˿ڸ
缼У˿ڣPort˼һϵĶ˿ڣ磬ADSL Modem·豸ĽӿڣRJ-45˿ڡSC˿ڵȵȡ߼ϵĶ˿ڣһָTCP/IPЭеĶ˿ڣ˿ںŵķΧ065535ҳ80˿ڣFTP21˿ڵȵȡｫҪܵľ߼ϵĶ˿ڡ 


鿴˿
Windows 2000/XP/Server 2003Ҫ鿴˿ڣʹNetstat
εʼС롰cmdسʾڡʾ״̬¼롰netstat -a -n»سͿԿʽʾTCPUDPӵĶ˿ںż״̬

ر/˿
ڽֶܸ˿ڵǰȽһWindowsιر/򿪶˿ڣΪĬϵ£кܶ಻ȫĻûʲôõĶ˿ǿģTelnet23˿ڡFTP21˿ڡSMTP25˿ڡRPC135˿ڵȵȡΪ˱֤ϵͳİȫԣǿͨķر/˿ڡ

رն˿
Windows 2000/XPйرSMTP25˿ڣȴ򿪡塱˫ߡ˫񡱡ڴ򿪵ķ񴰿ҵ˫Simple Mail Transfer Protocol SMTP񣬵ֹͣťֹͣ÷Ȼڡ͡ѡѽá󵥻ȷťɡرSMTP൱ڹر˶ӦĶ˿ڡ

˿
Ҫö˿ֻҪڡ͡ѡԶȷťٴ򿪸÷ڡ״̬еťøö˿ڣ󣬵ȷťɡ
ʾWindows 98ûСѡʹ÷ǽĹùر/˿ڡ
˿ڷ

߼ϵĶ˿жַ׼潫ֳķࣺ

1. ˿ںŷֲ

1֪˿ڣWell-Known Ports
֪˿ڼ֪Ķ˿ںţΧ01023Щ˿ںһ̶һЩ񡣱21˿ڷFTP25˿ڷSMTPʼЭ飩80˿ڷHTTP135˿ڷRPCԶ̵̹ãȵȡ

2̬˿ڣDynamic Ports
̬˿ڵķΧ102465535Щ˿ںһ㲻̶ĳҲ˵񶼿ʹЩ˿ڡֻҪеĳϵͳ룬ôϵͳͿԴЩ˿ںзһóʹá1024˿ھǷһϵͳĳڹرճ̺󣬾ͻͷռõĶ˿ںš
̬˿ҲľãĬӶ˿7626WAY 2.48011Netspy 3.07306YAI1024ȵȡ

2. Эͻ
Эͻ֣ԷΪTCPUDPIPICMPInternetϢЭ飩ȶ˿ڡҪTCPUDP˿ڣ

1TCP˿
TCP˿ڣЭ˿ڣҪڿͻ˺ͷ֮佨ӣṩɿݴ䡣İFTP21˿ڣTelnet23˿ڣSMTP25˿ڣԼHTTP80˿ڵȵȡ

2UDP˿
UDP˿ڣûݰЭ˿ڣڿͻ˺ͷ֮佨ӣȫԵòϡDNS53˿ڣSNMPЭ飩161˿ڣQQʹõ80004000˿ڵȵȡ
˿

֪ʶ!˿ڶ

˿ڣ0 
Reserved 
˵ͨڷϵͳһܹΪһЩϵͳС0Ч˿ڣͼʹͨıպ϶˿ʱͬĽһֵ͵ɨ裬ʹIPַΪ0.0.0.0ACKλ̫㲥 

˿ڣ1 
tcpmux 
˵ʾѰSGI IrixIrixʵtcpmuxҪṩߣĬtcpmuxϵͳб򿪡IrixڷǺмĬϵʻ磺IPGUEST UUCPNUUCPDEMOS TUTORDIAGOUTOFBOXȡԱڰװɾЩʻHACKERINTERNETtcpmuxЩʻ 

˿ڣ7 
Echo 
˵ܿFraggleŴʱ͵X.X.X.0X.X.X.255Ϣ 

˿ڣ19 
Character Generator 
˵һַֽķUDP汾յUDPӦַİTCPʱᷢͺֱַӹرաHACKERIPƭԷDoSαchargen֮UDPͬFraggle DoSĿַ˿ڹ㲥һαܺIPݰܺΪ˻ӦЩݶء 

