常用端口对照表---附带中文的！...

= Reserved 1= tcpmux 2= compressnet 3= compressnet 4= Unassigned 5= Remote Job Entr 6= Unassigned 7= Echo 8= Unassigned 9= Discard 10= Unassigned 11= Active Users 12= Unassigned 13= Daytime 14= Unassigned 15= Unassigned 16= Unassigned 17= Quote of the Day 18= Message Send Protocol 19= Character Generator 20= FTP (Data) 21= FTP (Control) 22= SSH, Remote Login Protocol 23= Telnet 24= Private mail-system 25= SMTP, Simple Mail Transfer Protocol 26= Unassigned 27= NSW User System FE 28= Unassigned 29= MSG ICP 30= Unassigned 31= MSG Authentication 32= Unassigned 33= Display Support Protocol 34= Unassigned 35= Private printer server 36= Unassigned 37= Time 38= Route Access Protocol 39= Resource Location Protocol 40= Unassigned 41= Graphics 42= Host Name Server 43= Who Is 44= MPM FLAGS Protocol 45= Message Processing Module (recv) 46= mpm-snd, MPM (default send) 47= ni-ftp 48= Digital Audit Daemon 49= login, Login Host Protocol 50= re-mail-ck, Remote Mail Checking Protocol 51= IMP Logical Address Maintenance 52= xns-time, XNS Time Protocol 53= domain, Domain Name Server 54= xns-ch, XNS Clearinghouse 55= ISI Graphics Language 56= XNS Authentication 57= Private terminal access 58= XNS Mail 59= Private file service 60= Unassigned 61= NI MAIL 62= ACA Services 63= Unassigned 64= Communications Integrator (CI) 65= TACACS-Database Service 66= Oracle SQL*NET 67= Bootstrap Protocol Server 68= Bootstrap Protocol Client 69= Trivial File Transfer 70= Gophergopher 71= Remote Job Service 72= Remote Job Service 73= Remote Job Service 74= Remote Job Service 75= any private dial out service 76= Distributed External Object Store 77= any private RJE service 78= vettcpvettcp 79= Finger server 80= HTTP, World Wide Web 81= HOSTS2 Name Server 82= XFER Utility 83= MIT ML Device 84= Common Trace Facility 85= MIT ML Device 86= Micro Focus Cobol 87= Private terminal link 88= Kerberos 89= SU/MIT Telnet Gateway 90= DNSIX Securit Attribute Token Map 91= MIT Dover Spooler 92= Network Printing Protocol 93= Device Control Protocol 94= Tivoli Object Dispatcher 95= SUPDUPsupdup 96= DIXIE Protocol Specification 97= Swift Remote Vitural File Protocol 98= TAC Newstacnews 99= Metagram Relay 100= newacct [unauthorized use] 101= NIC Host Name Server 102= ISO-TSAP 103= Genesis Point-to-Point Trans Net 104= ACR-NEMA Digital Imag. & Comm. 300 105= Mailbox Name Nameserver 106= 3COM-TSMUX3com-tsmux 107= Remote Telnet Service 108= SNA Gateway Access Server 109= Pop2, Post Office Protocol - Version 2 110= Pop3, Post Office Protocol - Version 3 111= SUN RPC 112= McIDAS Data Transmission Protocol 113= Authentication Service 114= Audio News Multicast 115= Simple