2023年6月24日发(作者：)

常用端口列表（Common port list）

Running netstat -an, you will find that your 445 port is no

longer Listening.

List of commonly used ports in both English and Chinese Notes

0| invalid port, usually used to analyze operating systems

1| transmission control protocol, port service, multiplexer

switch selector

2| management utility

3| compression process

5| remote job login

7| echo

9| discard

11| online users

13| time

17| daily Quotes

18| messaging protocol

19| character generator

20|FTP file transfer protocol (default data port)

21|FTP file transfer protocol (control)

22|SSH Telnet Protocol

23|telnet (terminal emulation protocol), Trojan, Tiny, Telnet,

Server, open this port

24| reserved for personal mail system

The port opened by the 25|SMTP server for sending mail

27|NSW user system FE

29|MSG ICP

31|MSG authentication, Trojan, Master, Paradise,

HackersParadise open this port

33| display support protocol

35| reserved for personal printer service

37| time

38| routing access protocol

39| resource locator protocol

41| graphics 42| host name service

43|who is services

44|MPM (message processing module) flag protocol

45| message processing module

46| message processing module (default send port)

47|NI FTP

48| digital audio back office service

49|TACACS logon host protocol

50| remote mail check protocol

51|IMP (interface processor) logical address maintenance

52| Xerox Network Service System Time Protocol

53|dns domain name server

54| Xerox Network Service System bill exchange

55|ISI graphic language

56| Xerox Network Service System Verification

57| reserved for personal terminal access

58| Xerox web services system mail

59| reserved personal file service

60| undefined

61|NI mail

62| asynchronous communication adapter service

63|whois++

64| communication interface

65|TACACS database services

66|Oracle SQL*NET

67| bootstrap protocol server

68| bootstrap protocol client

69| small file transfer protocol

70| information retrieval protocol

71| remote job service

72| remote job service 73| remote job service

74| remote job service

75| reserves the service for individuals to dial out

76| distributed external object storage

77| reserved for personal remote job input service

78| fix TCP

79| queries remote hosts, online users and other information

80|http, for web browsing, Trojan Executor, open this port

81|HOST2 name service

82| transport utility

83| modular intelligent terminal ML device

84| public trace device

85| modular intelligent terminal ML device

86|Micro Focus Cobol programming language

87| reserved for personal terminal connections

88|Kerberros security authentication system

89|SU/MIT telnet (terminal emulation gateway)

