常见端口

TCP端口

TCP1=TCP Port Service Multiplexer

TCP2=Death

TCP5=Remote Job Entry,yoyo

TCP7=Echo

TCP11=Skun

TCP12=Bomber

TCP16=Skun

TCP17=Skun

TCP18=消息传输协议,skun

TCP19=Skun

TCP20=FTP Data,Amanda

TCP21=文件传输,Back Construction,Blade Runner,DolyTrojan,Fore,FTP trojan,Invisible FTP,Larva, WebEx,WinCrash

TCP22=远程登录协议

TCP23=远程登录(Telnet),Tiny Telnet Server (= TTS)

TCP25=电子邮件(SMTP),Ajan,Antigen,Email PasswordSender,Happy 99,Kuang2,ProMail trojan,Shtrilitz,Stealth,Tapiras,Terminator,WinPC,WinSpy,HaebuCoceda

TCP27=Assasin

TCP28=Amanda

TCP29=MSG ICP

TCP30=Agent 40421

TCP31=Agent 31,Hackers Paradise,Masters Paradise,Agent40421

TCP37=Time,ADM worm

TCP39=SubSARI

TCP41=DeepThroat,Foreplay

TCP42=Host Name Server

TCP43=WHOIS

TCP44=Arctic

TCP48=DRAT

TCP49=主机登录协议

TCP50=DRAT

TCP51=IMP Logical Address Maintenance,Fuck Lamers Backdoor

TCP52=MuSka52,Skun

TCP53=DNS,Bonk (DOS Exploit)

TCP54=MuSka52

TCP58=DMSetup

TCP59=DMSetup

TCP63=whois++

TCP64=Communications Integrator

TCP65=TACACS-Database Service

TCP66=Oracle SQL*NET,AL-Bareki

TCP67=Bootstrap Protocol Server

TCP68=Bootstrap Protocol Client

TCP69=W32.Evala.Worm,BackGate Kit,Nimda,Pasana,Storm,Storm worm,Theef,Worm.Cycle.a

TCP70=Gopher服务,ADM worm

TCP79=用户查询(Finger),Firehotcker,ADM worm

TCP80=超文本服务器(Http),Executor,RingZero

TCP81=Chubo,Worm.Bbeagle.q

TCP82=Netsky-Z

TCP88=Kerberos krb5服务

TCP99=Hidden Port

TCP102=消息传输代理

TCP108=SNA网关访问服务器

TCP109=Pop2

TCP110=电子邮件(Pop3),ProMail

TCP113=Kazimas, Auther Idnet

TCP115=简单文件传输协议

TCP118=SQL Services, Infector 1.4.2

TCP119=新闻组传输协议(Newsgroup(Nntp)), Happy 99

TCP121=JammerKiller, Bo jammerkillah

TCP123=网络时间协议(NTP),Net Controller

TCP129=Password Generator Protocol

TCP133=Infector 1.x

TCP135=微软DCE RPC end-point mapper服务

TCP137=微软Netbios Name服务(网上邻居传输文件使用)

TCP138=微软Netbios Name服务(网上邻居传输文件使用)

TCP139=微软Netbios Name服务(用于文件及打印机共享)

TCP142=NetTaxi

TCP143=IMAP

TCP146=FC Infector,Infector

TCP150=NetBIOS Session Service

TCP156=SQL服务器

TCP161=Snmp

TCP162=Snmp-Trap

TCP170=A-Trojan

TCP177=X Display管理控制协议

TCP179=Border网关协议(BGP)

TCP190=网关访问控制协议(GACP)

TCP194=Irc

TCP197=目录定位服务(DLS)

TCP256=Nirvana

TCP315=The Invasor

TCP371=ClearCase版本管理软件

TCP389=Lightweight Directory Access Protocol (LDAP)

TCP396=Novell Netware over IP

TCP420=Breach

TCP421=TCP Wrappers

TCP443=安全服务

TCP444=Simple Network Paging Protocol(SNPP)

TCP445=Microsoft-DS

TCP455=Fatal Connections

TCP456=Hackers paradise,FuseSpark

TCP458=苹果公司QuickTime

TCP513=Grlogin

TCP514=RPC Backdoor

TCP520=Rip

TCP531=Rasmin,Net666

TCP544=kerberos kshell

TCP546=DHCP Client

TCP547=DHCP Server

TCP548=Macintosh文件服务

TCP555=Ini-Killer,Phase Zero,Stealth Spy

TCP569=MSN

TCP605=SecretService

TCP606=Noknok8

TCP660=DeepThroat

TCP661=Noknok8

TCP666=Attack FTP,Satanz Backdoor,Back Construction,Dark Connection Inside 1.2

TCP667=Noknok7.2

TCP668=Noknok6

TCP669=DP trojan

TCP692=GayOL

TCP707=Welchia,nachi

TCP777=AIM Spy

TCP808=RemoteControl,WinHole

TCP815=Everyone Darling

TCP901=Backdoor.Devil

TCP911=Dark Shadow

TCP990=ssl加密

TCP993=IMAP

TCP999=DeepThroat

TCP1000=Der Spaeher

TCP1001=Silencer,WebEx,Der Spaeher

TCP1003=BackDoor

TCP1010=Doly

TCP1011=Doly

TCP1012=Doly

TCP1015=Doly

TCP1016=Doly

TCP1020=Vampire

TCP1023=Worm.Sasser.e

TCP1024=NetSpy.698(YAI)