File Transfer Protocol 116= ANSA REX Notify 117= UUCP Path Service 118= SQL Servicessqlserv 119= Network News Transfer Protocol 120= CFDPTKTcfdptkt 121= Encore Expedited Remote Pro.Call 122= SMAKYNETsmakynet 123= Network Time Protocol 124= ANSA REX Trader 125= Locus PC-Interface Net Map Ser 126= Unisys Unitary Login 127= Locus PC-Interface Conn Server 128= GSS X License Verification 129= Password Generator Protocol 130= cisco FNATIVE 131= cisco TNATIVE 132= cisco SYSMAINT 133= Statistics Service 134= INGRES-NET Service 135= Location Service 136= PROFILE Naming System 137= NETBIOS Name Service 138= NETBIOS Datagram Service 139= NETBIOS Session Service 140= EMFIS Data Service 141= EMFIS Control Service 142= Britton-Lee IDM 143= Interim Mail Access Protocol v2 144= NewSnews 145= UAAC Protocoluaac 146= ISO-IP0iso-tp0 147= ISO-IPiso-ip 148= CRONUS-SUPPORT 149= AED 512 Emulation Service 150= SQL-NETsql-net 151= HEMShems 152= Background File Transfer Program 153= SGMPsgmp 154= NETSCnetsc-prod 155= NETSCnetsc-dev 156= SQL Service 157= KNET/VM Command/Message Protocol 158= PCMail Serverpcmail-srv 159= NSS-Routingnss-routing 160= SGMP-TRAPSsgmp-traps 161= SNMP 162= SNMP TRAP 163= CMIP/TCP Manager 164= CMIP/TCP Agent 165= Xeroxxns-courier 166= Sirius Systems 167= NAMPnamp 168= RSVDrsvd 169= Send 170= Network PostScript 170= Network PostScript 171= Network Innovations Multiplex 172= Network Innovations CL/1 173= Xyplexxyplex-mux 174= MAILQ 175= VMNET 176= GENRAD-MUXgenrad-mux 177= X Display Manager Control Protocol 178= NextStep Window Server 179= Border Gateway Protocol 180= Intergraphris 181= Unifyunify 182= Unisys Audit SITP 183= OCBinderocbinder 184= OCServerocserver 185= Remote-KIS 186= KIS Protocolkis 187= Application Communication Interface 188= Plus Five's MUMPS 189= Queued File Transport 189= Queued File Transport 190= Gateway Access Control Protocol 190= Gateway Access Control Protocol 191= Prospero Directory Service 191= Prospero Directory Service 192= OSU Network Monitoring System 193= srmp, Spider Remote Monitoring Protocol 194= irc, Internet Relay Chat Protocl 195= DNSIX Network Level Module Audit 196= DNSIX Session Mgt Module Audit Redir 197= Directory Location Service 198= Directory Location Service Monitor 199= SMUX 200= IBM System Resource Controller 201= at-rtmp AppleTalk Routing Maintenance 202= at-nbp AppleTalk Name Binding 203= at-3 AppleTalk Unused 204= AppleTalk Echo 205= AppleTalk Unused 206= AppleTalk Zone Information 207= AppleTalk Unused 208= AppleTalk Unused 209= Trivial Authenticated Mail Protocol 210= ANSI Z39.50z39.50 211= Texas Instruments 914C/G Terminal 212= ATEXSSTRanet 213= IPX 214= VM PWSCSvmpwscs 