and orchestrate system configurations seamlessly across many servers.

NameServer (ARPA Hostname)

Port 42 was historically assigned to the Host Name Server Protocol (NameServer), a part of the ARPA Network designed to manage and resolve hostnames in early networking environments, predating more modern DNS protocols. Though largely obsolete today, understanding this port helps contextualize the evolution of network naming solutions.

Big Brother Monitor

Big Brother is an early system and network monitoring solution that provides real-time status reports for hosts and network services. Administrators use it to track service uptime, detect failures, and get alerts on changes or outages, helping maintain system reliability.

DNS

DNS (Domain Name System) commonly utilizes port 53 to translate human-readable domain names into numerical IP addresses essential for internet communication. While most DNS queries occur via UDP for efficiency, TCP is used for tasks that require reliability, such as zone transfers and larger query responses. DNS acts as the backbone of internet navigation, enabling users to access websites and services seamlessly by resolving hostnames into routable addresses.

DCE/RPC Endpoint Mapper

_Port 135 is primarily used by Microsoft RPC Endpoint Mapper, a crucial function for locating network services used by Windows systems and DCE/RPC frameworks. It facilitates communication between clients and available services by helping clients determine what dynamic ports specific RPC services are listening on._

DHCPv6 Client

DHCPv6 Client is the Dynamic Host Configuration Protocol designed specifically for IPv6 networks. It automates the process of assigning IPv6 addresses and other configuration details to client devices, enabling seamless integration into IPv6-enabled networks. Unlike its IPv4 counterpart, DHCPv6 implements certain protocol-level improvements, including prefix delegation and improved multicast communication, to accommodate the unique requirements of IPv6.

DNS RNDC

Port 953 is primarily used by the Remote Name Daemon Control (RNDC), a command utility for controlling the BIND DNS server. It facilitates secure, authenticated communication between administrators and the DNS server, enabling remote management tasks such as reloading zone files and flushing caches. RNDC operates over both TCP and UDP, and by default listens on TCP port 953, providing administrators fine-grained control over DNS server operations.

WINS

WINS (Windows Internet Name Service) is a Microsoft NetBIOS Name Server legacy service used primarily for name resolution on Windows networks. It enables clients to register and resolve NetBIOS names to IP addresses, facilitating easier communication in older Windows domain environments.

Microsoft RDP

Remote Desktop Protocol (RDP) is a proprietary protocol developed by Microsoft to provide a graphical interface for remotely connecting to another computer or server. Commonly used by system administrators and remote users, RDP allows full control over Windows systems across networks, enabling maintenance, troubleshooting, or remote work capabilities. Despite being a widely deployed remote access solution, RDP can expose systems to significant security risks if incorrectly configured.

DNSIX

**DNSIX** (DoD Network Security for Information Exchange) facilitates secure attribute-based access control within Department of Defense networks, enabling attribute token mapping to govern data exchange securely across interconnected systems.

Ericsson Account Manager

Ericsson Account Manager (AVIM) is a proprietary management interface used by Ericsson telecommunications systems for account, identity and access management functions across network components.

Lantronix RS-485 Telnet Control

Port 9999 is commonly used by Lantronix device servers like the UDS-10 and UDS100 for remote Telnet configuration and management of serial-to-Ethernet converters, particularly those supporting RS-485 communication. This port allows network administrators to connect to the embedded Telnet service to configure network settings, serial parameters, or perform diagnostics on the device remotely.

IBM MiniPay

IBM MiniPay is a specialized port used primarily to facilitate electronic payment processing within IBM systems. It typically supports financial and transaction data exchanges between IBM platforms and external financial services, ensuring streamlined integration with minimal latency. The port operates over both TCP and UDP transport protocols, enabling reliable and flexible communication required in payment environments.

IBM AIX NIM

IBM AIX Network Installation Manager (NIM) facilitates the installation, maintenance, and management of IBM AIX operating system images over a network. It streamlines large-scale deployments by automating installation tasks, making system management more efficient and scalable for enterprise environments utilizing IBM's UNIX-based systems.

LDAPS

LDAPS, or Lightweight Directory Access Protocol over TLS/SSL, is an encrypted form of LDAP that facilitates secure communication between directory service clients and servers. It operates over standard port 636 and is widely used in enterprise environments for secure directory queries, authentication, and management, ensuring sensitive data remains confidential during transmission.

SCOM Agent

Microsoft System Center Operations Manager (SCOM), previously known as Microsoft Operations Manager (MOM), uses this port for its agent communications. The agent provides monitoring capabilities by collecting event logs, performance data, and alerts from managed systems, enabling centralized infrastructure management for Windows environments.

Miralix License Server

Port 3000 is commonly used by the Miralix License Server, a management service that handles licensing, authentication, and authorization for Miralix communication and contact center solutions. It facilitates client applications' validation requests to ensure legitimate access to licensed features and modules.

Aladdin HASP License Manager

Port 1947 is primarily used by the Aladdin HASP License Manager, a system responsible for managing software licensing through hardware or software-based security keys. This service enables developers and organizations to enforce copy protection, ensure software compliance, and administrate license allocation via network communication.

BackupExec

Symantec Backup Exec commonly uses port 10000 for its data transmissions, particularly via the Network Data Management Protocol (NDMP). This service facilitates backup, recovery, and data management between servers and backup storage devices, enabling streamlined enterprise data protection. Its prevalence across backup environments makes it an important yet potentially vulnerable port if not secured properly.

Control-M Agent-Server

Port 7005 is the default communication channel between BMC Software Control-M Server and Control-M Agents, primarily used for scheduling, managing, and monitoring batch workloads across enterprise environments. This port facilitates the secure exchange of job status, execution commands, and event information, although organizations frequently customize it during installation for security or network configuration reasons.

Backup Exec Browser

Port 6101 is primarily used by the Backup Exec Agent Browser service, which facilitates communication and discovery of Backup Exec agents on a network. It assists in managing backup operations across multiple systems by enabling the central Backup Exec server to locate, enumerate, and coordinate backup agents efficiently.

IMP Logical Address Maintenance

Port 51, designated for IMP Logical Address Maintenance, historically supported communication within ARPANET Infrastructure by facilitating management and maintenance of IMP (Interface Message Processor) logical addressing. Though now largely obsolete, it played a crucial role in early network routing and device management tasks.

Tripwire FIM

Tripwire is a renowned File Integrity Monitoring (FIM) solution that helps organizations detect unauthorized changes to critical system files and configurations, thereby maintaining security and compliance. By closely monitoring file systems, registries, and configurations, Tripwire enables real-time detection and alerting of suspicious activity across enterprise environments.

RTPS DDS Discovery

RTPS Discovery protocol, integral to DDS, facilitates real-time, low-latency automatic discovery of publishers and subscribers in distributed real-time systems, ensuring seamless communication setup without manual configuration. It enables flexible and scalable data sharing ideal for IoT devices, robotics, defense, and industrial automation applications.

BMC Control-M Configuration Agent

Port 2369 is the default communication port used by the BMC Software Control-M/Server Configuration Agent. This port facilitates configuration updates, management tasks, and orchestration control for Control-M's workload automation components. It is typically used during initial setup and ongoing system management, but administrators often change the default port as part of security hardening.

BMC Control-M CORBA Connection

Port 13076 is typically used as the default communication endpoint for BMC Software's Control-M/Enterprise Manager which leverages CORBA technology for inter-component messaging and orchestration. This port facilitates the coordination of scheduling services, though it is often altered during installation to comply with existing network policies or to improve security posture.

HP Support Automation

Port 5814 is used primarily by Hewlett-Packard OpenView's Support Automation tools, including Self-Healing Services. These services enable remote diagnostics, automated issue detection, and streamlined support workflows for enterprise IT environments. The primary goal is seamless system management with proactive problem resolution.

Symantec BindView UNIX Mgmt

Port 1236 is utilized by Symantec BindView Control, a security and compliance management solution primarily for UNIX systems. This port serves as the default TCP endpoint for communication between UNIX agents and the central management server, facilitating policy distribution, data collection, and reporting.

Service Location Protocol

The Service Location Protocol (SLP) enables devices to discover services available on a local network dynamically and without prior configuration. It simplifies network management by providing a scalable, flexible, and decentralized mechanism to advertise and locate services, such as printers or file servers, reducing the need for manual setup. SLP supports both TCP and UDP communications to ensure compatibility and resilience across diverse network environments and topologies.

SSDP / UPnP Discovery

Port 1900 is primarily used by the Simple Service Discovery Protocol (SSDP), which is a part of the Universal Plug and Play (UPnP) suite of protocols. It facilitates the discovery of network devices and services on local networks without the need for manual configuration, enabling seamless interoperability among diverse devices such as printers, smart TVs, media servers, and IoT devices.

DHCPv6 Server

Port 547 is utilized by the Dynamic Host Configuration Protocol version 6 (DHCPv6) server to allocate IPv6 addresses and configuration data dynamically to clients within an IPv6 network environment. It facilitates automatic network configuration, enabling devices to communicate seamlessly without manual IP address assignments.

HP Insight Manager Web

Port 2381 is the default port used by HP Insight Manager's embedded web server interface. This management tool allows administrators to remotely monitor, control, and maintain Hewlett-Packard servers and hardware. Access via an HTTP-based browser interface simplifies system management and offers visibility into hardware status, configuration, and alerts.

OSIsoft PI System Client

Port 5450 is utilized by the OSIsoft PI System to facilitate secure and efficient communication between PI Server and client applications. It enables data access, collection, and management functionalities key for real-time industrial data analytics and storage, widely used in sectors like manufacturing, utilities, and energy for process data monitoring.

Netwall Emergency Broadcasts

UDP Port 533 is primarily used by the Netwall service, designed for transmitting emergency broadcast messages across networks. It enables fast and reliable alert dissemination in crisis scenarios, supporting critical infrastructural communication with minimal delay.

UDPCast

UDPCast is a network tool designed for efficient multicasting of disk images or large files across a LAN, leveraging UDP transport. It enables simultaneous data distribution to many clients without saturating network resources, which is especially useful for cloning systems or rapid software deployment.

VNC Remote Desktop

Virtual Network Computing (VNC) allows users to remotely control another computer’s desktop across networks or the internet. Operating primarily on port 5900, VNC is widely compatible, supporting various implementations including Apple Remote Desktop. It facilitates graphical desktop sharing, enabling seamless access and management regardless of physical location.

Urchin Analytics

Urchin Web Analytics is a discontinued web traffic analysis software suite, historically used to analyze web server log files and provide insightful reports on website visitors, behaviors, and traffic sources. It was a popular tool for webmasters and marketers before being acquired and eventually phased out by Google in favor of Google Analytics. Port 9999 was often utilized in default setups for the Urchin administrative console or remote data collection agents.

