常见的端口和服务对照表
【干货分享】常用端口服务对照表
【⼲货分享】常⽤端⼝服务对照表端⼝：0服务：Reserved说明：通常⽤于分析操作系统。
这⼀⽅法能够⼯作是因为在⼀些系统中“0”是⽆效端⼝，当你试图使⽤通常的闭合端⼝连接它时将产⽣不同的结果。
⼀种典型的扫描，使⽤IP地址为0.0.0.0，设置ACK位并在以太⽹层⼴播。
端⼝：1服务：tcpmux说明：这显⽰有⼈在寻找SGI Irix机器。
Irix是实现tcpmux的主要提供者，默认情况下tcpmux在这种系统中被打开。
Irix机器在发布是含有⼏个默认的⽆密码的帐户，如：IP、GUEST UUCP、NUUCP、DEMOS 、TUTOR、DIAG、OUTOFBOX等。
许多管理员在安装后忘记删除这些帐户。
因此HACKER在INTERNET上搜索tcpmux并利⽤这些帐户。
端⼝：7服务：Echo说明：能看到许多⼈搜索Fraggle放⼤器时，发送到X.X.X.0和X.X.X.255的信息。
端⼝：19服务：Character Generator说明：这是⼀种仅仅发送字符的服务。
UDP版本将会在收到UDP包后回应含有垃圾字符的包。
TCP连接时会发送含有垃圾字符的数据流直到连接关闭。
HACKER利⽤IP欺骗可以发动DoS 攻击。
伪造两个chargen服务器之间的UDP包。
同样Fraggle DoS攻击向⽬标地址的这个端⼝⼴播⼀个带有伪造受害者IP的数据包，受害者为了回应这些数据⽽过载。
端⼝：21服务：FTP说明：FTP服务器所开放的端⼝，⽤于上传、下载。
最常见的攻击者⽤于寻找打开anonymous的FTP服务器的⽅法。
这些服务器带有可读写的⽬录。
⽊马Doly Trojan、Fore、Invisible FTP、WebEx、WinCrash和Blade Runner所开放的端⼝。
端⼝：22服务：Ssh说明：PcAnywhere建⽴的TCP和这⼀端⼝的连接可能是为了寻找ssh。
这⼀服务有许多弱点，如果配置成特定的模式，许多使⽤RSAREF库的版本就会有不少的漏洞存在。
计算机常用端口号
计算机常用端口号
以下是常用的计算机端口号及其对应的协议和应用：
1. HTTP (80端口) - 用于Web浏览器访问网站。
2. HTTPS (443端口) - 用于加密网络通信，安全访问网站。
3. FTP (21端口) - 用于文件上传和下载。
4. SSH (22端口) - 用于安全Shell访问和文件传输。
5. Telnet (23端口) - 用于远程命令行计算机管理。
6. SMTP (25端口) - 用于发送电子邮件。
7. POP3 (110端口) - 用于接收邮件。
8. IMAP (143端口) - 用于接收邮件，相比POP3更加灵活。
9. DNS (53端口) - 用于域名解析。
10. SNMP (161端口) - 用于网络设备管理和监控。
11. DHCP (67和68端口) - 用于动态分配IP地址和配置网络参数。
12. RDP (3389端口) - 用于远程桌面访问。
13. MySQL (3306端口) - 用于数据库访问。
14. Redis (6379端口) - 用于分布式缓存和数据库。
15. Nginx (80和443端口) - 用于Web服务器和反向代理。
常见端口对照表
常见端口对照表端口：0服务：Reserved说明：通常用于分析操作系统。
这一方法能够工作是因为在一些系统中“0”是无效端口，当你试图使用通常的闭合端口连接它时将产生不同的结果。
一种典型的扫描，使用IP地址为0.0.0.0，设置ACK位并在以太网层广播。
端口：1服务：tcpmux说明：这显示有人在寻找SGI Irix机器。
Irix是实现tcpmux的主要提供者，默认情况下tcpmux在这种系统中被打开。
Irix机器在发布是含有几个默认的无密码的帐户，如：IP、GUEST UUCP、NUUCP、DEMOS 、TUTOR、DIAG、OUTOFBOX等。
许多管理员在安装后忘记删除这些帐户。
因此HACKER在INTERNET上搜索tcpmux并利用这些帐户。
端口：7服务：Echo说明：能看到许多人搜索Fraggle放大器时，发送到X.X.X.0和X.X.X.255的信息。
端口：19服务：Character Generator说明：这是一种仅仅发送字符的服务。
UDP版本将会在收到UDP包后回应含有垃圾字符的包。
TCP 连接时会发送含有垃圾字符的数据流直到连接关闭。
HACKER利用IP欺骗可以发动DoS攻击。
伪造两个chargen服务器之间的UDP包。
同样Fraggle DoS攻击向目标地址的这个端口广播一个带有伪造受害者IP 的数据包，受害者为了回应这些数据而过载。
端口：21服务：FTP说明：FTP服务器所开放的端口，用于上传、下载。
最常见的攻击者用于寻找打开anonymous的FTP 服务器的方法。
这些服务器带有可读写的目录。
木马Doly Trojan、Fore、Invisible FTP、WebEx、WinCrash 和Blade Runner所开放的端口。
端口：22服务：Ssh说明：PcAnywhere建立的TCP和这一端口的连接可能是为了寻找ssh。
这一服务有许多弱点，如果配置成特定的模式，许多使用RSAREF库的版本就会有不少的漏洞存在。
网站服务器常用端口
网站服务器常用端口网络通信中，端口是用于区分不同应用程序或服务的数字标识符，网站服务器也有常用的端口。
本文将介绍常见的网站服务器端口以及其对应的服务。
1. HTTP（超文本传输协议）HTTP是用于在客户端和服务器之间传输超文本的协议。
HTTP服务器默认使用端口80进行通信。
通过使用HTTP，网页浏览器可以向服务器发送请求，并接收服务器响应。
2. HTTPS（安全超文本传输协议）HTTPS是基于SSL或TLS的加密协议，用于保护数据在客户端和服务器之间的传输安全。
HTTPS服务器的默认端口号是443。
通过使用HTTPS，网站可以确保用户在浏览器和服务器之间的数据传输是加密的和安全的。
3. FTP（文件传输协议）FTP是一种用于在客户端和服务器之间传输文件的协议。
FTP服务器默认使用端口21进行通信。
通过使用FTP，用户可以上传和下载文件到服务器上。
4. SSH（安全外壳协议）SSH是一种用于在网络中安全地进行远程登录和执行命令的协议。
SSH服务器的默认端口是22。
通过使用SSH，用户可以通过加密的连接连接到远程服务器，并执行各种操作。
5. SMTP（简单邮件传输协议）SMTP是用于在电子邮件传输中发送邮件的协议。
SMTP服务器的默认端口是25。
通过使用SMTP，邮件客户端可以将邮件发送到服务器，然后由服务器将邮件传递给目标收件人。
6. POP3（邮局协议版本3）POP3是一种用于从邮件服务器接收邮件的协议。
POP3服务器的默认端口是110。
通过使用POP3，邮件客户端可以连接到服务器，下载并删除服务器上的电子邮件。
7. IMAP（Internet邮件访问协议）IMAP是一种用于从邮件服务器接收邮件和管理收件箱的协议。
IMAP服务器的默认端口是143。
通过使用IMAP，邮件客户端可以连接到服务器，管理邮件以及在客户端和服务器之间同步邮件的状态。
8. DNS（域名系统）DNS是一种将域名解析为IP地址的系统。
端口--服务对照
¶Ë¿Ú--·þÎñ¶ÔÕÕhttp ======> port 80 (Hyper Text Transfer Protocol)ftp-data ==> port 20 (File Transfer Protocol - Default Data) ftp =======> port 21 (File Transfer Protocol - Control)POP3 ======> port 110 (Post Office Protocol version 3)SMTP ======> port 25 (Simple Mail Transfer Protocol)NNTP ======> port 119 (Network News Transfer Protocol)telnet ====> port 23 (Telnet)Gopher ====> port 70 (Gopher)IRC =======> port 194 (Internet Relay Chat)Proxy =====> port 80/8080/3128 (Proxy)Socks =====> port 1080 (Socks)DNS =======> port 53 (Domain Name Server)hostname ==> port 101 (NIC Host Name Server)finger ====> port 79 (Finger)nicname ===> port 43 (Who Is)login =====> port 49 (Login Host Protocol)HTTPS =====> port 443 (https MCom)imap3 =====> port 220 (Interactive Mail Access Protocol v3) NetBIOS ===> port 137 138 139 (NetBIOS)NFS =======> port 2049 (Network File Service)SNMP ======> port 161 (Simple Network Management Protocol) snmptrap ==> port 162 (SNMP TRAP)TFTP ======> port 69 (Trivial File Transfer)sqlserv ===> port 118 (SQL Services)uucp-path => port 117 (UUCP Path Service)X Window ==> port 6000 6001 (X Window System)0/tcp Reserved0/udp Reservedtcpmux 1/tcp TCP Port Service Multiplexercompressnet 2/tcp Management Utilitycompressnet 3/tcp Compression Processrje 5/tcp Remote Job Entryecho 7/tcp Echoecho 7/udp Echodiscard 9/tcp Discarddiscard 9/udp Discardsystat 11/tcp Active Usersdaytime 13/tcp Daytimedaytime 13/udp Daytimeqotd 17/tcp Quote of the Dayqotd 17/udp Quote of the Dayrwrite 18/tcp RWP rwriterwrite 18/udp RWP rwritemsp 18/tcp Message Send Protocolmsp 18/udp Message Send Protocolchargen 19/tcp Character Generatorchargen 19/udp Character Generatorftp-data 20/tcp File Transfer [Default Data]ftp 21/tcp File Transfer [Control]telnet 23/tcp Telnet24/tcp any private mail system24/udp any private mail systemsmtp 25/tcp Simple Mail Transfernsw-fe 27/tcp NSW User System FEnsw-fe 27/udp NSW User System FEmsg-icp 29/tcp MSG ICPmsg-icp 29/udp MSG ICPmsg-auth 31/tcp MSG Authenticationmsg-auth 31/udp MSG Authenticationdsp 33/tcp Display Support Protocoldsp 33/udp Display Support Protocol35/tcp any private printer server35/udp