7 Echo Protocol Attaquétcp, udp Well-known 19 CharGEN (Character Generator Protocol) Attaquéudp, tcp Well-known 20 FTP (File Transfer Protocol) canal de données Attaquétcp Well-known 21 FTP (File Transfer Protocol) canal de contrôle Attaquétcp Well-known 22 SSH (Secure Shell) Attaquétcp Well-known 23 Telnet Attaquétcp Well-known 25 SMTP (Simple Mail Transfer Protocol) Attaquétcp Well-known 49 TACACS+ (Terminal Access Controller Access-Control System Plus) Attaquétcp Well-known 53 DNS (Domain Name System) Attaquétcp, udp Well-known 67 DHCP (Dynamic Host Configuration Protocol) serveur Attaquéudp Well-known 69 TFTP (Trivial File Transfer Protocol) Attaquéudp Well-known 79 Finger Attaquétcp Well-known 80 HTTP (Hypertext Transfer Protocol) Attaquétcp Well-known 88 Kerberos Attaquétcp, udp Well-known 102 S7comm (Siemens SIMATIC S7 PLC) Attaquétcp Well-known 110 POP3 (Post Office Protocol v3) Attaquétcp Well-known 111 RPCbind (portmapper) Attaquétcp, udp Well-known 113 Ident / Auth Attaquétcp Well-known 119 NNTP (Network News Transfer Protocol) Attaquétcp Well-known 123 NTP (Network Time Protocol) Attaquéudp Well-known 135 MSRPC Endpoint Mapper Attaquétcp Well-known 137 NetBIOS Name Service (NBT-NS) Attaquéudp Well-known 139 NetBIOS Session Service Attaquétcp Well-known 143 IMAP (Internet Message Access Protocol) Attaquétcp Well-known 161 SNMP (Simple Network Management Protocol) Attaquéudp Well-known 179 BGP (Border Gateway Protocol) Attaquétcp Well-known 194 IRC (Internet Relay Chat) Attaquétcp Well-known 389 LDAP (Lightweight Directory Access Protocol) Attaquétcp, udp Well-known 427 SLP (Service Location Protocol) Attaquéudp, tcp Well-known 443 HTTPS (HTTP over TLS) Attaquétcp Well-known 445 SMB / CIFS Attaquétcp Well-known 465 SMTPS (SMTP Submission over implicit TLS) tcp Well-known 500 IKE / ISAKMP (IPsec VPN key exchange) Attaquéudp Well-known 502 Modbus TCP Attaquétcp Well-known 512 rexec (remote execution) Attaquétcp Well-known 513 rlogin (remote login) Attaquétcp Well-known 514 Syslog Attaquéudp Well-known 515 LPD (Line Printer Daemon) Attaquétcp Well-known 520 RIP (Routing Information Protocol) Attaquéudp Well-known 547 DHCPv6 (Dynamic Host Configuration Protocol for IPv6) serveur Attaquéudp Well-known 548 AFP (Apple Filing Protocol) Attaquétcp Well-known 554 RTSP (Real Time Streaming Protocol) Attaquétcp Well-known 563 NNTPS (NNTP over TLS) Attaquétcp Well-known 587 SMTP Submission (STARTTLS) tcp Well-known 593 RPC over HTTP (MSRPC/EPMAP) Attaquétcp Well-known 623 IPMI / RMCP (BMC out-of-band management) Attaquéudp Registered 631 IPP / CUPS (Internet Printing Protocol) Attaquétcp, udp Well-known 636 LDAPS (LDAP over TLS) Attaquétcp Well-known 853 DNS over TLS (DoT) Attaquétcp Well-known 873 Démon rsync Attaquétcp Well-known 990 FTPS (FTP over implicit TLS) Attaquétcp Well-known 993 IMAPS (IMAP over TLS) tcp Well-known 995 POP3S (POP3 over TLS) tcp Well-known 1080 SOCKS proxy Attaquétcp Registered 1099 Java RMI Registry Attaquétcp Registered 1194 OpenVPN Attaquéudp, tcp Registered 1433 Microsoft SQL Server Attaquétcp Registered 1434 Microsoft SQL Server Resolution Service (SQL Server Browser) Attaquéudp Registered 1521 Oracle Database TNS listener Attaquétcp Registered 1524 ingreslock (classic backdoor shell) Attaquétcp Registered 1645 Authentification RADIUS (héritée) Attaquéudp Registered 1701 L2TP (VPN) Attaquéudp Registered 1720 H.323 (Q.931 call signaling) Attaquétcp Registered 1723 PPTP (Point-to-Point