常用端口号

TCP静态端口：

| 协议 | 端口号 | 用途 |
| ---- | ------ | ---------------------------------------------------- |
| TCP | 0 | Reserved |
| TCP | 1 | TCP Port Service Multiplexer |
| TCP | 2 | Death |
| TCP | 5 | Remote Job Entry,yoyo |
| TCP | 7 | Echo |
| TCP | 11 | Skun |
| TCP | 12 | Bomber |
| TCP | 16 | Skun |
| TCP | 17 | Skun |
| TCP | 18 | 消息传输协议，skun |
| TCP | 19 | Skun |
| TCP | 20 | FTP的数据传输端口 |
| TCP | 21 | FTP的控制端口 |
| TCP | 22 | SSH |
| TCP | 23 | 远程登录协议Telnet |
| TCP | 25 | 电子邮件SMTP |
| TCP | 27 | Assasin |
| TCP | 28 | Amanda |
| TCP | 29 | MSG ICP |
| TCP | 30 | Agent 40422 |
| TCP | 31 | Agent 32 |
| TCP | 37 | Time,ADM worm |
| TCP | 39 | SubSARI |
| TCP | 41 | DeepThroat,Foreplay |
| TCP | 42 | Host Name Server |
| TCP | 43 | WHOIS |
| TCP | 44 | Arctic |
| TCP | 48 | DRAT |
| TCP | 49 | 主机登录协议 |
| TCP | 50 | DRAT |
| TCP | 51 | IMP Logical Address Maintenance,Fuck Lamers Backdoor |
| TCP | 52 | MuSka53,Skun |
| TCP | 53 | DNS |
| TCP | 54 | MuSka53 |
| TCP | 58 | DMSetup |
| TCP | 59 | DMSetup |
| TCP | 63 | whois++ |
| TCP | 64 | Communications Integrator |
| TCP | 65 | TACACS-Database Service |
| TCP | 66 | Oracle SQL*NET,AL-Bareki |
| TCP | 67 | Bootstrap Protocol Server |
| TCP | 68 | Bootstrap Protocol Client |
| TCP | 69 | TFTP |
| TCP | 70 | Gopher服务，ADM worm |
| TCP | 79 | 用户查询（Finger),Firehotcker,ADM worm |
| TCP | 80 | 超文本服务器（Http),Executor,RingZero |
| TCP | 81 | Chubo,Worm.Bbeagle.q |
| TCP | 82 | Netsky-Z |
| TCP | 88 | Kerberos krb6服务 |
| TCP | 99 | Hidden Port |
| TCP | 102 | 消息传输代理 |
| TCP | 108 | SNA网关访问服务器 |
| TCP | 109 | Pop3 |
| TCP | 110 | 电子邮件（Pop4),ProMail |
| TCP | 113 | Kazimas,Auther Idnet |
| TCP | 115 | 简单文件传输协议 |
| TCP | 118 | SQL Services,Infector 1.4.3 |
| TCP | 119 | 新闻组传输协议（Newsgroup(Nntp)),Happy 100 |
| TCP | 121 | JammerKiller,Bo jammerkillah |
| TCP | 123 | 网络时间协议(NTP),Net Controller |
| TCP | 129 | Password Generator Protocol |
| TCP | 133 | Infector 2.x |
| TCP | 135 | 微软DCE RPC end-point mapper服务 |
| TCP | 137 | 微软Netbios Name服务（网上邻居传输文件使用） |
| TCP | 138 | 微软Netbios Name服务（网上邻居传输文件使用） |
| TCP | 139 | 微软Netbios Name服务（用于文件及打印机共享） |
| TCP | 142 | NetTaxi |
| TCP | 143 | Internet 邮件访问协议版本 4（IMAP5) |
| TCP | 146 | FC Infector,Infector |
| TCP | 150 | NetBIOS Session Service |
| TCP | 156 | SQL服务器 |
| TCP | 161 | Snmp |
| TCP | 162 | Snmp-Trap |
| TCP | 170 | A-Trojan |
| TCP | 177 | X Display管理控制协议 |
| TCP | 179 | Border网关协议（BGP) |
| TCP | 190 | 网关访问控制协议（GACP) |
| TCP | 194 | Irc |
