20CN网络安全小组论坛 - 菜鸟乐园 - 1404,1405各是什么端口，干什么用？

论坛: 菜鸟乐园标题: 1404,1405各是什么端口，干什么用？

复制本贴地址

作者: juao [youngjuao]

论坛用户

如上

地主发表时间: 05/17 11:14

回复: dante [dante]

论坛用户

TCP    2=Death
TCP    7=Echo
TCP    12=Bomber
TCP    20=FTP Data
TCP    21=文件传输,Back Construction,Blade Runner,Doly Trojan,Fore,FTP trojan,Invisible FTP,Larva, WebEx,WinCrash
TCP    23=远程登录(Telnet),Tiny Telnet Server (= TTS)
TCP    25=电子邮件(SMTP),Ajan,Antigen,Email Password Sender,Happy 99,Kuang2,ProMail trojan,Shtrilitz,Stealth,Tapiras,Terminator,WinPC,WinSpy,Haebu Coceda
TCP    31=Agent 31, Hackers Paradise, Masters Paradise
TCP    41=DeepThroat
TCP    43=WHOIS
TCP    48=DRAT
TCP    50=DRAT
TCP    53=DNS,Bonk (DOS Exploit)
TCP    58=DMSetup
TCP    59=DMSetup
TCP    69=W32.Evala.Worm
TCP    70=Gopher
TCP    79=用户查询(Finger),Firehotcker
TCP    80=超文本服务器(Http),Executor,RingZero
TCP    81=Chubo
TCP    99=Hidden Port
TCP   110=电子邮件(Pop3),ProMail
TCP   113=Kazimas, Auther Idnet
TCP   118=Infector 1.4.2
TCP   119=Nntp, Happy 99
TCP   121=JammerKiller, Bo jammerkillah
TCP   129=Password Generator Protocol
TCP   123=Net Controller
TCP   133=Infector 1.x
//TCP   135=Netbios Remote procedure call
//TCP   137=Netbios name (DoS attacks)
//TCP   138=Netbios datagram
//TCP   139=Netbios session (DoS attacks)
TCP   143=IMAP
TCP   146=FC Infector,Infector
TCP   161=Snmp
TCP   162=Snmp-Trap
TCP   170=A-Trojan
TCP   194=Irc
TCP   256=Nirvana
TCP   315=The Invasor
TCP   420=Breach
TCP   421=TCP Wrappers
TCP   443=安全服务
TCP   456=Hackers paradise,FuseSpark
TCP   531=Rasmin
TCP   555=Ini-Killer,Phase Zero,Stealth Spy
TCP   605=SecretService
TCP   606=Noknok8
TCP   661=Noknok8
TCP   666=Attack FTP,Satanz Backdoor,Back Construction,Dark Connection Inside 1.2
TCP   667=Noknok7.2
TCP   668=Noknok6
TCP   692=GayOL
TCP   777=AIM Spy
TCP   808=RemoteControl,WinHole
TCP   815=Everyone Darling
TCP   901=Backdoor.Devil
TCP   911=Dark Shadow
TCP   999=DeepThroat
TCP  1000=Der Spaeher
TCP  1001=Silencer,WebEx,Der Spaeher
TCP  1003=BackDoor
TCP  1010=Doly
TCP  1011=Doly
TCP  1012=Doly
TCP  1015=Doly
TCP  1020=Vampire
TCP  1024=NetSpy.698(YAI)
//TCP  1025=NetSpy.698
//TCP  1033=Netspy
//TCP  1042=Bla
//TCP  1045=Rasmin
//TCP  1047=GateCrasher
//TCP  1050=MiniCommand
TCP  1080=Wingate
//TCP  1090=Xtreme, VDOLive
//TCP  1095=Rat
//TCP  1097=Rat
//TCP  1098=Rat
//TCP  1099=Rat
//TCP  1170=Psyber Stream Server,Streaming Audio trojan,Voice
//TCP  1200=NoBackO
//TCP  1201=NoBackO
//TCP  1207=Softwar
//TCP  1212=Nirvana,Visul Killer
//TCP  1234=Ultors
//TCP  1243=BackDoor-G, SubSeven, SubSeven Apocalypse
//TCP  1245=VooDoo Doll
//TCP  1269=Mavericks Matrix
//TCP  1313=Nirvana
//TCP  1349=BioNet
//TCP  1441=Remote Storm
//TCP  1492=FTP99CMP(BackOriffice.FTP)
//TCP  1509=Psyber Streaming Server
//TCP  1600=Shivka-Burka
//TCP  1703=Exloiter 1.1
