| Port No. | Protocol | Service | Description |
| 5000 | tcp/udp | commplex-main | |
| 5000 |
tcp/udp |
# |
Sockets de Troie
(A French Trojan Horse and virus) |
| 5000 |
tcp |
# |
Back Door Setup, Blazer5, Bubbel, ICKiller, Ra1d,
Sockets des Troie port 5001 Back Door Setup, W32.Bobax, Trojan.Webus, W32.Mytob |
| 5001 | tcp/udp | commplex-link | |
| 5001 |
tcp/udp |
# |
Sockets de Troie
(A French Trojan Horse and virus) |
| 5002 | tcp/udp | rfe | radio free ethernet |
| 5002 |
tcp/udp |
# |
Shaft DDoS analysis |
| 5002 |
tcp |
# |
cd00r, W32.Spybot |
| 5003 | tcp | fmpro-internal | "FileMaker, Inc. - Proprietary transport" |
| 5003 | udp | fmpro-internal | "FileMaker, Inc. - Proprietary name binding" |
| 5003 |
tcp |
# |
W32.Spybot |
| 5004 | tcp/udp | avt-profile-1 | avt-profile-1 |
| 5004 |
udp |
# |
RTP(Real Time Protocol) |
| 5005 | tcp/udp | avt-profile-2 | avt-profile-2 |
| 5005 |
udp |
# |
RTP(Real Time Protocol) |
| 5006 | tcp/udp | wsm-server | wsm server |
| 5007 | tcp/udp | wsm-server-ssl | wsm server ssl |
| 5008 | tcp/udp | synapsis-edge | Synapsis EDGE |
| 5009 | tcp/udp | winfs | Microsoft Windows Filesystem |
| 5010 | tcp/udp | telelpathstart | TelepathStart |
| 5010 |
tcp/udp |
# |
Yahoo! Messenger |
| 5010 |
tcp |
# |
Solo |
| 5011 | tcp/udp | telelpathattack | TelepathAttack |
| 5011 |
tcp |
# |
One of the Last Trojans - OOTLT, modified |
| 5012-5019 | tcp/udp | # | Unassigned |
| 5020 | tcp/udp | zenginkyo-1 | zenginkyo-1 |
| 5021 | tcp/udp | zenginkyo-2 | zenginkyo-2 |
| 5022 | tcp/udp | mice | mice server |
| 5023 | tcp/udp | htuilsrv | Htuil Server for PLD2 |
| 5024 | tcp/udp | scpi-telnet | SCPI-TELNET |
| 5025 | tcp/udp | scpi-raw | SCPI-RAW |
| 5025 |
tcp |
# |
WM Remote KeyLogger |
| 5026 | tcp/udp | strexec-d | Storix I/O daemon (data) |
| 5027 | tcp/udp | strexec-s | Storix I/O daemon (stat) |
| 5028-5041 | tcp/udp | # | Unassigned |
| 5031-5032 |
tcp |
# |
Net Metropolitan |
| 5042 | tcp/udp | asnaacceler8db | asnaacceler8db |
| 5043 | tcp/udp | swxadmin | ShopWorX Administration |
| 5044 | tcp/udp | lxi-evntsvc | LXI Event Service |
| 5045-5049 | tcp/udp | # | Unassigned |
| 5050 | tcp/udp | mmcc | multimedia conference control tool |
| 5050 | tcp/udp | # | Common for eggdrop |
| 5051 | tcp/udp | ita-agent | ITA Agent |
| 5052 | tcp/udp | ita-manager | ITA Manager |
| 5053-5054 | tcp/udp | # | Unassigned |
| 5055 | tcp/udp | unot | UNOT |
| 5056 | tcp/udp | intecom-ps1 | Intecom PS 1 |
| 5057 | tcp/udp | intecom-ps2 | Intecom PS 2 |
| 5058-5059 | tcp/udp | # | Unassigned |
| 5060 | tcp/udp | sip | SIP |
| 5061 | tcp/udp | sip-tls | SIP-TLS |
| 5062-5063 | tcp/udp | # | Unassigned |
| 5064 | tcp/udp | ca-1 | Channel Access 1 |
| 5065 | tcp/udp | ca-2 | Channel Access 2 |
| 5066 | tcp/udp | stanag-5066 | STANAG-5066-SUBNET-INTF |