90|DNSIX security attribute mark map

91|MIT Dover spooling

92| network printing protocol

93| device control protocol

94|Tivoli object scheduling

96|DIXIE protocol specification

97| fast Remote Virtual File Protocol

98|TAC news protocol

99| backdoor ncx99 opens this port

100| unknown uses

101|NIC host name service

102| messaging agent

103|Genesis point to point transmission network

105| mailbox name service 106|3COM-TSMUX open port

107| remote Telnet service

108|SNA gateway access service

The 109|POP2 server opens this port for receiving mail

The 110|POP3 server opens this port for receiving mail

All ports of RPC services of 111|SUN company

112|McIDAS data transfer protocol

The 113| authentication service is used to identify users of

TCP connections

114| Audio News multipoint service

115| simple file transfer service

116|ANSA REX notification

117|UUCP path service

118|SQL service

119|NEWS newsgroup transport protocol that hosts USENET

Communications

121| Trojan BO jammerkillahV open port

122|SMAKY network

123| network time protocol, worm will take advantage of,

generally closed

128|GSS X license authentication

129| Password Generator Protocol

130|Cisco software open port

131|Cisco software open port

132|Cisco software open port

133| statistical services

134|INGRES- Web Services

135|DCOM service, blaster, virus exploit, can't be switched off

136| naming system

137|NETBIOS protocol application for sharing open

138|NETBIOS protocol application for sharing open

139|NETBIOS protocol application for sharing open

140|EMFIS data services

141|EMFIS control services

143|Interim Mail Access Protocol

144|UMA software open port

145|UAAC protocol

149|AED 512 simulation services

150|SQL (Structured Query Language) - Network

152| background file transfer protocol

156|SQL (Structured Query Language) service

158|PC mail server

159|NSS- routing

160|SGMP- trap

161| simple network management protocol

162|SNMP trap

163|CMIP/TCP management

164|CMIP/TCP agent 166|Sirius system

169| send

PS 170| network

177|x displays the management control protocol, and the

intruder accesses the X-windows console through it

178|NextStep Window services

179| border gateway protocol

180| chart

181| unification

184|OC server

185| remote -KIS

186|KIS protocol

187| application communication interface

189| queue file transfer

The 190| gateway enters the control protocol

191|Prospero directory service 192|OSU network monitoring system

193|Spider remote control protocol

194| multi line talk protocol

197| directory address service

198| directory address service monitor

200|IBM system resource controller

201|AppleTalk (network protocol used by Mac) routing guarantee

202|AppleTalk (network protocol used by Mac machines) Name

Binding

203|AppleTalk (network protocol used by Mac) unused port

204|AppleTalk (network protocol used by Mac) echo

205|AppleTalk (network protocol used by Mac) unused port

206|AppleTalk (network protocol used by Mac) zone information

207|AppleTalk (network protocol used by Mac) unused port

208|AppleTalk (network protocol used by Mac) unused port

209| fast mail transfer protocol 210|ANSI (American National Standards Institute) Z39.50

211|Texas Instruments 914C/G terminal

213|IPX (protocol used for Ethernet)

| 陷阱 509

| firstclass协议 510

| 远程进程执行 512

| 远程登陆 513

514 | cmd命令

515 | spooler

| 可视化数据 516

| 交谈 518

| unix时间 519

| 扩展文件名称服务器 520

| 时间服务 525

| 新日期 526

| 在线聊天系统服务 529

| 远程过程调用 530

| 聊天 531

| 读新闻 532

| 紧急广播端口 533

| megamedia管理端 534

| 网络流媒体协议 537

| 商业 542

543 | kerberos v4 / v5 (软件)

| krcmd命令 544

| dhcpv6 客户端 546

547 | dhcpv6 服务器

| 设备共享 552

real time stream控制协议 554 |

555 | 木马phase1.0、stealth spy、inikiller开放此端口

556 | 远距离文件服务器 563 | 基于tls / ssl的网络新闻传输协议

564 | plan 9文件服务

| whoami查询 565

| streettalk 566

567 | banyan - rpc (远程过程调用)

| dpa成员资格 568

| msn成员资格 569

570 | demon (调试监督程序)

571 | udemon (调试监督程序)

| 声纳 572

573 | banyan - 贵宾

| ftp软件代理系统 574

581 | discovery 协议 bundle

582 | scc安全

| philips视频会议 583

| 密钥服务器 584

585 | imap4 + ssl (use 993 instead)

| 密码更改 586

| 申请 587

| eye连结 589

| cab协议 595

| ptc名称服务 597

| sco网络服务器管理3 598

599 | aeolon core协议

600 | sun ipc (进程间通讯) 服务器

| 可靠系统登陆服务 601

| 通道 604

| cray统一资源管理 606

608 | 发送人 - 传递 / 提供 文件传输器

609 | npmp - 陷阱

610 | npmp - 本地 611 | npmp - gui (图形用户界面)

| hmmp指引 612

| hmmp操作 613

614 | ssl (加密套接字协议层) shell (壳)

| internet配置管理 615

616 | sco (unix系统) 系统管理服务器

| sco桌面管理服务器 617

619 | compaq (康柏公司) evm

| sco服务器管理 620

| asf远程管理控制协议 623

| crypto管理 624

631 | ipp (internet打印协议)

633 | 服务更新 (sterling软件)

| 局域网服务器 637

| repcmd命令 641

647 | dhcp (动态主机配置协议) failover

648 | 注册登记协议 (rpp)