TCP1059=nimreg

//TCP1025=NetSpy.698,Unused Windows Services Block

//TCP1026=Unused Windows Services Block

//TCP1027=Unused Windows Services Block

//TCP1028=Unused Windows Services Block

//TCP1029=Unused Windows Services Block

//TCP1030=Unused Windows Services Block

//TCP1033=Netspy

//TCP1035=Multidropper

//TCP1042=Bla

//TCP1045=Rasmin

//TCP1047=GateCrasher

//TCP1050=MiniCommand

TCP1069=Backdoor.TheefServer.202

TCP1070=Voice,Psyber Stream Server,Streaming Audio Trojan

TCP1080=Wingate,Worm.BugBear.B,Worm.Novarg.B

//TCP1090=Xtreme, VDOLive

//TCP1092=LoveGate

//TCP1095=Rat

//TCP1097=Rat

//TCP1098=Rat

//TCP1099=Rat

TCP1110=nfsd-keepalive

TCP1111=Backdoor.AIMVision

TCP1155=Network File Access

//TCP1170=Psyber Stream Server,Streaming Audio trojan,Voice

//TCP1200=NoBackO

//TCP1201=NoBackO

//TCP1207=Softwar

//TCP1212=Nirvana,Visul Killer

//TCP1234=Ultors

//TCP1243=BackDoor-G, SubSeven, SubSeven Apocalypse

//TCP1245=VooDoo Doll

//TCP1269=Mavericks Matrix

//TCP1313=Nirvana

//TCP1349=BioNet

TCP1433=Microsoft SQL服务

//TCP1441=Remote Storm

//TCP1492=FTP99CMP(BackOriffice.FTP)

TCP1503=NetMeeting T.120

//TCP1509=Psyber Streaming Server

//TCP1600=Shivka-Burka

//TCP1703=Exloiter 1.1

TCP1720=NetMeeting H.233 call Setup

TCP1731=NetMeeting音频调用控制

//TCP1807=SpySender

//TCP1966=Fake FTP 2000

//TCP1976=Custom port

//TCP1981=Shockrave

TCP1990=stun-p1 cisco STUN Priority 1 port

TCP1990=stun-p1 cisco STUN Priority 1 port

TCP1991=stun-p2 cisco STUN Priority 2 port

TCP1992=stun-p3 cisco STUN Priority 3 port,ipsendmsg IPsendmsg

TCP1993=snmp-tcp-port cisco SNMP TCP port

TCP1994=stun-port cisco serial tunnel port

TCP1995=perf-port cisco perf port

TCP1996=tr-rsrb-port cisco Remote SRB port

TCP1997=gdp-port cisco Gateway Discovery Protocol

TCP1998=x25-svc-port cisco X.25 service (XOT)

//TCP1999=BackDoor, TransScout

//TCP2000=Der Spaeher,INsane Network

TCP2002=W32.Beagle.AX @mm

//TCP2001=Transmisson scout

//TCP2002=Transmisson scout

//TCP2003=Transmisson scout

//TCP2004=Transmisson scout

//TCP2005=TTransmisson scout

TCP2011=cypress

TCP2015=raid-cs

//TCP2023=Ripper,Pass Ripper,Hack City Ripper Pro

TCP2049=NFS

//TCP2115=Bugs

//TCP2121=Nirvana

//TCP2140=Deep Throat, The Invasor

//TCP2155=Nirvana

//TCP2208=RuX

//TCP2255=Illusion Mailer

//TCP2283=HVL Rat5

//TCP2300=PC Explorer

//TCP2311=Studio54

TCP2556=Worm.Bbeagle.q

//TCP2565=Striker

//TCP2583=WinCrash

//TCP2600=Digital RootBeer

//TCP2716=Prayer Trojan

TCP2745=Worm.BBeagle.k

//TCP2773=Backdoor,SubSeven

//TCP2774=SubSeven2.1&2.2

//TCP2801=Phineas Phucker

//TCP2989=Rat

//TCP3024=WinCrash trojan

TCP3127=Worm.Novarg

TCP3128=RingZero,Worm.Novarg.B

//TCP3129=Masters Paradise

//TCP3150=Deep Throat, The Invasor

TCP3198=Worm.Novarg

//TCP3210=SchoolBus

TCP3332=Worm.Cycle.a

TCP3333=Prosiak

TCP3389=超级终端

//TCP3456=Terror

//TCP3459=Eclipse 2000

//TCP3700=Portal of Doom

//TCP3791=Eclypse

//TCP3801=Eclypse

TCP3996=Portal of Doom,RemoteAnything

TCP4000=腾讯QQ客户端

TCP4060=Portal of Doom,RemoteAnything

TCP4092=WinCrash

TCP4242=VHM

TCP4267=SubSeven2.1&2.2

TCP4321=BoBo

TCP4444=Prosiak,Swift remote

TCP4500=W32.HLLW.Tufas

TCP4567=File Nail

TCP4590=ICQTrojan

TCP4899=Remote Administrator服务器

TCP4950=ICQTrojan

TCP5000=WindowsXP服务器,Blazer 5,Bubbel,BackDoor Setup,Sockets de Troie

TCP5001=Back Door Setup, Sockets de Troie

TCP5002=cd00r,Shaft

TCP5011=One of the Last Trojans (OOTLT)