Modbus

Modbus is an industrial communication protocol designed to enable communication between devices connected on different types of buses or networks, primarily in automation and control environments. It facilitates data transmission between supervisory computers and devices like PLCs, sensors, and instrumentation, making it a fundamental protocol in industrial control systems.

NRPE

The NRPE (Nagios Remote Plugin Executor) protocol is commonly used by Nagios monitoring software to execute plugins and commands on remote hosts. This facilitates centralized monitoring by enabling a Nagios server to assess the health and status of multiple networked devices through locally-run scripts on each monitored host.

DNP3

DNP3 (Distributed Network Protocol) is a robust communication protocol widely used in SCADA (Supervisory Control and Data Acquisition) systems to enable reliable data exchange between control equipment such as Remote Terminal Units (RTUs) and Intelligent Electronic Devices (IEDs). Designed for electrical and utility automation sectors, DNP3 ensures efficient and dependable device interoperability across complex supervisory networks.

ADAP

The App Discovery and Access Protocol (ADAP) is designed to facilitate dynamic discovery and interaction with applications or services within a networked environment. It allows systems to locate services efficiently and broker communication among distributed components, supporting both TCP and UDP transport to ensure flexibility in deployment. Widely used in networked application ecosystems, ADAP simplifies integration and management by providing a standardized communication protocol for application discovery and access.

IBM AIX NIM

IBM AIX Network Installation Manager (NIM) is a tool that facilitates the deployment, configuration, and management of IBM AIX operating system images across multiple networked systems, greatly simplifying large-scale installations and updates.

SafeNet License Manager

Port 5093 is primarily used by the SafeNet Sentinel License Manager services, enabling license management communications between Sentinel LM and RMS clients and servers. This port plays a critical role in facilitating license validation and distribution for software products that incorporate SafeNet's licensing solutions.

NetBIOS Session Service

Port 139 is primarily used by the NetBIOS Session Service, enabling communication between devices on a local network using the NetBIOS protocol. It facilitates file and printer sharing over Windows networks by allowing sessions over TCP/IP. Historically integral to Windows networking, it allows systems to identify each other and establish resource-sharing connections.

Network Time Protocol

The Network Time Protocol (NTP) enables devices across a network to synchronize their system clocks with high precision. By coordinating time settings between clients and servers, NTP is critical for maintaining accurate timestamps in applications, security protocols, and network management tasks. NTP predominantly uses UDP port 123 due to its low-overhead, connectionless nature, supporting efficient communication for time synchronization across global IP networks.

Cisco IP SLA Control

Cisco IOS IP Service Level Agreements (IP SLAs) Control Protocol enables network performance monitoring by defining, configuring, scheduling, and collecting statistics about network operations tests. It allows administrators to measure metrics such as latency, jitter, packet loss, and availability directly through Cisco devices, providing valuable insights into real-time network health and SLA compliance.

X11 Protocol

Port 6000 is primarily utilized for the X11 protocol, which facilitates communications between X Window System clients and servers over a network. It enables the display of graphical user interfaces from remote Linux and UNIX systems, allowing users to run applications remotely with graphical output rendered locally. This makes it a fundamental component in remote graphical computing environments.

RTPS DDS Meta-Traffic

RTPS DDS Meta-Traffic is used for the internal communication of Data Distribution Service (DDS) implementations. It handles discovery, metadata exchange, and control traffic necessary for establishing real-time, reliable, and scalable publish-subscribe communications among distributed systems, especially in environments demanding high performance such as robotics or IoT.

Discard Protocol

The Discard Protocol is a simple and obsolete network service that accepts connections and discards any data received without any response. Originally designed for testing, measuring, or debugging, it silently consumes incoming traffic on both TCP and UDP port 9, confirming network reachability without providing feedback. Due to its minimal function and lack of authentication, it's mostly disabled on modern systems for security reasons.

X11 Display Manager

Port 6001 is commonly used by the X Window System (X11), a windowing system for bitmap displays, primarily on UNIX and UNIX-like operating systems. It enables graphical user interfaces (GUIs) to be used over network connections by transmitting display data between an X server and X client applications. Each additional display instance typically uses an incremental port from 6000, meaning port 6001 corresponds to the second X11 display.

TCPMUX

The TCP Port Service Multiplexer (TCPMUX) is a protocol used on port 1 to allow clients to query a server for a list of active services and connect to specific daemon processes dynamically. It acts as a service directory or initial contact point, facilitating connection establishment to various services hosted on a server.

OpenView NNM ovwdb Daemon

Port 2447 is commonly associated with Hewlett-Packard's OpenView Network Node Manager (NNM), a widely used solution for network monitoring, fault detection, and management. Specifically, this port is used by 'ovwdb,' the OpenView object database daemon, facilitating inter-component communication and database access within NNM's distributed architecture. It typically listens over both TCP and UDP, enabling efficient data handling between consoles and agents on large enterprise networks.

NetBIOS Name Service

NetBIOS Name Service (NBNS) is an essential part of the NetBIOS protocol suite, primarily used for local network name resolution and registration in Windows-based environments. It enables networked devices to register their NetBIOS names and resolve others, facilitating communication across devices without relying on DNS.

UPnP Device Interop

Port 5000 is widely used for Universal Plug and Play (UPnP) services, particularly on Windows networks to facilitate device discovery, configuration, and interoperability. By enabling seamless integration of networked devices such as printers, media servers, and IoT devices, UPnP over TCP on port 5000 greatly enhances user convenience, though it also introduces specific security considerations.

NetGuard GuardianPro Remote Management

Port 1500 is typically used for remote management of NetGuard GuardianPro firewalls based on NT4 systems. This port facilitates administrative access, configuration management, and real-time monitoring of firewall status. Designed for legacy environments, it enables system administrators to remotely maintain security policies and respond to network events efficiently.

OCFS2

Oracle Cluster File System 2 (OCFS2) is a shared-disk cluster file system designed to facilitate data sharing in clustered Oracle environments. It allows multiple servers to concurrently access a single storage volume, supporting high availability and scalability for databases, middleware, and other applications requiring shared storage. Installed primarily on Linux systems, OCFS2 is widely used in enterprise deployments to simplify complex clustering tasks.

Lot105 DSuper Updates

Port 2053 is utilized primarily for Lot105 DSuper Updates over UDP. It serves specific update and communication functions tied to proprietary or specialized devices or services, facilitating the delivery and synchronization of software patches and system data without relying on TCP.

IPStor Management

- The IPStor Server management port facilitates configuration and control of IPStor storage servers. - It utilizes secure communication channels, typically HTTPS, to allow administrators to manage storage resources effectively. - This port ensures centralized management across distributed storage systems within an organization.

NetBIOS Datagram Service

NetBIOS Datagram Service (port 138) facilitates connectionless communication primarily for NetBIOS over TCP/IP networks. It is used extensively in Windows network environments for tasks such as name service browsing and datagram distribution, aiding functions like resource sharing and messaging within local networks.

Oracle MS Transaction Server

Port 2030 is commonly associated with Oracle Services designed to integrate with Microsoft Transaction Server (MTS), enabling distributed transaction management between Oracle databases and Microsoft application servers. It facilitates communication and coordination of transactions across diverse environments, playing a vital role in enterprise resource planning and data consistency.

ISO-TSAP Class 0

ISO Transport Service Access Point (TSAP) on TCP port 102 is primarily used in OSI protocols, notably for communication between industrial control systems and automation devices such as PLCs and SCADA systems. It facilitates the transport layer's connection-oriented communication, serving as a gateway to multiple higher-level protocols and services conforming to ISO standards.

CodeMeter

CodeMeter by WIBU-SYSTEMS AG is a versatile software protection and licensing platform widely used to safeguard applications and digital assets against piracy and unauthorized use. It integrates cryptographic licensing, secure key storage, and flexible license management into a comprehensive solution that allows developers to monetize, manage, and secure their software offerings across various environments. CodeMeter ensures intellectual property protection while enabling flexible licensing models suitable for both standalone software and embedded systems.

Synergy

Synergy is a versatile software application that enables users to seamlessly share a single keyboard and mouse across multiple devices and operating systems. It effectively merges desktops into one fluid workspace, eliminating the need for separate input devices for each machine.

Multiplicity

Multiplicity is a software solution that enables users to control multiple computers using a single keyboard and mouse, as well as share clipboard data seamlessly across devices. It simplifies the workflow for users who utilize multiple machines simultaneously by offering quick switching and data transfer capabilities.

CAPTAN Test Stand

CAPTAN Test Stand System is primarily utilized in experimental physics and engineering setups to manage communication between data acquisition hardware and control systems. Operating over UDP, it facilitates the transfer of commands and data in real-time environments, particularly in test stands for particle detectors and sensor arrays.

HELM Control Panel

HELM is a web-based Windows hosting automation control panel used by hosting providers to manage web hosting services, customer accounts, reseller management, billing, and server configuration through an intuitive graphical interface accessible via web browsers.

CyBro A-bus

CyBro A-bus is an industrial automation communication protocol developed by Cybrotech Ltd., typically used for managing programmable logic controllers (PLCs) and automation systems. By operating on port 8442, it facilitates supervisory control and integration of field devices in industrial environments. This port supports both TCP and UDP for flexible communication in industrial networks.

NetWare Core Protocol (NCP)

NetWare Core Protocol (NCP) facilitates communication with Novell NetWare servers, handling essential network tasks such as file and print sharing, directory services, and time synchronization. Commonly deployed on legacy enterprise networks, it enabled efficient access to server resources and centralized management, remaining prevalent in environments still utilizing NetWare infrastructure.

Zimbra LMTP

Port 7025 is primarily used by Zimbra Collaboration Suite's LMTP (Local Mail Transfer Protocol) service for internal mail delivery within the Zimbra server environment. It facilitates the transfer of email messages between the mailbox server and other components handling incoming emails, ensuring reliable and efficient local message distribution.

TACACS

TACACS (Terminal Access Controller Access-Control System) is an authentication, authorization, and accounting protocol widely used in network environments to manage access control for routers, switches, and other network devices. Operating on both TCP and UDP port 49, TACACS helps network administrators enforce centralized security policies easily, offering flexibility and granular access management for network users and administrators alike.

klogin (Kerberos Login)

Kerberos klogin facilitates secure, authenticated remote login services using Kerberos as the authentication mechanism. It is a protocol built on top of the Berkeley rlogin protocol but with strong authentication to prevent credential interception or replay attacks. Historically, it served to allow trusted access between hosts in environments where Kerberos is deployed.

