|
Port 1025 Details
known port assignments and vulnerabilities
threat/application/port search:
Port(s) |
Protocol |
Service |
Details |
Source |
1025-1029 |
tcp,udp |
nfc-iis |
Ports > 1024 are designated for dynamic allocation by Windows. When programs ask for the "next available" socket, they usually get sequential ports starting at 1025.
Ports 1026-1027/udp were historically used for Windows Messenger popup spam |
SG
|
1025 |
tcp |
nfc-iis |
NFS
IIS
Teradata
ShopPro accounting software
Trojans that use this port: NetSpy, Maverick's Matrix, RemoteStorm (TCP/UDP)
Backdoor.Win32.Ramus / Unauthenticated Remote Code Execution - the malware listens on TCP port 1025. Third-party attackers who can reach an infected system can execute arbitrary code further compromising the host. To call programs use "executa" which translated from Romanian is execute and the target program wrapped in quotes E.g. executa "PROGRAM".
References: [MVID-2021-0427]
network blackjack (TCP/UDP) (IANA official) |
SG
|
1025 |
tcp |
|
NFS-or-IIS (unofficial) |
Wikipedia
|
1025 |
tcp |
trojan |
AcidkoR, BDDT, DataSpy Network X, Fraggle Rock , KiLo, MuSka52, NetSpy, Optix Pro , Paltalk, Ptakks, Real 2000, Remote Anything, Remote Explorer Y2K, Remote Storm, RemoteNC |
Trojans
|
1025 |
udp |
trojan |
KiLo, Optix Pro , Ptakks, Real 2000, Remote Anything, Remote Explorer Y2K, Remote Storm, Yajing |
Trojans
|
1025 |
udp |
win-rpc |
Windows RPC |
SANS
|
1025 |
tcp |
NFS-or-IIS |
IIS, NFS, or listener RFS remote_file_sharing |
Nmap
|
1025 |
udp |
blackjack |
network blackjack |
Nmap
|
1025 |
tcp |
listen |
listener RFS remote_file_sharing |
Neophasis
|
1025 |
tcp |
shoppro |
ShopPro accounting software |
Neophasis
|
1025 |
tcp |
FraggleRock |
[trojan] Fraggle Rock |
Neophasis
|
1025 |
tcp |
md5Backdoor |
[trojan] md5 Backdoor |
Neophasis
|
1025 |
tcp |
NetSpy |
[trojan] NetSpy |
Neophasis
|
1025 |
tcp,udp |
RemoteStorm |
[trojan] Remote Storm |
Neophasis
|
1025 |
tcp |
threat |
W32.Dasher |
Bekkoame
|
1025 |
tcp |
threat |
W32.Kiman |
Bekkoame
|
1025 |
tcp,udp |
threat |
ABCHlp |
Bekkoame
|
1025 |
tcp,udp |
threat |
Lala |
Bekkoame
|
1025 |
tcp,udp |
threat |
Remote Storm |
Bekkoame
|
1025 |
tcp,udp |
threat |
W32.Keco |
Bekkoame
|
1025 |
tcp,udp |
threat |
W32.Spybot |
Bekkoame
|
1025 |
tcp,udp |
blackjack |
network blackjack |
IANA
|
|
22 records found
Related ports: 1026
|