端口大全
tcp 1=tcp port service multiplexer
tcp 2=death
tcp 5=remote job entry,yoyo
tcp 7=echo
tcp 11=skun
tcp 12=bomber
tcp 16=skun
tcp 17=skun
tcp 18=消息传输协议,skun
tcp 19=skun
tcp 20=ftp data,amanda
tcp 21=文件传输,back construction,blade runner,doly trojan,fore,ftp trojan,invisible ftp,larva, webex,wincrash
tcp 22=远程登录协议
tcp 23=远程登录(telnet),tiny telnet server (= tts)
tcp 25=电子邮件(smtp),ajan,antigen,email password sender,happy 99,kuang2,promail trojan,shtrilitz,stealth,tapiras,terminator,winpc,winspy,haebu coceda
tcp 27=assasin
tcp 28=amanda
tcp 29=msg icp
tcp 30=agent 40421
tcp 31=agent 31,hackers paradise,masters paradise,agent 40421
tcp 37=time,adm worm
tcp 39=subsari
tcp 41=deepthroat,foreplay
tcp 42=host name server
tcp 43=whois
tcp 44=arctic
tcp 48=drat
tcp 49=主机登录协议
tcp 50=drat
tcp 51=fuck lamers backdoor
tcp 52=muska52,skun
tcp 53=dns,bonk (dos exploit)
tcp 54=muska52
tcp 58=dmsetup
tcp 59=dmsetup
tcp 66=al-bareki
tcp 69=w32.evala.worm,backgate kit,nimda,pasana,storm,storm worm,theef
tcp 70=gopher服务,adm worm
tcp 79=用户查询(finger),firehotcker,adm worm
tcp 80=超文本服务器(http),executor,ringzero
tcp 81=chubo
tcp 99=hidden port
tcp 108=sna网关访问服务器
tcp 109=pop2
tcp 110=电子邮件(pop3),promail
tcp 113=kazimas, auther idnet
tcp 115=简单文件传输协议
tcp 118=sql services, infector 1.4.2
tcp 119=newsgroup(nntp), happy 99
tcp 121=jammerkiller, bo jammerkillah
tcp 123=net controller
tcp 129=password generator protocol
tcp 123=net controller
tcp 133=infector 1.x
//tcp 135=netbios remote procedure call
//tcp 137=netbios name (dos attacks)
//tcp 138=netbios datagram
//tcp 139=netbios session (dos attacks)
tcp 142=nettaxi
tcp 143=imap
tcp 146=fc infector,infector
tcp 150=netbios session service
tcp 156=sql服务器
tcp 161=snmp
tcp 162=snmp-trap
tcp 170=a-trojan
tcp 179=border网关协议(bgp)
tcp 190=网关访问控制协议(gacp)
tcp 194=irc
tcp 197=目录定位服务(dls)
tcp 256=nirvana
tcp 315=the invasor
tcp 389=lightweight directory access protocol (ldap)
tcp 396=novell netware over ip
tcp 420=breach
tcp 421=tcp wrappers
tcp 443=安全服务
tcp 444=simple network paging protocol(snpp)
tcp 445=microsoft-ds
tcp 455=fatal connections
tcp 456=hackers paradise,fusespark
tcp 458=苹果公司quicktime
tcp 513=grlogin
tcp 514=rpc backdoor
tcp 531=rasmin,net666
tcp 546=dhcp client
tcp 547=dhcp server
tcp 555=ini-killer,phase zero,stealth spy
tcp 569=msn
tcp 605=secretservice
tcp 606=noknok8
tcp 661=noknok8
tcp 666=attack ftp,satanz backdoor,back construction,dark connection inside 1.2
tcp 667=noknok7.2
tcp 668=noknok6
tcp 669=dp trojan
tcp 692=gayol
tcp 707=welchia
tcp 777=aim spy
tcp 808=remotecontrol,winhole
tcp 815=everyone darling
tcp 901=backdoor.devil
tcp 911=dark shadow
tcp 999=deepthroat
tcp 1000=der spaeher
tcp 1001=silencer,webex,der spaeher
tcp 1003=backdoor
tcp 1010=doly
tcp 1011=doly
tcp 1012=doly
tcp 1015=doly
tcp 1016=doly
tcp 1020=vampire
tcp 1024=netspy.698(yai)
//tcp 1025=netspy.698,unused windows services block