215= Insignia Solutions 216= Access Technology License Server 217= dBASE Unix 218= Netix Message Posting Protocol 219= Unisys ARPsuarps 220= Interactive Mail Access Protocol v3 221= Berkeley rlogind with SPX auth 222= Berkeley rshd with SPX auth 223= Certificate Distribution Center 224= Reserved (224-241) 241= Reserved (224-241) 242= Unassigned 243= Survey Measurement 244= Unassigned 245= LINKlink 246= Display Systems Protocol 247= Reserved 248= Reserved 249= Reserved 250= Reserved 251= Reserved 252= Reserved 253= Reserved 254= Reserved 255= Reserved 344= Prospero Data Access Protocol 345= Perf Analysis Workbench 346= Zebra serverzserv 347= Fatmen Serverfatserv 348= Cabletron Management Protocol 371= Clearcaseclearcase 372= Unix Listservulistserv 373= Legent Corporation 374= Legent Corporation 375= Hasslehassle 376= Amiga Envoy Network Inquiry Proto 377= NEC Corporation 378= NEC Corporation 379= TIA/EIA/IS-99 modem client 380= TIA/EIA/IS-99 modem server 381= hp performance data collector 382= hp performance data managed node 383= hp performance data alarm manager 384= A Remote Network Server System 385= IBM Application 386= ASA Message Router Object Def. 387= Appletalk Update-Based Routing Pro. 388= Unidata LDM Version 4 389= Lightweight Directory Access Protocol 390= UISuis 391= SynOptics SNMP Relay Port 392= SynOptics Port Broker Port 393= Data Interpretation System 394= EMBL Nucleic Data Transfer 395= NETscout Control Protocol 396= Novell Netware over IP 397= Multi Protocol Trans. Net. 398= Kryptolankryptolan 399= Unassigned 400= Workstation Solutions 401= Uninterruptible Power Supply 402= Genie Protocol 403= decapdecap 404= ncednced 405= ncldncld 406= Interactive Mail Support Protocol 407= Timbuktutimbuktu 408= Prospero Resource Manager Sys. Man. 409= Prospero Resource Manager Node Man. 410= DECLadebug Remote Debug Protocol 411= Remote MT Protocol 412= Trap Convention Port 413= SMSPsmsp 414= InfoSeekinfoseek 415= BNetbnet 416= Silverplattersilverplatter 417= Onmuxonmux 418= Hyper-Ghyper-g 419= Arielariel1 420= SMPTEsmpte 421= Arielariel2 422= Arielariel3 423= IBM Operations Planning and Control Start 424= IBM Operations Planning and Control Track 425= ICADicad-el 426= smartsdpsmartsdp 427= Server Location 429= OCS_AMU 430= UTMPSDutmpsd 431= UTMPCDutmpcd 432= IASDiasd 433= NNSPnnsp 434= MobileIP-Agent 435= MobilIP-MN 436= DNA-CMLdna-cml 437= comscmcomscm 439= dasp, Thomas Obermair 440= sgcpsgcp 441= decvms-sysmgtdecvms-sysmgt 442= cvc_hostdcvc_hostd 443= HttpS, Secure HTTP 444= Simple Network Paging Protocol 445= Microsoft-DS 446= DDM-RDBddm-rdb 447= DDM-RFMddm-dfm 448= DDM-BYTEddm-byte 449= AS Server Mapper 450= TServertserver