TCP5025=WM Remote KeyLogger

TCP5031=Firehotcker,Metropolitan,NetMetro

TCP5032=Metropolitan

TCP5190=ICQ Query

TCP5321=Firehotcker

TCP5333=Backage Trojan Box 3

TCP5343=WCrat

TCP5400=Blade Runner, BackConstruction1.2

TCP5401=Blade Runner,Back Construction

TCP5402=Blade Runner,Back Construction

TCP5471=WinCrash

TCP5512=Illusion Mailer

TCP5521=Illusion Mailer

TCP5550=Xtcp,INsane Network

TCP5554=Worm.Sasser

TCP5555=ServeMe

TCP5556=BO Facil

TCP5557=BO Facil

TCP5569=Robo-Hack

TCP5598=BackDoor 2.03

TCP5631=PCAnyWhere data

TCP5632=PCAnyWhere

TCP5637=PC Crasher

TCP5638=PC Crasher

TCP5698=BackDoor

TCP5714=Wincrash3

TCP5741=WinCrash3

TCP5742=WinCrash

TCP5760=Portmap Remote Root Linux Exploit

TCP5880=Y3K RAT

TCP5881=Y3K RAT

TCP5882=Y3K RAT

TCP5888=Y3K RAT

TCP5889=Y3K RAT

TCP5900=WinVnc

TCP6000=Backdoor.AB

TCP6006=Noknok8

TCP6129=Dameware Nt Utilities服务器

TCP6272=SecretService

TCP6267=广外女生

TCP6400=Backdoor.AB,The Thing

TCP6500=Devil 1.03

TCP6661=Teman

TCP6666=TCPshell.c

TCP6667=NT Remote Control,Wise 播放器接收端口

TCP6668=Wise Video广播端口

TCP6669=Vampyre

TCP6670=DeepThroat,iPhone

TCP6671=Deep Throat 3.0

TCP6711=SubSeven

TCP6712=SubSeven1.x

TCP6713=SubSeven

TCP6723=Mstream

TCP6767=NT Remote Control

TCP6771=DeepThroat

TCP6776=BackDoor-G,SubSeven,2000 Cracks

TCP6777=Worm.BBeagle

TCP6789=Doly Trojan

TCP6838=Mstream

TCP6883=DeltaSource

TCP6912=Shit Heep

TCP6939=Indoctrination

TCP6969=GateCrasher, Priority, IRC 3

TCP6970=RealAudio,GateCrasher

TCP7000=Remote Grab,NetMonitor,SubSeven1.x

TCP7001=Freak88

TCP7201=NetMonitor

TCP7215=BackDoor-G, SubSeven

TCP7001=Freak88,Freak2k

TCP7300=NetMonitor

TCP7301=NetMonitor

TCP7306=NetMonitor,NetSpy 1.0

TCP7307=NetMonitor, ProcSpy

TCP7308=NetMonitor, X Spy

TCP7323=Sygate服务器端

TCP7424=Host Control

TCP7511=聪明基因

TCP7597=Qaz

TCP7609=Snid X2

TCP7626=冰河

TCP7777=The Thing

TCP7789=Back Door Setup, ICQKiller

TCP7983=Mstream

TCP8000=腾讯OICQ服务器端,XDMA

TCP8010=Wingate,Logfile

TCP8011=WAY2.4

TCP8080=WWW 代理,RingZero,Chubo,Worm.Novarg.B

TCP8102=网络神偷

TCP

8181=W32.Erkez.D@mm

TCP8520=W32.Socay.Worm

TCP8594=I-Worm/Bozori.a

TCP8787=BackOfrice 2000

TCP8888=Winvnc

TCP8897=Hack Office,Armageddon

TCP8989=Recon

TCP9000=Netministrator

TCP9325=Mstream

TCP9400=InCommand 1.0

TCP9401=InCommand 1.0

TCP9402=InCommand 1.0

TCP9872=Portal of Doom

TCP9873=Portal of Doom

TCP9874=Portal of Doom

TCP9875=Portal of Doom

TCP9876=Cyber Attacker

TCP9878=TransScout

TCP9989=Ini-Killer

TCP9898=Worm.Win32.Dabber.a

TCP9999=Prayer Trojan

TCP10067=Portal of Doom

TCP10080=Worm.Novarg.B

TCP10084=Syphillis

TCP10085=Syphillis

TCP10086=Syphillis

TCP10101=BrainSpy

TCP10167=Portal Of Doom

TCP10168=Worm.Supnot.78858.c,Worm.LovGate.T

TCP10520=Acid Shivers

TCP10607=Coma trojan

TCP10666=Ambush

TCP11000=Senna Spy

TCP11050=Host Control

TCP11051=Host Control

TCP11223=Progenic,Hack ’99KeyLogger

TCP11831=TROJ_LATINUS.SVR

TCP12076=Gjamer, MSH.104b

TCP12223=Hack’99 KeyLogger

TCP12345=GabanBus, NetBus 1.6/1.7, Pie Bill Gates, X-bill

TCP12346=GabanBus, NetBus 1.6/1.7, X-bill

TCP12349=BioNet

TCP12361=Whack-a-mole

TCP12362=Whack-a-mole

TCP12363=Whack-a-mole

TCP12378=W32/Gibe@MM

TCP12456=NetBus

TCP12623=DUN Control

TCP12624=Buttman

TCP12631=WhackJob, WhackJob.NB1.7

TCP12701=Eclipse2000

TCP12754=Mstream

TCP13000=Senna Spy

TCP13010=Hacker Brazil

TCP13013=Psychward

TCP13223=Tribal Voice的聊天程序PowWow

TCP13700=Kuang2 The Virus

TCP14456=Solero

TCP14500=PC Invader

TCP14501=PC Invader

TCP14502=PC Invader

TCP14503=PC Invader

TCP15000=NetDaemon 1.0

TCP15092=Host Control

TCP15104=Mstream

TCP16484=Mosucker

TCP16660=Stacheldraht (DDoS)

TCP16772=ICQ Revenge

TCP16959=Priority

TCP16969=Priority

TCP17027=提供广告服务的Conducent"adbot"共享软件

TCP17166=Mosaic

TCP17300=Kuang2 The Virus

TCP17490=CrazyNet

TCP17500=CrazyNet

TCP17569=Infector 1.4.x + 1.6.x

TCP17777=Nephron

TCP18753=Shaft (DDoS)

TCP19191=蓝色火焰

TCP19864=ICQ Revenge

TCP20000=Millennium II (GrilFriend)

TCP20001=Millennium II (GrilFriend)

TCP20002=AcidkoR

TCP20034=NetBus 2 Pro

TCP20168=Lovgate

TCP20203=Logged,Chupacabra

TCP20331=Bla

TCP20432=Shaft (DDoS)

TCP20808=Worm.LovGate.v.QQ

TCP21335=Tribal Flood Network,Trinoo

TCP21544=Schwindler 1.82,GirlFriend

TCP21554=Schwindler 1.82,GirlFriend,Exloiter 1.0.1.2

TCP22222=Prosiak,RuX Uploader 2.0

TCP22784=Backdoor.Intruzzo

TCP23432=Asylum 0.1.3

TCP23444=网络公牛

TCP23456=Evil FTP, Ugly FTP, WhackJob

TCP23476=Donald Dick

TCP23477=Donald Dick

TCP23777=INet Spy

TCP26274=Delta

TCP26681=Spy Voice

TCP27374=Sub Seven 2.0+, Backdoor.Baste

TCP27444=Tribal Flood Network,Trinoo

TCP27665=Tribal Flood Network,Trinoo

TCP29431=Hack Attack

TCP29432=Hack Attack

TCP29104=Host Control

TCP29559=TROJ_LATINUS.SVR

TCP29891=The Unexplained

TCP30001=Terr0r32

TCP30003=Death,Lamers Death

TCP30029=AOL trojan

TCP30100=NetSphere 1.27a,NetSphere1.31

TCP30101=NetSphere 1.31,NetSphere 1.27a

TCP30102=NetSphere 1.27a,NetSphere1.31

TCP30103=NetSphere 1.31

TCP30303=Sockets de Troie

TCP30722=W32.Esbot.A

TCP30947=Intruse

TCP30999=Kuang2

TCP31336=Bo Whack

TCP31337=Baron Night,BO client,BO2,Bo Facil,BackFire,Back Orifice,DeepBO,Freak2k,NetSpy