EVault Data Protection

EVault Data Protection Services operate on port 2546, facilitating secure transfer and management of backup data between client systems and the EVault backup infrastructure. It supports both TCP and UDP protocols for versatile connectivity, enabling efficient and reliable data protection in enterprise environments.

HP Data Alarm Manager

HP Data Alarm Manager primarily uses port 383 for managing data alarms, typically within Hewlett-Packard network device environments. It helps administrators monitor and respond to threshold breaches or fault conditions by communicating alarm data between network management tools and HP hardware.

Border Gateway Protocol

BGP (Border Gateway Protocol) is a standardized exterior gateway protocol designed to exchange routing information between autonomous systems (ASes) on the Internet. It forms the backbone of routing decisions across the global Internet, helping network operators determine the most efficient paths for data. Due to its importance, BGP plays a crucial role in maintaining overall Internet connectivity and stability.

Raven Trinity Broker

**Raven Trinity Broker Service** on port **2713** provides specialized functions in managing connections within distributed computing or enterprise environments. It facilitates communication and resource brokering among clients and servers, enabling efficient service discovery, session management, and data transmission. Both **TCP** and **UDP** protocols are supported, allowing flexible, multi-protocol connectivity options across diverse network setups.

DHCP Failover

Port 647 is officially designated for the DHCP Failover protocol, which enables communication between primary and secondary DHCP servers to maintain IP address allocation consistency and high availability. By synchronizing lease information, this protocol plays a crucial role in ensuring continuous network connectivity and minimizing IP conflicts during server outages.

RPC2 Port Mapper

Port 369 is officially assigned to the RPC2 Port Mapper service, which functions similarly to the classic portmapper for Remote Procedure Call-based services. This port enables clients to locate other RPC2 services dynamically by providing the necessary mapping information. Its operation is vital in distributed environments relying on RPC2 to facilitate seamless communication between distributed components.

LANDesk Remote Control

LANDesk Management Suite's Remote Control service allows administrators to remotely access, troubleshoot, and manage client devices across the enterprise network, improving IT support efficiency.

EasyBits School Discovery

EasyBits School uses port 1110 for its network discovery protocol, primarily designed for Intel’s Classmate PC (CMPC) platform in educational settings. This protocol helps devices identify peers and servers within a school LAN, facilitating easy communication and management within classrooms equipped with Intel CMPC devices.

FlexNet License Server

Port 27000 is commonly associated with FlexNet Publisher, a software license management system used for controlling software usage across networks. It is part of a flexible port range (default usually 27000-27009) dedicated to managing license requests and coordination between client applications and license servers. This port facilitates communication that checks license availability, manages license check-in/check-out, and enforces licensing policies within organizational software deployments.

Zephyr Hostmanager

Port 2104 is primarily used by the Zephyr Notification Service component, Hostmanager, within MIT's Project Athena environment. It facilitates the delivery of real-time notifications and messaging services among users and systems, supporting both TCP and UDP protocols. Despite being a legacy system, Zephyr remains a key technology within educational campuses and research environments to provide alerts and collaboration notifications.

Microsoft DCOM

TCP port 1026 is frequently associated with Microsoft Distributed Component Object Model (DCOM) services. DCOM enables software components to communicate over a network, facilitating distributed computing on Windows environments. This port is notorious for being targeted by malware and pop-up spam, especially when RPC services listen on this port.

Remote Login (rlogin)

**rlogin** (Remote Login) provides remote command-line access to Unix systems, allowing users to log in over the network as if they were directly connected.

Management Utility

Port 2 is historically designated for management utilities within networked systems. Although rarely used in modern applications, it can be reserved by legacy services or specialized device management interfaces. Proper awareness of this port is important to avoid misuse or accidental exposure in secure environments.

SafeNet Sentinel License Manager

Port 5099 is primarily used by SafeNet's Sentinel License Manager solutions including Sentinel LM and Sentinel RMS. It enables server-to-server communication for software licensing, facilitating centralized control and management of licenses across different networked environments. This port allows licensing servers to synchronize license data, manage entitlements, and ensure compliance within distributed infrastructures.

LLMNR

Link-Local Multicast Name Resolution (LLMNR) is a protocol that enables devices on the same local network segment to perform name resolution without requiring a DNS server. Primarily found in Microsoft environments starting from Windows Vista and Server 2008, LLMNR facilitates communication during network initialization or when DNS is unavailable.

SNMP

Simple Network Management Protocol (SNMP) is a widely used protocol for network management. It facilitates the monitoring and management of network devices, including routers, switches, servers, printers, and other connected hardware. SNMP enables centralized network control by allowing administrators to collect information, configure devices, and detect network issues efficiently.

MIL-STD-2045-47001 VMF

MIL-STD-2045-47001 VMF (Variable Message Format) is a military data communication protocol used primarily for tactical messaging among defense systems. Leveraging efficient message formatting, it facilitates rapid, secure, and interoperable data exchange across diverse battlefield communication platforms.

Kerberos Password Change

Port 464 is primarily used for the Kerberos protocol's password change and set functions, enabling secure management of user credentials within a Kerberos authentication infrastructure.

Systat

Systat is a legacy network service running on port 11, historically used to provide information about active users logged into a system. Initially part of the suite of early Internet services, it queried the system's status and relayed basic data about logged-in accounts. Today, it is primarily obsolete and carries significant security risks.

IEC 60870-5-104

IEC 60870-5-104 is a protocol standard widely used for telecontrol in electric power systems, enabling data exchange for supervisory control and data acquisition (SCADA). Operating over TCP/IP networks, it facilitates real-time monitoring and remote management of electrical grids, substations, and automation devices to ensure reliable power delivery.

Gobby Collaboration

Gobby is a real-time collaborative text editor that allows multiple users to simultaneously edit documents over a network. Built upon the libobby library, it enables seamless editing with immediate updates, supporting group projects, code collaboration, and shared note-taking across platforms. Gobby's focus on simplicity and efficiency makes it a popular tool for developers, teams, and educational settings.

SGMP

_Simple Gateway Monitoring Protocol (SGMP) is an early network protocol designed to manage and monitor network gateways. It was a precursor to SNMP and enabled administrators to gather gateway status and control traffic-related parameters, providing basic insights into network health and performance._

EMC Networker Backup

Port 7937 is primarily used by EMC2's Legato Networker and Sun Solstice Backup software suites, which provide enterprise-grade data backup, restore, and disaster recovery services. This port facilitates communication between backup servers and their clients, enabling backup operations across diverse systems and environments. Both TCP and UDP are used to optimize data transfers and service coordination.

Opsware Agent

Port 1002 is associated with the Opsware Agent, also known as Cogbot, a component used to manage servers and automate IT operational tasks. The agent facilitates communication between managed machines and the Opsware Core server, enabling deployment, monitoring, configuration management, and patching across large-scale enterprise environments.

Microsoft DCOM

Port 1029 is frequently associated with Microsoft Distributed Component Object Model (DCOM) communications. DCOM enables software components to communicate directly across networked environments, predominantly within Windows operating systems. While this port is unofficial and dynamic, it's commonly observed during remote procedure calls and system management activities.

DTSPCD

DTSPCD (Distributed Terminal Server Process Controller Daemon) is a network service primarily used to remotely execute commands and launch applications on UNIX systems, notably those running CDE (Common Desktop Environment). It facilitates client-server interactions for remote desktop management, enabling administrative tasks and remote application control over a network. While originally designed to enhance remote system management capabilities, it has since fallen out of favor due to significant security vulnerabilities.

Rexec

Rexec (Remote Execution Daemon) is a service traditionally used on UNIX systems allowing users to execute commands on a remote machine over a network. It facilitates remote process execution by authenticating with a username and password sent in plain text, which poses significant security risks. While once commonly adopted in trusted internal environments for remote management, Rexec has largely been superseded by more secure technologies due to its inherent vulnerabilities.

XDMCP

The X Display Manager Control Protocol (XDMCP) is designed to facilitate remote graphical logins to UNIX and Linux systems running the X Window System. It allows clients on the network to discover graphical login managers and initiate sessions, providing an interface for users to access remote desktops seamlessly over a network.

Galaxy Server

Galaxy Server by Gateway Ticketing Systems is a comprehensive, enterprise ticketing and access control software primarily used by theme parks, museums, zoos, and other attractions to manage ticket sales, admissions, and revenue operations. It provides integration of multiple sales channels and supports real-time transaction processing.

MooseFS Master Server

Port 9421 is primarily used by MooseFS, an open-source distributed file system, for communication between its master server and client nodes. It facilitates operations such as metadata queries and namespace management, enabling clients seamless access to the distributed storage resources.

Altiris Deployment Client

Altiris Deployment Client port 402 facilitates communication for Symantec's Altiris Deployment Solution, a remote management suite for device deployment, imaging, and maintenance within enterprise environments. It supports client-server interactions to streamline the automation of provisioning, software distribution, and system updates, enabling efficient management of large-scale IT infrastructures.

Git Pack Transfer

Port 9418 is primarily used by Git for efficient pack file transfer between repositories over the Git protocol. It facilitates rapid cloning and fetching of data directly, typically used in both open-source and enterprise environments for source code management due to Git’s popularity.

SoftPerfect Bandwidth Manager

SoftPerfect Bandwidth Manager is a network traffic management tool that helps administrators monitor and control bandwidth consumption across diverse network environments. It applies rules and policies to manage data flow, optimize resource distribution, and prevent bandwidth overuse, ensuring optimal network performance and fairness among users.

GFI EventsManager

GFI EventsManager ports facilitate the collection, management, and analysis of logs from multiple network and security sources. It enables centralized event management, allowing organizations to efficiently monitor and respond to security-related events, system alerts, and compliance audits. Port 7787 is primarily used by versions 7 and 8 of the software for communication and data exchange.

new-rwho / new-who

The 'new-rwho' and 'new-who' services traditionally operate over UDP port 550, providing user information within networked UNIX systems. These protocols enable administrators to monitor logged-in users across multiple hosts, facilitating easier system management and visibility. While their use has diminished in modern secure environments, understanding these legacy protocols remains important for maintaining backward compatibility and auditing historical systems.

WINS

Microsoft Windows Internet Name Service (WINS) is a legacy name resolution service designed to map NetBIOS names to IP addresses within Windows-based networks. This enables devices running Windows to locate and communicate with each other using familiar computer names rather than numerical IP addresses, which is essential for older Windows networking protocols and compatibility with legacy systems.

APC Agent

APC Agent is a proprietary management service used primarily with APC (American Power Conversion) network devices such as UPS systems. It enables remote management, monitoring, and control of power events and environmental data, facilitating automation and resilience of critical infrastructure.