| TCP | 197 | 目录定位服务（DLS) |
| TCP | 220 | Internet 邮件访问协议版本 3（IMAP4) |
| TCP | 256 | Nirvana |
| TCP | 315 | The Invasor |
| TCP | 371 | ClearCase版本管理软件 |
| TCP | 389 | Lightweight Directory Access Protocol (LDAP) |
| TCP | 396 | Novell Netware over IP |
| TCP | 420 | Breach |
| TCP | 421 | TCP Wrappers |
| TCP | 443 | 安全服务（HTTPS） |
| TCP | 444 | Simple Network Paging Protocol(SNPP) |
| TCP | 445 | Microsoft-DS（高危端口） |
| TCP | 455 | Fatal Connections |
| TCP | 456 | Hackers paradise,FuseSpark |
| TCP | 458 | 苹果公司QuickTime |
| TCP | 513 | Grlogin |
| TCP | 514 | RPC Backdoor |
| UDP | 520 | Rip |
| TCP | 531 | Rasmin,Net667 |
| TCP | 544 | kerberos kshell |
| TCP | 546 | DHCP Client |
| TCP | 547 | DHCP Server |
| TCP | 548 | Macintosh文件服务 |
| TCP | 555 | Ini-Killer,Phase Zero,Stealth Spy |
| TCP | 569 | MSN |
| TCP | 605 | SecretService |
| TCP | 606 | Noknok9 |
| TCP | 660 | DeepThroat |
| TCP | 661 | Noknok9 |
| TCP | 666 | Attack FTP |
| TCP | 667 | Noknok7.3 |
| TCP | 668 | Noknok7 |
| TCP | 669 | DP trojan |
| TCP | 692 | GayOL |
| TCP | 707 | Welchia,nachi |
| TCP | 777 | AIM Spy |
| TCP | 808 | RemoteControl,WinHole |
| TCP | 815 | Everyone Darling |
| TCP | 901 | Backdoor.Devil |
| TCP | 911 | Dark Shadow |
| TCP | 990 | ssl加密 |
| TCP | 993 | IMAP |
| TCP | 999 | DeepThroat |
| TCP | 1000 | Der Spaeher |
| TCP | 1001 | Silencer,WebEx,Der Spaeher |
| TCP | 1003 | BackDoor |
| TCP | 1010 | Doly |
| TCP | 1011 | Doly |
| TCP | 1012 | Doly |
| TCP | 1015 | Doly |
| TCP | 1016 | Doly |
| TCP | 1020 | Vampire |
| TCP | 1023 | Worm.Sasser.e |

TCP动态端口：

协议	端口号	用途
TCP	1024	NetSpy.699(YAI)
TCP	1025	NetSpy.699,Unused Windows Services Block
TCP	1026	Unused Windows Services Block
TCP	1027	Unused Windows Services Block
TCP	1028	Unused Windows Services Block
TCP	1029	Unused Windows Services Block
TCP	1030	Unused Windows Services Block
TCP	1033	Netspy
TCP	1035	Multidropper
TCP	1042	Bla
TCP	1045	Rasmin
TCP	1047	GateCrasher
TCP	1050	MiniCommand
TCP	1059	nimreg
TCP	1069	Backdoor.TheefServer.203
TCP	1070	Voice,Psyber Stream Server,Streaming Audio Trojan
TCP	1080	Wingate,Worm.BugBear.B,Worm.Novarg.B
TCP	1090	Xtreme,VDOLive
TCP	1092	LoveGate
TCP	1095	Rat
TCP	1097	Rat
TCP	1098	Rat
TCP	1099	Rat
TCP	1110	nfsd-keepalive
TCP	1111	Backdoor.AIMVision
TCP	1155	Network File Access
TCP	1170	Psyber Stream Server,Streaming Audio trojan,Voice
TCP	1200	NoBackO
TCP	1201	NoBackO
TCP	1207	Softwar
TCP	1212	Nirvana,Visul Killer
TCP	1234	Ultors
TCP	1243	BackDoor-G,SubSeven,SubSeven Apocalypse