any private printer servertime 37/tcp Timetime 37/udp Timerap 38/tcp Route Access Protocolrap 38/udp Route Access Protocolrlp 39/udp Resource Location Protocolgraphics 41/tcp Graphicsgraphics 41/udp Graphicsnameserver 42/udp Host Name Servernicname 43/tcp Who Ismpm-flags 44/tcp MPM FLAGS Protocolmpm 45/tcp Message Processing Module [recv] mpm-snd 46/tcp MPM [default send]ni-ftp 47/tcp NI FTPni-ftp 47/udp NI FTPauditd 48/tcp Digital Audit Daemonauditd 48/udp Digital Audit Daemonlogin 49/tcp Login Host Protocolre-mail-ck 50/tcp Remote Mail Checking Protocol re-mail-ck 50/udp Remote Mail Checking Protocol la-maint 51/udp IMP Logical Address Maintenance xns-time 52/tcp XNS Time Protocolxns-time 52/udp XNS Time Protocoldomain 53/tcp Domain Name Serverdomain 53/udp Domain Name Serverxns-ch 54/tcp XNS Clearinghousexns-ch 54/udp XNS Clearinghouseisi-gl 55/tcp ISI Graphics Languageisi-gl 55/udp ISI Graphics Languagexns-auth 56/tcp XNS Authenticationxns-auth 56/udp XNS Authentication57/tcp any private terminal access57/udp any private terminal accessxns-mail 58/tcp XNS Mailxns-mail 58/udp XNS Mail59/tcp any private file service59/udp any private file service60/tcp Unassigned60/udp Unassignedni-mail 61/tcp NI MAILni-mail 61/udp NI MAILacas 62/tcp ACA Servicescovia 64/tcp Communications Integrator (CI) tacacs-ds 65/tcp TACACS-Database Servicesql*net 66/tcp Oracle SQL*NETbootps 67/udp Bootstrap Protocol Serverbootpc 68/udp Bootstrap Protocol Clienttftp 69/udp Trivial File Transfergopher 70/tcp Gophernetrjs-1 71/tcp Remote Job Servicenetrjs-1 71/udp Remote Job Servicenetrjs-2 72/tcp Remote Job Servicenetrjs-2 72/udp Remote Job Servicenetrjs-3 73/tcp Remote Job Servicenetrjs-3 73/udp Remote Job Servicenetrjs-4 74/tcp Remote Job Servicenetrjs-4 74/udp Remote Job Service75/tcp any private dial out service75/udp any private dial out servicedeos 76/tcp Distributed External Object Store deos 76/udp Distributed External Object Store 77/tcp any private RJE service77/udp any private RJE servicevettcp 78/tcp vettcpvettcp 78/udp vettcphttp 80/tcp World Wide Web HTTPwww-http 80/tcp World Wide Web HTTPhosts2-ns 81/tcp HOSTS2 Name Serverhosts2-ns 81/udp HOSTS2 Name Serverxfer 82/tcp XFER Utilityxfer 82/udp XFER Utilitymit-ml-dev 83/tcp MIT ML Devicemit-ml-dev 83/udp MIT ML Devicectf 84/tcp Common Trace Facilityctf 84/udp Common Trace Facilitymit-ml-dev 85/tcp MIT ML Devicemit-ml-dev 85/udp MIT ML Devicemfcobol 86/tcp Micro Focus Cobol87/tcp any private terminal link87/udp any private terminal linkkerberos 88/tcp Kerberossu-mit-tg 89/tcp SU/MIT Telnet Gatewaydnsix 90/tcp DNSIX Securit Attribute Token Mapmit-dov 91/tcp MIT Dover Spoolernpp 92/tcp Network Printing Protocolnpp 92/udp Network Printing Protocoldcp 93/tcp Device Control Protocoldcp 93/udp Device Control Protocolobjcall 94/tcp Tivoli Object Dispatcherobjcall 94/udp Tivoli Object Dispatchersupdup 95/tcp SUPDUPsupdup 95/udp SUPDUPdixie 96/tcp DIXIE Protocol Specificationswift-rvf 97/tcp Swift Remote Virtural File Protocol swift-rvf 97/udp Swift Remote Virtural File Protocol tacnews 98/tcp TAC Newstacnews 98/udp TAC Newsmetagram 99/tcp Metagram Relaymetagram 99/udp Metagram Relaynewacct 100/tcp [unauthorized use]hostname 101/tcp NIC Host Name Serverhostname 101/udp NIC Host Name Serveriso-tsap 102/tcp ISO-TSAP Class 0iso-tsap 102/udp ISO-TSAP Class 0gppitnp 103/tcp Genesis Point-to-Point Trans Net gppitnp 103/udp Genesis Point-to-Point Trans Netacr-nema 104/tcp ACR-NEMA Digital Imag. & Comm. 300 csnet-ns 105/tcp Mailbox Name Nameservercsnet-ns 105/udp Mailbox Name Nameserver3com-tsmux 106/tcp 3COM-TSMUX3com-tsmux 106/udp 3COM-TSMUXpoppassd 106/tcp Password Serverrtelnet 107/tcp Remote Telnet Servicesnagas 108/tcp SNA Gateway Access Serverpop2 109/tcp Post Office Protocol - Version 2 pop3 110/tcp Post Office Protocol - Version 3 sunrpc 111/tcp SUN Remote Procedure Callsunrpc 111/udp SUN Remote Procedure Callmcidas 112/tcp McIDAS Data Transmission Protocol auth 113/tcp Authentication Serviceaudionews 114/tcp Audio News Multicastaudionews 114/udp Audio News Multicastsftp 115/tcp Simple File Transfer Protocolsftp 115/udp Simple File Transfer Protocol ansanotify 116/tcp ANSA REX Notifyansanotify 116/udp ANSA REX Notifyuucp-path 117/tcp UUCP Path Servicesqlserv 118/tcp SQL Servicessqlserv 118/udp SQL Servicesnntp 119/tcp Network News Transfer Protocol cfdptkt 120/tcp CFDPTKTcfdptkt 120/udp CFDPTKTerpc 121/tcp Encore Expedited Remote Pro.Call erpc 121/udp Encore Expedited Remote Pro.Call smakynet 122/tcp SMAKYNETsmakynet 122/udp SMAKYNETntp 123/tcp Network Time Protocolntp 123/udp Network Time Protocolansatrader 124/tcp ANSA REX Traderansatrader 124/udp ANSA REX Traderlocus-map 125/tcp Locus PC-Interface Net Map Ser unitary 126/tcp Unisys Unitary Loginunitary 126/udp Unisys Unitary Loginlocus-con 127/tcp Locus PC-Interface Conn Server gss-xlicen 128/tcp GSS X License Verification gss-xlicen 128/udp GSS X License Verification pwdgen 129/tcp Password Generator Protocol pwdgen 129/udp Password Generator Protocolcisco-fna 130/tcp cisco FNATIVEcisco-fna 130/udp cisco FNATIVEcisco-tna 131/tcp cisco TNATIVEcisco-tna 131/udp cisco TNATIVEcisco-sys 132/tcp cisco SYSMAINTcisco-sys 132/udp cisco SYSMAINTstatsrv 133/tcp Statistics Servicestatsrv 133/udp Statistics