Kerberos Remote Shell (kshell)

Kerberos Remote shell (kshell) is a network service port traditionally used to provide authenticated command execution between systems in a network using the Kerberos authentication protocol. It enhances the conventional rsh protocol by incorporating secure identity verification, enabling users to remotely execute commands on trusted hosts without transmitting plain credentials. Although designed to improve security, its practical use has diminished in favor of more robust modern alternatives.

Plesk Control Panel

Parallels Plesk Control Panel (Plesk) is a popular web hosting control panel that provides a graphical interface and automation tools designed to simplify the management of websites, mail services, databases, and hosting accounts on a server. It allows administrators and resellers to efficiently manage multiple websites and streamline hosting operations through an intuitive dashboard.

X-BEAT Status Check

Port 18605 is commonly utilized by the X-BEAT system to perform status and version checks on remote agents or devices. It supports both TCP and UDP protocols, allowing flexible communication modes for network administration and diagnostic tasks.

Internet Printing Protocol

The Internet Printing Protocol (IPP) is a network protocol used for distributed printing over IP networks. It allows clients to submit print jobs to networked printers, query printer capabilities, manage print jobs, and receive status updates, making it a widely adopted standard for modern network printing solutions.

IBM RMC

IBM RMC (Remote Monitoring and Control) is a proprietary IBM protocol primarily used within IBM Power Systems environments. It enables the communication between the Hardware Management Console (HMC), Integrated Virtualization Manager (IVM), and logical partitions (LPARs), facilitating dynamic partition management and monitoring. This protocol is vital for resource allocation, hardware status updates, and remote configuration within enterprise IBM systems, supporting efficient virtualization and system management.

CA DMP / Port Multiplexer

Port 4728 is commonly associated with Computer Associates (CA) Desktop and Server Management (DMP) systems, functioning as a port multiplexer to facilitate communication between various management services. It enables centralized management of desktop and server resources, streamlining IT administration and improving operational efficiency. Due to its role, it often operates in enterprise environments to manage software distribution, monitoring, and remote control functionalities.

Route Access Protocol

Route Access Protocol (RAP) is an early protocol primarily used for routing table maintenance and exchange within network infrastructures. It facilitates the distribution of routing information between routers, enabling dynamic network topology updates and helping routers adjust their forwarding decisions based on the latest route data.

CDDBP

Port 888 is commonly associated with the CD Database Protocol (CDDBP), a service utilized by media player applications to identify compact discs by querying an online database. Although not officially assigned, CDDBP over this port has seen widespread, unofficial adoption, facilitating the retrieval of metadata such as album titles, artist names, and track listings, enhancing the user experience during CD playback.

Remote Job Entry

Remote Job Entry (RJE) is an early protocol designed for submitting batch processing jobs from remote locations to mainframe computers. It facilitated offsite users or departments in efficiently sending jobs and retrieving results without direct access to the data center. RJE was primarily used in large enterprise and academic environments before the advent of modern distributed and interactive systems.

KeyShadow K2

KeyShadow for K2, including KeyAuditor and KeyServer by Sassafras Software, is an asset management solution that facilitates comprehensive software license control and monitoring over networks. It allows organizations to effectively track, audit, and enforce their software usage policies, reducing compliance risk and optimizing license utilization. Communication on this port typically handles the exchange of license validation queries and asset management data.

ThoughtSignal Communication

ThoughtSignal Server Communication Service typically serves internal signaling or telemetry purposes within ThoughtSignal infrastructure or applications. It often operates in an informational or monitoring capacity, rather than facilitating primary user-facing services, and is generally associated with unofficial, application-specific messaging.

Zabbix Trapper

Port 10051 is primarily used by Zabbix, an open-source monitoring solution, to facilitate communication between the server and its agents or clients. The port functions as a 'trapper' endpoint, receiving passive monitoring data, allowing the server to collect metrics, trigger alerts, and maintain health insights without requiring continuous polling.

DHCP Failover

The DHCP Failover protocol is used to synchronize IP address leasing information between two DHCP servers, providing high availability and load sharing in enterprise networks. It allows DHCP services to remain operational even if one server fails, enabling continuous network connectivity for clients.

XNS Clearinghouse

Xerox Network Systems (XNS) Clearinghouse provides a directory service within the XNS suite, facilitating network resource resolution and management. Operating on port 54, it plays a fundamental role in distributed computing environments where address and resource lookups are crucial. While now largely obsolete, understanding its function remains important for legacy system maintenance and network forensics.

Tripwire

Tripwire is a well-known security auditing and intrusion detection software suite that helps maintain the integrity of critical files and system configurations. It accomplishes this by monitoring system changes and alerting administrators to suspicious alterations, contributing to improved compliance and security posture.

ISI Graphics Language

ISI Graphics Language (ISI-GL) is an early network protocol designed primarily for transferring graphical data between systems, often used in academic and research settings. It facilitates rendering commands and image data transfer over network connections, enabling remote visualization and graphical computing. Though largely obsolete today, understanding ISI-GL provides insight into the evolution of networked graphics protocols.

MATIP Type A

MATIP Type A enables the transportation of traditional airline reservation, ticketing, and messaging data over IP networks, replacing legacy airline communication systems and streamlining operations across global aviation networks.

CUPS

The Common Unix Printing System (CUPS) is a modular printing system for Unix-like operating systems. It allows a computer to act as a print server, managing print jobs and queues and providing network printing capabilities across diverse platforms and devices.

Adeona OpenDHT Client

Port 5852 is primarily used by the Adeona client software for secure communication with the OpenDHT distributed hash table network as part of device location recovery services. Adeona is an open-source system designed to assist owners in tracking lost or stolen laptops by periodically sending encrypted device location data to OpenDHT servers.

Office OS X Anti-Piracy Monitor

Port 2223 is associated with the Microsoft Office OS X anti-piracy network monitor, a service primarily used by specific versions of Microsoft Office for Mac to detect unlicensed usage or installations. It generally communicates via UDP and is unofficially assigned for this function. The port facilitates internal messaging and license verification processes to uphold Microsoft’s software licensing terms.

LeeCO POS Server

LeeCO POS Server Service operates on port 2212, supporting both TCP and UDP protocols for communication between point-of-sale terminals and centralized LeeCO servers. It facilitates data exchange such as transactions, inventory management, and reporting within retail environments using LeeCO's POS software suite.

Access Network

Port 699 is officially designated for Access Network services, used primarily in telecommunications and network management scenarios. While not as ubiquitous as standard web or email ports, it supports specific network control and communication functionalities, typically in managed access systems or proprietary telecom applications.

XNS Time Protocol

The Xerox Network Systems (XNS) Time Protocol is a legacy network service designed to synchronize time across devices within an XNS network environment. Primarily used in legacy Xerox systems, this protocol facilitated accurate timestamping and coordination across distributed computing systems where precise timekeeping was critical.

ooRexx rxapi daemon

The Open Object Rexx (ooRexx) rxapi daemon provides network-based API services that enable external applications to interface programmatically with the ooRexx interpreter, allowing for automation, scripting integration, and remote management capabilities.

LLRP over TLS

EPCglobal Low Level Reader Protocol (LLRP) over TLS facilitates secure communication between RFID readers and controlling software, leveraging TLS to provide encrypted transport. It enables standardized device management, inventory control, and data acquisition within RFID systems commonly found in logistics, retail, and supply chain operations.

RSH / REMSH

Remote Shell (rsh or remsh) is a legacy protocol designed to execute shell commands on a remote Unix system in a non-interactive fashion. It operates primarily over TCP, allowing administrators or automated systems to issue single commands remotely. Despite its historical usage, RSH is largely deprecated due to its insecure design, transmitting data in plaintext, including user credentials, posing significant security risks in modern network environments.

Netstat Service

**Netstat Service** is commonly found on port 15 across various systems but it remains unofficial and rarely used today. It traditionally allows administrators and diagnostic tools to monitor active network connections, routing tables, interface statistics, masquerade connections, and multicast memberships on a system. Because it facilitates introspection of network activity, this port can reveal valuable insights about system connectivity.

XNS Authentication

Xerox Network Systems (XNS) Authentication was an early protocol suite designed primarily for local network communication and authentication within Xerox environments. It supported both TCP and UDP transport and served to verify identities between connected hosts, enabling access to services and secured exchanges of information inside the XNS ecosystem. While now largely obsolete, it influenced later developments in network protocols and authentication frameworks.

MooseFS Master-Chunk

Port 9420 is primarily used by MooseFS, an open-source distributed file system, facilitating communication between the Master Server and Chunk Servers to coordinate file storage and management efficiently across distributed infrastructure.

RFS Server

Remote File Sharing (RFS) is a protocol designed to provide transparent access to files and directories across a network. Operating over TCP port 556, RFS enables users and applications to interact with remote resources as if they reside locally, making distributed file management more efficient. Although largely obsolete now, RFS was historically significant in Unix environments for enabling seamless file sharing between systems.

SMUX (SNMP Multiplexer)

**SMUX (SNMP Unix Multiplexer)** is a protocol running primarily on port 199 that facilitates the integration of sub-agents into the overall SNMP agent framework, enabling modular management in network devices and systems. It allows different components to provide their own management information autonomously while coordinating through a central SNMP master agent.

Usermin User Tool

Usermin is a web-based interface that allows users to manage various aspects of their UNIX/Linux accounts. It provides functionalities like changing passwords, managing email filters, viewing emails, and editing files through an easy-to-use GUI accessible via web browsers.

MSMQ

Microsoft Message Queuing (MSMQ) is a messaging protocol developed by Microsoft that enables applications running at different times to communicate across heterogeneous networks and systems that may be temporarily offline. It provides guaranteed message delivery, efficient routing, security, and priority-based messaging, facilitating reliable distributed application development and integration within enterprise environments.

Munin

Munin is an open-source monitoring tool designed to analyze and visualize the performance of computers, networks, and applications. Utilizing a client-server architecture, it collects extensive metrics from various system resources and presents them through detailed web-based graphical interfaces. This allows administrators to easily monitor resource usage trends, detect anomalies, and maintain optimal system health.

Syslog

Syslog operates primarily over UDP port 514 to facilitate the centralization of log messages from network devices and Unix systems. It allows administrators to collect, store, and analyze log data centrally, streamlining monitoring, troubleshooting, and security event analysis across distributed systems.

STMF (NTCIP 1101)

The Simple Transportation Management Framework (STMF), defined in NTCIP 1101, facilitates data communication and management for transportation systems and devices such as traffic signals, dynamic message signs, and environmental sensor stations. This protocol supports seamless integration and interoperability within intelligent transportation systems (ITS), enabling effective command, control, and monitoring capabilities.

