常见端口及其服务列表 -- 转载

Posted by JKJUN on April 4, 2018

公司最近有用到一些常用服务端口的数据识别,搜索了一下常用端口及其对应服务、应用。

TCP端口(静态 <1024 )

    TCP 0= Reserved
	TCP 1=TCP Port Service Multiplexer
	TCP 2=Death
	TCP 5=Remote Job Entry,yoyo
	TCP 7=Echo
	TCP 11=Skun
	TCP 12=Bomber
	TCP 16=Skun
	TCP 17=Skun
	TCP 18=消息传输协议,skun
	TCP 19=Skun
	TCP 20=FTP Data,Amanda
	TCP 21=文件传输,Back Construction,Blade Runner,Doly Trojan,Fore,FTP trojan,Invisible FTP,Larva,WebEx,WinCrash
	TCP 22=远程登录协议
	TCP 23=远程登录(Telnet),Tiny Telnet Server (= TTS)
	TCP 25=电子邮件(SMTP),Ajan,Antigen,Email Password Sender,Happy 99,Kuang2,ProMail trojan,Shtrilitz,Stealth,Tapiras,Terminator,WinPC,WinSpy,Haebu Coceda
	TCP 27=Assasin
	TCP 28=Amanda
	TCP 29=MSG ICP
	TCP 30=Agent 40421
	TCP 31=Agent 31,Hackers Paradise,Masters Paradise,Agent 40421
	TCP 37=Time,ADM worm
	TCP 39=SubSARI
	TCP 41=DeepThroat,Foreplay
	TCP 42=Host Name Server
	TCP 43=WHOIS
	TCP 44=Arctic
	TCP 48=DRAT
	TCP 49=主机登录协议
	TCP 50=DRAT
	TCP 51=IMP Logical Address Maintenance,Fuck Lamers Backdoor
	TCP 52=MuSka52,Skun
	TCP 53=DNS,Bonk (DOS Exploit)
	TCP 54=MuSka52
	TCP 58=DMSetup
	TCP 59=DMSetup
	TCP 63=whois++
	TCP 64=Communications Integrator
	TCP 65=TACACS-Database Service
	TCP 66=Oracle SQL*NET,AL-Bareki
	TCP 67=Bootstrap Protocol Server
	TCP 68=Bootstrap Protocol Client
	TCP 69=TFTP,W32.Evala.Worm,BackGate Kit,Nimda,Pasana,Storm,Storm worm,Theef,Worm.Cycle.a
	TCP 70=Gopher服务,ADM worm
	TCP 79=用户查询(Finger),Firehotcker,ADM worm
	TCP 80=超文本服务器(Http),Executor,RingZero
	TCP 81=Chubo,Worm.Bbeagle.q
	TCP 82=Netsky-Z
	TCP 88=Kerberos krb5服务
	TCP 99=Hidden Port
	TCP 102=消息传输代理
	TCP 108=SNA网关访问服务器
	TCP 109=Pop2
	TCP 110=电子邮件(Pop3),ProMail
	TCP 113=Kazimas,Auther Idnet
	TCP 115=简单文件传输协议
	TCP 118=SQL Services,Infector 1.4.2
	TCP 119=新闻组传输协议(Newsgroup(Nntp)),Happy 99
