CyberHunter
// Port category

Remote access ports

Remote shells and desktops: SSH, RDP, VNC, Telnet, WinRM. 58 ports, most common first.

PortServiceTransportRiskEncryption
22 SSH ssh TCP UDP SCTP 5/10 moderate yes
3389 RDP ms-wbt-server TCP UDP 9/10 critical yes
23 Telnet telnet TCP UDP 9/10 critical no
5900 VNC rfb TCP UDP 9/10 critical no
5985 WinRM (HTTP) wsman TCP UDP 8/10 high optional
5986 WinRM (HTTPS) wsmans TCP UDP 6/10 high yes
10000 Webmin ndmp TCP UDP 8/10 high yes
89 SU/MIT Telnet Gateway su-mit-tg TCP UDP - -
107 Remote Telnet Service rtelnet TCP UDP - -
222 Berkeley rshd with SPX auth rsh-spx TCP UDP - -
513 remote login a la telnet; automatic authentication performed based on priviledged port numbers and distributed data bases which identify "authentication domains" login, who TCP UDP - -
541 uucp-rlogin uucp-rlogin TCP UDP - -
830 NETCONF over SSH netconf-ssh TCP UDP - -
902 self documenting Telnet Door ideafarm-door TCP UDP - -
903 self documenting Telnet Panic Door ideafarm-panic TCP UDP - -
992 telnet protocol over TLS/SSL telnets TCP UDP - yes
1197 Carrius Remote Access carrius-rshell TCP UDP - -
1494 ica ica TCP UDP - -
1970 NetOp Remote Control netop-rc TCP UDP - -
1973 Data Link Switching Remote Access Protocol dlsrap TCP UDP - -
2122 CauPC Remote Control caupc-remote TCP UDP - -
2179 Microsoft RDP for virtual machines vmrdp TCP UDP - -
2198 OneHome Remote Access onehome-remote TCP UDP - -
2512 Citrix IMA citrixima TCP UDP - -
2513 Citrix ADMIN citrixadmin TCP UDP - -
2564 HP 3000 NS/VT block mode telnet hp-3000-telnet TCP UDP - -
2598 Citrix MA Client citriximaclient TCP UDP - -
2654 Corel VNC Admin corel_vncadmin, corel-vncadmin TCP UDP - -
2897 Citrix RTMP citrix-rtmp TCP UDP - -
3083 TL1-TELNET tl1-telnet TCP UDP - -
3454 Apple Remote Access Protocol mira TCP UDP - -
3533 Raven Remote Management Data raven-rdp TCP UDP - -
3696 Telnet Com Port Control telnetcpcd TCP UDP - -
3897 Simple Distributed Objects over SSH sdo-ssh TCP UDP - -
4089 OpenCORE Remote Control Service opencore TCP UDP - -
4151 Men & Mice Remote Control menandmice_noh, menandmice-noh TCP UDP - -
4334 NETCONF Call Home (SSH) netconf-ch-ssh TCP - -
4899 RAdmin Port radmin-port TCP UDP - -
4914 Bones Remote Control bones TCP UDP - -
4915 Fibics Remote Control Service frcs TCP - -
4980 Citrix Virtual Path ctxs-vpp UDP - -
5024 SCPI-TELNET scpi-telnet TCP UDP - -
5161 SNMP over SSH Transport Model snmpssh TCP - -
5162 SNMP Notification over SSH Transport Model snmpssh-trap TCP - -
5231 Remote Control of Scan Software for Cruse Scanners crusecontrol TCP - -
6000-6063 X Window System x11 TCP UDP - -
6252 TL1 over SSH tl1-ssh TCP UDP - -
6623 Kerberos V5 Telnet ktelnet TCP UDP - -
7228 Citrix Universal Printing Port citrixupp TCP - -
7229 Citrix UPP Gateway citrixuppg TCP - -
7279 Citrix Licensing ctxlic TCP UDP - -
9535 Management Suite Remote Control mngsuite TCP UDP - -
9555 Trispen Secure Remote Access trispen-sra TCP UDP - -
11110 Data migration facility (DMF) SOAP is a web server protocol to support remote access to DMF sgi-soap TCP - -
17235 SSH Tectia Manager ssh-mgmt TCP UDP - -
24754 Citrix StorageLink Gateway cslg TCP - -
43000 Receiver Remote Control recvr-rc, recvr-rc-disc TCP UDP - -
47001 Windows Remote Management Service winrm TCP - -
01 Security

Securing remote access services

  • Do not expose remote administration directly: use a VPN or a zero-trust access proxy.
  • Require MFA or key-based authentication and lock out brute-force attempts.
  • Log every login and alert on new source addresses.
02 Categories

Other port categories