TCP31338=NetSpy,Back Orifice,DeepBO

TCP31339=NetSpy DK

TCP31554=Schwindler

TCP31666=BOWhack

TCP31778=Hack Attack

TCP31785=Hack Attack

TCP31787=Hack Attack

TCP31789=Hack Attack

TCP31791=Hack Attack

TCP31792=Hack Attack

TCP32100=PeanutBrittle

TCP32418=Acid Battery

TCP33333=Prosiak,Blakharaz 1.0

TCP33577=Son Of Psychward

TCP33777=Son Of Psychward

TCP33911=Spirit 2001a

TCP34324=BigGluck,TN,Tiny Telnet Server

TCP34555=Trin00 (Windows) (DDoS)

TCP35555=Trin00 (Windows) (DDoS)

TCP36794=Worm.Bugbear-A

TCP37651=YAT

TCP40412=The Spy

TCP40421=Agent 40421,Masters Paradise.96

TCP40422=Masters Paradise

TCP40423=Masters Paradise.97

TCP40425=Masters Paradise

TCP40426=Masters Paradise 3.x

TCP41666=Remote Boot

TCP43210=Schoolbus 1.6/2.0

TCP44444=Delta Source

TCP44445=Happypig

TCP45576=未知代理

TCP47252=Prosiak

TCP47262=Delta

TCP47878=BirdSpy2

TCP49301=Online Keylogger

TCP50505=Sockets de Troie

TCP50766=Fore, Schwindler

TCP51966=CafeIni

TCP53001=Remote Windows Shutdown

TCP53217=Acid Battery 2000

TCP54283=Back Door-G, Sub7

TCP54320=Back Orifice 2000,Sheep

TCP54321=School Bus .69-1.11,Sheep, BO2K

TCP57341=NetRaider

TCP58008=BackDoor.Tron

TCP58009=BackDoor.Tron

TCP58339=ButtFunnel

TCP59211=BackDoor.DuckToy

TCP60000=Deep Throat

TCP60068=Xzip 6000068

TCP60411=Connection

TCP60606=TROJ_BCKDOR.G2.A

TCP61466=Telecommando

TCP61603=Bunker-kill

TCP63485=Bunker-kill

TCP65000=Devil, DDoS

TCP65432=Th3tr41t0r, The Traitor

TCP65530=TROJ_WINMITE.10

TCP65535=RC,Adore Worm/Linux

TCP69123=ShitHeep

TCP88798=Armageddon,Hack Office

UDP1=Sockets des Troie

UDP9=Chargen

UDP19=Chargen

UDP69=Pasana

UDP80=Penrox

UDP371=ClearCase版本管理软件

UDP445=公共Internet文件系统(CIFS)