| 5067 | tcp/udp | authentx | Authentx Service |
| 5068 | tcp/udp | # | Unassigned |
| 5069 | tcp/udp | i-net-2000-npr | I/Net 2000-NPR |
| 5070 | tcp/udp | vtsas | VersaTrans Server Agent Service |
| 5071 | tcp/udp | powerschool | PowerSchool |
| 5072 | tcp/udp | ayiya | Anything In Anything |
| 5073 | tcp/udp | tag-pm | Advantage Group Port Mgr |
| 5074 | tcp/udp | alesquery | ALES Query |
| 5075-5080 | tcp/udp | # | Unassigned |
| 5081 | sctp | sdl-ets | SDL - Ent Trans Server |
| 5082-5089 | tcp/udp | # | Unassigned |
| 5090 | sctp | car | Candidate AR |
| 5091 | sctp | cxtp | Context Transfer Protocol |
| 5092 | tcp/udp | # | Unassigned |
| 5093 | tcp/udp | sentinel-lm | Sentinel LM |
| 5094-5098 | tcp/udp | # | Unassigned |
| 5099 | tcp/udp | sentlm-srv2srv | SentLM Srv2Srv |
| 5100 | tcp/udp | socalia | Socalia service mux |
| 5101 | tcp/udp | talarian-tcp | Talarian_TCP |
| 5102 | tcp/udp | oms-nonsecure | Oracle OMS non-secure |
| 5103-5111 | tcp/udp | # | Unassigned |
| 5111 |
tcp/udp |
# |
W32.Korgo |
| 5112 | tcp/udp | pm-cmdsvr | PeerMe Msg Cmd Service |
| 5113-5132 | tcp/udp | # | Unassigned |
| 5133 | tcp/udp | nbt-pc | Policy Commander |
| 5134-5136 | tcp/udp | # | Unassigned |
| 5136 |
tcp/udp |
# |
Toob |
| 5137 | tcp/udp | ctsd | MyCTS server port |
| 5138-5144 | tcp/udp | # | Unassigned |
| 5145 | tcp/udp | rmonitor_secure | RMONITOR SECURE |
| 5146-5149 | tcp/udp | # | Unassigned |
| 5150 | tcp/udp | atmp | Ascend Tunnel Management Protocol |
| 5151 | tcp | esri_sde | ESRI SDE Instance |
| 5151 | udp | esri_sde | ESRI SDE Remote Start |
| 5151 |
tcp/udp |
# |
Optix |
| 5152 | tcp/udp | sde-discovery | ESRI SDE Instance Discovery |
| 5153 | tcp/udp | # | Unassigned |
| 5154 | tcp/udp | bzflag | BZFlag game server |
| 5155 | tcp/udp | asctrl-agent | Oracle asControl Agent |
| 5156-5164 | tcp/udp | # | Unassigned |
| 5165 | tcp/udp | ife_icorp | ife_1corp |
| 5166 | tcp/udp | winpcs | WinPCS Service Connection |
| 5167 | tcp/udp | scte104 | SCTE104 Connection |
| 5168 | tcp/udp | scte30 | SCTE30 Connection |
| 5169-5189 | tcp/udp | # | Unassigned |
| 5180 |
tcp/udp |
# |
Peeper, Netscape(thanx Bill?) |
| 5190 | tcp/udp | aol | America-Online |
| 5190 |
tcp/udp |
# |
Webus |
| 5191 | tcp/udp | aol-1 | AmericaOnline1 |
| 5192 | tcp/udp | aol-2 | AmericaOnline2 |
| 5193 | tcp/udp | aol-3 | AmericaOnline3 |
| 5194-5199 | tcp/udp | # | Unassigned |
| 5200 | tcp/udp | targus-getdata | TARGUS GetData |
| 5201 | tcp/udp | targus-getdata1 | TARGUS GetData 1 |
| 5202 | tcp/udp | targus-getdata2 | TARGUS GetData 2 |
| 5203 | tcp/udp | targus-getdata3 | TARGUS GetData 3 |
| 5204-5221 | tcp/udp | # | Unassigned |
| 5222 | tcp/udp | xmpp-client | XMPP Client Connection |
| 5223-5224 | tcp/udp | # | Unassigned |
| 5225 | tcp/udp | hp-server | HP Server |
| 5226 | tcp/udp | hp-status | HP Status |