[此贴子已经被作者于2005-5-13 11:25:37编辑过]

512= exec, Remote process execution 513= login, remote login 514= cmd, exec with auto auth. 514= syslog 515= Printer spooler 516= Unassigned 517= talk 519= unixtime 520= extended file name server 521= Unassigned 522= Unassigned 523= Unassigned 524= Unassigned 526= newdate 530= rpc courier 531= chatconference 532= readnewsnetnews 533= for emergency broadcasts 539= Apertus Technologies Load Determination 540= uucp 541= uucp-rlogin 542= Unassigned 543= klogin 544= kshell 545= Unassigned 546= Unassigned 547= Unassigned 548= Unassigned 549= Unassigned 550= new-who 551= Unassigned 552= Unassigned 553= Unassigned 554= Unassigned 555= dsf 556= remotefs 557= rmonitor 558= rmonitor 559= rmonitor 560= rmonitord 561= dmonitor 562= chcmd 563= Unassigned 564= plan 9 file service 565= whoami 566= Unassigned 567= Unassigned 568= Unassigned 569= Unassigned 570= demonmeter 571= udemonmeter 572= Unassigned ipc server 573= Unassigned ipc server 574= Unassigned ipc server 575= Unassigned ipc server 576= Unassigned ipc server 577= Unassigned ipc server 578= Unassigned ipc server 579= Unassigned ipc server 580= Unassigned ipc server 581= Unassigned ipc server 582= Unassigned ipc server 583= Unassigned ipc server 584= Unassigned ipc server 585= Unassigned ipc server 586= Unassigned ipc server 587= Unassigned ipc server 588= Unassigned ipc server 589= Unassigned ipc server 590= Unassigned ipc server 591= Unassigned ipc server 592= Unassigned ipc server 593= Unassigned ipc server 594= Unassigned ipc server 595= Unassigned ipc server 596= Unassigned ipc server 597= Unassigned ipc server 598= Unassigned ipc server 599= Unassigned ipc server 600= Sun IPC server 607= nqs 606= Cray Unified Resource Manager 608= Sender-Initiated/Unsolicited File Transfer 609= npmp-trapnpmp-trap 610= npmp-localnpmp-local 611= npmp-guinpmp-gui 634= ginadginad 666= Doom Id Software 704= errlog copy/server daemon 709= EntrustManager 729= IBM NetView DM/6000 Server/Client 730= IBM NetView DM/6000 send/tcp 731= IBM NetView DM/6000 receive/tcp 741= netGWnetgw 742= Network based Rev. Cont. Sys. 744= Flexible License Manager 747= Fujitsu Device Control 748= Russell Info Sci Calendar Manager 749= kerberos administration 751= pump 752= qrh 754= send 758= nlogin 759= con 760= ns 762= quotad 763= cycleserv 765= webster 767= phonephonebook 769= vid 771= rtip 772= cycleserv2 774= acmaint_dbd 775= acmaint_transd 780= wpgs 786= Concertconcert 800= mdbs_daemon 996= Central Point Software 997= maitrd 999= puprouter 1023= Reserved 1024= Reserved 1025= network blackjack 1030= BBN IAD 1031= BBN IAD 1032= BBN IAD 1067= Installation Bootstrap Proto. Serv. 1068= Installation Bootstrap Proto. Cli. 1080= SOCKS 1083= Anasoft License Manager 1084= Anasoft License Manager 1155= Network File Access 1222= SNI R&D network 1248= hermes 1346= Alta Analytics License Manager 1347= multi media conferencing 1347= multi media conferencing 1348= multi media conferencing 1349= Registration Network Protocol 1350= Registration Network Protocol 1351= Digital Tool Works (MIT) 1352= /Lotus Notelotusnote 1353= Relief Consulting 1354= RightBrain Software 1355= Intuitive Edge 1356= CuillaMartin Company 1357= Electronic PegBoard 1358= CONNLCLIconnlcli 1359= FTSRVftsrv 1360= MIMERmimer 1361= LinX 1362= TimeFliestimeflies 1363= Network DataMover Requester 1364= Network DataMover Server 1365= Network Software Associates 