Services
Service Bank
Ports, fingerprints, file paths and the sensitive files worth looting. Search inside any service with ⌘K.
134 services
Active Directory / LDAP
:88:389:636:3268#windows#authentication
AD Enumeration
:389:636:445:88#windows#reconnaissance
AD Lateral Movement
:445:5985:5986:135#windows#lateral-movement
AD Trust Attacks
:88:389:445:135#windows#ad
ADCS
:80:443#windows#ad
Adobe ColdFusion
:80:443:8500#web#java
Amazon Redshift
:5439:8191#database#aws
Android Debug Bridge (ADB)
:5555#android#debug
Ansible
:22#ci-cd#automation
Apache httpd
:80:443#web#server
Apache NiFi
:8080:8443#web#data-integration
Apache Tomcat
:8080:8005:8009#web#java
Apple Filing Protocol (AFP)
:548:427#file-share#apple
Asterisk AMI
:5038:5060:5061#voip#pbx
BACnet (Building Automation)
:47808#ics#scada
Bitcoin / Crypto Node
:8333:18333:8332:50001#cryptocurrency#blockchain
BloodHound
:8080:7687#ad#windows
Cacti
:80:443#monitoring#network
Cassandra
:9042:9160:7000:7199#database#nosql
Check Point FireWall-1
:256:55777:18190:443#firewall#security
Cisco Catalyst SD-WAN
:443:22:830#cisco#sdwan
Cisco Smart Install
:4786#cisco#network
CouchDB
:5984:6984#database#nosql
DACL / ACL Attacks
:445:135:389#windows#ad
distcc
:3632#compiler#rce
DNS / BIND
:53#dns#network
Docker API
:2375:2376#container#docker
Docker Registry
:5000:443#container#docker
Drupal
:80:443#web#cms
Echo
:7#network#testing
Elasticsearch
:9200:9300#database#search
EPP
:700#dns#domain
Erlang Port Mapper (epmd)
:4369#erlang#distributed
EtherNet/IP (CIP)
:44818:2222#ics#scada
Exchange / OWA Attacks
:443:80:25:587#windows#mail
fail2ban
:22:80#security#monitoring
FastCGI / PHP-FPM
:9000#web#php
Finger
:79#network#information-disclosure
FreePBX
:80:443:5060#voip#pbx
FTP
:21:20:990:989#file-share#ftp
Gitea / Gogs
:3000:22#ci-cd#git
GitLab
:80:443:22#ci-cd#git
GlusterFS
:24007:49152-49156#file-share#distributed
Gophish
:3333:443:80#web#phishing
Grafana
:3000:443#monitoring#analytics
Hadoop
:50070:8088:9870:9000#distributed#big-data
HashiCorp Vault
:8200:8201#web#secrets
Helm Tiller
:44134:8080#kubernetes#helm
HP/Compaq Insight Manager
:2301:443#monitoring#hp
HSQLDB
:9001#database#java
IBM MQ
:1414:9443#messaging#queue
Ident
:113#network#information-disclosure
IIS
:80:443:8172#web#windows
IMAP / POP3
:143:993:110:995#mail#imap
incron
:22#linux#automation
InfluxDB
:8086:8083:2003#database#time-series
IPMI
:623:443#hardware#management
IPsec / IKE VPN
:500:4500:1701#vpn#network
IRC
:6667:6697:6660-6669#chat#communication
iSCSI
:3260#file-share#storage
Java RMI
:1099:1100-#java#rpc
JBoss / GlassFish
:8080:8009:9990:443#web#java
JDWP (Java Debug Wire Protocol)
:5005:8000#java#debug
Jenkins
:8080:50000#ci-cd#automation
Joomla
:80:443#web#cms
Kerberos
:88:464:749#authentication#windows
Kerberos Attacks
:88#windows#ad
Kibana
:5601#monitoring#analytics
Kubernetes
:6443:10250:10255:2379#container#orchestration
LDAP
:389:636:3268:3269#directory#authentication
Log4Shell (Log4j JNDI)
:80:443:389:1389#web#rce
Mattermost
:8065:443#web#chat
mDNS / DNS-SD
:5353#dns#discovery
Memcached
:11211#cache#distributed
Modbus (ICS/SCADA)
:502#ics#scada
MongoDB
:27017:27018:28017#database#nosql
MQTT
:1883:8883:9001#iot#messaging
MSRPC / WMI
:135:593:445#windows#rpc
MSSQL
:1433:1434#database#microsoft
MSSQL in AD Environments
:1433:445:88#windows#ad
MySQL / MariaDB
:3306#database#mysql
NATS
:4222:6222:8222#messaging#distributed
NDMP
:10000#file-share#backup
NetExec (nxc)
:445:5985:389#windows#ad
Network Printers (JetDirect)
:9100:515:631#hardware#printer
NFS
:2049:111:20048#file-share#linux
nginx
:80:443#web#server
NSClient++
:12489#monitoring#windows
NTLM Relay Attacks
:445:139:80:5985#windows#authentication
NTP
:123#network#time
OMI (OMIGOD)
:5986:1270:443#remote-access#rce
OPC UA
:4840:443#ics#scada
Openfire (XMPP)
:9090:5222:5269:443#web#xmpp
Oracle TNS
:1521:1522-1529:5500#database#oracle
osTicket
:80:443#web#ticketing
PaperCut NG/MF
:80:443:9191#web#print
Portmapper / rpcbind
:111#network#rpc
Postfix / SMTP
:25:587:465#mail#smtp
PostgreSQL
:5432#database#sql
PowerView / SharpView
:389:445:88#windows#ad
PPPP P2P Cameras
:48010#iot#camera
PPTP VPN
:1723:47#vpn#network
PRTG Network Monitor
:80:443#monitoring#network
R-Services
:512:513:514#remote-access#unix
RabbitMQ / AMQP
:5672:15672:25672#messaging#queue
RDP
:3389#remote-access#windows
Redis
:6379#cache#database
Roundcube Webmail
:80:443#mail#webmail
rsync
:873#file-share#sync
RTSP (Streaming / Cameras)
:554:8554#streaming#camera
Rusersd
:1993#network#information-disclosure
SAP
:3200:3300:8000:443#enterprise#erp
SCCM / MECM Attacks
:80:443:445:8530#windows#ad
SIP / VoIP
:5060:5061#voip#telephony
SMB
:445:139#file-share#windows
SMTP
:25:587:465:2525#mail#smtp
SNMP
:161:162#monitoring#network
Splunk
:8000:8089:9997#monitoring#siem
Squid Proxy
:3128:8080#proxy#cache
SSH
:22#remote-access#linux
Subversion (SVN)
:3690:443:8443#ci-cd#version-control
TACACS+
:49#authentication#network
Telnet
:23#remote-access#legacy
TFTP
:69#file-share#network
Umbraco CMS
:80:443#web#cms
VNC
:5900:5901:5800#remote-access#gui
Webmin
:10000:443#web#administration
Werkzeug / Flask Debug Console
:5000:443#web#python
WHOIS
:43:4321#dns#information-disclosure
Windows AV / EDR Evasion
:443:80:445#windows#evasion
WinRM
:5985:5986#remote-access#windows
WordPress
:80:443#web#cms
WS-Discovery
:3702#network#discovery
X11
:6000:6001#remote-access#linux