Sassafras K2 License Server

Port 19283 is primarily used by Sassafras Software's K2 KeyServer and KeyAuditor, a comprehensive software asset management and license compliance tool. It facilitates real-time license management, usage tracking, and auditing across an organization's network, enabling administrators to ensure compliance and optimize software investments.

Axence nVision

Axence nVision is a comprehensive network monitoring and management solution used by organizations to oversee resources, track network activity, and ensure security compliance. It facilitates real-time monitoring, asset management, user activity analysis, helpdesk support, and data protection practices, typically through a centralized management console accessed over specific TCP ports.

Zimbra SMTP Amavis Integration

Port 10025 is commonly used internally within Zimbra Collaboration Suite to facilitate the relay of email messages from the Amavis content filter back into the Postfix Mail Transfer Agent (MTA). This port enables scanning and filtering of emails for malware, spam, or policy compliance before final delivery, serving as a secure and structured point of reinjection after content analysis.

RPC

Remote Procedure Call (RPC) enables one program to request a service from a program located on another computer in a network. It abstracts the communication process, making it easier to build distributed, client-server applications because the calling method appears as if it's local despite being remote.

Message Send Protocol

Message Send Protocol (MSP) is a legacy protocol designed primarily for transmitting short, text-based notifications between networked hosts. It facilitates simple communication by enabling users or systems to send alerts or brief messages without the need for complex email or file transfer protocols. While it once played a role in system messaging and network administrative alerts, its use today has largely been deprecated due to the prevalence of more secure and feature-rich alternatives.

Xware xTrm Protocol

Xware xTrm Communication Protocol (XCP) is a specialized protocol used primarily to facilitate secure and reliable data exchange in industrial environments and enterprise-grade communication solutions. Designed by Xware, it offers custom features to ensure integrity and operational continuity across distributed systems.

Octopus Multiplexer / CROMP Protocol

Port 10008 is primarily used by the Octopus Multiplexer to facilitate the CROMP protocol, offering a platform-independent, object-based communication mechanism across diverse networked systems. It enables the transfer, management, and orchestration of distributed objects and services between various platforms, making it particularly useful in scalable, modular environments.

MATIP-Type B

MATIP-Type B (Mapping of Airline Traffic over Internet Protocol) facilitates the transmission of traditional airline reservation and operational traffic over IP networks. It allows legacy airline proprietary protocols to be encapsulated and sent across TCP/IP or UDP/IP, enabling seamless integration with modern communication infrastructure while maintaining support for existing airline applications.

BladeLogic Agent

**BladeLogic Agent** facilitates communication between BMC's BladeLogic Server Automation platform and managed servers. It enables administrators to automate configuration, provision systems, manage software deployment, and monitor server compliance via a secure agent running on the target device.

AutoNOC

AutoNOC protocol facilitates network operations center automation and management, enabling monitoring, alerting, remote management, and automated responses for network infrastructure. It allows integration of various network devices and services, supporting seamless, automated network operations.

NSCA

NSCA (Nagios Service Check Acceptor) is a utility used to securely send passive check results from remote systems and client hosts to a central Nagios monitoring server. It facilitates distributed monitoring by allowing multiple external systems to report their status centrally, improving scalability and extending Nagios capabilities.

Tidal Scheduler Agent

Tidal Enterprise Scheduler Agent facilitates communication between the central job scheduling server and the agent running on client hosts. It enables the implementation of complex job scheduling workflows by executing distributed tasks and providing status feedback to the scheduler. This port is essential for enterprise-level automation and workload management.

Operations Manager

**Operations Manager** uses TCP port 5723, primarily for communication in Microsoft System Center Operations Manager (SCOM). It enables monitoring agents to connect securely with management servers, facilitating the collection of performance data, health status, and alerts across the IT environment.

AURP

AppleTalk Update-based Routing Protocol (AURP) facilitates routing updates within AppleTalk internetworks, allowing geographically dispersed Apple networks to exchange routing information efficiently. It was primarily used to enable communication over wide area networks by encapsulating AppleTalk packets within IP, supporting AppleTalk's expansion beyond local segments.

rexd Daemon Control

Port 10017 has historically been associated with the 'rexd' remote execution daemon service, notably present on UNIX variants like AIX, NeXT, and HP-UX systems. This service enables the execution of commands on remote hosts, facilitating remote administration and automation. As a control port, it may manage or trigger functions related to remote code execution, although in modern systems, its use is rare and largely deprecated due to security concerns.

Network Time System

The Network Time System is an application that synchronizes time across multiple systems within a local enterprise environment or over the internet. Utilizing both TCP and UDP protocols, it ensures accurate timekeeping by acting as a centralized server, distributing precise timestamps to connected devices. This aids in event logging, security audits, and ensuring coordinated operations across distributed environments.

Daytime Protocol

The Daytime Protocol is a simple network service defined in RFC 867 that provides the current date and time information to requesting clients. Operating on TCP and UDP port 13, it was historically used for testing, troubleshooting, and basic time synchronization before more precise protocols emerged.

Hosting Accelerator Panel

Port 8087 is commonly utilized by Hosting Accelerator, a web hosting control panel designed to simplify the management of hosted environments. It provides an interface for administrators to oversee hosting services, manage domains, email accounts, databases, and other critical components of web hosting infrastructure.

NetBeans IDE

NetBeans is an integrated development environment (IDE) primarily used for developing Java applications. It provides a set of tools for programmers to write, compile, debug, and deploy code efficiently, supporting multiple languages and technologies.

PrintBuzzer Socket Server

PrintBuzzer runs a network socket server on port 4007 designed to monitor, control, and remotely manage printer jobs across an organization. It facilitates real-time status updates, device health checks, and streamlined printer fleet management, enabling administrators to oversee multiple printers efficiently.

Splunk Daemon

Port 8089 is primarily used by the Splunk Daemon, the management service for Splunk Enterprise deployments. It facilitates communication between Splunk components, such as forwarders, indexers, deployment servers, and management consoles, enabling distributed orchestration and secure data collection.

VMware Server UI (Insecure)

Port 8222 is primarily associated with the VMware Server Management User Interface, which provides web-based access to VMware virtualization servers. Notably, connections on this port are unsecured, exposing management functions without encryption and posing potential security risks. It is commonly seen alongside its secure counterpart on port 8333.

EFS Server

The Extended File Name Server (EFS) operates on port 520. It facilitates handling of file name mapping and directory services, often associated with older UNIX and DEC systems to provide name services over networks. Although largely supplanted by modern directory protocols, it historically played a role in distributed file environments.

HP Data Protector

Hewlett-Packard Data Protector (HPDP) is a comprehensive automated backup and recovery software solution primarily used in enterprise IT environments to safeguard data across servers, applications, and storage devices. Port 5550 facilitates agent communication and management tasks, enabling streamlined backup schedules, recovery operations, and monitoring.

Sun Grid Engine Exec

Sun Grid Engine Execution Service enables distributed job execution in grid computing environments, allowing users to manage large-scale compute tasks across clusters efficiently.

Who Service

The WHO service on UDP port 513 is a legacy Unix command networking service designed to remotely return information about users logged into a host system. Often bundled with early UNIX systems, it provides details such as usernames, terminal locations, and login times. Due to its age and security concerns, its usage has largely declined with modern alternatives offering enhanced security.

Quartus jtagd

**Quartus JTAGD** port (1309) is primarily used by *Altera* (now part of Intel) for remote programming, debugging, and hardware communication with FPGA devices via JTAG servers. This port facilitates interactions between Quartus software tools and programmable logic devices, enabling hardware development and maintenance workflows.

Remote Telnet

Port 107 is traditionally associated with the Remote Telnet service, providing remote login and command-line access to servers and network devices over plaintext connections. While Telnet was once widely used for managing networked systems, it has largely been replaced by more secure protocols such as SSH due to its lack of encryption, which poses a significant security risk when transmitting credentials and data. Nonetheless, some legacy systems or network devices may still use this port for diagnostic or management purposes in controlled environments.

Echo Protocol

The Echo Protocol is a simple service that returns any data sent to it, primarily used to test network connectivity and diagnose latency issues. Operating over both TCP and UDP, it can be useful for troubleshooting low-level network problems. However, due to its simplicity and potential misuse, it is rarely enabled by default on modern systems.

Kerberos IV

Kerberos version IV is an authentication protocol primarily used to verify the identities of clients and servers in distributed network environments. Operating over UDP port 750, Kerberos IV employs a ticket-based system to securely authenticate users without transmitting passwords in plaintext, enhancing overall security. Though widely influential, this older version has been mostly superseded by Kerberos V due to enhanced features and security improvements.

PxPlus Client Server

Port 4093 is associated with the PxPlus Client Server interface, primarily utilized for communication with ProvideX, a business application development environment. This port supports both TCP and UDP protocols for enhanced compatibility and flexibility across client-server interactions within enterprise software solutions.

Smartcard Service

Port 3516 is primarily used for smartcard communication services, allowing secure interactions between smartcard readers and authentication systems. It acts as a transport layer facilitating the exchange of authentication, identification, and cryptographic information during smartcard transactions across various enterprise and networked environments.

WibuKey Protection

WibuKey is a proprietary hardware and software-based licensing and software protection system developed by WIBU-SYSTEMS AG. It helps software vendors secure their applications against unauthorized use, piracy, and reverse engineering by integrating with dedicated hardware dongles and specialized drivers. The system operates over network services, allowing license verification across distributed environments.

Zabbix Agent

Zabbix Agent is a lightweight software component installed on endpoints to collect monitoring data and send it to the Zabbix Server over a designated port. Designed mainly for performance statistics, availability metrics, and system health checks, it enables centralized infrastructure and service monitoring in enterprise and open-source environments.

LPD Print Service

Port 515 is traditionally used by the Line Printer Daemon (LPD) protocol on Unix/Linux systems to manage print jobs over a network. It enables clients to submit, query, and manage printer queues remotely, facilitating distributed printing in larger network environments.

Teredo

Teredo is a network protocol designed to provide IPv6 connectivity to nodes that are located behind IPv4 NAT (Network Address Translation) devices. Implemented as a tunneling protocol, Teredo encapsulates IPv6 packets within IPv4 UDP datagrams, enabling seamless communication across IPv4 networks without requiring native IPv6 infrastructure. This ensures broader IPv6 adoption and maintains compatibility where direct IPv6 support is not feasible.

Sun DR

Sun Remote Dynamic Reconfiguration (sun-dr) allows administrators to dynamically modify the hardware configuration of certain Sun Microsystems servers without shutting them down. This management protocol aids in reallocating resources or replacing hardware to ensure optimal uptime and minimal service disruption.

