Sorted by Port Number
This information comes primarily from the Windows 2000 Resource Kit Guide. I have added a few interesting items such as VNC and Back Orifice.
TCP |
UDP |
Service Name |
20 |
FTP-data |
|
21 |
FTP |
|
23 |
Telnet |
|
25 |
SMTP |
|
42 |
WINS Replication |
|
53 |
53 |
DNS client to server lookup (varies) |
53 |
53 |
SQL TCP client name lookup |
67 |
DHCP client |
|
68 |
DHCP server |
|
69 |
Remote Install TFTP |
|
80 |
HTTP |
|
80 |
Internet Information Services (IIS) |
|
88 |
88 |
Kerberos krb5 |
102 |
MTA - X.400 over TCP/IP |
|
102 |
X400 |
|
110 |
POP3 |
|
119 |
NNTP |
|
135 |
135 |
DCOM (SCM uses udp/tcp to dynamically assign ports for DCOM) |
135 |
135 |
SCM used by DCOM |
135 |
Client Server Communication |
|
135 |
Exchange Administrator |
|
135 |
RPC |
|
135 |
Client/Server Communication |
|
135 |
DHCP Manager |
|
135 |
RPC user manager, service manager, port mapper |
|
135 |
SQL session mapper |
|
135 |
WINS Manager |
|
135, 2101 |
3527 |
Microsoft Message Queue Server |
137 |
WINS Registration |
|
138 |
Browsing datagram responses of NetBIOS over TCP/IP |
|
138 |
NetBT datagrams |
|
138 |
NetLogon |
|
137 |
Browsing requests of NetBIOS over TCP/IP |
|
137 |
File shares name lookup |
|
137 |
NetBT name lookups |
|
137 |
Printer sharing name lookup |
|
137 |
SQL Named Pipes encryption over other protocols name lookup |
|
137 |
SQL RPC encryption over other protocols name lookup |
|
137 |
WINS NetBios over TCP/IP name service |
|
137 |
WINS Proxy |
|
139 |
DNS Administration |
|
139 |
File shares session |
|
139 |
NetBT service sessions |
|
139 |
Printer sharing session |
|
139 |
SQL session |
|
139 |
137, 138 |
Login Sequence |
139 |
137, 138 |
Pass Through Verification |
139, 445 |
445 |
Common Internet File System (CIFS) |
143 |
IMAP |
|
143 |
IMAP |
|
161 |
SNMP |
|
162 |
SNMP Trap |
|
389 |
LDAP |
|
389 |
LDAP |
|
389 |
NetMeeting Internet Locator Server ILS |
|
443 |
HTTP-Secure Sockets Layer (SSL) |
|
464 |
464 |
Kerberos kpasswd (v5) |
515 |
UNIX Printing |
|
522 |
NetMeeting User Location Service |
|
522 |
NetMeeting user location service ULS |
|
531 |
IRC |
|
543 |
Kerberos klogin |
|
544 |
Kerberos kshell |
|
548 |
Macintosh, File Services (AFP/IP) |
|
560 |
Content Replication Service |
|
563 |
NNTP (SSL) |
|
563 |
NNTP (SSL) |
|
568 |
Membership DPA |
|
569 |
Membership MSN |
|
636 |
LDAP (SSL) |
|
636 |
LDAP (SSL) |
|
993 |
IMAP (SSL) |
|
993 |
IMAP (SSL) |
|
995 |
POP3 (SSL) |
|
995 |
POP3 (SSL) |
|
1024 - 5000 |
SQL session |
|
1234 |
ISPMOD (SBS 2nd tier DNS registration wizard) |
|
1433 |
SQL session |
|
1500 |
RPC client fixed port session queries |
|
1503 |
NetMeeting T.120 |
|
1701 |
L2TP |
|
1645 or 1812 |
Radius authentication (Routing and Remote Access) |
|
1646 or 1813 |
Radius accounting (Routing and Remote Access) |
|
1720 |
NetMeeting H.323 call setup |
|
1723 |
PPTP control |
|
1731 |
NetMeeting Audio Call Control |
|
1801 |
1801 |
Microsoft Message Queue Server |
2053 |
Kerberos de-multiplexer |
|
2103, 2105 |
Microsoft Message Queue Server |
|
2500 |
RPC client using a fixed port session replication |
|
2504 |
Network Load Balancing |
|
3389 |
Terminal Server |
|
5800 |
VNC, HTTP listener |
|
5900 |
VNC, Native listener |
|
6665 |
Microsoft Chat server to server |
|
6667 |
Microsoft Chat client to server |
|
8000 |
Cybercash Credit Gateway |
|
8001 |
Cybercash Administration |
|
8002 |
Cybercash Coin Gateway |
|
12345-12346 |
Trojan Horses including GabanBus, NetBus, Pie Bill Gates, X-bill |
|
31337 |
Back Orifice default port. -note that back Orifice can be configured to use any port |