UDP500=Internet密钥交换

UDP1025=Maverick’s Matrix 1.2 - 2.0

UDP1026=Remote Explorer 2000

UDP1027=UC聊天软件,Trojan.Huigezi.e

UDP1028=3721上网助手(用途不明,建议用户警惕!),KiLo,SubSARI

UDP1029=SubSARI

UDP1031=Xot

UDP1032=Akosch4

UDP1104=RexxRave

UDP1111=Daodan

UDP1116=Lurker

UDP1122=Last 2000,Singularity

UDP1183=Cyn,SweetHeart

UDP1200=NoBackO

UDP1201=NoBackO

UDP1342=BLA trojan

UDP1344=Ptakks

UDP1349=BO dll

UDP1561=MuSka52

UDP1772=NetControle

UDP1978=Slapper

UDP1985=Black Diver

UDP2000=A-trojan,Fear,Force,GOTHIC Intruder,Last 2000,Real 2000

UDP2001=Scalper

UDP2002=Slapper

UDP2015=raid-cs

UDP2018=rellpack

UDP2130=Mini BackLash

UDP2140=Deep Throat,Foreplay,The Invasor

UDP2222=SweetHeart, Way

UDP2339=Voice Spy

UDP2702=Black Diver

UDP2989=RAT

UDP3150=Deep Throat

UDP3215=XHX

UDP3333=Daodan

UDP3801=Eclypse

UDP3996=Remote Anything

UDP4128=RedShad

UDP4156=Slapper

UDP4500=sae-urn

UDP5419=DarkSky

UDP5503=Remote Shell Trojan

UDP5555=Daodan

UDP5882=Y3K RAT

UDP5888=Y3K RAT

UDP 6112=Battle.netGame

UDP6666=KiLo

UDP6667=KiLo

UDP6766=KiLo

UDP6767=KiLo,UandMe

UDP6838=Mstream Agent-handler

UDP7028=未知木马

UDP7424=Host Control

UDP7788=Singularity

UDP7983=MStream handler-agent

UDP8012=Ptakks

UDP 8090=Aphex’sRemote Packet Sniffer

UDP8127=9_119,Chonker

UDP8488=KiLo

UDP8489=KiLo

UDP8787=BackOrifice 2000

UDP8879=BackOrifice 2000

UDP9325=MStream Agent-handler

UDP10000=XHX

UDP10067=Portal of Doom

UDP10084=Syphillis

UDP10100=Slapper

UDP10167=Portal of Doom

UDP10498=Mstream

UDP10666=Ambush

UDP11225=Cyn

UDP12321=Protoss

UDP12345=BlueIce 2000

UDP12378=W32/Gibe@MM

UDP12623=ButtMan,DUN Control

UDP15210=UDP remote shell backdoor server

UDP15486=KiLo

UDP16514=KiLo

UDP16515=KiLo

UDP18753=Shaft handler to Agent

UDP20433=Shaft

UDP21554=GirlFriend

UDP22784=Backdoor.Intruzzo

UDP23476=Donald Dick

UDP25123=MOTD

UDP26274=Delta Source

UDP26374=Sub-7 2.1

UDP26444=Trin00/TFN2K

UDP26573=Sub-7 2.1

UDP27184=Alvgus trojan 2000

UDP27444=Trinoo

UDP29589=KiLo

UDP29891=The Unexplained

UDP30103=NetSphere

UDP31320=Little Witch

UDP31335=Trin00 DoS Attack

UDP31337=Baron Night, BO client, BO2, Bo Facil, BackFire, Back Orifice, DeepBO

UDP31338=Back Orifice, NetSpy DK, DeepBO

UDP31339=Little Witch

UDP31340=Little Witch

UDP31416=Lithium

UDP31787=Hack aTack

UDP31789=Hack aTack

UDP31790=Hack aTack

UDP31791=Hack aTack

UDP33390=未知木马

UDP34555=Trinoo

UDP35555=Trinoo

UDP43720=KiLo

UDP44014=Iani

UDP44767=School Bus

UDP46666=Taskman

UDP47262=Delta Source

UDP47785=KiLo

UDP49301=OnLine keyLogger

UDP49683=Fenster

UDP49698=KiLo

UDP52901=Omega

UDP54320=Back Orifice

UDP54321=Back Orifice 2000

UDP54341=NetRaider Trojan

UDP61746=KiLO

UDP61747=KiLO

UDP61748=KiLO

UDP 65432=The Traitor

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

TCP 1=TCP Port Service Multiplexer 

TCP 2=Death 

TCP 5=Remote Job Entry,yoyo 

TCP 7=Echo 

TCP 11=Skun 

TCP 12=Bomber 

TCP 16=Skun 

TCP 17=Skun 

TCP 18=消息传输协议,skun 

TCP 19=Skun 

TCP 20=FTP Data,Amanda 

TCP 21=文件传输,Back Construction,Blade Runner,Doly Trojan,Fore,FTP trojan,Invisible FTP,Larva, WebEx,WinCrash 

TCP 22=远程登录协议 

TCP 23=远程登录(Telnet),Tiny Telnet Server (= TTS) 

TCP 25=电子邮件(SMTP),Ajan,Antigen,Email Password Sender,Happy 99,Kuang2,ProMail trojan,Shtrilitz,Stealth,Tapiras,Terminator,WinPC,WinSpy,Haebu Coceda 

TCP 27=Assasin 

TCP 28=Amanda 

TCP 29=MSG ICP 

TCP 30=Agent 40421 

TCP 31=Agent 31,Hackers Paradise,Masters Paradise,Agent 40421 

TCP 37=Time,ADM worm 

TCP 39=SubSARI 

TCP 41=DeepThroat,Foreplay 

TCP 42=Host Name Server 

TCP 43=WHOIS 

TCP 44=Arctic 

TCP 48=DRAT 

TCP 49=主机登录协议 

TCP 50=DRAT 

TCP 51=IMP Logical Address Maintenance,Fuck Lamers Backdoor 

TCP 52=MuSka52,Skun 

TCP 53=DNS,Bonk (DOS Exploit) 

TCP 54=MuSka52 

TCP 58=DMSetup 

TCP 59=DMSetup 

TCP 63=whois++ 

TCP 64=Communications Integrator 

TCP 65=TACACS-Database Service 

TCP 66=Oracle SQL*NET,AL-Bareki 

TCP 67=Bootstrap Protocol Server 

TCP 68=Bootstrap Protocol Client 

TCP 69=W32.Evala.Worm,BackGate Kit,Nimda,Pasana,Storm,Storm worm,Theef,Worm.Cycle.a 

TCP 70=Gopher服务,ADM worm 

TCP 79=用户查询(Finger),Firehotcker,ADM worm 

TCP 80=超文本服务器(Http),Executor,RingZero 

TCP 81=Chubo,Worm.Bbeagle.q 

TCP 82=Netsky-Z 

TCP 88=Kerberos krb5服务 

TCP 99=Hidden Port 

TCP 102=消息传输代理 

TCP 108=SNA网关访问服务器 

TCP 109=Pop2 

TCP 110=电子邮件(Pop3),ProMail 

TCP 113=Kazimas, Auther Idnet 

TCP 115=简单文件传输协议 

TCP 118=SQL Services, Infector 1.4.2 

TCP 119=新闻组传输协议(Newsgroup(Nntp)), Happy 99 

TCP 121=JammerKiller, Bo jammerkillah 

TCP 123=网络时间协议(NTP),Net Controller 

TCP 129=Password Generator Protocol 

TCP 133=Infector 1.x 

TCP 135=微软DCE RPC end-point mapper服务 

TCP 137=微软Netbios Name服务(网上邻居传输文件使用) 

TCP 138=微软Netbios Name服务(网上邻居传输文件使用) 

TCP 139=微软Netbios Name服务(用于文件及打印机共享) 

TCP 142=NetTaxi 

TCP 143=IMAP 

TCP 146=FC Infector,Infector 

TCP 150=NetBIOS Session Service 

TCP 156=SQL服务器 

TCP 161=Snmp 

TCP 162=Snmp-Trap 

TCP 170=A-Trojan 

TCP 177=X Display管理控制协议 

TCP 179=Border网关协议(BGP) 

TCP 190=网关访问控制协议(GACP) 

TCP 194=Irc 

TCP 197=目录定位服务(DLS) 

TCP 256=Nirvana 

TCP 315=The Invasor 

TCP 371=ClearCase版本管理软件 

TCP 389=Lightweight Directory Access Protocol (LDAP) 

TCP 396=Novell Netware over IP 

TCP 420=Breach 

TCP 421=TCP Wrappers 

TCP 443=安全服务 

TCP 444=Simple Network Paging Protocol(SNPP) 