//tcp 1026=unused windows services block
//tcp 1027=unused windows services block
//tcp 1028=unused windows services block
//tcp 1029=unused windows services block
//tcp 1030=unused windows services block
//tcp 1033=netspy
//tcp 1035=multidropper
//tcp 1042=bla
//tcp 1045=rasmin
//tcp 1047=gatecrasher
//tcp 1050=minicommand
tcp 1080=wingate,worm.bugbear.b,worm.novarg.b
//tcp 1090=xtreme, vdolive
//tcp 1095=rat
//tcp 1097=rat
//tcp 1098=rat
//tcp 1099=rat
tcp 1111=backdoor.aimvision
//tcp 1170=psyber stream server,streaming audio trojan,voice
//tcp 1200=nobacko
//tcp 1201=nobacko
//tcp 1207=softwar
//tcp 1212=nirvana,visul killer
//tcp 1234=ultors
//tcp 1243=backdoor-g, subseven, subseven apocalypse
//tcp 1245=voodoo doll
//tcp 1269=mavericks matrix
//tcp 1313=nirvana
//tcp 1349=bionet
//tcp 1441=remote storm
//tcp 1492=ftp99cmp(backoriffice.ftp)
//tcp 1509=psyber streaming server
//tcp 1600=shivka-burka
//tcp 1703=exloiter 1.1
//tcp 1807=spysender
//tcp 1966=fake ftp 2000
//tcp 1976=custom port
//tcp 1981=shockrave
//tcp 1999=backdoor, transscout
//tcp 2000=der spaeher,insane network
//tcp 2001=transmisson scout
//tcp 2002=transmisson scout
//tcp 2003=transmisson scout
//tcp 2004=transmisson scout
//tcp 2005=ttransmisson scout
//tcp 2023=ripper,pass ripper,hack city ripper pro
//tcp 2115=bugs
//tcp 2121=nirvana
//tcp 2140=deep throat, the invasor
//tcp 2155=nirvana
//tcp 2208=rux
//tcp 2255=illusion mailer
//tcp 2283=hvl rat5
//tcp 2300=pc explorer
//tcp 2311=studio54
//tcp 2565=striker
//tcp 2583=wincrash
//tcp 2600=digital rootbeer
//tcp 2716=prayer trojan
//tcp 2773=backdoor,subseven
//tcp 2774=subseven2.1&2.2
//tcp 2801=phineas phucker
//tcp 2989=rat
//tcp 3024=wincrash trojan
tcp 3127=worm.novarg
tcp 3128=ringzero,worm.novarg.b
//tcp 3129=masters paradise
//tcp 3150=deep throat, the invasor
tcp 3198=worm.novarg
//tcp 3210=schoolbus
//tcp 3456=terror
//tcp 3459=eclipse 2000
//tcp 3700=portal of doom
//tcp 3791=eclypse
//tcp 3801=eclypse
tcp 4000=腾讯qq客户端
tcp 4092=wincrash
tcp 4242=vhm
tcp 4267=subseven2.1&2.2
tcp 4321=bobo
tcp 4444=prosiak,swift remote
tcp 4500=w32.hllw.tufas
tcp 4567=file nail
tcp 4590=icqtrojan
tcp 4950=icqtrojan
tcp 5000=windowsxp服务器,blazer 5,bubbel,back door setup,sockets de troie
tcp 5001=back door setup, sockets de troie
tcp 5002=cd00r,shaft
tcp 5011=one of the last trojans (ootlt)
tcp 5025=wm remote keylogger
tcp 5031=firehotcker,metropolitan,netmetro
tcp 5032=metropolitan
tcp 5190=icq query
tcp 5321=firehotcker
tcp 5333=backage trojan box 3
tcp 5343=wcrat
tcp 5400=blade runner, backconstruction1.2
tcp 5401=blade runner,back construction
tcp 5402=blade runner,back construction
tcp 5471=wincrash
tcp 5512=illusion mailer
tcp 5521=illusion mailer
tcp 5550=xtcp,insane network
tcp 5555=serveme
tcp 5556=bo facil
tcp 5557=bo facil
tcp 5569=robo-hack
tcp 5598=backdoor 2.03
tcp 5631=pcanywhere data