Symantec VOPIED Protocol

Symantec's VOPIED protocol, previously known as VERITAS, is primarily used within enterprise environments for data backup, replication, and storage management solutions. It facilitates communication between backup agents and storage servers, enabling efficient data transfer and synchronization. The protocol operates over both TCP and UDP, supporting flexible, reliable operations crucial for maintaining enterprise data integrity and availability.

Sibelius License Server

Sibelius License Server manages floating licenses for the Sibelius music notation software. It facilitates centralized license control within organizational environments, helping institutions efficiently allocate, manage, and monitor access to Sibelius across multiple workstations.

Symantec vnetd

Symantec Network Utility vnetd, previously known as VERITAS NetBackup, is a dedicated communication service utilized in Symantec backup and recovery solutions. It facilitates remote management and data transfers between backup clients and servers, supporting backup operations across distributed enterprise environments.

Linksys PSUS4 print server

The Linksys PSUS4 is a print server that connects printers to a network, allowing multiple users to access printing functions remotely.

UUCP Path

The UUCP Path Service (port 117) facilitates path services for the Unix-to-Unix Copy Protocol (UUCP), enabling exchange of email routing and network addressing information among interconnected Unix systems. Historically vital for email and file transfers before the rise of TCP/IP and the Internet, this service plays a role in maintaining communication paths within UUCP networks.

CORBA IIOP URL

Port 2809 is officially designated for CORBA's corbaloc IIOP URL, following the CORBA 3.0.3 specification. It enables client applications to locate CORBA objects using Inter-ORB Protocol (IIOP), facilitating standardized distributed object communication across heterogeneous networks and platforms.

Xgrid

Xgrid is Apple’s distributed computing technology designed to create a virtual supercomputer by connecting multiple Macs. It allows users to harness unused processing power across a network to perform intensive computational tasks in a coordinated manner.

NetBackup bprd

NetBackup bprd is a key daemon within the Symantec (formerly VERITAS) NetBackup suite, responsible for managing backup, restore, and policy operations. The bprd process listens on TCP and UDP port 13720 to facilitate communication between NetBackup clients, media servers, and administration tools, supporting enterprise-grade data protection and recovery across various environments.

VMware Server Alternate Port

Port 904 serves as an alternate communication channel for VMware components when the default port 902 is unavailable, often on certain Linux distributions such as SUSE. It facilitates management connections for ESXi hosts, vCenter Server, and remote console services, playing a critical role in the VMware virtualization ecosystem by enabling secure and efficient management traffic flow.

HP System Management Redirect

Port 2301 is primarily utilized by HP System Management tools to provide a redirect service to the main HP System Management homepage, which typically runs securely on port 2381. This port facilitates initial communication and then forwards connections to the primary management interface for monitoring and controlling HP server hardware.

comsat & biff

The Comsat service, working alongside the `biff` notification utility, provides users with real-time notifications of new email arrivals on UNIX systems. It leverages UDP to listen for incoming mail notifications and alerts logged-in users when new messages are received, historically enabling immediate awareness of incoming communications.

MSMQ

Microsoft Message Queuing (MSMQ) is a messaging protocol developed by Microsoft that enables applications running on separate servers and processes to communicate in a fail-safe manner. By utilizing message queues, MSMQ facilitates reliable asynchronous communication between distributed applications, allowing messages to be sent even if the receiving application is not immediately available.

SNA Gateway

The SNA Gateway Access Server facilitates communication between IBM's Systems Network Architecture (SNA) and IP-based networks. It serves as a bridge, enabling legacy mainframe systems and applications to interact seamlessly with modern TCP/IP infrastructures, supporting both TCP and UDP protocols for versatile connectivity.

BOOTP/DHCP Server

Port 67 is primarily used by the Bootstrap Protocol (BOOTP) and the Dynamic Host Configuration Protocol (DHCP) servers to provide IP address assignment and configuration information to network clients. This port facilitates automated network management by enabling servers to dynamically allocate IP addresses, reducing manual configuration overhead.

Kerberos kpasswd Server

**Kerberos Password Change (kpasswd) Server** — Port 752 is primarily used by the Kerberos authentication protocol to handle password changes securely. The service facilitates secure communication between clients wishing to update their passwords and the Kerberos authentication infrastructure, maintaining strong user identity management within enterprise environments.

Network File System

2049/UDP is commonly used by NFS (Network File System), a protocol developed by Sun Microsystems that enables remote access to shared file systems across a network. It allows systems to mount disks located on remote hosts as seamlessly as if they were part of the local file system hierarchy. This facilitates file sharing, centralized management, and collaboration within distributed network environments.

Kaseya

**Kaseya** is a remote monitoring and management (RMM) solution widely used by managed service providers (MSPs) and IT departments. It enables centralized management of workstations, servers, network devices, and software deployment, streamlining IT operations from a single console.

Ensim Control Panel

Ensim Control Panel is an interface for the Ensim hosting automation platform, which enables administrators and resellers to manage web hosting services, customer accounts, websites, email configurations, and other server settings in a simplified, accessible fashion. It is designed to streamline hosting management with user-friendly graphical tools backed by server-side automation.

NCA over OpenSSH

Network Console on Acid (NCA) over OpenSSH provides a way to redirect local TTY consoles over secure SSH tunnels, enabling remote system management while leveraging encrypted communications for enhanced security.

MONITOR Protocol

Port 561 is assigned to the MONITOR protocol, an older diagnostic and monitoring tool used primarily on UDP to facilitate remote system management and status querying. While it is not widely used today, it historically enabled system administrators to access network device performance data, troubleshoot issues, and observe system health remotely.

OSIsoft PI Server Client Access

Port 545 is primarily used for communication between OSIsoft PI Servers and client systems. The PI System is a widely deployed industrial data management platform that collects, analyzes, visualizes, and shares large amounts of high-fidelity, time-series data from various sources including sensors, controllers, and SCADA systems. This port supports connectivity and data exchange between the PI Server infrastructure and client applications.

Background File Transfer Program

The Background File Transfer Program (BFTP) is a command-line utility designed for secure and efficient transfer of files between a local system and remote hosts. Commonly integrated with Microsoft Remote Desktop services, it streamlines background data synchronization and remote file management using encrypted channels. BFTP’s integration with Secure Shell (SSH) offers a secure environment ideal for enterprise deployments requiring automated and unattended background file transfers without manual intervention.

2DEV 2SP

Port 256 is an unofficial assignment commonly referenced as '2DEV 2SP'. It does not correspond to a widespread standardized service but may be utilized by specialized or proprietary protocols during development or in niche deployments. As such, its behavior can vary depending on the environment, and it does not represent a recognized industry standard service port.

Quote of the Day

The Quote of the Day (QOTD) protocol is a simple Internet service that provides a short message when a client connects to it. Traditionally, it was often used for demonstrating connectivity, server responsiveness, or simply to display inspirational or humorous quotes. While historically popular for testing and fun, the protocol has largely fallen out of everyday practical use and is now mostly of historical interest or used in controlled environments.

Compression Process

Port 3 is an early legacy assigned port utilized for experimental compression protocols, historically used during development phases of protocols that involved data reduction techniques. It currently holds minimal practical usage but remains listed within the Assigned Numbers Authority for compatibility and archival reasons.

Commvault CVP

**Commvault CVP** uses port 8400 to enable unified management of data backup, recovery, archiving, and compliance across cloud and on-premises environments. It facilitates secure and efficient data handling operations as part of the **Commvault platform**, supporting a wide range of enterprise data management tasks. Both TCP and UDP protocols are supported to ensure flexible connectivity for client-server communications, agent interactions, and administrative control.

Zimbra MySQL Logger

Port 7307 is utilized by Zimbra Collaboration Suite as a MySQL logger service, supporting backend operations like email indexing, logging, and internal database management. It facilitates communication between Zimbra components, maintaining system health and operational data tracking.

Tidal Scheduler Master

The Tidal Enterprise Scheduler master port facilitates centralized job scheduling and management, allowing for automation of complex workflows across diverse IT environments.

DART Reporting

The DART Reporting server primarily facilitates centralized management and analysis of data logs, operational data, and performance metrics within enterprise environments. It acts as a critical component for administrators to collect, store, and visualize reports related to distributed systems or applications, ensuring informed decision-making and proactive monitoring.

Cisco XOT

Cisco XOT (X.25 over TCP) facilitates the encapsulation of legacy X.25 traffic within TCP/IP networks, enabling organizations to transition smoothly from traditional X.25 infrastructure to modern IP-based networking without replacing existing applications. It supports both TCP and UDP for flexible transport options.

DART Reporting Server

DART Reporting Server typically functions as an endpoint for data collection, aggregation, and analytics within enterprise environments, enabling centralized reporting of operational or security events across an organization's infrastructure.

Print Server Network PostScript

Port 170, officially assigned to Print-srv and Network PostScript services, is used primarily by network-enabled printers and print servers that communicate using Adobe's PostScript language over IP networks. This allows client systems to submit print jobs efficiently to printers supporting PostScript via the network.

Link Management Protocol

Link Management Protocol (LMP) is utilized to manage and maintain traffic engineering links between network nodes, primarily within optical and Multi-Protocol Label Switching (MPLS) networks. It facilitates the establishment, monitoring, and fault detection of data paths, helping ensure reliable, optimized communication between connected devices.

Conserver Console Management

Conserver is a serial console management server that enables centralized, remote, and persistent access to serial console ports on network devices and servers. It facilitates troubleshooting and maintenance by logging console output and providing access even during system failures or unresponsive states. Designed mainly for data centers and network operations, it ensures administrators can manage multiple devices efficiently and securely over the network.

Timed Timeserver

The Timed Timeserver is a legacy service used primarily on Unix-based systems to synchronize time across networked devices. Operating over UDP port 525, it helps keep system clocks consistent on connected machines within a local network, which is essential for accurate log timestamps, scheduled tasks, and overall network coordination.

Hyperwave ISP

Hyperwave ISP is an official port associated with the Hyperwave Internet Information Server Platform, primarily supporting enterprise-level content management and web publishing solutions. It facilitates communication between client applications and the server backend, enabling functionalities such as content retrieval, indexing, and system management over a network connection.

NetBackup bpcd

Port 13782 is primarily used by Symantec NetBackup (formerly VERITAS) for the bpcd service, which handles client-server communication in enterprise backup environments. This port supports both TCP and UDP protocols and facilitates initial connection setup, command processing, and job management between the NetBackup master server, media servers, and clients.

Linux-HA Heartbeat

Port 694 is assigned to the Linux-HA project's Heartbeat component, a messaging layer that facilitates high-availability clustering in Linux environments. Heartbeat monitors and manages communication between cluster nodes, maintaining failover operations and resource management to ensure system uptime.