TCP	1245	VooDoo Doll
TCP	1269	Mavericks Matrix
TCP	1313	Nirvana
TCP	1349	BioNet
TCP	1433	Microsoft SQL服务
TCP	1441	Remote Storm
TCP	1492	FTP100CMP(BackOriffice.FTP)
TCP	1503	NetMeeting T.121
TCP	1509	Psyber Streaming Server
TCP	1600	Shivka-Burka
TCP	1688	Key Management Service(密钥管理服务)
TCP	1703	Exloiter 1.2
TCP	1720	NetMeeting H.234 call Setup
TCP	1723	VPN 网关（PPTP）
TCP	1731	NetMeeting音频调用控制
TCP	1807	SpySender
TCP	1966	Fake FTP 2001
TCP	1976	Custom port
TCP	1981	Shockrave
TCP	1990	stun-p1 cisco STUN Priority 2 port
TCP	1990	stun-p1 cisco STUN Priority 2 port
TCP	1991	stun-p2 cisco STUN Priority 3 port
TCP	1992	stun-p3 cisco STUN Priority 4 port,ipsendmsg IPsendmsg
TCP	1993	snmp-tcp-port cisco SNMP TCP port
TCP	1994	stun-port cisco serial tunnel port
TCP	1995	perf-port cisco perf port
TCP	1996	tr-rsrb-port cisco Remote SRB port
TCP	1997	gdp-port cisco Gateway Discovery Protocol
TCP	1998	x25-svc-port cisco X.26 service (XOT)
TCP	1999	BackDoor,TransScout
TCP	2000	Der Spaeher,INsane Network
TCP	2002	W33. Beagle .AX @mm
TCP	2001	Transmisson scout
TCP	2002	Transmisson scout
TCP	2003	Transmisson scout
TCP	2004	Transmisson scout
TCP	2005	TTransmisson scout
TCP	2011	cypress
TCP	2015	raid-cs
TCP	2023	Ripper,Pass Ripper,Hack City Ripper Pro
TCP	2049	NFS
TCP	2115	Bugs
TCP	2121	Nirvana
TCP	2140	Deep Throat,The Invasor
TCP	2155	Nirvana
TCP	2208	RuX
TCP	2255	Illusion Mailer
TCP	2283	HVL Rat6
TCP	2300	PC Explorer
TCP	2311	Studio55
TCP	2556	Worm.Bbeagle.q
TCP	2565	Striker
TCP	2583	WinCrash
TCP	2600	Digital RootBeer
TCP	2716	Prayer Trojan
TCP	2745	Worm.BBeagle.k
TCP	2773	Backdoor,SubSeven
TCP	2774	SubSeven2.1&2.3
TCP	2801	Phineas Phucker
TCP	2989	Rat
TCP	3024	WinCrash trojan
TCP	3127	Worm.Novarg
TCP	3128	RingZero,Worm.Novarg.B
TCP	3129	Masters Paradise
TCP	3150	Deep Throat,The Invasor
TCP	3198	Worm.Novarg
TCP	3210	SchoolBus
TCP	3332	Worm.Cycle.a
TCP	3333	Prosiak
TCP	3389	超级终端（远程桌面）
TCP	3456	Terror
TCP	3459	Eclipse 2001
TCP	3700	Portal of Doom
TCP	3791	Eclypse
TCP	3801	Eclypse
TCP	3996	Portal of Doom,RemoteAnything
TCP	4000	腾讯QQ客户端
TCP	4060	Portal of Doom,RemoteAnything
TCP	4092	WinCrash
TCP	4242	VHM
TCP	4267	SubSeven2.1&2.3
TCP	4321	BoBo
TCP	4444	Prosiak,Swift remote
TCP	4500	W33.HLLW.Tufas
TCP	4567	File Nail
TCP	4590	ICQTrojan
TCP	4899	Remote Administrator服务器
TCP	4950	ICQTrojan
TCP	5000	WindowsXP服务器
TCP	5001	Back Door Setup,Sockets de Troie
TCP	5002	cd01r,Shaft
TCP	5011	One of the Last Trojans (OOTLT)
TCP	5025	WM Remote KeyLogger
TCP	5031	Firehotcker,Metropolitan,NetMetro