1366= Novell NetWare Comm Service Platform 1367= DCSdcs 1368= ScreenCastscreencast 1369= GlobalView to Unix Shell 1370= Unix Shell to GlobalView 1371= Fujitsu Config Protocol 1372= Fujitsu Config Protocol 1373= Chromagrafxchromagrafx 1374= EPI Software Systems 1375= Bytexbytex 1376= IBM Person to Person Software 1377= Cichlid License Manager 1378= Elan License Manager 1379= Integrity Solutions 1380= Telesis Network License Manager 1381= Apple Network License Manager 1382= udt_os 1383= GW Hannaway Network License Manager 1384= Objective Solutions License Manager 1385= Atex Publishing License Manager 1386= CheckSum License Manager 1387= Computer Aided Design Software Inc LM 1388= Objective Solutions DataBase Cache 1389= Document Manager 1390= Storage Controller 1391= Storage Access Server 1392= Print Managericlpv-pm 1393= Network Log Server 1394= Network Log Client 1395= PC Workstation Manager software 1396= DVL Active Mail 1397= Audio Active Mail 1398= Video Active Mail 1399= Cadkey License Manager 1400= Cadkey Tablet Daemon 1401= Goldleaf License Manager 1402= Prospero Resource Manager 1403= Prospero Resource Manager 1404= Infinite Graphics License Manager 1405= IBM Remote Execution Starter 1406= NetLabs License Manager 1407= DBSA License Manager 1408= Sophia License Manager 1409= Here License Manager 1410= HiQ License Manager 1411= AudioFileaf 1412= InnoSysinnosys 1413= Innosys-ACLinnosys-acl 1414= IBM MQSeriesibm-mqseries 1415= DBStardbstar 1416= Novell LU6.2novell-lu6.2 1417= Timbuktu Service 1 Port 1417= Timbuktu Service 1 Port 1418= Timbuktu Service 2 Port 1419= Timbuktu Service 3 Port 1420= Timbuktu Service 4 Port 1421= Gandalf License Manager 1422= Autodesk License Manager 1423= Essbase Arbor Software 1424= Hybrid Encryption Protocol 1425= Zion Software License Manager 1426= Satellite-data Acquisition System 1 1427= mloadd monitoring tool 1428= Informatik License Manager 1429= Hypercom NMSnms 1430= Hypercom TPDUtpdu 1431= Reverse Gosip Transport 1432= Blueberry Software License Manager 1433= Microsoft-SQL-Server 1434= Microsoft-SQL-Monitor 1435= IBM CISCibm-cics 1436= Satellite-data Acquisition System 2 1437= Tabulatabula 1438= Eicon Security Agent/Server 1439= Eicon X25/SNA Gateway 1440= Eicon Service Location Protocol 1441= Cadis License Management 1442= Cadis License Management 1443= Integrated Engineering Software 1444= Marcam License Management 1445= Proxima License Manager 1446= Optical Research Associates License Manager 1447= Applied Parallel Research LM 1448= OpenConnect License Manager 1449= PEportpeport 1450= Tandem Distributed Workbench Facility 1451= IBM Information Management 1452= GTE Government Systems License Man 1453= Genie License Manager 1454= interHDL License Manager 1454= interHDL License Manager 1455= ESL License Manager 1456= DCAdca 1457= Valisys License Manager 1458= Nichols Research Corp. 1459= Proshare Notebook Application 1460= Proshare Notebook Application 1461= IBM Wireless LAN 1462= World License Manager 1463= Nucleusnucleus 1464= MSL License Manager 1465= Pipes Platform 1466= Ocean Software License Manager 1467= CSDMBASEcsdmbase 1468= CSDMcsdm 1469= Active Analysis Limited License Manager 1470= Universal Analytics 1471= csdmbasecsdmbase 1472= csdmcsdm 1473= OpenMathopenmath 1474= Telefindertelefinder 1475= Taligent License Manager 1476= clvm-cfgclvm-cfg 1477= ms-sna-server 1478= ms-sna-base 1479= dberegisterdberegister

