Common Windows Applications

		Chapter 3 - Windows Honeypot Modeling Honeypots for Windows by Roger A. Grimes Apress 2005

Many other common applications run on Windows and open network ports. Some of these applications are listed in Table 3-15. You can include them to make your Windows honeypots more realistic and also to monitor exploits against those applications if you use them within your organization.

Table 3-15: Common Windows Applications and Their Port Numbers

Port	Application
666	Doom game
1214	KaZaA
1352	Lotus Notes
1494, 1604	Citrix ICA Server
1521	Oracle SQL Server
1680	Carbon Copy
1863, 1503, 6891–6900	MSN Messenger (1863, instant messaging, 1503 for white board; 6891–6900 for file transfer)
4000	ICQ
5010	Yahoo Messenger
5190	AOL Instant Messenger (AIM)
5631–5634	Symantec PC Anywhere
5800, 5900	VNC Remote Access Software
6346	Gnutella
6665–6670, 7000	Internet Relay Chat (IRC)
6699	Napster
6970	Quicktime
7070	RealAudio/RealServer/Quicktime
7778	Unreal game
27910, 27660	QuakeII