NETRJS Remote Job

Port 71 is historically used for the NETRJS (Remote Job Service), primarily designed to facilitate remote job entry and processing on mainframe systems. It allowed users to submit, manage, and receive output from batch processing jobs remotely over a network connection.

BOOTP/DHCP Client

Port 68 is primarily used by the Bootstrap Protocol (BOOTP) Client and the Dynamic Host Configuration Protocol (DHCP) Client. These protocols enable network devices to automatically obtain configuration information such as IP addresses, subnet masks, and gateway addresses. Defined as the destination port for clients in the BOOTP and DHCP process, it is crucial for network initialization and address management within enterprise and home networks alike.

Symantec NetBackup bpdbm

Port 13721 is primarily used by Symantec NetBackup's bpdbm service, formerly part of VERITAS, facilitating central database management for backup and recovery operations across enterprise environments. It supports both TCP and UDP protocols to enable communication between NetBackup servers, clients, and administration consoles, ensuring seamless management of backup catalog data and resource coordination.

Bacula FD

Bacula File Daemon (FD) is a component of the Bacula network backup solution, responsible for managing backup and restore operations on client machines. Operating over both TCP and UDP, it enables secure and efficient data transfer between clients and server controllers within the Bacula ecosystem.

PowerSchool Gradebook

PowerSchool Gradebook Server is a component of the PowerSchool Student Information System, facilitating communication between client applications and the core server for managing gradebooks, assignments, and educational records. It typically operates over both TCP and UDP and is widely deployed in educational institutions to streamline grading workflows.

Cisco STUN-SDLC

Cisco's Serial Tunnel (STUN) with Synchronous Data Link Control (SDLC) is a protocol used primarily to encapsulate mainframe SNA traffic over IP networks. It facilitates bridging traditional serial synchronous protocols across routed IP infrastructure, enabling mainframe communications over modern networking topologies without changing legacy host configurations.

Symantec NOMDB

Port 13786 is primarily used by Symantec's Network Operations Manager Database (NOMDB), which was formerly a component under VERITAS. It facilitates management communications, data collection, and orchestration tasks within Symantec enterprise backup, storage, and data management solutions.

NFS

Network File System (NFS) is a widely used distributed file system protocol that enables users and applications to access files over a network as if they were on local storage. Port 2049 typically serves as the primary communication channel for NFS over UDP. It facilitates remote file access across heterogeneous systems, centralizing data management and improving collaboration.

Kiwi Log Server

SolarWinds Kiwi Log Server is a centralized syslog management solution used to collect, store, analyze, and archive syslog and SNMP messages from network devices. It facilitates real-time event monitoring and enables network administrators to efficiently manage logs and ensure network security and compliance.

Remote WinBatch Control

Port 2212 is primarily associated with Port-A-Pour Remote WinBatch, a proprietary software solution enabling remote management and automation of command scripts on Port-A-Pour systems, typically used in industrial or construction settings. This port facilitates custom automation, scripting, and monitoring for specialized hardware via network connections.

Rsync

Rsync is a fast and versatile file synchronization tool used primarily to efficiently transfer and synchronize files between hosts or within the same system. It minimizes data transfer by only moving the differences between files across secure or insecure channels, making it popular for backups and mirroring.

VMware Remote Console

VMware Remote Console (VMRC) enables users to remotely access and manage virtual machines hosted on VMware infrastructure, providing full console access with mouse and keyboard control for administration and troubleshooting purposes.

TIME Protocol

The TIME protocol is a simple network service used to synchronize computer clocks by providing the current time in a standardized format. Designed primarily for legacy systems, it transmits the number of seconds elapsed since midnight on January 1, 1900. While functional, TIME is largely superseded by more sophisticated protocols like NTP and is seldom used in modern networks.

RMI Activation

Java RMI (Remote Method Invocation) Activation system listens on port 1098 to manage the activation of remote objects in a distributed Java environment. It allows clients to remotely request the initialization and execution of Java objects that may not be active or instantiated, facilitating dynamic and on-demand resource allocation in Java enterprise applications.

Bacula Director

Bacula Director is the primary scheduling and management component of the Bacula open-source backup software suite. It coordinates backup, recovery, verification, and archive tasks by instructing backup clients and storage daemons. This enables centralized administration of automated network backups in a scalable manner across heterogeneous environments.

Remote Monitor (rmonitor)

Remote Monitor (rmonitor) is a UDP-based protocol primarily utilized for monitoring networked systems and services remotely. It enables administrators to collect real-time data regarding the health and performance of various hosts, facilitating proactive operations management and rapid troubleshooting.

DistCC Distributed Compiler

Port 3632 is primarily used by DistCC, a distributed C/C++ compiler system that lets developers speed up compilation by sharing the workload across multiple networked machines. It facilitates collaborative compilation in both local area networks and over VPNs, improving developer productivity in large codebases.

EMWIN

The Emergency Managers Weather Information Network (EMWIN) is a service sponsored by the U.S. National Weather Service to broadcast real-time weather data and warnings. EMWIN provides continuous dissemination of critical meteorological information to emergency managers, government agencies, and interested private users to enhance public safety, support disaster response, and aid weather forecasting.

LiveVault Agent

Iron Mountain LiveVault Agent provides continuous online backup and data protection by transferring files securely to the Iron Mountain cloud storage platform. The agent runs on client systems, capturing changes in real time and ensuring reliable disaster recovery options. It helps organizations safeguard critical data with minimal interruption to operations.

ConsoleWorks UI

Port 5176 is used by ConsoleWorks, a centralized management platform focused on secure remote access, device management, and event logging within critical infrastructure environments. This port typically hosts the application's web-based user interface, allowing administrators to configure systems, monitor events, and review access logs through an intuitive dashboard.

CADSI-LM License Manager

Port 1387 is mainly utilized by LMS International’s license manager service, historically known as CADSI-LM, to facilitate software license management and distribution within corporate and engineering environments. This port handles communication between licensed engineering software applications and centralized license servers, ensuring legitimate access to specialized CAD tools.

Ultra Fractal Server

Port 8691 is the default server port used by Ultra Fractal's distributed network computing capabilities, allowing fractal calculations to be split and delegated across multiple computers. This enables faster rendering of complex fractal images by leveraging the combined resources of a networked environment.

Kerberos Registration

Port 760 is utilized by the Kerberos registration service (known as krbupdate or kreg). It facilitates the registration and update of Kerberos principals and credentials, enabling centralized identity management and secure authentication within a networked environment.

RMI Registry

RMI Registry is a service used by Java applications to register and look up remote objects within distributed computing environments. It facilitates communication between Java-based client and server applications, enabling seamless invocation of methods across network boundaries.

Adobe Flash Debugger

Port 7935 is primarily used by the Adobe Flash Debug Player to interact with debugging tools such as Flash IDE, Flex Builder, or fdb. This fixed port facilitates real-time communication between the developer's environment and the running Flash content, enabling detailed inspection and troubleshooting of Flash applications during development.

Unassigned Port 4

Port 4 is currently unassigned by IANA and does not have a specific service or protocol officially designated for its use. It remains available for dynamic or private application assignments, often utilized temporarily during testing or for ephemeral purposes across TCP and UDP protocols.

Efficient Short Remote Operations (ESRO)

Efficient Short Remote Operations (ESRO) is a lightweight application-layer protocol developed to optimize remote procedure calls over networks with real-time constraints. It provides efficient message exchange mechanisms between servers and clients, particularly beneficial for embedded devices or communication channels with limited resources.

Cylon UC32 Control

Port 4950 is designated for Cylon Controls UC32 communication, primarily used in building automation systems for managing HVAC and lighting via control network communications. It facilitates real-time data exchange and command transmission between central controllers and distributed devices to maintain optimal building operations.

UUCP

UUCP (Unix-to-Unix Copy Protocol) is an early networking suite designed to transfer files, execute commands, and facilitate email messages between Unix systems. Originally developed for dial-up and serial line communication, it became foundational in connecting Unix systems before widespread adoption of TCP/IP protocols, enabling batch-mode network communication across disparate systems.

Reverse Routing Header (RRH)

Port 753 is assigned for the Reverse Routing Header (RRH) protocol, which facilitates advanced routing control for IP packets. It's primarily used in experimental or specialized network environments that require customized packet routing and is an official, unencrypted control protocol operating mainly over TCP.

PKIX Time Stamp Protocol

The PKIX Time Stamp Protocol (TSP) provides a method for associating a trusted timestamp with data, enabling proof that specific content existed at a particular point in time. Commonly used within digital signature frameworks, TSP ensures long-term validation by involving certified time-stamping authorities (TSAs).

HP Softbench CM

Port 6110 is designated for HP Softbench Configuration Management (SoftCM), a component of Hewlett-Packard's Softbench integrated development environment. It facilitates communication and operations related to configuration management processes during software development, enabling version control and collaborative work for development teams.

UPS Services

Port 401 is primarily used by Uninterruptible Power Supply (UPS) management systems. These systems use the port to facilitate monitoring, configuration, and control of UPS devices over a network, enabling administrators to maintain power continuity and manage alerts related to power events.

Arcserve Backup

Brightstor Arcserve Backup (now known as Arcserve Backup) is a comprehensive data protection solution that provides disk-based and tape-based backup, recovery, and archiving for enterprise environments. It assists businesses in securing their crucial data by automating backup processes for servers, applications, and databases, facilitating disaster recovery, and supporting various storage media.

CFT File Transfer

**CFT-1 to CFT-7** is a suite of protocols primarily used within enterprise environments to facilitate secure and reliable file transfers, especially in distributed systems. Managed File Transfer (MFT) solutions leveraging CFT enable automation, integrity checks, and streamlined integration with existing IT workflows, ensuring critical files are exchanged efficiently.

Name Service

Port 760, associated with the 'ns' service, typically refers to the UNIX-based Name Server (ns), a legacy RPC-based protocol used for name and directory service purposes. Once more common in UNIX environments, this port now sees minimal use but can still be found in some older networks or custom deployments. It facilitates network-based lookups of naming information, operating over both TCP and UDP transports.

Finger Protocol

The Finger Protocol is a legacy network service designed to provide information about users on a remote system. It allows clients to retrieve details such as usernames, full names, login time, and idle status. Originally created in the early days of the internet, it facilitated social interaction and user lookup across UNIX networked hosts.

LLRP

The EPCglobal Low Level Reader Protocol (LLRP) is a standardized communication interface for RFID readers, enabling efficient management and data transfer between RFID devices and backend systems. It simplifies interoperability across RFID hardware from different vendors, supporting real-time monitoring and control of RFID operations.