tcp 5637=pc crasher
tcp 5638=pc crasher
tcp 5698=backdoor
tcp 5714=wincrash3
tcp 5741=wincrash3
tcp 5742=wincrash
tcp 5760=portmap remote root linux exploit
tcp 5880=y3k rat
tcp 5881=y3k rat
tcp 5882=y3k rat
tcp 5888=y3k rat
tcp 5889=y3k rat
tcp 5900=winvnc,华讯vga广播服务器
tcp 6000=backdoor.ab
tcp 6006=noknok8
tcp 6272=secretservice
tcp 6267=广外女生
tcp 6400=backdoor.ab,the thing
tcp 6500=devil 1.03
tcp 6661=teman
tcp 6666=tcpshell.c
tcp 6667=nt remote control,华讯视频接收端口
tcp 6668=华讯视频广播服务器
tcp 6669=vampyre
tcp 6670=deepthroat
tcp 6711=subseven
tcp 6712=subseven1.x
tcp 6713=subseven
tcp 6723=mstream
tcp 6767=nt remote control
tcp 6771=deepthroat
tcp 6776=backdoor-g,subseven,2000 cracks
tcp 6789=doly trojan
tcp 6838=mstream
tcp 6883=deltasource
tcp 6912=shit heep
tcp 6939=indoctrination
tcp 6969=gatecrasher, priority, irc 3
tcp 6970=gatecrasher
tcp 7000=remote grab,netmonitor,subseven1.x
tcp 7001=freak88
tcp 7201=netmonitor
tcp 7215=backdoor-g, subseven
tcp 7001=freak88,freak2k
tcp 7300=netmonitor
tcp 7301=netmonitor
tcp 7306=netmonitor
tcp 7307=netmonitor, procspy
tcp 7308=netmonitor, x spy
tcp 7323=sygate服务器端
tcp 7424=host control
tcp 7597=qaz
tcp 7609=snid x2
tcp 7626=冰河
tcp 7777=the thing
tcp 7789=back door setup, icqkiller
tcp 7983=mstream
tcp 8000=xdma, 腾讯oicq服务器端
tcp 8010=logfile
tcp 8080=www 代理,ring zero,chubo,worm.novarg.b
tcp 8520=w32.socay.worm
tcp 8787=backofrice 2000
tcp 8897=hack office,armageddon
tcp 8989=recon
tcp 9000=netministrator
tcp 9325=mstream
tcp 9400=incommand
tcp 9401=incommand
tcp 9402=incommand
tcp 9872=portal of doom
tcp 9873=portal of doom
tcp 9874=portal of doom
tcp 9875=portal of doom
tcp 9876=cyber attacker
tcp 9878=transscout
tcp 9989=ini-killer
tcp 9999=prayer trojan
tcp 10067=portal of doom
tcp 10080=worm.novarg.b
tcp 10084=syphillis
tcp 10085=syphillis
tcp 10086=syphillis
tcp 10101=brainspy
tcp 10167=portal of doom
tcp 10168=worm.supnot.78858.c,worm.lovgate.t
tcp 10520=acid shivers
tcp 10607=coma trojan
tcp 10666=ambush
tcp 11000=senna spy
tcp 11050=host control
tcp 11051=host control
tcp 11223=progenic,hack '99keylogger
tcp 11831=troj_latinus.svr
tcp 12076=gjamer, msh.104b
tcp 12223=hack?9 keylogger
tcp 12345=gabanbus, netbus, pie bill gates, x-bill
tcp 12346=gabanbus, netbus, x-bill
tcp 12349=bionet
tcp 12361=whack-a-mole
tcp 12362=whack-a-mole
tcp 12363=whack-a-mole
tcp 12378=w32/gibe@mm
tcp 12456=netbus
tcp 12623=dun control
tcp 12624=buttman
tcp 12631=whackjob, whackjob.nb1.7
tcp 12701=eclipse2000
tcp 12754=mstream
tcp 13000=senna spy
tcp 13010=hacker brazil
tcp 13013=psychward
tcp 13700=kuang2 the virus
tcp 14456=solero
tcp 14500=pc invader
tcp 14501=pc invader
tcp 14502=pc invader
tcp 14503=pc invader
tcp 15000=netdaemon 1.0
tcp 15092=host control
tcp 15104=mstream
tcp 16484=mosucker
tcp 16660=stacheldraht (ddos)
tcp 16772=icq revenge
tcp 16959=priority
tcp 16969=priority
tcp 17166=mosaic