TCP	5032	Metropolitan
TCP	5190	ICQ Query
TCP	5321	Firehotcker
TCP	5333	Backage Trojan Box 4
TCP	5343	WCrat
TCP	5400	Blade Runner,BackConstruction1.3
TCP	5401	Blade Runner,Back Construction
TCP	5402	Blade Runner,Back Construction
TCP	5471	WinCrash
TCP	5512	Illusion Mailer
TCP	5521	Illusion Mailer
TCP	5550	Xtcp,INsane Network
TCP	5554	Worm.Sasser
TCP	5555	ServeMe
TCP	5556	BO Facil
TCP	5557	BO Facil
TCP	5569	Robo-Hack
TCP	5598	BackDoor 2.04
TCP	5631	PCAnyWhere data
TCP	5632	PCAnyWhere
TCP	5637	PC Crasher
TCP	5638	PC Crasher
TCP	5698	BackDoor
TCP	5714	Wincrash4
TCP	5741	WinCrash4
TCP	5742	WinCrash
TCP	5760	Portmap Remote Root Linux Exploit
TCP	5880	Y4K RAT
TCP	5881	Y4K RAT
TCP	5882	Y4K RAT
TCP	5888	Y4K RAT
TCP	5889	Y4K RAT
TCP	5900	WinVnc
TCP	6000	Backdoor.AB
TCP	6006	Noknok9
TCP	6129	Dameware Nt Utilities服务器
TCP	6272	SecretService
TCP	6267	广外女生
TCP	6400	Backdoor.AB,The Thing
TCP	6500	Devil 1.04
TCP	6661	Teman
TCP	6666	TCPshell.c
TCP	6667	NT Remote Control,Wise 播放器接收端口
TCP	6668	Wise Video广播端口
TCP	6669	Vampyre
TCP	6670	DeepThroat,iPhone
TCP	6671	Deep Throat 3.1
TCP	6711	SubSeven
TCP	6712	SubSeven2.x
TCP	6713	SubSeven
TCP	6723	Mstream
TCP	6767	NT Remote Control
TCP	6771	DeepThroat
TCP	6776	BackDoor-G,SubSeven,2001 Cracks
TCP	6777	Worm.BBeagle
TCP	6789	Doly Trojan
TCP	6838	Mstream
TCP	6883	DeltaSource
TCP	6912	Shit Heep
TCP	6939	Indoctrination
TCP	6969	GateCrasher,Priority,IRC 4
TCP	6970	RealAudio,GateCrasher
TCP	7000	Remote Grab,NetMonitor,SubSeven2.x
TCP	7001	Freak89
TCP	7201	NetMonitor
TCP	7215	BackDoor-G,SubSeven
TCP	7001	Freak88,Freak3k
TCP	7300	NetMonitor
TCP	7301	NetMonitor
TCP	7306	NetMonitor,NetSpy 1.1
TCP	7307	NetMonitor,ProcSpy
TCP	7308	NetMonitor,X Spy
TCP	7323	Sygate服务器端
TCP	7424	Host Control
TCP	7511	聪明基因
TCP	7597	Qaz
TCP	7609	Snid X3
TCP	7626	冰河
TCP	7777	The Thing
TCP	7789	Back Door Setup,ICQKiller
TCP	7983	Mstream
TCP	8000	腾讯OICQ服务器端，XDMA
TCP	8010	Wingate,Logfile
TCP	8011	WAY2.5
TCP	8080	WWW 代理，Ring Zero,Chubo,Worm.Novarg.B
TCP	8102	网络神偷
TCP	8181	W33.Erkez.D@mm
TCP	8520	W33.Socay.Worm
TCP	8594	I-Worm/Bozori.a
TCP	8787	BackOfrice 2001
TCP	8888	Winvnc
TCP	8897	Hack Office,Armageddon
TCP	8989	Recon
TCP	9000	Netministrator
TCP	9325	Mstream
TCP	9400	InCommand 1.1
TCP	9401	InCommand 1.1
TCP	9402	InCommand 1.1
TCP	9872	Portal of Doom
TCP	9873	Portal of Doom
TCP	9874	Portal of Doom
TCP	9875	Portal of Doom
TCP	9876	Cyber Attacker
TCP	9878	TransScout
TCP	9989	Ini-Killer
TCP	9898	Worm.Win33.Dabber.a
TCP	9999	Prayer Trojan