1480= PacerForumpacerforum 1481= AIRSairs 1482= Miteksys License Manager 1483= AFS License Manager 1484= Confluent License Manager 1485= LANSourcelansource 1486= nms_topo_serv 1487= LocalInfoSrvr 1488= DocStordocstor 1489= dmdocbrokerdmdocbroker 1490= insitu-confinsitu-conf 1491= anynetgateway 1492= stone-design-1 1493= netmap_lmnetmap_lm 1494= icaica 1495= cvccvc 1496= liberty-lmliberty-lm 1497= rfx-lmrfx-lm 1498= Watcom-SQLwatcom-sql 1499= Federico Heinz Consultora 1500= VLSI License Manager 1501= Satellite-data Acquisition System 3 1502= Shivashivadiscovery 1503= Databeamimtc-mcs 1504= EVB Software Engineering License Manager 1505= Funk Software, Inc. 1524= ingres 1525= oracle 1525= Prospero Directory Service non-priv 1526= Prospero Data Access Prot non-priv 1527= oracletlisrv 1529= oraclecoauthor 1600= issd 1651= proshare conf audio 1652= proshare conf video 1653= proshare conf data 1654= proshare conf request 1655= proshare conf notify 1661= netview-aix-1netview-aix-1 1662= netview-aix-2netview-aix-2 1663= netview-aix-3netview-aix-3 1664= netview-aix-4netview-aix-4 1665= netview-aix-5netview-aix-5 1666= netview-aix-6netview-aix-6 1986= cisco license management 1987= cisco RSRB Priority 1 port 1988= cisco RSRB Priority 2 port 1989= cisco RSRB Priority 3 port 1989= MHSnet systemmshnet 1990= cisco STUN Priority 1 port 1991= cisco STUN Priority 2 port 1992= cisco STUN Priority 3 port 1992= IPsendmsgipsendmsg 1993= cisco SNMP TCP port 1994= cisco serial tunnel port 1995= cisco perf port 1996= cisco Remote SRB port 1997= cisco Gateway Discovery Protocol 1998= cisco X.25 service (XOT) 1999= cisco identification port 2009= whosockami 2010= pipe_server 2011= raid 2012= raid-ac 2013= rad-am 2015= raid-cs 2016= bootserver 2017= terminaldb 2018= rellpack 2019= about 2019= xinu page server 2020= xinu page server 2021= xinu expansion1 2022= xinu expansion2 2023= xinu expansion3 2023= xinu expansion4 2024= xinu expansion4 2025= xribs 2026= scrabble 2027= shadowserver 2028= submitserver 2039= device2 2032= blackboard 2033= glogger 2034= scoremgr 2035= imsldoc 2038= objectmanager 2040= lam 2041= interbase 2042= isis 2043= isis-bcast 2044= primsl 2045= cdfunc 2047= dls 2048= dls-monitor 2065= Data Link Switch Read Port Number 2067= Data Link Switch Write Port Number 2201= Advanced Training System Program 2500= Resource Tracking system server 2501= Resource Tracking system client 2564= HP 3000 NS/VT block mode telnet 2784= world wide web development 3049= ccmail 3264= ccmail, cc:mail/lotus 3333= dec-notes 3389= Windows 2000 remote admin 3984= MAPPER network node manager 3985= MAPPER TCP/IP server 3986= MAPPER workstation server 3421= Bull Apprise portmapper 3900= Unidata UDT OS 4132= NUTS Daemonnuts_dem 4133= NUTS Bootp Server 4343= UNICALL 4444= KRB524 4672= remote file access server 5000= Windows XP UPNP 5002= radio free ethernet 5010= TelepathStarttelelpathstart 5011= TelepathAttack 5050= multimedia conference control tool 5145= rmonitor_secure 5190= aol, America-Online 5300= HA cluster heartbeat 5301= hacl-gs # HA cluster general services 5302= HA cluster configuration 5303= hacl-probe HA cluster probing 5305= hacl-test 5631= PcAnywhere(data) - Remote Control Software 6000= x11 X Window System 6063= x11 X Window System 6111= sub-process HP SoftBench Sub-Process Control 6141= meta-corp Meta Corporation License Manager 6142= aspentec-lm Aspen Technology License Manager 6143= watershed-lm Watershed License Manager 6144= statsci1-lm StatSci License Manager - 1 6145= statsci2-lm StatSci License Manager - 2 6146= lonewolf-lm Lone Wolf Systems License Manager 6147= montage-lm Montage License Manager 7000= afs3-fileserver file server itself 7001= afs3-callback callbacks to cache managers 7002= afs3-prserver users & groups database 7003= afs3-vlserver volume location database 7004= afs3-kaserver AFS/Kerberos authentication service 7005= afs3-volser volume managment server 7006= afs3-errors error interpretation service 7007= afs3-bos basic overseer process 7008= afs3-update server-to-server updater 7009= afs3-rmtsys remote cache manager service 7010= ups-online onlinet uninterruptable power supplies 7100= X Font Service 7200= FODMS FLIP 8010= Wingate 8080= Proxy server 8181= IMail 9535= man