Serviceingres-net 134/tcp INGRES-NET Serviceloc-srv 135/tcp Location Serviceloc-srv 135/udp Location Serviceprofile 136/tcp PROFILE Naming Systemnetbios-ns 137/tcp NETBIOS Name Servicenetbios-ns 137/udp NETBIOS Name Servicenetbios-dgm 138/tcp NETBIOS Datagram Service netbios-dgm 138/udp NETBIOS Datagram Service netbios-ssn 139/tcp NETBIOS Session Service netbios-ssn 139/udp NETBIOS Session Serviceemfis-data 140/tcp EMFIS Data Serviceemfis-data 140/udp EMFIS Data Serviceemfis-cntl 141/tcp EMFIS Control Serviceemfis-cntl 141/udp EMFIS Control Servicebl-idm 142/tcp Britton-Lee IDMbl-idm 142/udp Britton-Lee IDMimap2 143/tcp Interactive Mail Access Protocol v2 news 144/tcp NewSnews 144/udp NewSuaac 145/tcp UAAC Protocoluaac 145/udp UAAC Protocoliso-tp0 146/tcp ISO-IP0iso-tp0 146/udp ISO-IP0iso-ip 147/tcp ISO-IPiso-ip 147/udp ISO-IPcronus 148/tcp CRONUS-SUPPORTcronus 148/udp CRONUS-SUPPORTaed-512 149/tcp AED 512 Emulation Serviceaed-512 149/udp AED 512 Emulation Servicesql-net 150/tcp SQL-NETsql-net 150/udp SQL-NEThems 151/tcp HEMSbftp 152/tcp Background File Transfer Programbftp 152/udp Background File Transfer Program sgmp 153/tcp SGMPsgmp 153/udp SGMPnetsc-prod 154/tcp NETSCnetsc-prod 154/udp NETSCnetsc-dev 155/tcp NETSCnetsc-dev 155/udp NETSCsqlsrv 156/tcp SQL Serviceknet-cmp 157/tcp KNET/VM Command/Message Protocol pcmail-srv 158/tcp PCMail Servernss-routing 159/tcp NSS-Routingnss-routing 159/udp NSS-Routingsgmp-traps 160/tcp SGMP-TRAPSsgmp-traps 160/udp SGMP-TRAPSsnmp 161/udp SNMPsnmptrap 162/udp SNMPTRAPcmip-man 163/tcp CMIP/TCP Managercmip-man 163/udp CMIP/TCP Managercmip-agent 164/tcp CMIP/TCP Agentsmip-agent 164/udp CMIP/TCP Agentxns-courier 165/tcp Xeroxxns-courier 165/udp Xeroxs-net 166/tcp Sirius Systemss-net 166/udp Sirius Systemsnamp 167/tcp NAMPnamp 167/udp NAMPrsvd 168/tcp RSVDrsvd 168/udp RSVDsend 169/tcp SENDsend 169/udp SENDprint-srv 170/tcp Network PostScriptprint-srv 170/udp Network PostScriptmultiplex 171/tcp Network Innovations Multiplex multiplex 171/udp Network Innovations Multiplex cl/1 172/tcp Network Innovations CL/1cl/1 172/udp Network Innovations CL/1xyplex-mux 173/tcp Xyplexxyplex-mux 173/udp Xyplexmailq 174/tcp MAILQmailq 174/udp MAILQvmnet 175/tcp VMNETvmnet 175/udp VMNETgenrad-mux 176/tcp GENRAD-MUXgenrad-mux 176/udp GENRAD-MUXxdmcp 177/udp X Display Manager Control Protocol nextstep 178/tcp NextStep Window ServerNextStep 178/udp NextStep Window Serverbgp 179/tcp Border Gateway Protocolris 180/tcp Intergraphris 180/udp Intergraphunify 181/tcp Unifyunify 181/udp Unifyaudit 182/tcp Unisys Audit SITPaudit 182/udp Unisys Audit SITPocbinder 183/tcp OCBinderocbinder 183/udp OCBinderocserver 184/tcp OCServerocserver 184/udp OCServerremote-kis 185/tcp Remote-KISremote-kis 185/udp Remote-KISkis 186/tcp KIS Protocolkis 186/udp KIS Protocolaci 187/tcp Application Communication Interfaceaci 187/udp Application Communication Interfacemumps 188/tcp Plus Five's MUMPSmumps 188/udp Plus Five's MUMPSqft 189/tcp Queued File Transportgacp 190/tcp Gateway Access Control Protocolcacp 190/udp Gateway Access Control Protocolprospero 191/tcp Prospero Directory Serviceosu-nms 192/tcp OSU Network Monitoring Systemosu-nms 192/udp OSU Network Monitoring Systemsrmp 193/tcp Spider Remote Monitoring Protocolsrmp 193/udp Spider Remote Monitoring Protocolirc 194/udp Internet Relay Chat Protocoldn6-nlm-aud 195/tcp DNSIX Network Level Module Auditdn6-smm-red 196/tcp DNSIX Session Mgt Module Audit Redir dls 197/tcp Directory Location Servicedls 197/udp Directory Location Servicedls-mon 198/tcp Directory Location Service Monitordls-mon 198/udp Directory Location Service Monitorsmux 199/tcp SMUXsmux 199/udp SMUXsrc 200/tcp IBM System Resource Controllersrc 200/udp IBM System Resource Controllerat-rtmp 201/tcp AppleTalk Routing Maintenanceat-rtmp 201/udp AppleTalk Routing Maintenanceat-nbp 202/tcp AppleTalk Name Bindingat-nbp 202/udp AppleTalk Name Bindingat-3 203/tcp AppleTalk Unusedat-3 203/udp AppleTalk Unusedat-echo 204/tcp AppleTalk Echoat-echo 204/udp AppleTalk Echoat-5 205/tcp AppleTalk Unusedat-5 205/udp AppleTalk Unusedat-zis 206/tcp AppleTalk Zone Informationat-zis 206/udp AppleTalk Zone Informationat-7 207/tcp AppleTalk Unusedat-7 207/udp AppleTalk Unusedat-8 208/tcp AppleTalk Unusedat-8 208/udp AppleTalk Unusedtam 209/tcp Trivial Authenticated Mail Protocol tam 209/udp Trivial Authenticated Mail Protocolz39.50 210/tcp ANSI Z39.50z39.50 210/udp ANSI Z39.50914c/g 211/tcp Texas Instruments 914C/G Terminal 914c/g 211/udp Texas Instruments 914C/G Terminal anet 212/tcp ATEXSSTRanet 212/udp ATEXSSTRipx 213/tcp IPXipx 213/udp IPXvmpwscs 214/tcp VM PWSCSvmpwscs 214/udp VM PWSCSsoftpc 215/tcp Insignia Solutionssoftpc 215/udp Insignia Solutionsatls 216/tcp Access Technology License Server dbase 217/tcp dBASE Unixdbase 217/udp dBASE Unixmpp 218/tcp Netix Message Posting Protocolmpp 218/udp Netix Message Posting Protocoluarps 219/tcp Unisys ARPsuarps 219/udp Unisys ARPsimap3 220/tcp Interactive Mail Access Protocol v3 fln-spx 221/tcp Berkeley rlogind with SPX authfln-spx 221/udp Berkeley rlogind with SPX authrsh-spx 222/tcp Berkeley rshd with SPX authrsh-spx 222/udp Berkeley rshd with SPX authcdc 223/tcp Certificate Distribution Centercdc 223/udp Certificate Distribution Centersur-meas 