TCP 445=Microsoft-DS 

TCP 455=Fatal Connections 

TCP 456=Hackers paradise,FuseSpark 

TCP 458=苹果公司QuickTime 

TCP 513=Grlogin 

TCP 514=RPC Backdoor 

TCP 531=Rasmin,Net666 

TCP 544=kerberos kshell 

TCP 546=DHCP Client 

TCP 547=DHCP Server 

TCP 548=Macintosh文件服务 

TCP 555=Ini-Killer,Phase Zero,Stealth Spy 

TCP 569=MSN 

TCP 605=SecretService 

TCP 606=Noknok8 

TCP 661=Noknok8 

TCP 666=Attack FTP,Satanz Backdoor,Back Construction,Dark Connection Inside 1.2 

TCP 667=Noknok7.2 

TCP 668=Noknok6 

TCP 669=DP trojan 

TCP 692=GayOL 

TCP 707=Welchia 

TCP 777=AIM Spy 

TCP 808=RemoteControl,WinHole 

TCP 815=Everyone Darling 

TCP 901=Backdoor.Devil 

TCP 911=Dark Shadow 

TCP 993=IMAP 

TCP 999=DeepThroat 

TCP 1000=Der Spaeher 

TCP 1001=Silencer,WebEx,Der Spaeher 

TCP 1003=BackDoor 

TCP 1010=Doly 

TCP 1011=Doly 

TCP 1012=Doly 

TCP 1015=Doly 

TCP 1016=Doly 

TCP 1020=Vampire 

TCP 1023=Worm.Sasser.e 

TCP 1024=NetSpy.698(YAI) 

TCP 1059=nimreg 

//TCP 1025=NetSpy.698,Unused Windows Services Block 

//TCP 1026=Unused Windows Services Block 

//TCP 1027=Unused Windows Services Block 

//TCP 1028=Unused Windows Services Block 

//TCP 1029=Unused Windows Services Block 

//TCP 1030=Unused Windows Services Block 

//TCP 1033=Netspy 

//TCP 1035=Multidropper 

//TCP 1042=Bla 

//TCP 1045=Rasmin 

//TCP 1047=GateCrasher 

//TCP 1050=MiniCommand 

TCP 1069=Backdoor.TheefServer.202 

TCP 1070=Voice,Psyber Stream Server,Streaming Audio Trojan 

TCP 1080=Wingate,Worm.BugBear.B,Worm.Novarg.B 

//TCP 1090=Xtreme, VDOLive 

//TCP 1095=Rat 

//TCP 1097=Rat 

//TCP 1098=Rat 

//TCP 1099=Rat 

TCP 1110=nfsd-keepalive 

TCP 1111=Backdoor.AIMVision 

TCP 1155=Network File Access 

//TCP 1170=Psyber Stream Server,Streaming Audio trojan,Voice 

//TCP 1200=NoBackO 

//TCP 1201=NoBackO 

//TCP 1207=Softwar 

//TCP 1212=Nirvana,Visul Killer 

//TCP 1234=Ultors 

//TCP 1243=BackDoor-G, SubSeven, SubSeven Apocalypse 

//TCP 1245=VooDoo Doll 

//TCP 1269=Mavericks Matrix 

//TCP 1313=Nirvana 

//TCP 1349=BioNet 

TCP 1433=Microsoft SQL服务 

//TCP 1441=Remote Storm 

//TCP 1492=FTP99CMP(BackOriffice.FTP) 

TCP 1503=NetMeeting T.120 

//TCP 1509=Psyber Streaming Server 

//TCP 1600=Shivka-Burka 

//TCP 1703=Exloiter 1.1 

TCP 1720=NetMeeting H.233 call Setup 

TCP 1731=NetMeeting音频调用控制 

//TCP 1807=SpySender 

//TCP 1966=Fake FTP 2000 

//TCP 1976=Custom port 

//TCP 1981=Shockrave 

TCP 1990=stun-p1 cisco STUN Priority 1 port 

TCP 1990=stun-p1 cisco STUN Priority 1 port 

TCP 1991=stun-p2 cisco STUN Priority 2 port 

TCP 1992=stun-p3 cisco STUN Priority 3 port,ipsendmsg IPsendmsg 

TCP 1993=snmp-tcp-port cisco SNMP TCP port 

TCP 1994=stun-port cisco serial tunnel port 

TCP 1995=perf-port cisco perf port 

TCP 1996=tr-rsrb-port cisco Remote SRB port 

TCP 1997=gdp-port cisco Gateway Discovery Protocol 

TCP 1998=x25-svc-port cisco X.25 service (XOT) 

//TCP 1999=BackDoor, TransScout 

//TCP 2000=Der Spaeher,INsane Network 

TCP 2002=W32.Beagle.AX @mm 

//TCP 2001=Transmisson scout 

//TCP 2002=Transmisson scout 

//TCP 2003=Transmisson scout 

//TCP 2004=Transmisson scout 

//TCP 2005=TTransmisson scout 

TCP 2011=cypress 

TCP 2015=raid-cs 

//TCP 2023=Ripper,Pass Ripper,Hack City Ripper Pro 

TCP 2049=NFS 

//TCP 2115=Bugs 

//TCP 2121=Nirvana 

//TCP 2140=Deep Throat, The Invasor 

//TCP 2155=Nirvana 

//TCP 2208=RuX 

//TCP 2255=Illusion Mailer 

//TCP 2283=HVL Rat5 

//TCP 2300=PC Explorer 

//TCP 2311=Studio54 

TCP 2556=Worm.Bbeagle.q 

//TCP 2565=Striker 

//TCP 2583=WinCrash 

//TCP 2600=Digital RootBeer 

//TCP 2716=Prayer Trojan 

TCP 2745=Worm.BBeagle.k 

//TCP 2773=Backdoor,SubSeven 

//TCP 2774=SubSeven2.1&2.2 

//TCP 2801=Phineas Phucker 

//TCP 2989=Rat 

//TCP 3024=WinCrash trojan 

TCP 3127=Worm.Novarg 

TCP 3128=RingZero,Worm.Novarg.B 

//TCP 3129=Masters Paradise 

//TCP 3150=Deep Throat, The Invasor 

TCP 3198=Worm.Novarg 

//TCP 3210=SchoolBus 

TCP 3332=Worm.Cycle.a 

TCP 3333=Prosiak 

TCP 3389=超级终端 

//TCP 3456=Terror 

//TCP 3459=Eclipse 2000 

//TCP 3700=Portal of Doom 

//TCP 3791=Eclypse 

//TCP 3801=Eclypse 

TCP 3996=Portal of Doom 

TCP 4000=腾讯QQ客户端 

TCP 4060=Portal of Doom 

TCP 4092=WinCrash 

TCP 4242=VHM 

TCP 4267=SubSeven2.1&2.2 

TCP 4321=BoBo 

TCP 4444=Prosiak,Swift remote 

TCP 4500=W32.HLLW.Tufas 

TCP 4567=File Nail 

TCP 4590=ICQTrojan 

TCP 4899=Remote Administrator服务器 

TCP 4950=ICQTrojan 

TCP 5000=WindowsXP服务器,Blazer 5,Bubbel,Back Door Setup,Sockets de Troie 

TCP 5001=Back Door Setup, Sockets de Troie 

TCP 5002=cd00r,Shaft 

TCP 5011=One of the Last Trojans (OOTLT) 

