Legitimate TCP Ports Commonly Probed For Exploits

21
FTP

22
SSH

23
TELNET

25
SMTP

53
DNS

79
FINGER

80
HTTP

109
POPv2

110
POPv3

111
portmap

113
AUTH/identd

119
NNTP

139
SMB (Windows NT and later)

143
IMAP

445
SMB (Windows 2000 and later)

513
rsh

514
rlogin

515
LPD (print spooler)

1433
Microsoft SQL Server

3128
squid (web/ftp proxy/cache)

3389
Terminal Server (Windows 2000 and later)

5632
PCAnywhere

5555
Napster

6000
X11

6666
Napster

6699
Napster

7777
Napster

8875
Napster

8080
Common web proxy port

8888
Napster

TCP and UDP ports used for remote system control.

Port on target

Port
Protocol
Software

22
TCP
pcAnywhere

22
UDP
pcAnywhere

407
TCP
Timbuktu

407
UDP
Timbuktu

799
TCP
Remotely Possibly / ControlIT

800
TCP
Remotely Possibly / ControlIT

800
UDP
Remotely Possibly / ControlIT

1494
TCP
Citrix ICA

1494
UDP
Citrix ICA

2000
TCP
Remotely Anywhere

2001
TCP
Remotely Anywhere

3127-3198
TCP
Mydoom

3389
TCP
Windows Terminal Server

4899
TCP
RAdmin

5800
TCP
VNC (and [...]

Popularity: 9% [?]

If you enjoy our post, feel free to subscribes to our rss feeds