˿ڣ21 
FTP 
˵FTPŵĶ˿ڣϴءĹѰҴanonymousFTPķЩпɶдĿ¼ľDoly TrojanForeInvisible FTPWebExWinCrashBlade RunnerŵĶ˿ڡ 

˿ڣ22 
Ssh 
˵PcAnywhereTCPһ˿ڵӿΪѰsshһ㣬óضģʽʹRSAREFİ汾ͻвٵ©ڡ 

˿ڣ23 
Telnet 
˵Զ̵¼Զ̵¼UNIXķ񡣴ɨһ˿ΪҵеĲϵͳʹҲҵ롣ľTiny Telnet ServerͿ˿ڡ 

˿ڣ25 
SMTP 
˵SMTPŵĶ˿ڣڷʼѰSMTPΪ˴ǵSPAMߵʻرգҪӵߴE-MAILϣ򵥵ϢݵͬĵַľAntigenEmail Password SenderHaebu CocedaShtrilitz StealthWinPCWinSpy˿ڡ 

˿ڣ31 
MSG Authentication 
˵ľMaster ParadiseHackers ParadiseŴ˶˿ڡ 

˿ڣ42 
WINS Replication 
˵WINS 

˿ڣ53 
Domain Name ServerDNS 
˵DNSŵĶ˿ڣ߿ͼ򴫵ݣTCPƭDNSUDPͨš˷ǽ˻¼˶˿ڡ 

˿ڣ67 
Bootstrap Protocol Server 
˵ͨDSLCable modemķǽῴ͵㲥ַ255.255.255.255ݡЩDHCPһַHACKERǣһַԼΪֲ·мˣman-in-middleͻ68˿ڹ㲥ã67˿ڹ㲥ӦֻӦʹù㲥Ϊͻ˻֪Է͵IPַ 

˿ڣ69 
Trival File Transfer 
˵bootpһṩ񣬱ڴϵͳ롣ǳڴöʹܴϵͳȡκ ļҲϵͳдļ 

˿ڣ79 
Finger Server 
˵ڻûϢѯϵͳ֪̽Ļ󣬻ӦԼFingerɨ衣 

˿ڣ80 
HTTP 
˵ҳľExecutorŴ˶˿ڡ 

˿ڣ99 
Metagram Relay 
˵ųncx99Ŵ˶˿ڡ 

˿ڣ102 
Message transfer agent(MTA)-X.400 over TCP/IP 
˵Ϣ 

˿ڣ109 
Post Office Protocol -Version3 
˵POP3Ŵ˶˿ڣڽʼͻ˷ʷ˵ʼPOP3๫ϵ㡣û뽻 20ζ߿½ǰϵͳɹ½ 

˿ڣ110 
SUN˾RPCж˿ 
˵RPCrpc.mountdNFSrpc.statdrpc.csmdrpc.ttybdamd 

˿ڣ113 
Authentication Service 
˵һеЭ飬ڼTCPӵûʹñ׼ַԻϢΪļ¼FTPPOPIMAPSMTPIRCȷͨͻͨǽЩ񣬽ῴ˿ڵ󡣼ס˿ڿͻ˻оڷǽһE-MAILĻӡǽ֧TCPӵϹзRST⽫ֹͣӡ 

˿ڣ119 
Network News Transfer Protocol 
˵NEWS鴫Э飬USENETͨš˿ڵͨѰUSENETISPƣֻǵĿͻܷǵ/κ˵ӣʱƵSPAM 

˿ڣ135 
Location Service 
˵Microsoft˿DCE RPC end-point mapperΪDCOMUNIX 111˿ڵĹܺơʹDCOMRPCķüϵend-point mapperעǵλáԶ˿ͻӵʱǲend-point mapperҵλáHACKERɨ˿ΪҵExchange Serverʲô汾ЩDOSֱ˿ڡ 

˿ڣ137138139 
NETBIOS Name Service 
˵137138UDP˿ڣͨھӴļʱ˿ڡ139˿ڣͨ˿ڽͼNetBIOS/SMBЭ鱻windowsļʹӡSAMBAWINS RegisrtationҲ 