TCP 5025=WM Remote KeyLogger 

TCP 5031=Firehotcker,Metropolitan,NetMetro 

TCP 5032=Metropolitan 

TCP 5190=ICQ Query 

TCP 5321=Firehotcker 

TCP 5333=Backage Trojan Box 3 

TCP 5343=WCrat 

TCP 5400=Blade Runner, BackConstruction1.2 

TCP 5401=Blade Runner,Back Construction 

TCP 5402=Blade Runner,Back Construction 

TCP 5471=WinCrash 

TCP 5512=Illusion Mailer 

TCP 5521=Illusion Mailer 

TCP 5550=Xtcp,INsane Network 

TCP 5554=Worm.Sasser 

TCP 5555=ServeMe 

TCP 5556=BO Facil 

TCP 5557=BO Facil 

TCP 5569=Robo-Hack 

TCP 5598=BackDoor 2.03 

TCP 5631=PCAnyWhere data 

TCP 5632=PCAnyWhere 

TCP 5637=PC Crasher 

TCP 5638=PC Crasher 

TCP 5698=BackDoor 

TCP 5714=Wincrash3 

TCP 5741=WinCrash3 

TCP 5742=WinCrash 

TCP 5760=Portmap Remote Root Linux Exploit 

TCP 5880=Y3K RAT 

TCP 5881=Y3K RAT 

TCP 5882=Y3K RAT 

TCP 5888=Y3K RAT 

TCP 5889=Y3K RAT 

TCP 5900=WinVnc,Wise VGA广播端口 

TCP 6000=Backdoor.AB 

TCP 6006=Noknok8 

TCP 6129=Dameware Nt Utilities服务器 

TCP 6272=SecretService 

TCP 6267=广外女生 

TCP 6400=Backdoor.AB,The Thing 

TCP 6500=Devil 1.03 

TCP 6661=Teman 

TCP 6666=TCPshell.c 

TCP 6667=NT Remote Control,Wise 播放器接收端口 

TCP 6668=Wise Video广播端口 

TCP 6669=Vampyre 

TCP 6670=DeepThroat,iPhone 

TCP 6671=Deep Throat 3.0 

TCP 6711=SubSeven 

TCP 6712=SubSeven1.x 

TCP 6713=SubSeven 

TCP 6723=Mstream 

TCP 6767=NT Remote Control 

TCP 6771=DeepThroat 

TCP 6776=BackDoor-G,SubSeven,2000 Cracks 

TCP 6777=Worm.BBeagle 

TCP 6789=Doly Trojan 

TCP 6838=Mstream 

TCP 6883=DeltaSource 

TCP 6912=Shit Heep 

TCP 6939=Indoctrination 

TCP 6969=GateCrasher, Priority, IRC 3 

TCP 6970=RealAudio,GateCrasher 

TCP 7000=Remote Grab,NetMonitor,SubSeven1.x 

TCP 7001=Freak88 

TCP 7201=NetMonitor 

TCP 7215=BackDoor-G, SubSeven 

TCP 7001=Freak88,Freak2k 

TCP 7300=NetMonitor 

TCP 7301=NetMonitor 

TCP 7306=NetMonitor,NetSpy 1.0 

TCP 7307=NetMonitor, ProcSpy 

TCP 7308=NetMonitor, X Spy 

TCP 7323=Sygate服务器端 

TCP 7424=Host Control 

TCP 7597=Qaz 

TCP 7609=Snid X2 

TCP 7626=冰河 

TCP 7777=The Thing 

TCP 7789=Back Door Setup, ICQKiller 

TCP 7983=Mstream 

TCP 8000=腾讯OICQ服务器端,XDMA 

TCP 8010=Wingate,Logfile 

TCP 8080=WWW 代理,Ring Zero,Chubo,Worm.Novarg.B 

TCP 8520=W32.Socay.Worm 

TCP 8787=BackOfrice 2000 

TCP 8897=Hack Office,Armageddon 

TCP 8989=Recon 

TCP 9000=Netministrator 

TCP 9325=Mstream 

TCP 9400=InCommand 1.0 

TCP 9401=InCommand 1.0 

TCP 9402=InCommand 1.0 

TCP 9872=Portal of Doom 

TCP 9873=Portal of Doom 

TCP 9874=Portal of Doom 

TCP 9875=Portal of Doom 

TCP 9876=Cyber Attacker 

TCP 9878=TransScout 

TCP 9989=Ini-Killer 

TCP 9898=Worm.Win32.Dabber.a 

TCP 9999=Prayer Trojan 

TCP 10067=Portal of Doom 

TCP 10080=Worm.Novarg.B 

TCP 10084=Syphillis 

TCP 10085=Syphillis 

TCP 10086=Syphillis 

TCP 10101=BrainSpy 

TCP 10167=Portal Of Doom 

TCP 10168=Worm.Supnot.78858.c,Worm.LovGate.T 

TCP 10520=Acid Shivers 

TCP 10607=Coma trojan 

TCP 10666=Ambush 

TCP 11000=Senna Spy 

TCP 11050=Host Control 

TCP 11051=Host Control 

TCP 11223=Progenic,Hack '99KeyLogger 

TCP 11831=TROJ_LATINUS.SVR 

TCP 12076=Gjamer, MSH.104b 

TCP 12223=Hack'99 KeyLogger 

TCP 12345=GabanBus, NetBus 1.6/1.7, Pie Bill Gates, X-bill 

TCP 12346=GabanBus, NetBus 1.6/1.7, X-bill 

TCP 12349=BioNet 

TCP 12361=Whack-a-mole 

TCP 12362=Whack-a-mole 

TCP 12363=Whack-a-mole 

TCP 12378=W32/Gibe@MM 

TCP 12456=NetBus 

TCP 12623=DUN Control 

TCP 12624=Buttman 

TCP 12631=WhackJob, WhackJob.NB1.7 

TCP 12701=Eclipse2000 

TCP 12754=Mstream 

TCP 13000=Senna Spy 

TCP 13010=Hacker Brazil 

TCP 13013=Psychward 

TCP 13223=Tribal Voice的聊天程序PowWow 

TCP 13700=Kuang2 The Virus 

TCP 14456=Solero 

TCP 14500=PC Invader 

TCP 14501=PC Invader 

TCP 14502=PC Invader 

TCP 14503=PC Invader 

TCP 15000=NetDaemon 1.0 

TCP 15092=Host Control 

TCP 15104=Mstream 

TCP 16484=Mosucker 

TCP 16660=Stacheldraht (DDoS) 