TCP	10067	Portal of Doom
TCP	10080	Worm.Novarg.B
TCP	10084	Syphillis
TCP	10085	Syphillis
TCP	10086	Syphillis
TCP	10101	BrainSpy
TCP	10167	Portal Of Doom
TCP	10168	Worm.Supnot.78859.c,Worm.LovGate.T
TCP	10520	Acid Shivers
TCP	10607	Coma trojan
TCP	10666	Ambush
TCP	11000	Senna Spy
TCP	11050	Host Control
TCP	11051	Host Control
TCP	11223	Progenic,Hack ’100KeyLogger
TCP	11831	TROJ_LATINUS.SVR
TCP	12076	Gjamer,MSH.105b
TCP	12223	Hack’100 KeyLogger
TCP	12345	GabanBus,NetBus 1.6/1.8,Pie Bill Gates,X-bill
TCP	12346	GabanBus,NetBus 1.6/1.8,X-bill
TCP	12349	BioNet
TCP	12361	Whack-a-mole
TCP	12362	Whack-a-mole
TCP	12363	Whack-a-mole
TCP	12378	W33/Gibe@MM
TCP	12456	NetBus
TCP	12623	DUN Control
TCP	12624	Buttman
TCP	12631	WhackJob,WhackJob.NB1.8
TCP	12701	Eclipse2001
TCP	12754	Mstream
TCP	13000	Senna Spy
TCP	13010	Hacker Brazil
TCP	13013	Psychward
TCP	13223	Tribal Voice的聊天程序PowWow
TCP	13700	Kuang3 The Virus
TCP	14456	Solero
TCP	14500	PC Invader
TCP	14501	PC Invader
TCP	14502	PC Invader
TCP	14503	PC Invader
TCP	15000	NetDaemon 1.1
TCP	15092	Host Control
TCP	15104	Mstream
TCP	16484	Mosucker
TCP	16660	Stacheldraht (DDoS)
TCP	16772	ICQ Revenge
TCP	16959	Priority
TCP	16969	Priority
TCP	17027	提供广告服务的Conducent"adbot"共享软件
TCP	17166	Mosaic
TCP	17300	Kuang3 The Virus
TCP	17490	CrazyNet
TCP	17500	CrazyNet
TCP	17569	Infector 1.4.x + 1.7.x
TCP	17777	Nephron
TCP	18753	Shaft (DDoS)
TCP	19191	蓝色火焰
TCP	19864	ICQ Revenge
TCP	20000	Millennium II (GrilFriend)
TCP	20001	Millennium II (GrilFriend)
TCP	20002	AcidkoR
TCP	20034	NetBus 3 Pro
TCP	20168	Lovgate
TCP	20203	Logged,Chupacabra
TCP	20331	Bla
TCP	20432	Shaft (DDoS)
TCP	20808	Worm.LovGate.v.QQ
TCP	213	Tribal Flood Network,Trinoo
TCP	21544	Schwindler 1.83,GirlFriend
TCP	21554	Schwindler 1.82,GirlFriend,Exloiter 1.0.1.3
TCP	22222	Prosiak,RuXUploader2.1
TCP	22784	Backdoor.Intruzzo
TCP	23432	Asylum 0.1.4
TCP	23444	网络公牛
TCP	23456	Evil FTP,Ugly FTP,WhackJob
TCP	23476	Donald Dick
TCP	23477	Donald Dick
TCP	23777	INet Spy
TCP	26274	Delta
TCP	26681	Spy Voice
TCP	27374	Sub Seven 2.1+,Backdoor.Baste
TCP	27444	Tribal Flood Network,Trinoo
TCP	27665	Tribal Flood Network,Trinoo
TCP	29431	Hack Attack
TCP	29432	Hack Attack
TCP	29104	Host Control
TCP	29559	TROJ_LATINUS.SVR
TCP	29891	The Unexplained
TCP	30001	Terr0r33
TCP	30003	Death,Lamers Death
TCP	30029	AOL trojan
TCP	30100	NetSphere 1.27a,NetSphere 1.32
TCP	30101	NetSphere 1.31,NetSphere 1.28a
TCP	30102	NetSphere 1.27a,NetSphere 1.32
TCP	30103	NetSphere 1.32
TCP	30303	Sockets de Troie