	TCP 121=JammerKiller,Bo jammerkillah
	TCP 123=网络时间协议(NTP),Net Controller
	TCP 129=Password Generator Protocol
	TCP 133=Infector 1.x
	TCP 135=微软DCE RPC end-point mapper服务
	TCP 137=微软Netbios Name服务(网上邻居传输文件使用)
	TCP 138=微软Netbios Name服务(网上邻居传输文件使用)
	TCP 139=微软Netbios Name服务(用于文件及打印机共享)
	TCP 142=NetTaxi
	TCP 143=Internet 邮件访问协议版本 4(IMAP4)
	TCP 146=FC Infector,Infector
	TCP 150=NetBIOS Session Service
	TCP 156=SQL服务器
	TCP 161=Snmp
	TCP 162=Snmp-Trap
	TCP 170=A-Trojan
	TCP 177=X Display管理控制协议
	TCP 179=Border网关协议(BGP)
	TCP 190=网关访问控制协议(GACP)
	TCP 194=Irc
	TCP 197=目录定位服务(DLS)
	TCP 220=Internet 邮件访问协议版本 3(IMAP3)
	TCP 256=Nirvana
	TCP 315=The Invasor
	TCP 371=ClearCase版本管理软件
	TCP 389=Lightweight Directory Access Protocol (LDAP)
	TCP 396=Novell Netware over IP
	TCP 420=Breach
	TCP 421=TCP Wrappers
	TCP 443=安全服务 (HTTPS)
	TCP 444=Simple Network Paging Protocol(SNPP)
	TCP 445=Microsoft-DS
	TCP 455=Fatal Connections
	TCP 456=Hackers paradise,FuseSpark
	TCP 458=苹果公司QuickTime
	TCP 513=Grlogin
	TCP 514=RPC Backdoor
	TCP 520=Rip
	TCP 531=Rasmin,Net666
	TCP 544=kerberos kshell
	TCP 546=DHCP Client
	TCP 547=DHCP Server
	TCP 548=Macintosh文件服务
	TCP 555=Ini-Killer,Phase Zero,Stealth Spy
	TCP 569=MSN
	TCP 605=SecretService
	TCP 606=Noknok8
	TCP 660=DeepThroat
	TCP 661=Noknok8
	TCP 666=Attack FTP,Satanz Backdoor,Back Construction,Dark Connection Inside 1.2
	TCP 667=Noknok7.2
	TCP 668=Noknok6
	TCP 669=DP trojan
	TCP 692=GayOL
	TCP 707=Welchia,nachi
	TCP 777=AIM Spy
	TCP 808=RemoteControl,WinHole
	TCP 815=Everyone Darling
	TCP 901=Backdoor.Devil
	TCP 911=Dark Shadow
	TCP 990=ssl加密
	TCP 993=IMAP
	TCP 999=DeepThroat
	TCP 1000=Der Spaeher
	TCP 1001=Silencer,WebEx,Der Spaeher
	TCP 1003=BackDoor
	TCP 1010=Doly
	TCP 1011=Doly
	TCP 1012=Doly
	TCP 1015=Doly
	TCP 1016=Doly
	TCP 1020=Vampire
	TCP 1023=Worm.Sasser.e