649 | cadview - 3d软件协议

666 | 木马attack ftp、satanz backdoor开放此端口

808 | ccproxy http / ftp gopher / (over http) 协议

1001 | 木马silencer, webex开放端口

| 木马doly开放端口 1011

1024 | 动态端口的开始, 木马yai开放端口

1025 | (互联网信息服务) 木马netspy开放端口

1026 | (互联网信息服务)

| 应用层网关服务 1027

| 应用层网关服务 1030

1031 | bbn odl

| 本地网络信息端口 1033

| 同步通知 1034

| 安全部分传输协议 1036 1070 | 木马psyber stream streaming audio开放端口

1071| network services open port

1074| network services open port

1080|Socks, this protocol goes through the firewall as a

gateway, allowing people behind the firewall to access INTERNET

via an IP address

1110| Kabasiji antivirus software opens this port

1125| Kabasiji antivirus software opens this port

1203| license effective port

1204| login request listener port

1206|Anthony data port

1222|SNI R&D network port

1233| universal appendix server port

1234| Trojan SubSeven2.0, Ultors Trojan open this port

1243| Trojan SubSeven1.0/1.9 opens this port

1245| Trojan, Vodoo, GabanBus, NetBus, Vodoo, open this port

1273|EMC- gateway port

1289|JWalk server port

1290|WinJa server port

1333| password policy (network service) ()

1334| network services ()

1335| digital justice agreement

1336| instant messaging protocol ()

1349| register network protocol port

1350| register network protocol port

1371| Fujitsu configuration protocol port

1372| Fujitsu configuration protocol port

1374|EPI software system port

1376|IBM personal personal software port

1377|Cichlid license management port

1378|Elan license management port

1380|Telesis network license management port 1381| Apple network license management port

1386|CheckSum license management port

1387| system open port ()

1388| database cache port

1389| document management port

1390| storage controller port

1391| memory access server port

1392| print management port

1393| network login server port

1394| network login client port

1395|PC workstation management software port

1396|DVL active mail port

1397| audio active mail port

1398| video active mail port

1399|Cadkey license management port

1433|Microsoft SQL services open port

SQL service monitoring port for 1434|Microsoft

1492| Trojan FTP99CMP opens this port

1509| Trojan Psyber Streaming Server opens this port

1512|Microsoft Windows network name service

1524| many attack scripts install a backdoor SHELL on this port

1600| Trojan Shivka-Burka opens this port

1645| Remote Authentication Dial user service

1701| second layer tunneling protocol

1731|NetMeeting audio call control

1801|Microsoft message queuing server

1807| Trojan SpySender opens this port

1900| can be exploited for DDoS attacks and is generally closed

1912| PowerWord opens this port

1981| Trojan ShockRave opens this port

1999| Trojan BackDoor, Yai open this port 2000| Trojan GirlFriend 1.3, Millenium 1 opens this port

2001| Trojan, Millenium 1, Trojan Cow, black hole 2001 open this

port

2003|GNU query

2023| Trojan Pass Ripper opens this port

The 2049|NFS program often runs on this port

2115| Trojan Bugs opens this port

2140| Trojan Deep Throat 1.0/3.0,

The Invasor opens this port

2500| application fixed port session replication of RPC clients

2504| network balancing load

2565| Trojan Striker opens this port

2583| Trojan Wincrash 2 opens this port

2801| Trojan Phineas Phucker opens this port

2847| Norton Antivirus service opens this port

3024| Trojan WinCrash opens this port The 3128|squid HTTP proxy server opens this port

