系统服务及木马默认端口表

群子

-,1951,bcs-lmserver,bcs-lmserver

-,1973,dlsrap,Data Link Switching Remote Access Protocol

-,1985,foliocorp,Folio Remote Server

-,1986,licensedaemon,cisco license management

-,1987,tr-rsrb-p1,cisco RSRB Priority 1 port

-,1988,tr-rsrb-p2,cisco RSRB Priority 2 port

-,1989,tr-rsrb-p3,cisco RSRB Priority 3 port

-,1990,stun-p1,cisco STUN Priority 1 port

-,1991,stun-p2,cisco STUN Priority 2 port

-,1992,stun-p3,cisco STUN Priority 3 port

-,1993,snmp-tcp-port,cisco SNMP TCP port

-,1994,stun-port,cisco serial tunnel port

-,1995,perf-port,cisco perf port

-,1996,tr-rsrb-port,cisco Remote SRB port

-,1997,gdp-port,cisco Gateway Discovery Protocol

-,1998,x25-svc-port,cisco X.25 service (XOT)

-,1999,tcp-id-port,cisco identification port

-,2000,callbook,?

-,2001,dc,?

-,2002,globe,?

-,2004,mailbox,?

-,2005,berknet,?

-,2006,invokator,?

-,2007,dectalk,?

-,2008,conf,?

-,2009,news,n

-,2010,search,?

-,2011,raid-cc,raid

-,2012,ttyinfo,?

-,2013,raid-am,?

-,2014,troff,?

-,2015,cypress,?

-,2016,bootserver,?

-,2017,cypress-stat,?

-,2018,terminaldb,?

-,2019,whosockami,?

-,2020,xinupageserver,?

-,2021,servexec,?

-,2022,down,?

-,2023,xinuexpansion3,?

-,2024,xinuexpansion4,?

-,2025,ellpack,?

-,2026,scrabble,?

-,2027,shadowserver,?

-,2028,submitserver,?

-,2030,device2,?

-,2032,blackboard,?

-,2033,glogger,?

-,2034,scoremgr,?

-,2035,imsldoc,?

-,2038,objectmanager,?

-,2040,lam,?

-,2041,interbase,?

-,2042,isis,isis

-,2043,isis-bcast,isis-bcast

-,2044,rimsl,?

-,2045,cdfunc,?

-,2046,sdfunc,?

-,2047,dls,?

-,2048,dls-monitor,?

-,2049,shilp,?

-,2065,dlsrpn,Data Link Switch Read Port Number

-,2067,dlswpn,Data Link Switch Write Port Number

-,2102,zephyr-srv,Zephyr server

-,2103,zephyr-clt,Zephyr serv-hm connection

-,2104,zephyr-hm,Zephyr hostmanager

-,2105,minipay,MiniPay

-,2201,ats,Advanced Training System Program

-,2202,imtc-map,Int. Multimedia Teleconferencing Cosortium

-,2213,kali,Kali

-,2221,unreg-ab1,Allen-Bradley unregistered port

群子

-,2222,unreg-ab2,Allen-Bradley unregistered port

-,2223,inreg-ab3,Allen-Bradley unregistered port

-,2232,ivs-video,IVS Video default

-,2233,infocrypt,INFOCRYPT

-,2234,directplay,DirectPlay

-,2235,sercomm-wlink,Sercomm-WLink

-,2236,nani,Nani

-,2237,optech-port1-lm,Optech Port1 License Manager

-,2238,aviva-sna,AVIVA SNA SERVER

-,2239,imagequery,Image Query

-,2241,ivsd,IVS Daemon

-,2279,xmquery,xmquery

-,2280,lnvpoller,LNVPOLLER

-,2281,lnvconsole,LNVCONSOLE

-,2282,lnvalarm,LNVALARM

-,2283,lnvstatus,LNVSTATUS

-,2284,lnvmaps,LNVMAPS

-,2285,lnvmailmon,LNVMAILMON

-,2286,nas-metering,NAS-Metering

-,2287,dna,DNA

-,2288,netml,NETML

-,2307,pehelp,pehelp

-,2401,cvspserver,cvspserver

-,2500,rtsserv,Resource Tracking system server

-,2501,rtsclient,Resource Tracking system client

-,2564,hp-3000-telnet,HP 3000 NS/VT block mode telnet

-,2592,netrek,netrek

-,2700,tqdata,tqdata

-,2784,www-dev,world wide web - development

-,2785,aic-np,aic-np

-,2786,aic-oncrpc,aic-oncrpc - Destiny MCD database

-,2787,piccolo,piccolo - Cornerstone Software

-,2788,fryeserv,NetWare Loadable Module - Seagate Software

-,2789,media-agent,Media Agent

-,2908,mao,mao

-,2909,funk-dialout,Funk Dialout

-,2910,tdaccess,TDAccess

-,2911,blockade,Blockade

-,2912,epicon,Epicon

-,3000,hbci,HBCI

-,3001,redwood-broker,Redwood Broker

-,3002,exlm-agent,EXLM Agent

-,3010,gw,Telerate Workstation

-,3011,trusted-web,Trusted Web

-,3047,hlserver,Fast Security HL Server

-,3048,pctrader,Sierra Net PC Trader

-,3049,NSWS,?