//TCP  1807=SpySender
//TCP  1966=Fake FTP 2000
//TCP  1976=Custom port
//TCP  1981=Shockrave
//TCP  1999=BackDoor, TransScout
//TCP  2000=Der Spaeher,INsane Network
//TCP  2001=Transmisson scout
//TCP  2002=Transmisson scout
//TCP  2003=Transmisson scout
//TCP  2004=Transmisson scout
//TCP  2005=TTransmisson scout
//TCP  2023=Ripper,Pass Ripper,Hack City Ripper Pro
//TCP  2115=Bugs
//TCP  2121=Nirvana
//TCP  2140=Deep Throat, The Invasor
//TCP  2155=Nirvana
//TCP  2208=RuX
//TCP  2255=Illusion Mailer
//TCP  2283=HVL Rat5
//TCP  2300=PC Explorer
//TCP  2311=Studio54
//TCP  2565=Striker
//TCP  2583=WinCrash
//TCP  2600=Digital RootBeer
//TCP  2716=Prayer Trojan
//TCP  2801=Phineas Phucker
//TCP  2989=Rat
//TCP  3024=WinCrash trojan
//TCP  3128=RingZero
//TCP  3129=Masters Paradise
//TCP  3150=Deep Throat, The Invasor
//TCP  3210=SchoolBus
//TCP  3456=Terror
//TCP  3459=Eclipse 2000
//TCP  3700=Portal of Doom
//TCP  3791=Eclypse
//TCP  3801=Eclypse
TCP  4000=腾讯QQ客户端
TCP  4092=WinCrash
TCP  4242=VHM
TCP  4321=BoBo
TCP  4444=Prosiak,Swift remote
TCP  4567=File Nail
TCP  4590=ICQTrojan
TCP  4950=ICQTrojan
TCP  5000=WindowsXP服务器,Blazer 5,Bubbel,Back Door Setup,Sockets de Troie
TCP  5001=Back Door Setup, Sockets de Troie
TCP  5011=One of the Last Trojans (OOTLT)
TCP  5031=Firehotcker,Metropolitan,NetMetro
TCP  5032=Metropolitan
TCP  5190=ICQ Query
TCP  5321=Firehotcker
TCP  5333=Backage Trojan Box 3
TCP  5343=WCrat
TCP  5400=Blade Runner, BackConstruction1.2
TCP  5401=Blade Runner,Back Construction
TCP  5402=Blade Runner,Back Construction
TCP  5471=WinCrash
TCP  5521=Illusion Mailer
TCP  5550=Xtcp,INsane Network
TCP  5555=ServeMe
TCP  5556=BO Facil
TCP  5557=BO Facil
TCP  5569=Robo-Hack
TCP  5598=BackDoor 2.03
TCP  5631=PCAnyWhere data
TCP  5637=PC Crasher
TCP  5638=PC Crasher
TCP  5698=BackDoor
TCP  5714=Wincrash3
TCP  5741=WinCrash3
TCP  5742=WinCrash
TCP  5881=Y3K RAT
TCP  5882=Y3K RAT
TCP  5888=Y3K RAT
TCP  5889=Y3K RAT
TCP  6000=Backdoor.AB
TCP  6006=Noknok8
TCP  6272=SecretService
TCP  6267=广外女生
TCP  6400=Backdoor.AB,The Thing
TCP  6500=Devil 1.03
TCP  6661=Teman
TCP  6666=TCPshell.c
TCP  6667=NT Remote Control
TCP  6669=Vampyre
TCP  6670=DeepThroat
TCP  6711=SubSeven
TCP  6712=SubSeven1.x
TCP  6713=SubSeven
TCP  6723=Mstream
TCP  6767=NT Remote Control
TCP  6771=DeepThroat
TCP  6776=BackDoor-G,SubSeven,2000 Cracks
TCP  6789=Doly Trojan
TCP  6838=Mstream
TCP  6883=DeltaSource
TCP  6912=Shit Heep
TCP  6939=Indoctrination
TCP  6969=GateCrasher, Priority, IRC 3
TCP  6970=GateCrasher
TCP  7000=Remote Grab,NetMonitor,SubSeven1.x
TCP  7001=Freak88
TCP  7201=NetMonitor
TCP  7215=BackDoor-G, SubSeven
TCP  7001=Freak88,Freak2k
TCP  7300=NetMonitor
TCP  7301=NetMonitor
TCP  7306=NetMonitor
TCP  7307=NetMonitor, ProcSpy
TCP  7308=NetMonitor, X Spy
TCP  7323=Sygate服务器端
TCP  7424=Host Control