斑竹累了~

来，小二给你“听雨岩”爷来壶82年的百事可乐~

端口：993 服务：IMAP 说明：SSL（Secure Sockets layer）

端口：1001、1011 服务：[NULL] 说明：木马Silencer、WebEx开放1001端口。木马Doly Trojan开放1011端口。

端口：1024 服务：Reserved 说明：它是动态端口的开始，许多程序并不在乎用哪个端口连接网络，它们请求系统为它们分配下一个闲置端口。基于这一点分配从端口1024开始。这就是说第一个向系统发出请求的会分配到1024端口。你可以重启机器，打开Telnet，再打开一个窗口运行natstat -a 将会看到Telnet被分配1024端口。还有SQL session也用此端口和5000端口。

端口：1025、1033 服务：1025：network blackjack 1033：[NULL] 说明：木马netspy开放这2个端口。

端口：1080 服务：SOCKS 说明：这一协议以通道方式穿过防火墙，允许防火墙后面的人通过一个IP地址访问INTERNET。理论上它应该只允许内部的通信向外到达INTERNET。但是由于错误的配置，它会允许位于防火墙外部的攻击穿过防火墙。WinGate常会发生这种错误，在加入IRC聊天室时常会看到这种情况。

端口：1170 服务：[NULL] 说明：木马Streaming Audio Trojan、Psyber Stream Server、Voice开放此端口。

端口：1234、1243、6711、6776 服务：[NULL] 说明：木马SubSeven2.0、Ultors Trojan开放1234、6776端口。木马SubSeven1.0/1.9开放1243、6711、6776端口。

端口：1245 服务：[NULL] 说明：木马Vodoo开放此端口。

端口：1433 服务：SQL 说明：Microsoft的SQL服务开放的端口。

端口：1492 服务：stone-design-1 说明：木马FTP99CMP开放此端口。

端口：1500 服务：RPC client fixed port session queries 说明：RPC客户固定端口会话查询

端口：1503 服务：NetMeeting T.120 说明：NetMeeting T.120

端口：1524 服务：ingress 说明：许多攻击脚本将安装一个后门SHELL于这个端口，尤其是针对SUN系统中Sendmail和RPC服务漏洞的脚本。如果刚安装了防火墙就看到在这个端口上的连接企图，很可能是上述原因。可以试试Telnet到用户的计算机上的这个端口，看看它是否会给你一个SHELL。连接到600/pcserver也存在这个问题。