3129| Trojan Master Paradise opens this port

3150| Trojan The Invasor, deep throat open this port

3210| Trojan SchoolBus opens this port

3306|MySQL open this port

3333| Trojan Prosiak opens this port

The 3389|WINDOWS 2000 terminal opens this port

3456| (Internet information services) open port,

VAT default data

3457|VAT default control

3527|Microsoft message queuing server

3700| Trojan Portal of Doom opens this port

3996| Trojan RemoteAnything opens this port

4000| QQ client open this port

4060| Trojan RemoteAnything opens this port

4092| Trojan WinCrash opens this port 4133|NUTS Bootp server

4134|NIFTY-Serve HMI protocol

4141|Workflow server

4142| document server

4143| document replication

4145|VVR control

4321| remote Who Is query

4333| Mini SQL Server

4349| file system port record

4350| network device

4351|PLCY Web Services

4453|NSS alert management

4454|NSS agent management

4455|PR chat users

4456|PR chat server

4457|PR registration

4480|Proxy+ HTTP proxy port

4500|Lsass open port, cannot close

4547|Lanner license management

4555|RSIP port

4590| Trojan ICQTrojan opens this port

4672| remote file access server

4752| simple network audio server

4800|Icona fast messaging system

4801|Icona chat online

4802|Icona licensing system server

4848|App server -Admin HTTP

4849|App server -Admin HTTPS

4950| Trojan IcqTrojan open 5000 port

5000| Trojan blazer5, Sockets, De, Troie, open 5000 ports,

should generally be closed

5001| Trojan Sockets de Troie open 5001 port

5006|wsm server

5007|wsm server SSL

5022|mice server

5050| multimedia conference control protocol

5051|ITA agent

5052|ITA management

5137|MyCTS server port

5150|Ascend channel management protocol

5154|BZFlag game server

5190|America-Online (AOL)

5191|AmericaOnline1 (AOL)

5192|AmericaOnline2 (AOL)

5193|AmericaOnline3 (AOL)

5222|Jabber client connection

5225|HP (Hewlett-Packard Co) server 5226|HP (Hewlett-Packard Co)

5232|SGI drawing software port

5250|i gateway

5264|3Com network port 1

5265|3Com network port 2

5269|Jabber server connection

5306|Sun MC group

5321| Trojan Sockets de Troie open 5321 port

5400| Trojan Blade Runner opens this port

5401| Trojan Blade Runner opens this port

5402| Trojan Blade Runner opens this port

5405| network support

5409|Salient data server

5410|Salient user management

5415|NS server

5416|SNS gateway

5417|SNS agent

5421| network support 2

5423| virtual users

5427|SCO-PEER-TTA (Unix system)

5432|PostgreSQL database

5550| Trojan xtcp opens this port

5569| Trojan Robo-Hack opens this port

5599| company remote security installation

Safety management of 5600| company

5601| security agents

5631|pcANYWHERE (software) data

5632|pcANYWHERE (software) data

5673|JACL messaging server

5675|V5UA application port

5676|RA management 5678| remote replication agent connection

5679| direct cable connection

5720|MS- license

5729|Openmail user agent layer

5730|Steltor's calendar access

5731|netscape (Netscape) suiteware

5732|netscape (Netscape) suiteware

5742| Trojan WinCrash1.03 opens this port

5745|fcopy- server

5746|fcopys- server

5755|OpenMail (mail server) desktop gateway server

5757|OpenMail (mail server) X.500 directory server

5766|OpenMail (mail server) NewMail server

The 5767|OpenMail (mail server) request agent was (secure)

5768|OpenMail (mail server) CMTS server

5777|DALI port

5800| virtual network computing

5801| virtual network computing

5802| virtual network computing, HTTP access, D

5803| virtual network computing, HTTP access, D

5900| virtual network computer display 0

5901| virtual network computer display 1

5902| virtual network computer display 2

5903| virtual network computer display 3

6000|X Window system

6001|X Window server

6002|X Window server

6003|X Window server

6004|X Window server

6005|X Window server

6006|X Window server 6007|X Window server

6008|X Window server

6009|X Window server

6010|X Window system

6011|X Window system

6012|X Window system

6013|X Window system

6014|X Window system

6015|X Window system

6016|X Window system

6017|X Window system

6018|X Window system

6019|X Window system

6020|X Window system

6021|X Window system

6022|X Window system

6023|X Window system

6024|X Window system

6025|X Window system

6026|X Window system

6027|X Window system

6028|X Window system

6029|X Window system

6030|X Window system

6031|X Window system

6032|X Window system

6033|X Window system

6034|X Window system

6035|X Window system

6036|X Window system

6037|X Window system 6038|X Window system

6039|X Window system

6040 | x window 系统

| x window 系统 6041

| x window 系统 6042

6043 | x window 系统

6 044 | x window 系统

6045 | x window 系统

6046 | x window 系统

| x window 系统 6047

6048 | x window 系统

6049 | x window 系统

6050 | arcserve 代理

6051 | x window 系统

6052 | x window 系统

6053 | x window 系统

6054 | x window 系统

6055 | x window 系统

6056 | x window 系统

6057 | x window 系统

| x window 系统 6058

6059 | x window 系统

6060 | x window 系统

6061 | x window 系统

6062 | x window 系统

no 6063 | x window 系统

6267 | 木马广外女生开放此端口

| 6400 木马the thing开放此端口

6401 | seagate (美国希捷公司)