tcp 17300=kuang2 the virus
tcp 17490=crazynet
tcp 17500=crazynet
tcp 17569=infector 1.4.x + 1.6.x
tcp 17777=nephron
tcp 18753=shaft (ddos)
tcp 19864=icq revenge
tcp 20000=millennium ii (grilfriend)
tcp 20001=millennium ii (grilfriend)
tcp 20002=acidkor
tcp 20034=netbus 2 pro
tcp 20203=logged,chupacabra
tcp 20331=bla
tcp 20432=shaft (ddos)
tcp 20808=worm.lovgate.v.qq
tcp 21544=schwindler 1.82,girlfriend
tcp 21554=schwindler 1.82,girlfriend,exloiter 1.0.1.2
tcp 22222=prosiak,rux uploader 2.0
tcp 22784=backdoor.intruzzo
tcp 23432=asylum 0.1.3
tcp 23456=evil ftp, ugly ftp, whackjob
tcp 23476=donald dick
tcp 23477=donald dick
tcp 23777=inet spy
tcp 26274=delta
tcp 26681=spy voice
tcp 27374=sub seven 2.0+, backdoor.baste
tcp 27444=tribal flood network,trinoo
tcp 27665=tribal flood network,trinoo
tcp 29431=hack attack
tcp 29432=hack attack
tcp 29104=host control
tcp 29559=troj_latinus.svr
tcp 29891=the unexplained
tcp 30001=terr0r32
tcp 30003=death,lamers death
tcp 30029=aol trojan
tcp 30100=netsphere 1.27a,netsphere 1.31
tcp 30101=netsphere 1.31,netsphere 1.27a
tcp 30102=netsphere 1.27a,netsphere 1.31
tcp 30103=netsphere 1.31
tcp 30303=sockets de troie
tcp 30947=intruse
tcp 30999=kuang2
tcp 21335=tribal flood network,trinoo
tcp 31336=bo whack
tcp 31337=baron night,bo client,bo2,bo facil,backfire,back orifice,deepbo,freak2k,netspy
tcp 31338=netspy,back orifice,deepbo
tcp 31339=netspy dk
tcp 31554=schwindler
tcp 31666=bowhack
tcp 31778=hack attack
tcp 31785=hack attack
tcp 31787=hack attack
tcp 31789=hack attack
tcp 31791=hack attack
tcp 31792=hack attack
tcp 32100=peanutbrittle
tcp 32418=acid battery
tcp 33333=prosiak,blakharaz 1.0
tcp 33577=son of psychward
tcp 33777=son of psychward
tcp 33911=spirit 2001a
tcp 34324=biggluck,tn,tiny telnet server
tcp 34555=trin00 (windows) (ddos)
tcp 35555=trin00 (windows) (ddos)
tcp 36794=worm.bugbear-a
tcp 37651=yat
tcp 40412=the spy
tcp 40421=agent 40421,masters paradise.96
tcp 40422=masters paradise
tcp 40423=masters paradise.97
tcp 40425=masters paradise
tcp 40426=masters paradise 3.x
tcp 41666=remote boot
tcp 43210=schoolbus 1.6/2.0
tcp 44444=delta source
tcp 47252=prosiak
tcp 47262=delta
tcp 47878=birdspy2
tcp 49301=online keylogger
tcp 50505=sockets de troie
tcp 50766=fore, schwindler
tcp 51966=cafeini
tcp 53001=remote windows shutdown
tcp 53217=acid battery 2000
tcp 54283=back door-g, sub7
tcp 54320=back orifice 2000,sheep
tcp 54321=school bus .69-1.11,sheep, bo2k
tcp 57341=netraider
tcp 58008=backdoor.tron
tcp 58009=backdoor.tron
tcp 58339=buttfunnel
tcp 59211=backdoor.ducktoy
tcp 60000=deep throat
tcp 60068=xzip 6000068
tcp 60411=connection
tcp 60606=troj_bckdor.g2.a
tcp 61466=telecommando
tcp 61603=bunker-kill
tcp 63485=bunker-kill
tcp 65000=devil, ddos
tcp 65432=th3tr41t0r, the traitor
tcp 65530=troj_winmite.10
tcp 65535=rc,adore worm/linux
tcp 69123=shitheep
tcp 88798=armageddon,hack office