TCP	30722	W33.Esbot.A
TCP	30947	Intruse
TCP	30999	Kuang3
TCP	31336	Bo Whack
TCP	31337	Baron Night,BO client,BO2,Bo Facil,BackFire,Back Orifice,DeepBO,Freak3k,NetSpy
TCP	31338	NetSpy,Back Orifice,DeepBO
TCP	31339	NetSpy DK
TCP	31554	Schwindler
TCP	31666	BOWhack
TCP	31778	Hack Attack
TCP	31785	Hack Attack
TCP	31787	Hack Attack
TCP	31789	Hack Attack
TCP	31791	Hack Attack
TCP	31792	Hack Attack
TCP	32100	PeanutBrittle
TCP	32418	Acid Battery
TCP	33333	Prosiak,Blakharaz 1.1
TCP	33577	Son Of Psychward
TCP	33777	Son Of Psychward
TCP	33911	Spirit 2002a
TCP	34324	BigGluck,TN,Tiny Telnet Server
TCP	34555	Trin01 (Windows) (DDoS)
TCP	35555	Trin01 (Windows) (DDoS)
TCP	36794	Worm.Bugbear-A
TCP	37651	YAT
TCP	40412	The Spy
TCP	40421	Agent 40421,Masters Paradise.97
TCP	40422	Masters Paradise
TCP	40423	Masters Paradise.98
TCP	40425	Masters Paradise
TCP	40426	Masters Paradise 4.x
TCP	41666	Remote Boot
TCP	43210	Schoolbus 1.6/2.1
TCP	44444	Delta Source
TCP	44445	Happypig
TCP	45576	未知代理
TCP	47252	Prosiak
TCP	47262	Delta
TCP	47878	BirdSpy3
TCP	49301	Online Keylogger
TCP	50505	Sockets de Troie
TCP	50766	Fore,Schwindler
TCP	51966	CafeIni
TCP	53001	Remote Windows Shutdown
TCP	53217	Acid Battery 2001
TCP	54283	Back Door-G,Sub8
TCP	54320	Back Orifice 2001,Sheep
TCP	54321	School Bus .69-1.11,Sheep,BO3K
TCP	57341	NetRaider
TCP	58008	BackDoor.Tron
TCP	58009	BackDoor.Tron
TCP	58339	ButtFunnel
TCP	59211	BackDoor.DuckToy
TCP	60000	Deep Throat
TCP	60068	Xzip 6000069
TCP	60411	Connection
TCP	60606	TROJ_BCKDOR.G3.A
TCP	61466	Telecommando
TCP	61603	Bunker-kill
TCP	63485	Bunker-kill
TCP	65000	Devil,DDoS
TCP	65432	Th3tr41t1r,The Traitor
TCP	65530	TROJ_WINMITE.11
TCP	65535	RC,Adore Worm/Linux

UDP静态端口：

协议	端口号	用途
UDP	1	Sockets des Troie
UDP	9	Chargen
UDP	19	Chargen
UDP	69	Pasana
UDP	80	Penrox
UDP	371	ClearCase版本管理软件
UDP	445	公共Internet文件系统（CIFS)
UDP	500	Internet密钥交换（IP安全性 ,IKE)

UDP动态端口：

协议	端口号	用途
UDP	1025	Maverick’s Matrix 1.2 - 2.0
UDP	1026	Remote Explorer 2000
UDP	1027	UC聊天软件，Trojan.Huigezi.e
UDP	1028	3721上网助手（用途不明，建议用户警惕！），KiLo,SubSARI
UDP	1029	SubSARI
UDP	1031	Xot
UDP	1032	Akosch4
UDP	1104	RexxRave
UDP	1111	Daodan
UDP	1116	Lurker
UDP	1122	Last 2000,Singularity
UDP	1183	Cyn,SweetHeart
UDP	1200	NoBackO
UDP	1201	NoBackO
UDP	1342	BLA trojan
UDP	1344	Ptakks
UDP	1349	BO dll
UDP	1561	MuSka52
UDP	1701	VPN网关（L2TP）
UDP	1772	NetControle
UDP	1978	Slapper
UDP	1985	Black Diver
UDP	2000	A-trojan,Fear,Force,GOTHIC Intruder,Last 2000,Real 2000
UDP	2001	Scalper
UDP	2002	Slapper
UDP	2015	raid-cs