| 5227-5233 | tcp/udp | # | Unassigned |
| 5232 |
tcp |
# |
Lateda, W32.Mytob, W32.Spybot |
| 5234 | tcp/udp | eenet | EEnet communications |
| 5235 | tcp/udp | # | Unassigned |
| 5236 | tcp/udp | padl2sim | |
| 5237-5249 | tcp/udp | # | Unassigned |
| 5250 | tcp/udp | igateway | iGateway |
| 5251 | tcp/udp | caevms | CA eTrust VM Service |
| 5252 | tcp/udp | movaz-ssc | Movaz SSC |
| 5253-5264 | tcp/udp | # | Unassigned |
| 5264 | tcp/udp | 3com-njack-1 | 3Com Network Jack Port 1 |
| 5265 | tcp/udp | 3com-njack-2 | 3Com Network Jack Port 2 |
| 5266-5268 | tcp/udp | # | Unassigned |
| 5269 | tcp/udp | xmpp-server | XMPP Server Connection |
| 5270-5271 | tcp/udp | # | Unassigned |
| 5272 | tcp/udp | pk | PK |
| 5273-5281 | tcp/udp | # | Unassigned |
| 5277 |
tcp |
# |
WinJank |
| 5282 | tcp/udp | transmit-port | Marimba Transmitter Port |
| 5283-5299 | tcp/udp | # | Unassigned |
| 5300 | tcp/udp | hacl-hb | HA cluster heartbeat |
| 5300 |
tcp |
# |
W32.Kibuv.Worm |
| 5301 | tcp/udp | hacl-gs | HA cluster general services |
| 5302 | tcp/udp | hacl-cfg | HA cluster configuration |
| 5303 | tcp/udp | hacl-probe | HA cluster probing |
| 5304 | tcp/udp | hacl-local | HA Cluster Commands |
| 5305 | tcp/udp | hacl-test | HA Cluster Test |
| 5306 | tcp/udp | sun-mc-grp | Sun MC Group |
| 5307 | tcp/udp | sco-aip | SCO AIP |
| 5308 | tcp/udp | cfengine | CFengine |
| 5309 | tcp/udp | jprinter | J Printer |
| 5310 | tcp/udp | outlaws | Outlaws |
| 5311 | tcp/udp | # | Unassigned |
| 5312 | tcp/udp | permabit-cs | Permabit Client-Server |
| 5313 | tcp/udp | rrdp | Real-time & Reliable Data |
| 5314 | tcp/udp | opalis-rbt-ipc | opalis-rbt-ipc |
| 5315 | tcp/udp | hacl-poll | HA Cluster UDP Polling |
| 5316-5342 | tcp/udp | # | Unassigned |
| 5321 |
tcp |
# |
Firehotcker |
| 5326 |
tcp/udp |
# |
Snowdoor |
| 5328 |
tcp/udp |
# |
Snowdoor |
| 5333 |
tcp |
# |
Backage, NetDemon |
| 5343 | tcp/udp | kfserver | Sculptor Database Server |
| 5343 |
tcp |
# |
wCrat - WC Remote Administration Tool |
| 5344 | tcp/udp | xkotodrcp | xkoto DRCP |
| 5345-5350 | tcp/udp | # | Unassigned |
| 5351 | tcp/udp | nat-pmp | NAT Port Mapping Protocol |
| 5352 | tcp/udp | dns-llq | DNS Long-Lived Queries |
| 5353 | tcp/udp | mdns | Multicast DNS |
| 5353 |
udp |
# |
WebRamp control |
| 5354 | tcp/udp | mdnsresponder | Multicast DNS Responder IPC |
| 5355 | tcp/udp | llmnr | LLMNR |
| 5356 | tcp/udp | ms-smlbiz | Microsoft Small Business |
| 5357 | tcp/udp | wsdapi | Web Services for Devices |
| 5358 | tcp/udp | wsdapi-s | WS for Devices Secured |
| 5359-5396 | tcp/udp | # | Unassigned |
| 5373 |
tcp |
# |
W32.Gluber |
| 5397 | tcp/udp | stresstester | StressTester(tm) Injector |
| 5398 | tcp/udp | elektron-admin | Elektron Administration |
| 5399 | tcp/udp | securitychase | SecurityChase |