udp 1=sockets des troie
udp 9=chargen
udp 19=chargen
udp 69=pasana
udp 80=penrox
//udp 135=netbios remote procedure call
//udp 137=netbios name (dos attacks)
//udp 138=netbios datagram
//udp 139=netbios session (dos attacks)
udp 146=infector
udp 1025=maverick's matrix 1.2 - 2.0
udp 1026=remote explorer 2000
udp 1027=trojan.huigezi.e
udp 1028=kilo,subsari
udp 1029=subsari
udp 1031=xot
udp 1032=akosch4
udp 1104=rexxrave
udp 1111=daodan
udp 1116=lurker
udp 1122=last 2000,singularity
udp 1183=cyn,sweetheart
udp 1200=nobacko
udp 1201=nobacko
udp 1342=bla trojan
udp 1344=ptakks
udp 1349=bo dll
udp 1561=muska52
udp 1772=netcontrole
udp 1978=slapper
udp 1985=black diver
udp 2000=a-trojan,fear,force,gothic intruder,last 2000,real 2000
udp 2001=scalper
udp 2002=slapper
udp 2130=mini backlash
udp 2140=deep throat,foreplay,the invasor
udp 2222=sweetheart, way
udp 2339=voice spy
udp 2702=black diver
udp 2989=rat
udp 3150=deep throat
udp 3215=xhx
udp 3333=daodan
udp 3801=eclypse
udp 3996=remote anything
udp 4128=redshad
udp 4156=slapper
udp 5419=darksky
udp 5503=remote shell trojan
udp 5555=daodan
udp 5882=y3k rat
udp 5888=y3k rat
udp 6112=battle.net game
udp 6666=kilo
udp 6667=kilo
udp 6766=kilo
udp 6767=kilo,uandme
udp 6838=mstream agent-handler
udp 7028=未知木马
udp 7424=host control
udp 7788=singularity
udp 7983=mstream handler-agent
udp 8012=ptakks
udp 8090=aphex's remote packet sniffer
udp 8127=9_119,chonker
udp 8488=kilo
udp 8489=kilo
udp 8787=backorifice 2000
udp 8879=backorifice 2000
udp 9325=mstream agent-handler
udp 10000=xhx
udp 10067=portal of doom
udp 10084=syphillis
udp 10100=slapper
udp 10167=portal of doom
udp 10498=mstream
udp 10666=ambush
udp 11225=cyn
udp 12321=protoss
udp 12345=blueice 2000
udp 12378=w32/gibe@mm
udp 12623=buttman,dun control
udp 15210=udp remote shell backdoor server
udp 15486=kilo
udp 16514=kilo
udp 16515=kilo
udp 18753=shaft handler to agent
udp 20433=shaft
udp 21554=girlfriend
udp 22784=backdoor.intruzzo
udp 23476=donald dick
udp 25123=motd
udp 26274=delta source
udp 26374=sub-7 2.1
udp 26444=trin00/tfn2k
udp 26573=sub-7 2.1
udp 27184=alvgus trojan 2000
udp 27444=trinoo
udp 29589=kilo
udp 29891=the unexplained
udp 30103=netsphere
udp 31320=little witch
udp 31335=trin00 dos attack
udp 31337=baron night, bo client, bo2, bo facil, backfire, back orifice, deepbo
udp 31338=back orifice, netspy dk, deepbo
udp 31339=little witch
udp 31340=little witch
udp 31416=lithium
udp 31787=hack atack
udp 31789=hack atack
udp 31790=hack atack
udp 31791=hack atack
udp 33390=未知木马
udp 34555=trinoo
udp 35555=trinoo
udp 43720=kilo
udp 44014=iani
udp 44767=school bus
udp 46666=taskman
udp 47262=delta source
udp 47785=kilo
udp 49301=online keylogger
udp 49683=fenster
udp 49698=kilo
udp 52901=omega
udp 54320=back orifice
udp 54321=back orifice 2000
udp 54341=netraider trojan
udp 61746=kilo
udp 61747=kilo
udp 61748=kilo
udp 65432=the traitor