243/tcp Survey Measurementsur-meas 243/udp Survey Measurementlink 245/tcp LINKlink 245/udp LINKdsp3270 246/tcp Display Systems Protocoldsp3270 246/udp Display Systems Protocolpdap 344/tcp Prospero Data Access Protocol pawserv 345/tcp Perf Analysis Workbenchpawserv 345/udp Perf Analysis Workbenchzserv 346/tcp Zebra serverfatserv 347/tcp Fatmen Servercsi-sgwp 348/tcp Cabletron Management Protocolcsi-sgwp 348/udp Cabletron Management Protocol clearcase 371/tcp Clearcaseclearcase 371/udp Clearcaseulistserv 372/tcp Unix Listservulistserv 372/udp Unix Listservlegent-1 373/tcp Legent Corporationlegent-1 373/udp Legent Corporationlegent-2 374/tcp Legent Corporationlegent-2 374/udp Legent Corporationhassle 375/tcp Hasslehassle 375/udp Hasslenip 376/tcp Amiga Envoy Network Inquiry Protonip 376/udp Amiga Envoy Network Inquiry PrototnETOS 377/tcp NEC CorporationtnETOS 377/udp NEC CorporationdsETOS 378/tcp NEC CorporationdsETOS 378/udp NEC Corporationis99c 379/tcp TIA/EIA/IS-99 modem clientis99s 380/tcp TIA/EIA/IS-99 modem serverhp-collector 381/tcp hp performance data collectorhp-collector 381/udp hp performance data collectorhp-managed-node 382/tcp hp performance data managed node hp-managed-node 382/udp hp performance data managed node hp-alarm-mgr 383/tcp hp performance data alarm manager hp-alarm-mgr 383/udp hp performance data alarm manager arns 384/tcp A Remote Network Server Systemarns 384/udp A Remote Network Server Systemibm-app 385/tcp IBM Applicationibm-app 385/tcp IBM Applicationasa 386/tcp ASA Message Router Object Def.asa 386/udp ASA Message Router Object Def.aurp 387/tcp Appletalk Update-Based Routing Pro.aurp 387/udp Appletalk Update-Based Routing Pro.unidata-ldm 388/tcp Unidata LDM Version 4unidata-ldm 388/udp Unidata LDM Version 4ldap 389/tcp Lightweight Directory Access Protocoluis 390/tcp UISuis 390/udp UISsynotics-relay 391/tcp SynOptics SNMP Relay Portsynotics-relay 391/udp SynOptics SNMP Relay Portsynotics-broker 392/tcp SynOptics Port Broker Port synotics-broker 392/udp SynOptics Port Broker Portdis 393/tcp Data Interpretation Systemdis 393/udp Data Interpretation Systemembl-ndt 394/tcp EMBL Nucleic Data Transferembl-ndt 394/udp EMBL Nucleic Data Transfernetcp 395/tcp NETscout Control Protocolnetcp 395/udp NETscout Control Protocolnetware-ip 396/tcp Novell Netware over IPnetware-ip 396/udp Novell Netware over IPmptn 397/tcp Multi Protocol Trans. Net.mptn 397/udp Multi Protocol Trans. Net.kryptolan 398/tcp Kryptolankryptolan 398/udp Kryptolaniso-tsap-c2 399/tcp ISO-TSAP Class 2iso-tsap-c2 399/udp ISO-TSAP Class 2work-sol 400/tcp Workstation Solutionswork-sol 400/udp Workstation Solutionsups 401/udp Uninterruptible Power Supplygenie 402/tcp Genie Protocolgenie 402/udp Genie Protocoldecap 403/tcp decapdecap 403/udp decapnced 404/tcp ncednced 404/udp ncedncld 405/tcp ncldncld 405/udp ncldimsp 406/tcp Interactive Mail Support Protocolimsp 406/udp Interactive Mail Support Protocol timbuktu 407/tcp Timbuktuprm-sm 408/tcp Prospero Resource Manager Sys. Man. prm-nm 409/tcp Prospero Resource Manager Node Man. decladebug 410/udp DECLadebug Remote Debug Protocol rmt 411/tcp Remote MT Protocolrmt 411/udp Remote MT Protocolsynoptics-trap 412/tcp Trap Convention Port synoptics-trap 412/udp Trap Convention Portsmsp 413/tcp SMSPsmsp 413/udp SMSPinfoseek 414/tcp InfoSeekinfoseek 414/udp InfoSeekbnet 415/tcp BNetbnet 415/udp BNetsilverplatter 416/tcp Silverplattersilverplatter 416/udp Silverplatteronmux 417/tcp Onmuxonmux 417/udp Onmuxhyper-g 418/tcp Hyper-Gariel1 419/tcp Arielsmpte 420/udp SMPTEariel2 421/tcp Arielariel3 422/tcp Arielopc-job-start 423/tcp IBM Operations Planning and Control Start opc-job-track 424/tcp IBM Operations Planning and Control Track icad-el 425/tcp ICADsmartsdp 426/tcp smartsdpsmartsdp 426/udp smartsdpsvrloc 427/tcp Server Locationsvrloc 427/udp Server Locationocs_cmu 428/tcp OCS_CMUocs_cmu 428/udp OCS_CMUocs_amu 429/tcp OCS_AMUocs_amu 429/udp OCS_AMUutmpsd 430/tcp UTMPSDutmpsd 430/udp UTMPSDutmpcd 431/tcp UTMPCDutmpcd 431/udp UTMPCDiasd 432/tcp IASDiasd 432/udp IASDnnsp 433/tcp NNSPnnsp 433/udp NNSPmobileip-agent 434/tcp MobileIP-Agentmobilip-mn 435/tcp MobilIP-MNdna-cml 436/tcp DNA-CMLdna-cml 436/udp DNA-CMLcomscm 437/tcp comscmcomscm 437/udp comscmdsfgw 438/tcp dsfgwdsfgw 438/udp dsfgwdasp 439/tcp dasp Thomas Obermairdasp 439/udp dasp tommy@inlab.m.eunet.desgcp 440/tcp sgcpsgcp 440/udp sgcpdecvms-sysmgt 441/tcp decvms-sysmgtcvc_hostd 442/tcp cvc_hostdcvc_hostd 442/udp cvc_hostdhttps 443/tcp https MComsnpp 444/tcp Simple Network Paging Protocolsnpp 444/udp Simple Network Paging Protocolmicrosoft-ds 445/udp Microsoft-DSddm-rdb 446/tcp DDM-RDBddm-rdb 446/udp DDM-RDBddm-dfm 447/tcp DDM-RFMddm-dfm 447/udp DDM-RFMddm-byte 448/tcp DDM-BYTEddm-byte 448/udp DDM-BYTEas-servermap 449/tcp AS Server Mapperas-servermap 449/udp AS Server Mappertserver 450/tcp TServersfs-smp-net 451/tcp Cray Network Semaphore server sfs-smp-net 451/udp Cray Network Semaphore server sfs-config 452/tcp Cray SFS config serversfs-config 452/udp Cray SFS config server creativeserver 453/tcp CreativeServer creativeserver 453/udp CreativeServercontentserver 454/tcp ContentServercontentserver 454/udp ContentServercreativepartnr 455/tcp CreativePartnrcreativepartnr 455/udp CreativePartnrmacon-tcp 