TCP 16772=ICQ Revenge 

TCP 16959=Priority 

TCP 16969=Priority 

TCP 17027=提供广告服务的Conducent"adbot"共享软件 

TCP 17166=Mosaic 

TCP 17300=Kuang2 The Virus 

TCP 17490=CrazyNet 

TCP 17500=CrazyNet 

TCP 17569=Infector 1.4.x + 1.6.x 

TCP 17777=Nephron 

TCP 18753=Shaft (DDoS) 

TCP 19191=蓝色火焰 

TCP 19864=ICQ Revenge 

TCP 20000=Millennium II (GrilFriend) 

TCP 20001=Millennium II (GrilFriend) 

TCP 20002=AcidkoR 

TCP 20034=NetBus 2 Pro 

TCP 20168=Lovgate 

TCP 20203=Logged,Chupacabra 

TCP 20331=Bla 

TCP 20432=Shaft (DDoS) 

TCP 20808=Worm.LovGate.v.QQ 

TCP 21544=Schwindler 1.82,GirlFriend 

TCP 21554=Schwindler 1.82,GirlFriend,Exloiter 1.0.1.2 

TCP 22222=Prosiak,RuX Uploader 2.0 

TCP 22784=Backdoor.Intruzzo 

TCP 23432=Asylum 0.1.3 

TCP 23456=Evil FTP, Ugly FTP, WhackJob 

TCP 23476=Donald Dick 

TCP 23477=Donald Dick 

TCP 23777=INet Spy 

TCP 26274=Delta 

TCP 26681=Spy Voice 

TCP 27374=Sub Seven 2.0+, Backdoor.Baste 

TCP 27444=Tribal Flood Network,Trinoo 

TCP 27665=Tribal Flood Network,Trinoo 

TCP 29431=Hack Attack 

TCP 29432=Hack Attack 

TCP 29104=Host Control 

TCP 29559=TROJ_LATINUS.SVR 

TCP 29891=The Unexplained 

TCP 30001=Terr0r32 

TCP 30003=Death,Lamers Death 

TCP 30029=AOL trojan 

TCP 30100=NetSphere 1.27a,NetSphere 1.31 

TCP 30101=NetSphere 1.31,NetSphere 1.27a 

TCP 30102=NetSphere 1.27a,NetSphere 1.31 

TCP 30103=NetSphere 1.31 

TCP 30303=Sockets de Troie 

TCP 30947=Intruse 

TCP 30999=Kuang2 

TCP 21335=Tribal Flood Network,Trinoo 

TCP 31336=Bo Whack 

TCP 31337=Baron Night,BO client,BO2,Bo Facil,BackFire,Back Orifice,DeepBO,Freak2k,NetSpy 

TCP 31338=NetSpy,Back Orifice,DeepBO 

TCP 31339=NetSpy DK 

TCP 31554=Schwindler 

TCP 31666=BOWhack 

TCP 31778=Hack Attack 

TCP 31785=Hack Attack 

TCP 31787=Hack Attack 

TCP 31789=Hack Attack 

TCP 31791=Hack Attack 

TCP 31792=Hack Attack 

TCP 32100=PeanutBrittle 

TCP 32418=Acid Battery 

TCP 33333=Prosiak,Blakharaz 1.0 

TCP 33577=Son Of Psychward 

TCP 33777=Son Of Psychward 

TCP 33911=Spirit 2001a 

TCP 34324=BigGluck,TN,Tiny Telnet Server 

TCP 34555=Trin00 (Windows) (DDoS) 

TCP 35555=Trin00 (Windows) (DDoS) 

TCP 36794=Worm.Bugbear-A 

TCP 37651=YAT 

TCP 40412=The Spy 

TCP 40421=Agent 40421,Masters Paradise.96 

TCP 40422=Masters Paradise 

TCP 40423=Masters Paradise.97 

TCP 40425=Masters Paradise 

TCP 40426=Masters Paradise 3.x 

TCP 41666=Remote Boot 

TCP 43210=Schoolbus 1.6/2.0 

TCP 44444=Delta Source 

TCP 44445=Happypig 

TCP 47252=Prosiak 

TCP 47262=Delta 

TCP 47878=BirdSpy2 

TCP 49301=Online Keylogger 

TCP 50505=Sockets de Troie 

TCP 50766=Fore, Schwindler 

TCP 51966=CafeIni 

TCP 53001=Remote Windows Shutdown 

TCP 53217=Acid Battery 2000 

TCP 54283=Back Door-G, Sub7 

TCP 54320=Back Orifice 2000,Sheep 

TCP 54321=School Bus .69-1.11,Sheep, BO2K 

TCP 57341=NetRaider 

TCP 58008=BackDoor.Tron 

TCP 58009=BackDoor.Tron 

TCP 58339=ButtFunnel 

TCP 59211=BackDoor.DuckToy 

TCP 60000=Deep Throat 

TCP 60068=Xzip 6000068 

TCP 60411=Connection 

TCP 60606=TROJ_BCKDOR.G2.A 

TCP 61466=Telecommando 

TCP 61603=Bunker-kill 

TCP 63485=Bunker-kill 

TCP 65000=Devil, DDoS 

TCP 65432=Th3tr41t0r, The Traitor 

TCP 65530=TROJ_WINMITE.10 

TCP 65535=RC,Adore Worm/Linux 

TCP 69123=ShitHeep 

TCP 88798=Armageddon,Hack Office