UDP端口(静态端口)

	UDP 1=Sockets des Troie
	UDP 9=Chargen
	UDP 19=Chargen
	UDP 69=Pasana
	UDP 80=Penrox
	UDP 371=ClearCase版本管理软件
	UDP 445=公共Internet文件系统(CIFS)
	UDP 500=Internet密钥交换(IP安全性 ,IKE)
	UDP端口(动态端口)
	UDP 1025=Maverick’s Matrix 1.2 - 2.0
	UDP 1026=Remote Explorer 2000
	UDP 1027=UC聊天软件,Trojan.Huigezi.e
	UDP 1028=3721上网助手(用途不明,建议用户警惕!),KiLo,SubSARI
	UDP 1029=SubSARI
	UDP 1031=Xot
	UDP 1032=Akosch4
	UDP 1104=RexxRave
	UDP 1111=Daodan
	UDP 1116=Lurker
	UDP 1122=Last 2000,Singularity
	UDP 1183=Cyn,SweetHeart
	UDP 1200=NoBackO
	UDP 1201=NoBackO
	UDP 1342=BLA trojan
	UDP 1344=Ptakks
	UDP 1349=BO dll
	UDP 1561=MuSka52
	UDP 1701=VPN网关(L2TP)
	UDP 1772=NetControle
	UDP 1978=Slapper
	UDP 1985=Black Diver
	UDP 2000=A-trojan,Fear,Force,GOTHIC Intruder,Last 2000,Real 2000
	UDP 2001=Scalper
	UDP 2002=Slapper
	UDP 2015=raid-cs
	UDP 2018=rellpack
	UDP 2130=Mini BackLash
	UDP 2140=Deep Throat,Foreplay,The Invasor
	UDP 2222=SweetHeart,Way
	UDP 2339=Voice Spy
	UDP 2702=Black Diver
	UDP 2989=RAT
	UDP 3150=Deep Throat
	UDP 3215=XHX
	UDP 3333=Daodan
	UDP 3801=Eclypse
	UDP 3996=Remote Anything
	UDP 4128=RedShad
	UDP 4156=Slapper
	UDP 4500=sae-urn/ (IP安全性,IKE NAT遍历)
	UDP 5419=DarkSky
	UDP 5503=Remote Shell Trojan
	UDP 5555=Daodan
	UDP 5882=Y3K RAT
	UDP 5888=Y3K RAT
	UDP 6112=Battle .net Game
	UDP 6666=KiLo
	UDP 6667=KiLo
	UDP 6766=KiLo
	UDP 6767=KiLo,UandMe
	UDP 6838=Mstream Agent-handler
	UDP 7028=未知木马
	UDP 7424=Host Control
	UDP 7788=Singularity
	UDP 7983=MStream handler-agent
	UDP 8012=Ptakks
	UDP 8090=Aphex’s Remote Packet Sniffer
	UDP 8127=9_119,Chonker
	UDP 8488=KiLo
	UDP 8489=KiLo
	UDP 8787=BackOrifice 2000
	UDP 8879=BackOrifice 2000
	UDP 9325=MStream Agent-handler
	UDP 10000=XHX
	UDP 10067=Portal of Doom
	UDP 10084=Syphillis
	UDP 10100=Slapper
	UDP 10167=Portal of Doom
	UDP 10498=Mstream
	UDP 10666=Ambush
	UDP 11225=Cyn
	UDP 12321=Protoss
	UDP 12345=BlueIce 2000
	UDP 12378=W32/Gibe@MM
	UDP 12623=ButtMan,DUN Control
	UDP 15210=UDP remote shell backdoor server
	UDP 15486=KiLo
	UDP 16514=KiLo
	UDP 16515=KiLo
	UDP 18753=Shaft handler to Agent
	UDP 20433=Shaft
	UDP 21554=GirlFriend
	UDP 22784=Backdoor.Intruzzo
	UDP 23476=Donald Dick
	UDP 25123=MOTD
	UDP 26274=Delta Source
	UDP 26374=Sub-7 2.1
	UDP 26444=Trin00/TFN2K
	UDP 26573=Sub-7 2.1
	UDP 27184=Alvgus trojan 2000
	UDP 27444=Trinoo
	UDP 29589=KiLo
	UDP 29891=The Unexplained
	UDP 30103=NetSphere
	UDP 31320=Little Witch
	UDP 31335=Trin00 DoS Attack
	UDP 31337=Baron Night,BO client,BO2,Bo Facil,BackFire,Back Orifice,DeepBO
	UDP 31338=Back Orifice,NetSpy DK,DeepBO
	UDP 31339=Little Witch
	UDP 31340=Little Witch
	UDP 31416=Lithium
	UDP 31787=Hack aTack
	UDP 31789=Hack aTack
	UDP 31790=Hack aTack
	UDP 31791=Hack aTack
	UDP 33390=未知木马
	UDP 34555=Trinoo
	UDP 35555=Trinoo
	UDP 43720=KiLo
	UDP 44014=Iani
	UDP 44767=School Bus
	UDP 46666=Taskman
	UDP 47262=Delta Source
	UDP 47785=KiLo
	UDP 49301=OnLine keyLogger
	UDP 49683=Fenster
	UDP 49698=KiLo
	UDP 52901=Omega
	UDP 54320=Back Orifice
	UDP 54321=Back Orifice 2000
	UDP 54341=NetRaider Trojan
	UDP 61746=KiLO
	UDP 61747=KiLO
	UDP 61748=KiLO
	UDP 65432=The Traitor