UDP	2018	rellpack
UDP	2130	Mini BackLash
UDP	2140	Deep Throat,Foreplay,The Invasor
UDP	2222	SweetHeart,Way
UDP	2339	Voice Spy
UDP	2702	Black Diver
UDP	2989	RAT
UDP	3150	Deep Throat
UDP	3215	XHX
UDP	3333	Daodan
UDP	3801	Eclypse
UDP	3996	Remote Anything
UDP	4128	RedShad
UDP	4156	Slapper
UDP	4500	sae-urn/ (IP安全性，IKE NAT遍历）
UDP	5419	DarkSky
UDP	5503	Remote Shell Trojan
UDP	5555	Daodan
UDP	5882	Y3K RAT
UDP	5888	Y3K RAT
UDP	6112	Battle .net Game
UDP	6666	KiLo
UDP	6667	KiLo
UDP	6766	KiLo
UDP	6767	KiLo,UandMe
UDP	6838	Mstream Agent-handler
UDP	7028	未知木马
UDP	7424	Host Control
UDP	7788	Singularity
UDP	7983	MStream handler-agent
UDP	8012	Ptakks
UDP	8090	Aphex’s Remote Packet Sniffer
UDP	8127	9_119,Chonker
UDP	8488	KiLo
UDP	8489	KiLo
UDP	8787	BackOrifice 2000
UDP	8879	BackOrifice 2000
UDP	9325	MStream Agent-handler
UDP	10000	XHX
UDP	10067	Portal of Doom
UDP	10084	Syphillis
UDP	10100	Slapper
UDP	10167	Portal of Doom
UDP	10498	Mstream
UDP	10666	Ambush
UDP	11225	Cyn
UDP	12321	Protoss
UDP	12345	BlueIce 2000
UDP	12378	W32/Gibe@MM
UDP	12623	ButtMan,DUN Control
UDP	15210	UDP remote shell backdoor server
UDP	15486	KiLo
UDP	16514	KiLo
UDP	16515	KiLo
UDP	18753	Shaft handler to Agent
UDP	20433	Shaft
UDP	21554	GirlFriend
UDP	22784	Backdoor.Intruzzo
UDP	23476	Donald Dick
UDP	25123	MOTD
UDP	26274	Delta Source
UDP	26374	Sub-7 2.1
UDP	26444	Trin00/TFN2K
UDP	26573	Sub-7 2.1
UDP	27184	Alvgus trojan 2000
UDP	27444	Trinoo
UDP	29589	KiLo
UDP	29891	The Unexplained
UDP	30103	NetSphere
UDP	31320	Little Witch
UDP	31335	Trin00 DoS Attack
UDP	31337	Baron Night,BO client,BO2,Bo Facil,BackFire,Back Orifice,DeepBO
UDP	31338	Back Orifice,NetSpy DK,DeepBO
UDP	31339	Little Witch
UDP	31340	Little Witch
UDP	31416	Lithium
UDP	31787	Hack aTack
UDP	31789	Hack aTack
UDP	31790	Hack aTack
UDP	31791	Hack aTack
UDP	33390	未知木马
UDP	34555	Trinoo
UDP	35555	Trinoo
UDP	43720	KiLo
UDP	44014	Iani
UDP	44767	School Bus
UDP	46666	Taskman
UDP	47262	Delta Source
UDP	47785	KiLo
UDP	49301	OnLine keyLogger
UDP	49683	Fenster
UDP	49698	KiLo
UDP	52901	Omega
UDP	54320	Back Orifice
UDP	54321	Back Orifice 2000
UDP	54341	NetRaider Trojan
UDP	61746	KiLO
UDP	61747	KiLO
UDP	61748	KiLO
UDP	65432	The Traitor

AD域所需端口号：

客户端	目标端口	端口协议
any	53	TCP/UDP	DNS
any	88	TCP/UDP	Kerberas协议
any	123	UDP	W32Time时间同步
any	135	TCR	RPC终结点映射程序
any	138	TCP	Netbios协议
any	389	TCP/UDP	LDAP协议:
any	445	TCP	SMB协议
any	464	TCP/UDP	Kerberos协议
any	636	TCP	LDAP的SSL
any	3268	TCP	LDAP GC
any	3269	TCP	LDAP GC SSL
any	49152-65535	TCP/UDP	FRS、DFSR、 LSA,、SAM 、Netlogon