-,3141,vmodem,VMODEM

-,3142,rdc-wh-eos,RDC WH EOS

-,3143,seaview,Sea View

-,3144,tarantella,Tarantella

-,3145,csi-lfap,CSI-LFAP

-,3264,ccmail,cc:mail/lotus

-,3333,dec-notes,DEC Notes

+,3389,Terminal,WIN2000 Terminal Server

-,3421,bmap,Bull Apprise portmapper

-,3454,mira,Apple Remote Access Protocol

-,3455,prsvp,RSVP Port

-,3456,vat,VAT default data

-,3457,vat-control,VAT default control

-,3900,udt_os,Unidata UDT OS

-,3984,mapper-nodemgr,MAPPER network node manager

-,3985,mapper-mapethd,MAPPER TCP/IP server

-,3986,mapper-ws_ethd,MAPPER workstation server

-,4000,OICQ,OICQ Client

-,4008,netcheque,NetCheque accounting

-,4009,chimera-hwm,Chimera HWM

-,4132,nuts_dem,NUTS Daemon

-,4133,nuts_bootp,NUTS Bootp Server

-,4134,nifty-hmi,NIFTY-Serve HMI protocol

-,4321,rwhois,Remote Who Is

-,4343,unicall,UNICALL

-,4444,krb524,KRB524

-,4445,upnotifyp,UPNOTIFYP

-,4446,n1-fwp,N1-FWP

-,4447,n1-rmgmt,N1-RMGMT

-,4448,asc-slmd,ASC Licence Manager

-,4449,arcryptoip,ARCrypto IP

-,4450,camp,Camp

-,4451,ctisystemmsg,CTI System Msg

-,4452,ctiprogramload,CTI Program Load

-,4453,nssalertmgr,NSS Alert Manager

-,4454,nssagentmgr,NSS Agent Manager

-,4500,sae-urn,sae-urn

-,4501,urn-x-cdchoice,urn-x-cdchoice

-,4672,rfa,remote file access server

-,5000,commplex-main,?

-,5001,commplex-link,?

-,5002,rfe,radio free ethernet

-,5003,claris-fmpro,Claris FileMaker Pro

-,5004,avt-profile-1,avt-profile-1

-,5005,avt-profile-2,avt-profile-2

-,5010,telelpathstart,TelepathStart

-,5011,telelpathattack,TelepathAttack

-,5020,zenginkyo-1,zenginkyo-1

-,5021,zenginkyo-2,zenginkyo-2

-,5050,mmcc,multimedia conference control tool

-,5145,rmonitor_secure,?

-,5150,atmp,Ascend Tunnel Management Protocol

-,5190,aol,America-Online

-,5191,aol-1,AmericaOnline1

-,5192,aol-2,AmericaOnline2

-,5193,aol-3,AmericaOnline3

-,5236,padl2sim,?

-,5300,hacl-hb,# HA cluster heartbeat

-,5301,hacl-gs,# HA cluster general services

-,5302,hacl-cfg,# HA cluster configuration

-,5303,hacl-probe,# HA cluster probing

-,5304,hacl-local,# HA Cluster Commands

-,5305,hacl-test,# HA Cluster Test

-,5400,excerpt,Excerpt Search

-,5401,excerpts,Excerpt Search Secure

-,5555,personal-agent,Personal Agent

-,5631,pcanywheredata,pcANYWHEREdata

-,5632,pcanywherestat,pcANYWHEREstat

-,5678,rrac,Remote Replication Agent Connection

-,5679,dccm,Direct Cable Connect Manager

-,5713,proshareaudio,proshare conf audio

-,5714,prosharevideo,proshare conf video

-,5715,prosharedata,proshare conf data

-,5716,prosharerequest,proshare conf request

-,5717,prosharenotify,proshare conf notify

-,5729,openmail,Openmail User Agent Layer

-,5745,fcopy-server,fcopy-server

-,5755,openmailg,OpenMail Desk Gateway server

-,5757,x500ms,OpenMail X.500 Directory Server

-,5766,openmailns,OpenMail NewMail Server

-,5767,s-openmail,OpenMail Suer Agent Layer (Secure)

-,5800,VNC,Virtual Network Computing server

-,5900,VNC,Virtual Network Computing server

-,6000,x11,-6063 X Window System

群子

-,6110,softcm,HP SoftBench CM

-,6111,spc,HP SoftBench Sub-Process Control

-,6112,dtspcd,dtspcd

-,6123,backup-express,Backup Express

-,6141,meta-corp,Meta Corporation License Manager

-,6142,aspentec-lm,Aspen Technology License Manager

-,6143,watershed-lm,Watershed License Manager

-,6144,statsci1-lm,StatSci License Manager - 1

-,6145,statsci2-lm,StatSci License Manager - 2

-,6146,lonewolf-lm,Lone Wolf Systems License Manager

-,6147,montage-lm,Montage License Manager

-,6148,ricardo-lm,Ricardo North America License Manager

-,6149,tal-pod,tal-pod

-,6253,crip,CRIP

-,6389,clariion-evr01,clariion-evr01

-,6455,skip-cert-recv,SKIP Certificate Receive

-,6456,skip-cert-send,SKIP Certificate Send

-,6558,xdsxdm,?