456/tcp macon-tcpmacon-udp 456/udp macon-udpscohelp 457/tcp scohelpscohelp 457/udp scohelpappleqtc 458/tcp apple quick timeappleqtc 458/udp apple quick timeampr-rcmd 459/tcp ampr-rcmdampr-rcmd 459/udp ampr-rcmdskronk 460/tcp skronkskronk 460/udp skronkexec 512/tcp remote process execution;biff 512/udp used by mail system to notify users login 513/tcp remote login a la telnet;who 513/udp maintains data bases showing who's cmd 514/tcp like exec, but automaticsyslog 514/udpprinter 515/tcp spoolertalk 517/udpntalk 518/tcputime 519/tcp unixtimeutime 519/udp unixtimeefs 520/tcp extended file name serverrouter 520/udp local routing process (on site); timed 525/tcp timeservertimed 525/udp timeservertempo 526/tcp newdatetempo 526/udp newdatecourier 530/tcp rpccourier 530/udp rpcconference 531/tcp chatconference 531/udp chatnetnews 532/tcp readnewsnetnews 532/udp readnewsnetwall 533/tcp for emergency broadcastsnetwall 533/udp for emergency broadcastsapertus-ldp 539/tcp Apertus Technologies Load Determination apertus-ldp 539/udp Apertus Technologies Load Determination uucp 540/tcp uucpduucp-rlogin 541/tcp uucp-rloginuucp-rlogin 541/udp uucp-rloginklogin 543/tcpklogin 543/udpkshell 544/tcp krcmdkshell 544/udp krcmdappleqtcsrvr 545/tcp appleqtcsrvrappleqtcsrvr 545/udp appleqtcsrvrnew-rwho 550/tcp new-whonew-rwho 550/udp new-whodsf 555/tcpdsf 555/udpremotefs 556/tcp rfs serverremotefs 556/udp rfs serveropenvms-sysipc 557/tcp openvms-sysipcopenvms-sysipc 557/udp openvms-sysipcsdnskmp 558/tcp SDNSKMPsdnskmp 558/udp SDNSKMPteedtap 559/tcp TEEDTAPteedtap 559/udp TEEDTAPrmonitor 560/tcp rmonitordrmonitor 560/udp rmonitordmonitor 561/tcpmonitor 561/udpchshell 562/tcp chcmdchshell 562/udp chcmd9pfs 564/tcp plan 9 file service9pfs 564/udp plan 9 file servicewhoami 565/tcp whoamiwhoami 565/udp whoamimeter 570/tcp demonmeter 570/udp demonmeter 571/tcp udemonmeter 571/udp udemonipcserver 600/tcp Sun IPC serveripcserver 600/udp Sun IPC servernqs 607/tcp nqsnqs 607/udp nqsurm 606/tcp Cray Unified Resource Managerurm 606/udp Cray Unified Resource Managersift-uft 608/tcp Sender-Initiated/Unsolicited File Transfer npmp-trap 609/tcp npmp-trapnpmp-trap 609/udp npmp-trapnpmp-local 610/tcp npmp-localnpmp-local 610/udp npmp-localnpmp-gui 611/tcp npmp-guinpmp-gui 611/udp npmp-guiginad 634/tcp ginadginad 634/udp ginadmdqs 666/tcpmdqs 666/udpdoom 666/tcp doom Id Softwareelcsd 704/tcp errlog copy/server daemonelcsd 704/udp errlog copy/server daemonflexlm 744/tcp Flexible License Managerflexlm 744/udp Flexible License Managerfujitsu-dev 747/tcp Fujitsu Device Controlfujitsu-dev 747/udp Fujitsu Device Controlris-cm 748/tcp Russell Info Sci Calendar Managerris-cm 748/udp Russell Info Sci Calendar Managerkerberos-adm 749/tcp kerberos administrationrfile 750/tcploadav 750/udppump 751/tcppump 751/udpqrh 752/tcpqrh 752/udprrh 753/tcprrh 753/udptell 754/tcp sendtell 754/udp sendnlogin 758/tcpnlogin 758/udpcon 759/tcpcon 759/udpns 760/tcpns 760/udprxe 761/tcprxe 761/udpquotad 762/tcpquotad 762/udpcycleserv 763/tcpcycleserv 763/udpomserv 764/tcpomserv 764/udpwebster 765/tcpwebster 765/udpphonebook 767/tcp phonephonebook 767/udp phonevid 769/tcpvid 769/udpcadlock 770/tcpcadlock 770/udprtip 771/tcprtip 771/udpcycleserv2 772/tcpcycleserv2 772/udpsubmit 773/tcpnotify 773/udprpasswd 774/tcpacmaint_dbd 774/udpentomb 775/tcpacmaint_transd 775/udpwpages 776/tcpwpages 776/udpwpgs 780/tcpwpgs 780/udpconcert 786/tcp Concertconcert 786/udp Concertmdbs_daemon 800/tcpmdbs_daemon 800/udpdevice 801/tcpdevice 801/udpaccessbuilder 888/tcp AccessBuilder accessbuilder 888/udp AccessBuilder xtreelic 996/tcp Central Point Software xtreelic 996/udp Central Point Software maitrd 997/tcpmaitrd 997/udpbusboy 998/tcppuparp 998/udpgarcon 999/tcpapplix 999/udp Applix acpuprouter 999/tcp puprouter 999/udp cadlock 1000/tcp ock 1000/udp1023/tcp Reserved 1024/udp Reserved。
常用端口号和协议对照表
TCP 1=TCP Port Service MultiplexerTCP 2=DeathTCP 5=Remote Job Entry,yoyoTCP 7=EchoTCP 11=SkunTCP 12=BomberTCP 16=SkunTCP 17=SkunTCP 18=消息传输协议,skunTCP 19=SkunTCP 20=FTP Data,AmandaTCP 21=文件传输,Back Construction,Blade Runner,Doly Trojan,Fore,FTP trojan,Invisible FTP,Larva, WebEx,WinCrashTCP 22=远程登录协议TCP 23=远程登录(Telnet),Tiny Telnet Server (= TTS)TCP 25=电子邮件(SMTP),Ajan,Antigen,Email Password Sender,Happy 99,Kuang2,ProMail trojan,Shtrilitz,Stealth,Tapiras,Terminator,WinPC,WinSpy,Haebu CocedaTCP 27=AssasinTCP 28=AmandaTCP 29=MSG ICPTCP 30=Agent 40421TCP 31=Agent 31,Hackers Paradise,Masters Paradise,Agent 40421TCP 37=Time,ADM wormTCP 39=SubSARITCP 41=DeepThroat,ForeplayTCP 42=Host Name ServerTCP 43=WHOISTCP 44=ArcticTCP 48=DRATTCP 49=主机登录协议TCP 50=DRATTCP 51=IMP Logical Address Maintenance,Fuck Lamers BackdoorTCP 52=MuSka52,SkunTCP 53=DNS,Bonk (DOS Exploit)TCP 54=MuSka52TCP 58=DMSetupTCP 59=DMSetupTCP 63=whois++TCP 64=Communications IntegratorTCP 65=TACACS-Database ServiceTCP 66=Oracle SQL*NET,AL-BarekiTCP 67=Bootstrap Protocol ServerTCP 68=Bootstrap Protocol ClientTCP 69=W32.Evala.Worm,BackGate Kit,Nimda,Pasana,Storm,Storm worm,Theef,Worm.Cycle.aTCP 70=Gopher服务,ADM wormTCP 79=用户查询(Finger),Firehotcker,ADM wormTCP 80=超文本服务器(Http),Executor,RingZeroTCP 81=Chubo,Worm.Bbeagle.qTCP 82=Netsky-ZTCP 88=Kerberos krb5服务TCP 99=Hidden PortTCP 102=消息传输代理TCP 108=SNA网关访问服务器TCP 109=Pop2TCP 