TCP  7597=Qaz
TCP  7609=Snid X2
TCP  7626=冰河
TCP  7777=The Thing
TCP  7789=Back Door Setup, ICQKiller
TCP  7983=Mstream
TCP  8000=XDMA, 腾讯OICQ服务器端
TCP  8010=Logfile
TCP  8080=WWW 代理,Ring Zero,Chubo
TCP  8787=BackOfrice 2000
TCP  8897=Hack Office,Armageddon
TCP  8989=Recon
TCP  9000=Netministrator
TCP  9325=Mstream
TCP  9400=InCommand
TCP  9401=InCommand
TCP  9402=InCommand
TCP  9872=Portal of Doom
TCP  9873=Portal of Doom
TCP  9874=Portal of Doom
TCP  9875=Portal of Doom
TCP  9876=Cyber Attacker
TCP  9878=TransScout
TCP  9989=Ini-Killer
TCP  9999=Prayer Trojan
TCP 10067=Portal of Doom
TCP 10084=Syphillis
TCP 10085=Syphillis
TCP 10086=Syphillis
TCP 10101=BrainSpy
TCP 10167=Portal Of Doom
TCP 10520=Acid Shivers
TCP 10607=Coma trojan
TCP 10666=Ambush
TCP 11000=Senna Spy
TCP 11050=Host Control
TCP 11051=Host Control
TCP 11223=Progenic,Hack '99KeyLogger
TCP 11831=TROJ_LATINUS.SVR
TCP 12076=Gjamer, MSH.104b
TCP 12223=Hack?9 KeyLogger
TCP 12345=GabanBus, NetBus, Pie Bill Gates, X-bill
TCP 12346=GabanBus, NetBus, X-bill
TCP 12349=BioNet
TCP 12361=Whack-a-mole
TCP 12362=Whack-a-mole
TCP 12378=W32/Gibe@MM
TCP 12456=NetBus
TCP 12623=DUN Control
TCP 12624=Buttman
TCP 12631=WhackJob, WhackJob.NB1.7
TCP 12701=Eclipse2000
TCP 12754=Mstream
TCP 13000=Senna Spy
TCP 13010=Hacker Brazil
TCP 13013=Psychward
TCP 13700=Kuang2 The Virus
TCP 14456=Solero
TCP 14500=PC Invader
TCP 14501=PC Invader
TCP 14502=PC Invader
TCP 14503=PC Invader
TCP 15000=NetDaemon 1.0
TCP 15092=Host Control
TCP 15104=Mstream
TCP 16484=Mosucker
TCP 16660=Stacheldraht (DDoS)
TCP 16772=ICQ Revenge
TCP 16969=Priority
TCP 17166=Mosaic
TCP 17300=Kuang2 The Virus
TCP 17490=CrazyNet
TCP 17500=CrazyNet
TCP 17569=Infector 1.4.x + 1.6.x
TCP 17777=Nephron
TCP 18753=Shaft (DDoS)
TCP 19864=ICQ Revenge
TCP 20000=Millennium II (GrilFriend)
TCP 20001=Millennium II (GrilFriend)
TCP 20002=AcidkoR
TCP 20034=NetBus 2 Pro
TCP 20203=Logged,Chupacabra
TCP 20331=Bla
TCP 20432=Shaft (DDoS)
TCP 21544=Schwindler 1.82,GirlFriend
TCP 21554=Schwindler 1.82,GirlFriend,Exloiter 1.0.1.2
TCP 22222=Prosiak,RuX Uploader 2.0
TCP 22784=Backdoor.Intruzzo
TCP 23432=Asylum 0.1.3
TCP 23456=Evil FTP, Ugly FTP, WhackJob
TCP 23476=Donald Dick
TCP 23477=Donald Dick
TCP 23777=INet Spy
TCP 26274=Delta
TCP 26681=Spy Voice
TCP 27374=Sub Seven 2.0+
TCP 27444=Tribal Flood Network,Trinoo
TCP 27665=Tribal Flood Network,Trinoo
TCP 29431=Hack Attack
TCP 29432=Hack Attack
TCP 29104=Host Control
TCP 29559=TROJ_LATINUS.SVR
TCP 29891=The Unexplained
TCP 30001=Terr0r32
TCP 30003=Death,Lamers Death
TCP 30029=AOL trojan
TCP 30100=NetSphere 1.27a,NetSphere 1.31
TCP 30101=NetSphere 1.31,NetSphere 1.27a
TCP 30102=NetSphere 1.27a,NetSphere 1.31
TCP 30103=NetSphere 1.31
TCP NetSphere Final
TCP 30303=Sockets de Troie
TCP 30947=Intruse
TCP 30999=Kuang2
TCP 21335=Tribal Flood Network,Trinoo