6455 | skip证书接受

| skip证书发送 6456 | lvision许可管理器 92-825-6471

6505 | boks管理私人端口

6506 | boks管理公共端口

6507 | boks dir服务器, 私人端口

6508 | boks dir服务器, 公共端口

6509 | mgcs - mfp端口

6510 | mcer端口

6566 | sane控制端口

statistical office | parsec主服务器

6581 | parsec对等网络

6582 | parsec游戏服务器

6588 | analogx http代理端口

6631 | mitchell电信主机

6667 | internet多线交谈

6668 | internet多线交谈

6670 | 木马deep throat开放此端口

6671 | 木马deep throat 3.0开放此端口

| 6699 napster文件 共享服务 (mp3)

| l-6701 kti / icad名称服务器

| 6788 smc软件 - http

6789 | smc软件 - https

6841 | netmo软件默认开放端口

6842 | netmo http服务

6883 | 木马deltasource开放此端口

6939 | 木马indoctrination开放此端口

6969 | 木马gatecrasher、priority开放此端口

| real音频开放此端口 6970

7000 | 木马remote grab开放此端口

| 7.002 使用者 & 组 数据库

| 音量定位数据库 7003

| afs / kerberos认证服务 7004 | 音量管理服务 7005

| 错误解释服务 7006

7007 | basic监督进程

7008 | 服务器 - 服务器更新程序

7009 | 远程缓存管理服务

7011 | talon软件发现端口

7012 | talon软件引擎

7013 | microtalon发现

7014 | microtalon通信

7015 | talon网络服务器

7020 | dp服务

7021 | dp服务管理

| x字型服务 7100

7121 | 虚拟原型许可证管理

| 木马netmonitor开放此端口 7300

| 木马netmonitor开放此端口 7301

7306 | 木马netmonitor, netspy1.0开放此端口

7307 | 木马netmonitor开放此端口

7308 | 木马netmonitor开放此端口

7323 | sygate服务器端

7511 | 木马聪明基因开放此端口

7588 | sun许可证管理

7597 | 木马quaz开放此端口

7626 | 木马冰河开放此端口

7633 | pmdf管理

7674|iMQ SSL channel

7675|iMQ channel

7676| Trojan Giscier opens this port

7720|Med image entry

7743|Sakura script transfer protocol

7789| Trojan ICKiller opens this port 7797|Propel connector port

7798|Propel encoder port

8000| QQ server open this port

8001|VCOM channel

8007|Apache (similar to IIS) jServ protocol 1.x

8008|HTTP Alternate

8009|Apache (similar to IIS) JServ protocol 1.3

The 8010|Wingate proxy opens this port

8011| Trojan way2.4 opens this port

8022|OA- system

The 8080|WWW proxy opens this port

8081|ICECap console

8082|BlackIce (prevent hacker software) alerts are sent to this

port

8118|Privoxy HTTP agent

8121|Apollo data port 8122|Apollo software management port

8181|Imail

8225| Trojan Gray dove opens this port

8311| Trojan, first love opens this port

8351| server search

8416|eSpeech Session protocol

8417|eSpeech RTP protocol

8473| virtual point to point

8668| network address translation

8786|Message client

8787|Message server

8954|Cumulus management port

9000|CS monitor

9001|ETL service management

9002| dynamic ID verification

9021|Pangolin verification

9022|PrivateArk remote agent

9023| security network login -1

9024| security network login -2

9025| security network login -3

9026| security network login -4

9101|Bacula controller

9102|Bacula file background

9103|Bacula stores mail backstage

9111|DragonIDS console

9217|FSC communication port

9281| software delivery port 1

9282| software delivery port 2

9346|C technology monitor

9400| Trojan Incommand 1 opens this port

9401| Trojan Incommand 1 opens this port 9402| Trojan Incommand 1 opens this port