110=电子邮件(Pop3),ProMailTCP 113=Kazimas, Auther IdnetTCP 115=简单文件传输协议TCP 118=SQL Services, Infector 1.4.2TCP 119=新闻组传输协议(Newsgroup(Nntp)), Happy 99TCP 121=JammerKiller, Bo jammerkillahTCP 123=网络时间协议(NTP),Net ControllerTCP 129=Password Generator ProtocolTCP 133=Infector 1.xTCP 135=微软DCE RPC end-point mapper服务TCP 137=微软Netbios Name服务(网上邻居传输文件使用)TCP 138=微软Netbios Name服务(网上邻居传输文件使用)TCP 139=微软Netbios Name服务(用于文件及打印机共享)TCP 142=NetTaxiTCP 143=IMAPTCP 146=FC Infector,InfectorTCP 150=NetBIOS Session ServiceTCP 156=SQL服务器TCP 161=SnmpTCP 162=Snmp-TrapTCP 170=A-TrojanTCP 177=X Display管理控制协议TCP 179=Border网关协议(BGP)TCP 190=网关访问控制协议(GACP)TCP 194=IrcTCP 197=目录定位服务(DLS)TCP 256=NirvanaTCP 315=The InvasorTCP 371=ClearCase版本管理软件TCP 389=Lightweight Directory Access Protocol (LDAP)TCP 396=Novell Netware over IPTCP 420=BreachTCP 421=TCP WrappersTCP 443=安全服务TCP 444=Simple Network Paging Protocol(SNPP)TCP 445=Microsoft-DSTCP 455=Fatal ConnectionsTCP 456=Hackers paradise,FuseSparkTCP 458=苹果公司QuickTimeTCP 513=GrloginTCP 514=RPC BackdoorTCP 531=Rasmin,Net666TCP 544=kerberos kshellTCP 546=DHCP ClientTCP 547=DHCP ServerTCP 548=Macintosh文件服务TCP 555=Ini-Killer,Phase Zero,Stealth SpyTCP 569=MSNTCP 605=SecretServiceTCP 606=Noknok8TCP 661=Noknok8TCP 666=Attack FTP,Satanz Backdoor,Back Construction,Dark Connection Inside 1.2 TCP 667=Noknok7.2TCP 668=Noknok6TCP 669=DP trojanTCP 692=GayOLTCP 707=WelchiaTCP 777=AIM SpyTCP 808=RemoteControl,WinHoleTCP 815=Everyone DarlingTCP 901=Backdoor.DevilTCP 911=Dark ShadowTCP 993=IMAPTCP 999=DeepThroatTCP 1000=Der SpaeherTCP 1001=Silencer,WebEx,Der SpaeherTCP 1003=BackDoorTCP 1010=DolyTCP 1011=DolyTCP 1012=DolyTCP 1015=DolyTCP 1016=DolyTCP 1020=VampireTCP 1023=Worm.Sasser.eTCP 1024=NetSpy.698(YAI)TCP 1059=nimreg//TCP 1025=NetSpy.698,Unused Windows Services Block//TCP 1026=Unused Windows Services Block//TCP 1027=Unused Windows Services Block//TCP 1028=Unused Windows Services Block//TCP 1029=Unused Windows Services Block//TCP 1030=Unused Windows Services Block//TCP 1033=Netspy//TCP 1035=Multidropper//TCP 1042=Bla//TCP 1045=Rasmin//TCP 1047=GateCrasher//TCP 1050=MiniCommandTCP 1069=Backdoor.TheefServer.202TCP 1070=Voice,Psyber Stream Server,Streaming Audio Trojan TCP 1080=Wingate,Worm.BugBear.B,Worm.Novarg.B//TCP 1090=Xtreme, VDOLive//TCP 1095=Rat//TCP 1097=Rat//TCP 1098=Rat//TCP 1099=RatTCP 1110=nfsd-keepaliveTCP 1111=Backdoor.AIMVisionTCP 1155=Network File Access//TCP 1170=Psyber Stream Server,Streaming Audio trojan,Voice //TCP 1200=NoBackO//TCP 1201=NoBackO//TCP 1207=Softwar//TCP 1212=Nirvana,Visul Killer//TCP 1234=Ultors//TCP 1243=BackDoor-G, SubSeven, SubSeven Apocalypse//TCP 1245=VooDoo Doll//TCP 1269=Mavericks Matrix//TCP 1313=Nirvana//TCP 1349=BioNetTCP 1433=Microsoft SQL服务//TCP 1441=Remote Storm//TCP 1492=FTP99CMP(BackOriffice.FTP)TCP 1503=NetMeeting T.120//TCP 1509=Psyber Streaming Server//TCP 1600=Shivka-Burka//TCP 1703=Exloiter 1.1TCP 1720=NetMeeting H.233 call SetupTCP 1731=NetMeeting音频调用控制//TCP 1807=SpySender//TCP 1966=Fake FTP 2000//TCP 1976=Custom port//TCP 1981=ShockraveTCP 1990=stun-p1 cisco STUN Priority 1 portTCP 1990=stun-p1 cisco STUN Priority 1 portTCP 1991=stun-p2 cisco STUN Priority 2 portTCP 1992=stun-p3 cisco STUN Priority 3 port,ipsendmsg IPsendmsg TCP 1993=snmp-tcp-port cisco SNMP TCP portTCP 1994=stun-port cisco serial tunnel portTCP 1995=perf-port cisco perf portTCP 1996=tr-rsrb-port cisco Remote SRB portTCP 1997=gdp-port cisco Gateway Discovery ProtocolTCP 1998=x25-svc-port cisco X.25 service (XOT)//TCP 1999=BackDoor, TransScout//TCP 2000=Der Spaeher,INsane NetworkTCP 2002=W32.Beagle.AX @mm//TCP 2001=Transmisson scout//TCP 2002=Transmisson scout//TCP 2003=Transmisson scout//TCP 2004=Transmisson scout//TCP 2005=TTransmisson scoutTCP 2011=cypressTCP 2015=raid-cs//TCP 2023=Ripper,Pass Ripper,Hack City Ripper ProTCP 2049=NFS//TCP 2115=Bugs//TCP 2121=Nirvana//TCP 2140=Deep Throat, The Invasor//TCP 2155=Nirvana//TCP 2208=RuX//TCP 2255=Illusion Mailer//TCP 2283=HVL Rat5//TCP 2300=PC Explorer//TCP 2311=Studio54TCP 2556=Worm.Bbeagle.q//TCP 2565=Striker//TCP 2583=WinCrash//TCP 2600=Digital RootBeer//TCP 2716=Prayer TrojanTCP 2745=Worm.BBeagle.k//TCP 2773=Backdoor,SubSeven//TCP 2774=SubSeven2.1&2.2//TCP 2801=Phineas Phucker//TCP 2989=Rat//TCP 3024=WinCrash trojanTCP 3127=Worm.NovargTCP 3128=RingZero,Worm.Novarg.B//TCP 3129=Masters Paradise//TCP 3150=Deep Throat, The InvasorTCP 3198=Worm.Novarg//TCP 3210=SchoolBusTCP 3332=Worm.Cycle.aTCP 3333=ProsiakTCP 3389=超级终端//TCP 3456=Terror//TCP 3459=Eclipse 2000//TCP 3700=Portal of Doom//TCP 3791=Eclypse//TCP 3801=EclypseTCP 3996=Portal of DoomTCP 4000=腾讯QQ客户端TCP 4060=Portal of DoomTCP 4092=WinCrashTCP 4242=VHMTCP 4267=SubSeven2.1&2.2TCP 4321=BoBoTCP 4444=Prosiak,Swift remoteTCP 4500=W32.HLLW.TufasTCP 4567=File NailTCP 4590=ICQTrojanTCP 4899=Remote Administrator服务器TCP 4950=ICQTrojanTCP 5000=WindowsXP服务器,Blazer 5,Bubbel,Back Door Setup,Sockets de Troie TCP 5001=Back Door Setup, Sockets de TroieTCP 5002=cd00r,ShaftTCP 5011=One of the Last Trojans (OOTLT)TCP 5025=WM Remote KeyLoggerTCP 5031=Firehotcker,Metropolitan,NetMetroTCP 5032=MetropolitanTCP 5190=ICQ QueryTCP 5321=FirehotckerTCP 5333=Backage Trojan Box 3TCP 5343=WCratTCP 5400=Blade Runner, BackConstruction1.2TCP 5401=Blade Runner,Back ConstructionTCP 5402=Blade Runner,Back