TCP 31336=Bo Whack
TCP 31337=Baron Night,BO client,BO2,Bo Facil,BackFire,Back Orifice,DeepBO,Freak2k,NetSpy
TCP 31338=NetSpy,Back Orifice,DeepBO
TCP 31339=NetSpy DK
TCP 31554=Schwindler
TCP 31666=BOWhack
TCP 31778=Hack Attack
TCP 31785=Hack Attack
TCP 31787=Hack Attack
TCP 31789=Hack Attack
TCP 31791=Hack Attack
TCP 31792=Hack Attack
TCP 32100=PeanutBrittle
TCP 32418=Acid Battery
TCP 33333=Prosiak,Blakharaz 1.0
TCP 33577=Son Of Psychward
TCP 33777=Son Of Psychward
TCP 33911=Spirit 2001a
TCP 34324=BigGluck,TN,Tiny Telnet Server
TCP 34555=Trin00 (Windows) (DDoS)
TCP 35555=Trin00 (Windows) (DDoS)
TCP 37651=YAT
TCP 40412=The Spy
TCP 40421=Agent 40421,Masters Paradise.96
TCP 40422=Masters Paradise
TCP 40423=Masters Paradise.97
TCP 40425=Masters Paradise
TCP 40426=Masters Paradise 3.x
TCP 41666=Remote Boot
TCP 43210=Schoolbus 1.6/2.0
TCP 44444=Delta Source
TCP 47252=Prosiak
TCP 47262=Delta
TCP 47878=BirdSpy2
TCP 49301=Online Keylogger
TCP 50505=Sockets de Troie
TCP 50766=Fore, Schwindler
TCP 51966=CafeIni
TCP 53001=Remote Windows Shutdown
TCP 53217=Acid Battery 2000
TCP 54283=Back Door-G, Sub7
TCP 54320=Back Orifice 2000,Sheep
TCP 54321=School Bus .69-1.11,Sheep, BO2K
TCP 57341=NetRaider
TCP 58008=BackDoor.Tron
TCP 58009=BackDoor.Tron
TCP 58339=ButtFunnel
TCP 59211=BackDoor.DuckToy
TCP 60000=Deep Throat
TCP 60068=Xzip 6000068
TCP 60411=Connection
TCP 60606=TROJ_BCKDOR.G2.A
TCP 61466=Telecommando
TCP 61603=Bunker-kill
TCP 63485=Bunker-kill
TCP 65000=Devil, DDoS
TCP 65432=Th3tr41t0r, The Traitor
TCP 65530=TROJ_WINMITE.10
TCP 65535=RC,Adore Worm/Linux
TCP 69123=ShitHeep
TCP 88798=Armageddon,Hack Office
UDP  9=Chargen
UDP  19=Chargen
//UDP   135=Netbios Remote procedure call
//UDP   137=Netbios name (DoS attacks)
//UDP   138=Netbios datagram
//UDP   139=Netbios session (DoS attacks)
UDP  1025=Maverick's Matrix 1.2 - 2.0
UDP  1349=BO dll
UDP  2140=Deep Throat
UDP  2989=RAT
UDP  3150=Deep Throat
UDP  3801=Eclypse
UDP  5503=Remote Shell Trojan
UDP  6112=Battle.net Game(不是木马)
UDP  6838=Mstream Agent-handler
UDP  7028=未知木马
UDP  7983=MStream handler-agent
UDP  8787=BackOrifice 2000
UDP  8879=BackOrifice 2000
UDP  9325=MStream Agent-handler
UDP 10067=Portal of Doom
UDP 10167=Portal of Doom
UDP 12378=W32/Gibe@MM
UDP 18753=Shaft handler to Agent
UDP 21554=GirlFriend
UDP 22784=Backdoor.Intruzzo
UDP 26274=Delta Source
UDP 26374=Sub-7 2.1
UDP 26444=Trin00/TFN2K
UDP 26573=Sub-7 2.1
UDP 29891=The Unexplained
UDP 31335=Trin00 DoS Attack
UDP 31337=Baron Night, BO client, BO2, Bo Facil, BackFire, Back Orifice, DeepBO
UDP 31338=Back Orifice, NetSpy DK, DeepBO
UDP 31787=Hack aTack
UDP 31789=Hack aTack
UDP 31790=Hack aTack
UDP 31791=Hack aTack
UDP 33390=未知木马
UDP 47262=Delta Source
UDP 49301=OnLine keyLogger
UDP 54320=Back Orifice
UDP 54321=Back Orifice 2000
UDP 54341=NetRaider Trojan

B1层发表时间: 05/17 19:12