The Darkcomet malware listens to the port 885. The port 885 uses the Transmission Control Protocol (TCP), that is a connection-oriented protocol. TCP is one of the main protocols in TCP/IP networks and the Darkcomet malware is used in TCP/IP networks.