ConstructionTCP 5471=WinCrashTCP 5512=Illusion MailerTCP 5521=Illusion MailerTCP 5550=Xtcp,INsane NetworkTCP 5554=Worm.SasserTCP 5555=ServeMeTCP 5556=BO FacilTCP 5557=BO FacilTCP 5569=Robo-HackTCP 5598=BackDoor 2.03TCP 5631=PCAnyWhere dataTCP 5632=PCAnyWhereTCP 5637=PC CrasherTCP 5638=PC CrasherTCP 5698=BackDoorTCP 5714=Wincrash3TCP 5741=WinCrash3TCP 5742=WinCrashTCP 5760=Portmap Remote Root Linux Exploit TCP 5880=Y3K RATTCP 5881=Y3K RATTCP 5882=Y3K RATTCP 5888=Y3K RATTCP 5889=Y3K RATTCP 5900=WinVnc,Wise VGA广播端口TCP 6000=Backdoor.ABTCP 6006=Noknok8TCP 6129=Dameware Nt Utilities服务器TCP 6272=SecretServiceTCP 6267=广外女生TCP 6400=Backdoor.AB,The ThingTCP 6500=Devil 1.03TCP 6661=TemanTCP 6666=TCPshell.cTCP 6667=NT Remote Control,Wise 播放器接收端口TCP 6668=Wise Video广播端口TCP 6669=VampyreTCP 6670=DeepThroat,iPhoneTCP 6671=Deep Throat 3.0TCP 6711=SubSevenTCP 6712=SubSeven1.xTCP 6713=SubSevenTCP 6723=MstreamTCP 6767=NT Remote ControlTCP 6771=DeepThroatTCP 6776=BackDoor-G,SubSeven,2000 CracksTCP 6777=Worm.BBeagleTCP 6789=Doly TrojanTCP 6838=MstreamTCP 6883=DeltaSourceTCP 6912=Shit HeepTCP 6939=IndoctrinationTCP 6969=GateCrasher, Priority, IRC 3TCP 6970=RealAudio,GateCrasherTCP 7000=Remote Grab,NetMonitor,SubSeven1.x TCP 7001=Freak88TCP 7201=NetMonitorTCP 7215=BackDoor-G, SubSevenTCP 7001=Freak88,Freak2kTCP 7300=NetMonitorTCP 7301=NetMonitorTCP 7306=NetMonitor,NetSpy 1.0TCP 7307=NetMonitor, ProcSpyTCP 7308=NetMonitor, X SpyTCP 7323=Sygate服务器端TCP 7424=Host ControlTCP 7597=QazTCP 7609=Snid X2TCP 7626=冰河TCP 7777=The ThingTCP 7789=Back Door Setup, ICQKillerTCP 7983=MstreamTCP 8000=腾讯OICQ服务器端,XDMATCP 8010=Wingate,LogfileTCP 8080=WWW 代理,Ring Zero,Chubo,Worm.Novarg.B TCP 8520=W32.Socay.WormTCP 8787=BackOfrice 2000TCP 8897=Hack Office,ArmageddonTCP 8989=ReconTCP 9000=NetministratorTCP 9325=MstreamTCP 9400=InCommand 1.0TCP 9401=InCommand 1.0TCP 9402=InCommand 1.0TCP 9872=Portal of DoomTCP 9873=Portal of DoomTCP 9874=Portal of DoomTCP 9875=Portal of DoomTCP 9876=Cyber AttackerTCP 9878=TransScoutTCP 9989=Ini-KillerTCP 9898=Worm.Win32.Dabber.aTCP 9999=Prayer TrojanTCP 10067=Portal of DoomTCP 10080=Worm.Novarg.BTCP 10084=SyphillisTCP 10085=SyphillisTCP 10086=SyphillisTCP 10101=BrainSpyTCP 10167=Portal Of DoomTCP 10168=Worm.Supnot.78858.c,Worm.LovGate.TTCP 10520=Acid ShiversTCP 10607=Coma trojanTCP 10666=AmbushTCP 11000=Senna SpyTCP 11050=Host ControlTCP 11051=Host ControlTCP 11223=Progenic,Hack '99KeyLoggerTCP 11831=TROJ_LATINUS.SVRTCP 12076=Gjamer, MSH.104bTCP 12223=Hack'99 KeyLoggerTCP 12345=GabanBus, NetBus 1.6/1.7, Pie Bill Gates, X-bill TCP 12346=GabanBus, NetBus 1.6/1.7, X-billTCP 12349=BioNetTCP 12361=Whack-a-moleTCP 12362=Whack-a-moleTCP 12363=Whack-a-moleTCP 12378=W32/Gibe@MMTCP 12456=NetBusTCP 12623=DUN ControlTCP 12624=ButtmanTCP 12631=WhackJob, WhackJob.NB1.7TCP 12701=Eclipse2000TCP 12754=MstreamTCP 13000=Senna SpyTCP 13010=Hacker BrazilTCP 13013=PsychwardTCP 13223=Tribal Voice的聊天程序PowWowTCP 13700=Kuang2 The VirusTCP 14456=SoleroTCP 14500=PC InvaderTCP 14501=PC InvaderTCP 14502=PC InvaderTCP 14503=PC InvaderTCP 15000=NetDaemon 1.0TCP 15092=Host ControlTCP 15104=MstreamTCP 16484=MosuckerTCP 16660=Stacheldraht (DDoS)TCP 16772=ICQ RevengeTCP 16959=PriorityTCP 16969=PriorityTCP 17027=提供广告服务的Conducent"adbot"共享软件TCP 17166=MosaicTCP 17300=Kuang2 The VirusTCP 17490=CrazyNetTCP 17500=CrazyNetTCP 17569=Infector 1.4.x + 1.6.xTCP 17777=NephronTCP 18753=Shaft (DDoS)TCP 19191=蓝色火焰TCP 19864=ICQ RevengeTCP 20000=Millennium II (GrilFriend)TCP 20001=Millennium II (GrilFriend)TCP 20002=AcidkoRTCP 20034=NetBus 2 ProTCP 20168=LovgateTCP 20203=Logged,ChupacabraTCP 20331=BlaTCP 20432=Shaft (DDoS)TCP 20808=Worm.LovGate.v.QQTCP 21544=Schwindler 1.82,GirlFriendTCP 21554=Schwindler 1.82,GirlFriend,Exloiter 1.0.1.2 TCP 22222=Prosiak,RuX Uploader 2.0TCP 22784=Backdoor.IntruzzoTCP 23432=Asylum 0.1.3TCP 23456=Evil FTP, Ugly FTP, WhackJobTCP 23476=Donald DickTCP 23477=Donald DickTCP 23777=INet SpyTCP 26274=DeltaTCP 26681=Spy VoiceTCP 27374=Sub Seven 2.0+, Backdoor.BasteTCP 27444=Tribal Flood Network,TrinooTCP 27665=Tribal Flood Network,TrinooTCP 29431=Hack AttackTCP 29432=Hack AttackTCP 29104=Host ControlTCP 29559=TROJ_LATINUS.SVRTCP 29891=The UnexplainedTCP 30001=Terr0r32TCP 30003=Death,Lamers DeathTCP 30029=AOL trojanTCP 30100=NetSphere 1.27a,NetSphere 1.31TCP 30101=NetSphere 1.31,NetSphere 1.27aTCP 30102=NetSphere 1.27a,NetSphere 1.31TCP 30103=NetSphere 1.31TCP 30303=Sockets de TroieTCP 30947=IntruseTCP 30999=Kuang2TCP 21335=Tribal Flood Network,TrinooTCP 31336=Bo WhackTCP 31337=Baron Night,BO client,BO2,Bo Facil,BackFire,Back Orifice,DeepBO,Freak2k,NetSpyTCP 31338=NetSpy,Back Orifice,DeepBOTCP 31339=NetSpy DKTCP 31554=SchwindlerTCP 31666=BOWhackTCP 31778=Hack AttackTCP 31785=Hack AttackTCP 31787=Hack AttackTCP 31789=Hack AttackTCP 31791=Hack AttackTCP 31792=Hack AttackTCP 32100=PeanutBrittleTCP 32418=Acid BatteryTCP 33333=Prosiak,Blakharaz 1.0TCP 33577=Son Of PsychwardTCP 33777=Son Of PsychwardTCP 33911=Spirit 2001aTCP 34324=BigGluck,TN,Tiny Telnet ServerTCP 34555=Trin00 (Windows) (DDoS)TCP 35555=Trin00 (Windows) (DDoS)TCP 36794=Worm.Bugbear-ATCP 37651=YATTCP 40412=The SpyTCP 40421=Agent 40421,Masters Paradise.96TCP 40422=Masters ParadiseTCP 40423=Masters Paradise.97TCP 40425=Masters ParadiseTCP 40426=Masters Paradise 3.xTCP 