추적: • tcpip

목차

, , , ,

TCP/IP Port

내 포트 점검

http://www.whatsmyip.org/ports/

TCP/IP 프로토콜에서 사용하는 Port

1) 가장 많이 사용되는 포트 : 0 ~ 1023 2) 예약된 포트 : 1024 ~ 49151 3) 동적, 사설 포트 : 49152 ~ 65535

가장 많이 사용되는 포트 요약 (0~1023)

키워드포트번호포트용도
icmp8/tcp, 8/udp, 0/tcp, 0/udpUnassigned
ftp-data20/tcp, 20/udpFile Transfer [Default Data]
ftp21/tcp, 21/udpFile Transfer [Control]
ssh22/tcp, 22/udpSSH Remote Login Protocol
telnet23/tcp, 23/udpTelnet
smtp25/tcp, 25/udpSimple Mail Transfer
domain53/tcp, 53/udpDomain Name Server
whois++63/tcp, 63/udpwhois++
tftp69/tcp, 69/udpTrivial File Transfer
gopher70/tcp, 70/udpGopher
finger79/tcp, 79/udpFinger
www80/tcp, 80/udpWorld Wide Web HTTP
pop3110/tcp, 110/udpPost Office Protocol - Version 3
ntp123/tcp, 123/udpNetwork Time Protocol
epmap135/tcp, 135/udpDCE endpoint resolution
profile136/tcp, 136/udpPROFILE Naming System
netbios-ns137/tcp, 137/udpNETBIOS Name Service
netbios-dgm138/tcp, 138/udpNETBIOS Datagram Service
netbios-ssn139/tcp, 139/udpNETBIOS Session Service
imap143/tcp, 143/udpInternet Message Access Protocol
snmp161/tcp, 161/udpSNMP
namp167/tcp, 167/udpNAMP
imap3220/tcp, 220/udpInteractive Mail Access Protocol v3
ldap389/tcp, 389/udpLightweight Directory Access Protocol
https443/tcp, 443/udphttp protocol over TLS/SSL
shell514/tcpcmd
syslog514/udpsyslog
printer515/tcp, 515/udpspooler
ftps-data989/tcp, 989/udpftp protocol, data, over TLS/SSL
ftps990/tcp, 990/udpftp protocol, control, over TLS/SSL
telnets992/tcp, 992/udptelnet protocol over TLS/SSL
imaps993/tcp, 993/udpimap4 protocol over TLS/SSL
pop3s995/tcp, 995/udppop3 protocol over TLS/SSL (was spop3)

예약된 포트 요약 (1024 ~ 49151)

키워드포트번호포트용도
ms-sql-s1433/tcp, 1433/udpMicrosoft-SQL-Server
ms-sql-m1434/tcp, 1434/udpMicrosoft-SQL-Monitor
sybase-sqlany1498/tcp, 1498/udpSybase SQL Any
atm-zip-office1520/tcp, 1520/udpatm zip office
ncube-lm1521/tcp, 1521/udpnCube License Manager
ricardo-lm1522/tcp, 1522/udpRicardo North America License Manager
cichild-lm 1523/tcp, 1523/udpcichild
ingreslock1524/tcp, 1524/udpingres
orasrv1525/tcp, 1525/udporacle
sybasedbsynch2439/tcp, 2439/udpSybaseDBSynch
sybaseanywhere2638/tcp, 2638/udpSybase Anywhere
ms-wbt-server3389/tcp, 3389/udpMS WBT Server
http-alt8080/tcp, 8080/udpHTTP Alternate (see port 80)

웜/바이러스 포트로 방화벽에서 차단해야할 포트 요약

포트번호원래 포트 용도키워드
69/udpTFTPNachi 웜, Blaster 웜
80/udpweb serverNachi 웜
135/tcp, 135/udpNETBiosNachi 웜, Blaster 웜
137/udp NETBios Nachi 웜, Blaster 웜
138/udpNETBiosNachi 웜, Blaster 웜
139/tcpNETBiosNachi 웜, Blaster 웜
443/tcp, 443/udpHTTPSSlapper 웜
445/tcp NETBiosNachi 웜, Blaster 웜
514/tcpSHELLRPC Backdoor
515/tcp, 515/udpLPRngRed 웜
593/tcphttp-rpc-epmap, HTTP RPC Ep MapNachi 웜, Blaster 웜
1008/udp-LiOn 웜
1243/tcp-ShoolBus Backdoor
1433/tcp, 1433/udpms-sql-m, Microsoft-SQL-MonitorW32.Slammer 웜
1434/tcp, 1434/udpms-sql-m, Microsoft-SQL-MonitorW32.Slammer 웜
3385/tcpqnxnetmanNet-Worm.Win32.Mytob.dc
4444/tcpkrb524Blaster 웜, Welchia 웜
6667/tcp, 6667/udpircu 6665-6669/tcp IRCUWelchia 웜
6668/tcp, 6668/udpircu 6665-6669/tcp IRCUWelchia 웜
6669/tcp, 6669/udpircu 6665-6669/tcp IRCUWelchia 웜
10008/tcp, 10008/udp-LiOn 웜
54321/tcp-ShoolBus Backdoor
17300/tcp-Kuang2 바이러스
30999/tcp-Kuang2 바이러스
27374/tcp, 27374/udp-SubSeven Backdoor

P2P 관련

service nameTCPUDP
소리바다22322, 22323, 767522321, 7674
당나귀4661, 4662, 46658719, 4665, 4672
구루구루9292, 9293, 8282, 31200
Direct411-412411-412
Gnutella6346, 6347
GoBoogy 5325
Hotline5497, 5498, 5500, 5501, 5503
KaZaA1214
Madster23172, 9922
Maniac2000, 22222010
V-Share8401-84048401-8404
shareshare6399, 6777
WINMX66996257
엔유8185, 8184
파일구리9493
파일피아8090-8091
iMash5000
BitTorrent6881, 6889
Guntella-Morpheus6346-63476346-6347
GuRuGuRu9292, 8282, 31200
Madster-Aimster23172, 9922
MiRC6667, 6665-6670, 7000
Bluster 41170
GoToMyPc8200
Napster6600-6699, 4444, 5555, 6666, 7777, 8888, 8875