端口：1600 服务：issd 说明：木马Shivka-Burka开放此端口。

端口：1720 服务：NetMeeting 说明：NetMeeting H.233 call Setup。

端口：1731 服务：NetMeeting Audio Call Control 说明：NetMeeting音频调用控制。

端口：1807 服务：[NULL] 说明：木马SpySender开放此端口。

端口：1981 服务：[NULL] 说明：木马ShockRave开放此端口。

端口：1999 服务：cisco identification port 说明：木马BackDoor开放此端口。

端口：2000 服务：[NULL] 说明：木马GirlFriend 1.3、Millenium 1.0开放此端口。

端口：2001 服务：[NULL] 说明：木马Millenium 1.0、Trojan Cow开放此端口。

端口：2023 服务：xinuexpansion 4 说明：木马Pass Ripper开放此端口。

端口：2049 服务：NFS 说明：NFS程序常运行于这个端口。通常需要访问Portmapper查询这个服务运行于哪个端口。

端口：2115 服务：[NULL] 说明：木马Bugs开放此端口。

端口：2140、3150 服务：[NULL] 说明：木马Deep Throat 1.0/3.0开放此端口。

端口：2500 服务：RPC client using a fixed port session replication 说明：应用固定端口会话复制的RPC客户

端口：2583 服务：[NULL] 说明：木马Wincrash 2.0开放此端口。

端口：2801 服务：[NULL] 说明：木马Phineas Phucker开放此端口。

端口：3024、4092 服务：[NULL] 说明：木马WinCrash开放此端口。

端口：3128 服务：squid 说明：这是squid HTTP代理服务器的默认端口。攻击者扫描这个端口是为了搜寻一个代理服务器而匿名访问Internet。也会看到搜索其他代理服务器的端口8000、8001、8080、8888。扫描这个端口的另一个原因是用户正在进入聊天室。其他用户也会检验这个端口以确定用户的机器是否支持代理。

端口：3129 服务：[NULL] 说明：木马Master Paradise开放此端口。

端口：3150 服务：[NULL] 说明：木马The Invasor开放此端口。

端口：3210、4321 服务：[NULL] 说明：木马SchoolBus开放此端口

端口：3333 服务：dec-notes 说明：木马Prosiak开放此端口

端口：3389 服务：超级终端 说明：WINDOWS 2000终端开放此端口。

端口：3700 服务：[NULL] 说明：木马Portal of Doom开放此端口

端口：3996、4060 服务：[NULL] 说明：木马RemoteAnything开放此端口

端口：4000 服务：QQ客户端 说明：腾讯QQ客户端开放此端口。

端口：4092 服务：[NULL] 说明：木马WinCrash开放此端口。

端口：4590 服务：[NULL] 说明：木马ICQTrojan开放此端口。

端口：5000、5001、5321、50505 服务：[NULL] 说明：木马blazer5开放5000端口。木马Sockets de Troie开放5000、5001、5321、50505端口。

端口：5400、5401、5402 服务：[NULL] 说明：木马Blade Runner开放此端口。

端口：5550 服务：[NULL] 说明：木马xtcp开放此端口。

端口：5569 服务：[NULL] 说明：木马Robo-Hack开放此端口。

端口：5632 服务：pcAnywere 说明：有时会看到很多这个端口的扫描，这依赖于用户所在的位置。当用户打开pcAnywere时，它会自动扫描局域网C类网以寻找可能的代理（这里的代理是指agent而不是proxy）。入侵者也会寻找开放这种服务的计算机。，所以应该查看这种扫描的源地址。一些搜寻pcAnywere的扫描包常含端口22的UDP数据包。

端口：5742 服务：[NULL] 说明：木马WinCrash1.03开放此端口。

端口：6267 服务：[NULL] 说明：木马广外女生开放此端口。

端口：6400 服务：[NULL] 说明：木马The tHing开放此端口。

端口：6670、6671 服务：[NULL] 说明：木马Deep Throat开放6670端口。而Deep Throat 3.0开放6671端口。

端口：6883 服务：[NULL] 说明：木马DeltaSource开放此端口。

端口：6969 服务：[NULL] 说明：木马Gatecrasher、Priority开放此端口。

端口：6970 服务：RealAudio 说明：RealAudio客户将从服务器的6970-7170的UDP端口接收音频数据流。这是由TCP-7070端口外向控制连接设置的。

端口：7000 服务：[NULL] 说明：木马Remote Grab开放此端口。

端口：7300、7301、7306、7307、7308 服务：[NULL] 说明：木马NetMonitor开放此端口。另外NetSpy1.0也开放7306端口。

端口：7323 服务：[NULL] 说明：Sygate服务器端。

端口：7626 服务：[NULL] 说明：木马Giscier开放此端口。

端口：7789 服务：[NULL] 说明：木马ICKiller开放此端口。

端口：8000 服务：OICQ 说明：腾讯QQ服务器端开放此端口。

端口：8010 服务：Wingate 说明：Wingate代理开放此端口。

端口：8080 服务：代理端口 说明：WWW代理开放此端口。

精彩！

厉害个

斑竹辛苦了哦

电风扇如果是

看不懂