41666=Remote BootTCP 43210=Schoolbus 1.6/2.0TCP 44444=Delta SourceTCP 44445=HappypigTCP 47252=ProsiakTCP 47262=DeltaTCP 47878=BirdSpy2TCP 49301=Online KeyloggerTCP 50505=Sockets de TroieTCP 50766=Fore, SchwindlerTCP 51966=CafeIniTCP 53001=Remote Windows ShutdownTCP 53217=Acid Battery 2000TCP 54283=Back Door-G, Sub7TCP 54320=Back Orifice 2000,SheepTCP 54321=School Bus .69-1.11,Sheep, BO2K TCP 57341=NetRaiderTCP 58008=BackDoor.TronTCP 58009=BackDoor.TronTCP 58339=ButtFunnelTCP 59211=BackDoor.DuckToyTCP 60000=Deep ThroatTCP 60068=Xzip 6000068TCP 60411=ConnectionTCP 60606=TROJ_BCKDOR.G2.ATCP 61466=TelecommandoTCP 61603=Bunker-killTCP 63485=Bunker-killTCP 65000=Devil, DDoSTCP 65432=Th3tr41t0r, The TraitorTCP 65530=TROJ_WINMITE.10TCP 65535=RC,Adore Worm/LinuxTCP 69123=ShitHeepTCP 88798=Armageddon,Hack OfficeUDP 1=Sockets des TroieUDP 9=ChargenUDP 19=ChargenUDP 69=PasanaUDP 80=PenroxUDP 371=ClearCase版本管理软件UDP 445=公共Internet文件系统(CIFS) UDP 500=Internet密钥交换UDP 1025=Maverick's Matrix 1.2 - 2.0UDP 1026=Remote Explorer 2000UDP 1027=UC聊天软件,Trojan.Huigezi.eUDP 1028=KiLo,SubSARIUDP 1029=SubSARIUDP 1031=XotUDP 1032=Akosch4UDP 1104=RexxRaveUDP 1111=DaodanUDP 1116=LurkerUDP 1122=Last 2000,SingularityUDP 1183=Cyn,SweetHeartUDP 1200=NoBackOUDP 1201=NoBackOUDP 1342=BLA trojanUDP 1344=PtakksUDP 1349=BO dllUDP 1561=MuSka52UDP 1772=NetControleUDP 1978=SlapperUDP 1985=Black DiverUDP 2000=A-trojan,Fear,Force,GOTHIC Intruder,Last 2000,Real 2000 UDP 2001=ScalperUDP 2002=SlapperUDP 2015=raid-csUDP 2018=rellpackUDP 2130=Mini BackLashUDP 2140=Deep Throat,Foreplay,The InvasorUDP 2222=SweetHeart, WayUDP 2339=Voice SpyUDP 2702=Black DiverUDP 2989=RATUDP 3150=Deep ThroatUDP 3215=XHXUDP 3333=DaodanUDP 3801=EclypseUDP 3996=Remote AnythingUDP 4128=RedShadUDP 4156=SlapperUDP 4500=sae-urnUDP 5419=DarkSkyUDP 5503=Remote Shell TrojanUDP 5555=DaodanUDP 5882=Y3K RATUDP 5888=Y3K RATUDP 6112= GameUDP 6666=KiLoUDP 6766=KiLoUDP 6767=KiLo,UandMeUDP 6838=Mstream Agent-handlerUDP 7028=未知木马UDP 7424=Host ControlUDP 7788=SingularityUDP 7983=MStream handler-agentUDP 8012=PtakksUDP 8090=Aphex's Remote Packet Sniffer UDP 8127=9_119,ChonkerUDP 8488=KiLoUDP 8489=KiLoUDP 8787=BackOrifice 2000UDP 8879=BackOrifice 2000UDP 9325=MStream Agent-handlerUDP 10000=XHXUDP 10067=Portal of DoomUDP 10084=SyphillisUDP 10100=SlapperUDP 10167=Portal of DoomUDP 10498=MstreamUDP 10666=AmbushUDP 11225=CynUDP 12321=ProtossUDP 12345=BlueIce 2000UDP 12378=W32/Gibe@MMUDP 12623=ButtMan,DUN ControlUDP 15210=UDP remote shell backdoor server UDP 15486=KiLoUDP 16514=KiLoUDP 16515=KiLoUDP 18753=Shaft handler to AgentUDP 20433=ShaftUDP 21554=GirlFriendUDP 22784=Backdoor.IntruzzoUDP 23476=Donald DickUDP 25123=MOTDUDP 26274=Delta SourceUDP 26374=Sub-7 2.1UDP 26444=Trin00/TFN2KUDP 26573=Sub-7 2.1UDP 27184=Alvgus trojan 2000UDP 27444=TrinooUDP 29891=The UnexplainedUDP 30103=NetSphereUDP 31320=Little WitchUDP 31335=Trin00 DoS AttackUDP 31337=Baron Night, BO client, BO2, Bo Facil, BackFire, Back Orifice, DeepBO UDP 31338=Back Orifice, NetSpy DK, DeepBOUDP 31339=Little WitchUDP 31340=Little WitchUDP 31416=LithiumUDP 31787=Hack aTackUDP 31789=Hack aTackUDP 31790=Hack aTackUDP 31791=Hack aTackUDP 33390=未知木马UDP 34555=TrinooUDP 35555=TrinooUDP 43720=KiLoUDP 44014=IaniUDP 44767=School BusUDP 46666=TaskmanUDP 47262=Delta SourceUDP 47785=KiLoUDP 49301=OnLine keyLoggerUDP 49683=FensterUDP 49698=KiLoUDP 52901=OmegaUDP 54320=Back OrificeUDP 54321=Back Orifice 2000UDP 54341=NetRaider TrojanUDP 61746=KiLOUDP 61747=KiLOUDP 61748=KiLOUDP 65432=The Traitor。
电脑端口及对应服务一览表
端口及其对应的服务，没有列出的端口表示没有在该端口分配服务。
端口 0 ： Reserved （通常用于分析操作系统）。
端口 1 ： tcpmux （ TCP Port Service Multiplexer ），传输控制协议端口服务多路开关选择器。
端口 2 ： compressnet （ compressnet Management Utility ）， compressnet 管理实用程序。
端口 3 ： compressnet （ Compression Process ），压缩进程。
端口 5 ： Remote Job Entry ，远程作业登录。
端口 7 ： echo ，回显。
端口 9 ： discard ，丢弃。
端口 11 ： Active Users ，在线用户。
端口 13 ： daytime ，时间。
端口 17 ： Quote of the Day ，每日引用。
端口 18 ： Message Send Protocol ，消息发送协议。
端口 19 ： Character Generator ，字符发生器。
端口 20 ： FTP （ File Transfer Protoco [Default Data] ，文件传输协议 ( 默认数据口 ) 。
端口 21 ： FTP （ File Transfer Protoco [Control] ），文件传输协议 ( 控制 ) 。
端口 22 ： Remote Login Protocol ，远程登录协议。
端口 23 ： Telnet ，终端仿真协议。
端口 24 ： private mail-system ，预留给个人用邮件系统。
端口 25 ： Simple Mail Transfer ，简单邮件发送协议。
端口 27 ： NSW User System FE ， NSW 用户系统现场工程师。
端口 29 ： MSG ICP 。
端口 31 ： MSG Authentication ， MSG 验证。
电脑常用端口对照表
端口：119
服务：network news transfer protocol
说明：news新闻组传输协议，承载usenet通信。这个端口的连接通常是人们在寻找usenet服务器。多数isp限制，只有他们的客户才能访问他们的新闻组服务器。打开新闻组服务器将允许发/读任何人的帖子，访问被限制的新闻组服务器，匿名发帖或发送spam。
说明：通过dsl和cable modem的防火墙常会看见大量发送到广播地址255.255.255.255的数据。这些机器在向dhcp服务器请求一个地址。hacker常进入它们，分配一个地址把自己作为局部路由器而发起大量中间人（man－in－middle）攻击。客户端向68端口广播请求配置，服务器向67端口广播回应请求。这种回应使用广播是因为客户端还不知道可以发送的ip地址。
端口：69
服务：trival file transfer
说明：许多服务器与bootp一起提供这项服务，便于从系统下载启动代码。但是它们常常由于错误配置而使入侵者能从系统中窃取任何 文件。它们也可用于系统写入文件。
端口：79
服务：finger server
端口：25
服务：smtp
说明：smtp服务器所开放的端口，用于发送邮件。入侵者寻找smtp服务器是为了传递他们的spam。入侵者的帐户被关闭，他们需要连接到高带宽的e－mail服务器上，将简单的信息传递到不同的地址。木马antigen、email password sender、haebu coceda、shtrilitz stealth、winpc、winspy都开放这个端口。
端口：1
服务：tcpmux
说明：这显示有人在寻找sgi irix机器。irix是实现tcpmux的主要提供者，默认情况下tcpmux在这种系统中被打开。irix机器在发布是含有几个默认的无密码的帐户，如：ip、guest uucp、nuucp、demos 、tutor、diag、outofbox等。许多管理员在安装后忘记删除这些帐户。因此hacker在internet上搜索tcpmux并利用这些帐户。