˿ڣ143 
Interim Mail Access Protocol v2 
˵POP3İȫһIMAPл©סһLINUX棨admv0rmͨ˿ڷֳ˿ڵɨԲ֪ѾȾûREDHATǵLINUX汾ĬIMAPЩ©ĺСһ˿ڻIMAP2С 

˿ڣ161 
SNMP 
˵SNMPԶ̹豸úϢĴݿУͨSNMPɻЩϢԱĴý¶InternetCackersͼʹĬϵpublicprivateϵͳǿܻпܵϡSNMPܻᱻָû硣 

˿ڣ177 
X Display Manager Control Protocol 
˵ͨX-windows̨ͬʱҪ6000˿ڡ 

˿ڣ389 
LDAPILS 
˵Ŀ¼ЭNetMeeting Internet Locator Serverһ˿ڡ 

˿ڣ443 
Https 
˵ҳ˿ڣṩܺͨȫ˿ڴһHTTP 

˿ڣ456 
[NULL] 
˵ľHACKERS PARADISEŴ˶˿ڡ 

˿ڣ513 
Login,remote login 
˵Ǵʹcable modemDSL½еUNIXĹ㲥ЩΪ߽ǵϵͳṩϢ 

˿ڣ544 
[NULL] 
˵kerberos kshell 

˿ڣ548 
Macintosh,File Services(AFP/IP) 
˵Macintosh,ļ 

˿ڣ553 
CORBA IIOP UDP 
˵ʹcable modemDSLVLANῴ˿ڵĹ㲥CORBAһRPCϵͳ߿ЩϢϵͳ 

˿ڣ555 
DSF 
˵ľPhAse1.0Stealth SpyIniKillerŴ˶˿ڡ 

˿ڣ568 
Membership DPA 
˵Աʸ DPA 

˿ڣ569 
Membership MSN 
˵Աʸ MSN 

˿ڣ635 
mountd 
˵Linuxmountd BugɨһBUG˿ڵɨǻUDPģǻTCPmountdӣmountdͬʱ˿ڣסmountdκζ˿ڣĸ˿ڣҪڶ˿111portmapѯֻLinuxĬ϶˿635NFSͨ2049˿ڡ 

˿ڣ636 
LDAP 
˵SSLSecure Sockets layer 

˿ڣ666 
Doom Id Software 
˵ľAttack FTPSatanz BackdoorŴ˶˿ 

˿ڣ993 
IMAP 
˵SSLSecure Sockets layer 

˿ڣ10011011 
[NULL] 
˵ľSilencerWebEx1001˿ڡľDoly Trojan1011˿ڡ 

˿ڣ1024 
Reserved 
˵Ƕ̬˿ڵĿʼ򲢲ںĸ˿磬ϵͳΪǷһö˿ڡһӶ˿1024ʼ˵һϵͳĻ䵽1024˿ڡTelnetٴһnatstat -a ῴTelnet1024˿ڡSQL sessionҲô˶˿ں5000˿ڡ 

˿ڣ10251033 
1025network blackjack 1033[NULL] 
˵ľnetspy2˿ڡ 

˿ڣ1080 
SOCKS 
˵һЭͨʽǽǽͨһIPַINTERNETӦֻڲͨ⵽INTERNETڴãλڷǽⲿĹǽWinGateִᷢڼIRCʱῴ 

˿ڣ1170 
[NULL] 
˵ľStreaming Audio TrojanPsyber Stream ServerVoiceŴ˶˿ڡ 

˿ڣ1234124367116776 
[NULL] 
˵ľSubSeven2.0Ultors Trojan12346776˿ڡľSubSeven1.0/1.9124367116776˿ڡ 

˿ڣ1245 
[NULL] 
˵ľVodooŴ˶˿ڡ 

˿ڣ1433 
SQL 
˵MicrosoftSQL񿪷ŵĶ˿ڡ 

˿ڣ1492 
stone-design-1 
˵ľFTP99CMPŴ˶˿ڡ 

˿ڣ1500 
RPC client fixed port session queries 
˵RPCͻ̶˿ڻỰѯ 

˿ڣ1503 
NetMeeting T.120 
˵NetMeeting T.120 

˿ڣ1524 
ingress 
˵๥űװһSHELL˿ڣSUNϵͳSendmailRPC©Ľűհװ˷ǽͿ˿ϵͼܿԭ򡣿Telnetûļϵ˿ڣǷһSHELLӵ600/pcserverҲ⡣