Cisco TCO Documentation

Port 1975 is commonly used by Cisco for their TCO (Total Cost of Ownership) documentation service, typically utilizing UDP protocol for distributing internal system information or configuration data. While it is an official port assigned to Cisco, its implementation is specific to Cisco systems and is seldom seen on public networks.

NetIQ End2End

NetIQ End2End (port 2220) is designated for communication and monitoring within the NetIQ End2End suite, used primarily for real user monitoring and management of application response times. It facilitates end-to-end transaction tracking, enabling organizations to assess application availability, performance, and user experience from multiple locations or environments.

PTP Event Messages

Port 319 is primarily used by the Precision Time Protocol (PTP) to synchronize networked clocks with high precision using event messages. It plays a critical role in environments where accurate timekeeping is essential, such as in telecommunications, financial trading, industrial automation, and power distribution systems.

Nortel Software

Port 6050 is commonly associated with proprietary services used by legacy Nortel Networks software and communication systems, often involving diagnostics, configuration, or internal messaging functions. As Nortel equipment is often deployed in enterprise or telecom environments, this port may be part of system integration or management tasks for their infrastructure components.

Dantz Retrospect

Dantz Retrospect is a backup and recovery software solution that facilitates data protection by scheduling and managing backups across various platforms and devices. The software uses this port to manage client-server communications for coordinating backup tasks and restoring data.

Bacula Storage Daemon

Bacula Storage Daemon is the storage management service in the Bacula open-source backup software suite. It handles the reading and writing of backup data to and from physical or virtual storage devices, acting as the critical intermediary between backup jobs and data repositories.

Verisys FIM

Verisys is a file integrity monitoring (FIM) software designed to detect unauthorized changes to files and configurations across systems. It is typically employed within enterprise environments to enhance compliance, security, and operational integrity by monitoring critical system files and alerting administrators of any unexpected modifications.

PUMP Protocol

**PUMP (Packet Usage Measurement Protocol)** is an official experimental protocol designed to facilitate usage measurement and accounting on IP networks. It operates on both TCP and UDP port 751, enabling flexible communication options. Despite its limited adoption, it has historical significance in early network accounting concepts.

Reserved Port

Port 1024 is considered a reserved system port that generally marks the beginning of the unprivileged, or dynamic/private port range. This port is traditionally not assigned to a specific service but serves as a boundary line between well-known ports and ephemeral port ranges in networking.

WIP Message Protocol

The WIP Message Protocol operating over port 99 is a messaging or inter-process communication protocol used by specific applications or legacy systems. It facilitates data transfer between clients and servers, enabling message exchanging within a network. Though unofficial and not widely adopted, it supports specialized communication in niche environments.

loadav

Port 750, known as loadav, is traditionally used in UNIX environments associated with Kerberos 4's service operation. Historically, it was designated for the Kerberos 'kerberos-iv' remote authentication protocol, facilitating secure login and authentication in a distributed computing environment. Given the evolution of security practices, its use has become largely obsolete in favor of more secure protocols.

Promise RAID Ctrl

Port 712 is used primarily by Promise RAID Controllers, which manage disk arrays to provide data redundancy and performance enhancements. These controllers communicate over UDP, facilitating RAID management tasks such as monitoring, configuration, and status reporting. Accessing this port often indicates administrative interactions with the RAID hardware.

Cajo Distributed Computing

Port 1198 is used by The cajo project, an open-source Java framework enabling dynamic, transparent, distributed computing. It allows Java applications or objects to communicate easily over the network without complex setup, facilitating remote method invocation and seamless collaboration between distributed components. Suitable for scalable networked systems, Cajo simplifies the development of distributed Java applications that span local and remote environments.

Suptechnology ERP

Suptechnology ERP 2.0 is an enterprise resource planning system designed to integrate key business processes across an organization. It facilitates streamlined workflows, enhanced data management, and improved operational efficiency. The platform provides modules for finance, human resources, inventory, procurement, and customer relationship management, helping companies gain better visibility and control over their operations.

Reserved Port

Port 1023 is a reserved network port, historically set aside to prevent conflicts and ambiguities during network communications. It sits just below the commonly accepted range for dynamic or private ports, serving as a transitional boundary between well-known ports and ephemeral ports allocated by the operating system during client connections.

iOperator Signal

Port 6072 is primarily associated with the iOperator Protocol Signal Port, a proprietary signaling protocol often used in telecom management frameworks, network operator command channels, or internal carrier-grade systems. While not widely documented publicly, this port serves key functions in enabling communication, control, and monitoring between management systems and operator signaling modules.

CFT 0

**Port 1761 (cft-0)** is officially assigned for **Cisco's Flexible Table 0 (cft-0)**, a protocol commonly utilized in Cisco networking equipment. It primarily facilitates communication associated with Cisco's proprietary protocols and device management, typically over UDP. While not widespread outside Cisco environments, understanding its role is important for network administrators managing Cisco infrastructure.

CVS

**CVS (Concurrent Versions System)** is a legacy version control tool that enables multiple developers to collaborate on source code by tracking changes over time. CVS uses a client-server architecture, where clients communicate with a centralized CVS server, typically over port 2401, to commit updates, review revisions, and perform merges. Though largely supplanted by modern systems like Git and Mercurial, CVS still appears in some legacy environments.

EMC CLARiiON

Port 6389 is commonly associated with EMC's CLARiiON storage systems, which utilize it for management, monitoring, and data operations. This port serves as a communication endpoint for storage array management software, enabling administrators to configure, monitor, and maintain storage hardware. It is primarily used within enterprise network environments that deploy EMC storage solutions.

QRH

QRH is a network port associated with the official assignment of port 752, primarily used for secure routing control applications such as `kerberos_load` and `userreg`. While it is uncommon in everyday networking, it contributes to routing authentication and management. Its usage is generally confined to specialized network infrastructure services.

Tell Send

Port 754, commonly known as Tell Send, is historically associated with legacy UNIX-based messaging utilities. It enables simple message passing between users on networked systems, primarily used in academic or internal organizational environments. While largely obsolete today, it represents an early form of network communication predating modern instant messaging and collaboration tools.

Brightstor Arcserve

Brightstor Arcserve Backup is a comprehensive enterprise backup solution designed to protect critical data across multiple platforms and applications. It facilitates automated data backup, recovery, and storage management across Windows and various networked environments, offering centralized control over backup operations.

PTP General Messages

Port 320 is designated for Precision Time Protocol (PTP) general messages. PTP is widely used to synchronize clocks throughout a computer network, providing highly accurate time coordination required by many industrial, financial, and telecommunication systems. This port commonly handles non-event control and synchronization data enabling devices to maintain alignment essential for distributed processes.

IEEE MMS

IEEE MMS (Manufacturing Message Specification) on port 651 facilitates standardized real-time messaging for industrial automation systems. It is widely used to exchange information between manufacturing equipment and control systems, enabling reliable data transfer and machine interaction in diverse automation environments.

LiveVault Agent

Port 2145 is primarily used by Iron Mountain's LiveVault Agent, part of their cloud-based backup and recovery service. The agent facilitates the transfer of backup data from client systems to Iron Mountain’s secure cloud storage over the network, providing automated, continuous data protection, especially for enterprise environments with critical data retention needs.

HP Softbench SPC

HP Softbench Sub-Process Control (SPC) port is used by legacy HP development tools to manage subprocesses and communicate between components, primarily within HP's Softbench integrated development environment. Supporting both TCP and UDP protocols, it facilitates process control and inter-tool messaging, enabling coordinated software development workflows through remote execution and debugging capabilities.

QPasa

QPasa, developed by MQSoftware, is a comprehensive systems and network management tool that primarily focuses on monitoring IBM WebSphere MQ environments. Operating over port 2612, it provides real-time insights and analytics for messaging infrastructures, facilitating efficient administration and troubleshooting of messaging middleware systems.

NDPS Printer Agent

Port 3396 is primarily used by Novell Distributed Print Services (NDPS) Printer Agent. NDPS streamlines network printing management and facilitates efficient communication between client workstations, print servers, and network printers in Novell NetWare environments. Supporting both TCP and UDP, it handles job submissions, status updates, printer administration, and bidirectional status messaging for seamless network print services.

NetIQ Monitor Console

NetIQ Monitor Console is a management interface used to facilitate the monitoring of system and network health through NetIQ’s suite of enterprise solutions. It allows administrators to collect, visualize, and analyze performance data across different hosts, making it easier to ensure infrastructure stability and availability.

NetIQ Qcheck

NetIQ Qcheck is a network diagnostic and performance measurement tool developed by NetIQ. It allows administrators and network engineers to test network connectivity, latency, throughput, and packet loss between hosts, assisting in troubleshooting network issues and validating network configurations. It facilitates proactive monitoring to ensure optimal network performance.

ClearCase ALBD

IBM Rational ClearCase ALBD (Atria Location Broker Daemon) manages network communication and service coordination for ClearCase, a popular version control system used for managing large-scale software development environments. It facilitates process communication, broker requests from ClearCase clients, and coordinates multiple ClearCase services across distributed systems.

Perforce

Perforce is a version control system designed to handle large codebases and binary assets, widely used in large-scale software development and digital content creation. Operating primarily on port 1666 over TCP, Perforce facilitates efficient code collaboration, asset management, and change tracking across distributed teams. It supports branching, merging, access control, and integrations with various development tools, making it a crucial tool for enterprises and organizations requiring robust version control capabilities.

NetIQ Endpoint

NetIQ Endpoint port 10115 is used primarily by NetIQ suite services for communication between endpoints and management consoles. This port facilitates management, monitoring, policy enforcement, and event data collection across networked devices, allowing administrators to maintain oversight on endpoint activities and configurations in enterprise environments.

Laplink

Laplink is a proprietary file transfer software originally designed to simplify migrating files and settings between PCs. It leverages this dedicated port to establish connections between devices, enabling quick, user-friendly migration or synchronization tasks without needing extensive configuration.

CVSup

CVSup is a network utility designed primarily for synchronizing source trees between a central repository and client systems. It efficiently manages file transfers, supporting incremental or partial updates to reduce bandwidth consumption. Mainly used in FreeBSD development environments, CVSup helps ensure that developers and users maintain up-to-date versions of source code more reliably than traditional downloading methods.

CoMotion Backup

CoMotion Backup is a network service that facilitates distributed file sharing and backup functionalities. It is primarily used within enterprise environments to provide redundancy, data protection, and versioning capabilities over TCP and UDP transports. While it is a relatively uncommon service today, it was once deployed to optimize collaborative workflows and ensure data persistence through backup synchronization.

Wrapper: Offline asset server

<p>Wrapper: Offline asset server</p>