- Well-known ports: 0-1023
- Registered ports: 1024-49151
- Dynamic: 49152-65535
Protocols
- ICMP: 1
- IGMP: 2
- TCP: 6
- UDP: 17
TCP
- 20-21: FTP
- 22: SSH, SFTP
- 23: Telnet
- 25: SMTP
- 53: DNS, Servers transferring between each other
- 80: HTTP
- 88: Kerberos
- 110: POP3
- 123: NTP
- 135: DCE RPC Endpoint Manager|DCOM Service Control|WMI
- 137: NetBIOS Name Service
- 138: NetBIOS Session Service
- 139: NetBIOS Session Service
- 143: IMAP
- 389: LDAP
- 443: HTTPS
- 445: MS Directory Service SMB
- 636: LDAPS
- 990: FTPS
- 1024-1030: Restricted DCOM
- 1433-1434: MSSQL
- 1723: PPTP
- 3306: MySQL
- 3389: RDP
- 6514: Syslog TLS
- 10161-10162: SNMP TLS
- 49152-65535: Unrestricted DCOM
UDP
- 53: Client queries for DNS
- 67: DHCP Client sends traffic out
- 68: DHCP Client receives answers on this port
- 69: TFTP
- 161: SNMP agents received data
- 162: SNMP traps/notifications
- 514: Syslog
- 1701: L2TP
ICMP
- protocol 0: Echo reply
- protocol 3: Destination unreachable
- protocol 8: Echo request