9594| information system

9595|Ping Discovery services

9800|WebDav source port

9801|Sakura script transfer protocol -2

9802|WebDAV Source TLS/SSL

9872| Trojan Portal of Doom opens this port

9873| Trojan Portal of Doom opens this port

9874| Trojan Portal of Doom opens this port

9875| Trojan Portal of Doom opens this port

9899| Trojan InIkiller opens this port

9909| domain name time

9911|SYPECom transport protocol

9989| Trojan iNi-Killer opens this port

9990|OSM Applet program server

9991|OSM event server

10000| network data management protocol

10001|SCP construction Port

10005| secure telnet

10008|Octopus multiplexer

10067| Trojan iNi-Killer opens this port

10113|NetIQ endpoint

10115|NetIQ endpoint

10116|NetIQVoIP evaluator

10167| Trojan iNi-Killer opens this port

11000| Trojan SennaSpy opens this port

11113| PowerWord opens this port

11233| Trojan Progenic Trojan opens this port

12076| Trojan Telecommando opens this port

12223| Trojan Hack'99 KeyLogger opens this port

12345| Trojan NetBus1. 60/1.70, GabanBus open this port

12346| Trojan, NetBus1.60/1.70, GabanBus open this port

12361| Trojan Whack-a-mole opens this port

13223|PowWow client, is the Tribal Voice chat program

13224|PowWow server, is the Tribal Voice chat program

16959| Trojan Subseven opens this port

16969| Trojan Priority opens this port

17027| outgoing connections

19191| Trojan blue flame opens this port

20000| Trojan Millennium opens this port

20001| Trojan Millennium opens this port

20034| Trojan NetBus Pro opens this port

21554| Trojan GirlFriend opens this port

22222| Trojan Prosiak opens this port

23444| Trojan network bull opens this port

23456| Trojan, Evil, FTP, Ugly FTP open this port

25793|Vocaltec address server

26262|K3 software - server

26263|K3 software client

26274| Trojan Delta opens this port

27374| Trojan Subseven 2.1 opens this port

30100| Trojan NetSphere opens this port

30129| Trojan Masters Paradise opens this port

30303| Trojan Socket23 opens this port

30999| Trojan Kuang opens this port

31337| Trojan BO (Back Orifice) opens this port

31338| Trojan BO (Back Orifice), DeepBO open this port

31339| Trojan NetSpy DK opens this port

31666| Trojan BOWhack opens this port

31789|Hack-a-tack

The 32770|sun Solaris RPC service opens this port 33333| Trojan Prosiak opens this port

33434| routing trace

34324| Trojan, Tiny, Telnet, Server, BigGluck, TN, open this

port

36865|KastenX software port

38201|Galaxy7 software data channel

39681|TurboNote default port

40412| Trojan The Spy opens this port

40421| Trojan Masters Paradise opens this port

40422| Trojan Masters Paradise opens this port

40423| Trojan Masters Paradise opens this port

40426| Trojan Masters Paradise opens this port

40843|CSCC firewall

43210| Trojan SchoolBus 1.0/2.0 opens this port

43190|IP-PROVISION

44321|PCP server (pmcd) 44322|PCP server (pmcd) agent

44334| Mini Personal Firewall port

44442|ColdFusion software port

44443|ColdFusion software port

44445| Trojan Happypig opens this port

45576|E time professional proxy opens this port

47262| Trojan Delta opens this port

47624|Direct Play server

47806|ALC protocol

48003|Nimbus gateway

50505| Trojan Sockets de Troie opens this port

50766| Trojan Fore opens this port

53001| Trojan Remote Windows Shutdown opens this port

54320| Trojan bo2000 opens this port

54321| Trojan SchoolBus 1.0/2.0 opens this port

61466| Trojan Telecommando opens this port

65000| Trojan Devil 1.03 opens this port

65301|PC Anywhere software open port