-,6670,vocaltec-gold,Vocaltec Global Online Directory

-,6672,vision_server,vision_server

-,6673,vision_elmd,vision_elmd

-,6831,ambit-lm,ambit-lm

-,6969,acmsoda,acmsoda

-,7000,afs3-fileserver,file server itself

-,7001,afs3-callback,callbacks to cache managers

-,7002,afs3-prserver,users & groups database

-,7003,afs3-vlserver,volume location database

-,7004,afs3-kaserver,AFS/Kerberos authentication service

-,7005,afs3-volser,volume managment server

-,7006,afs3-errors,error interpretation service

-,7007,afs3-bos,basic overseer process

-,7008,afs3-update,server-to-server updater

-,7009,afs3-rmtsys,remote cache manager service

-,7010,ups-onlinet,onlinet uninterruptable power supplies

-,7099,lazy-ptop,lazy-ptop

-,7100,font-service,X Font Service

-,7121,virprot-lm,Virtual Prototypes License Manager

-,7174,clutild,Clutild

-,7200,fodms,FODMS FLIP

-,7201,dlip,DLIP

-,7306,Trojan,NetMonitor (NetSpy)

-,7395,winqedit,winqedit

-,7491,telops-lmd,telops-lmd

-,7511,pafec-lm,pafec-lm

-,7626,Trojan,BingHe

-,7777,cbt,cbt

-,7781,accu-lmgr,accu-lmgr

-,7999,irdmi2,iRDMI2

-,8000,OICQ,OICQ Server

-,8010,wingate-logfile,Wingate web logfile

-,8011,Trojan,Way

-,8032,pro-ed,ProEd

+,8080,WWW-Proxy,Standard HTTP Proxy

-,8450,npmp,npmp

-,8888,ddi-tcp-1,NewsEDGE server TCP (TCP 1)

-,8889,ddi-tcp-2,Desktop Data TCP 1

-,8890,ddi-tcp-3,Desktop Data TCP 2

-,8891,ddi-tcp-4,Desktop Data TCP 3: NESS application

-,8892,ddi-tcp-5,Desktop Data TCP 4: FARM product

-,8893,ddi-tcp-6,Desktop Data TCP 5: NewsEDGE/Web application

-,8894,ddi-tcp-7,Desktop Data TCP 6: COAL application

-,9000,cslistener,CSlistener

-,9100,JetDirect,HP JetDirect Printer Server

-,9535,man,?

-,9876,sd,Session Director

-,9992,palace,Palace

-,9993,palace,Palace

-,9994,palace,Palace

-,9995,palace,Palace

-,9996,palace,Palace

-,9997,palace,Palace

-,9998,distinct32,Distinct32

-,9999,distinct,distinct

-,10000,ndmp,Network Data Management Protocol

-,12345,Netbus,Win95/NT Netbus backdoor

-,12753,tsaf,tsaf port

-,17007,isode-dua,?

-,18000,biimenu,Beckman Instruments

-,20000,Trojan,Millenium II (GirlFriend)

群子

-,21554,Trojan,GirlFriend

-,21845,webphone,webphone

-,21846,netspeak-is,NetSpeak Corp. Directory Services

-,21847,netspeak-cs,NetSpeak Corp. Connection Services

-,21848,netspeak-acd,NetSpeak Corp. Automatic Call Distribution

-,21849,netspeak-cps,NetSpeak Corp. Credit Processing System

-,22273,wnn6,wnn6

-,22555,vocaltec-wconf,Vocaltec Web Conference

-,22800,aws-brf,Telerate Information Platform LAN

-,22951,brf-gw,Telerate Information Platform WAN

-,25000,icl-twobase1,icl-twobase1

-,25001,icl-twobase2,icl-twobase2

-,25002,icl-twobase3,icl-twobase3

-,25003,icl-twobase4,icl-twobase4

-,25004,icl-twobase5,icl-twobase5

-,25005,icl-twobase6,icl-twobase6

-,25006,icl-twobase7,icl-twobase7

-,25007,icl-twobase8,icl-twobase8

-,25008,icl-twobase9,icl-twobase9

-,25009,icl-twobase10,icl-twobase10

-,25793,vocaltec-hos,Vocaltec Address Server

-,25867,WebCam32,WebCam32 Admin

-,26000,quake,quake

-,26208,wnn6-ds,wnn6-ds

-,27374,Trojan,Sub Seven 2.0+

-,47557,dbbrowse,Databeam Corporation

-,47806,ap,ALC Protocol

-,47808,bacnet,Building Automation and Control Networks

-,54320,Trojan,Back Orifice 2000









《完》



－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－

这个 算不算 灌水？？