Tunneling Protocol) Attaquétcp Registered 1812 RADIUS authentication Attaquéudp Registered 1883 MQTT Attaquétcp Registered 1900 SSDP / UPnP (Simple Service Discovery Protocol) Attaquéudp Registered 1911 Tridium Niagara Fox Attaquétcp Registered 2049 NFS (Network File System) Attaquétcp Registered 2082 cPanel Attaquétcp Registered 2087 WHM (WebHost Manager, TLS) Attaquétcp Registered 2123 GTP-C (GPRS Tunnelling Protocol, control plane) Attaquéudp Registered 2181 Apache ZooKeeper Attaquétcp Registered 2375 Docker Engine API (unencrypted) Attaquétcp Registered 2376 Docker Engine API (TLS) Attaquétcp Registered 2379 etcd Client API Attaquétcp Registered 2404 IEC 60870-5-104 (IEC-104) Attaquétcp Registered 2525 SMTP submission (alternate) Attaquétcp Registered 3000 Dev Server / Grafana Attaquétcp Registered 3128 Squid HTTP Proxy Attaquétcp Registered 3260 iSCSI target Attaquétcp Registered 3268 LDAP Global Catalog (Active Directory) Attaquétcp Registered 3269 Catalogue global LDAP sur SSL/TLS (Secure Global Catalog) Attaquétcp Registered 3306 MySQL / MariaDB Attaquétcp Registered 3389 RDP (Remote Desktop Protocol) Attaquétcp, udp Well-known 3478 STUN / TURN (WebRTC NAT traversal) Attaquéudp, tcp Registered 3690 Subversion (svnserve) Attaquétcp Registered 3702 WS-Discovery (Web Services Dynamic Discovery / WSD) Attaquéudp Registered 4222 NATS messaging Attaquétcp Registered 4369 Erlang Port Mapper Daemon (epmd) Attaquétcp Registered 4444 Metasploit Meterpreter (default) / MSRPC Blaster Attaquétcp Registered 4500 IPsec NAT-T (IKE NAT traversal) Attaquéudp Registered 4505 SaltStack Salt master (ZeroMQ) Attaquétcp Registered 4840 OPC UA Attaquétcp Registered 4899 Radmin (Remote Administrator) Attaquétcp Registered 5000 UPnP / common dev server (Flask, Docker registry) Attaquétcp Registered 5004 RTP (Real-time Transport Protocol) Attaquéudp Registered 5060 SIP (Session Initiation Protocol) Attaquétcp, udp Registered 5061 SIP over TLS Attaquétcp Registered 5353 mDNS (Multicast DNS) Attaquéudp Registered 5355 LLMNR (Link-Local Multicast Name Resolution) Attaquéudp Registered 5432 PostgreSQL Attaquétcp Registered 5555 Android Debug Bridge (ADB) Attaquétcp Registered 5601 Kibana Attaquétcp Registered 5631 pcAnywhere (Symantec) Attaquétcp Registered 5671 AMQPS (AMQP over TLS) Attaquétcp Registered 5672 AMQP (RabbitMQ) Attaquétcp Registered 5683 CoAP (Constrained Application Protocol, IoT) Attaquéudp Registered 5684 CoAPS (CoAP over DTLS) Attaquéudp Registered 5800 VNC over HTTP (web client) Attaquétcp Registered 5900 VNC (Virtual Network Computing) Attaquétcp Registered 5938 TeamViewer Attaquétcp Registered 5984 Apache CouchDB Attaquétcp Registered 5985 WinRM (HTTP) Attaquétcp Registered 5986 WinRM over HTTPS Attaquétcp Registered 6000 X11 (X Window System) Attaquétcp Registered 6379 Redis Attaquétcp Registered 6443 Kubernetes API server Attaquétcp Registered 6667 IRC (Internet Relay Chat) Attaquétcp Registered 6881 BitTorrent (peer wire/DHT) Attaquétcp, udp Registered 7000 Apache Cassandra Inter-nœud Attaquétcp Registered 7001 Oracle WebLogic Server Attaquétcp Registered 7474 Neo4j HTTP / Browser Attaquétcp Registered 7547 TR-069 / CWMP (CPE WAN Management) Attaquétcp Registered 7687 Neo4j Bolt Attaquétcp Registered 8000 HTTP Alternate / Dev Server Attaquétcp Registered 8006 Proxmox VE Web UI Attaquétcp Registered 8009 AJP (Apache JServ Protocol, Tomcat) Attaquétcp Registered 8080 HTTP Alternate / Proxy Attaquétcp Registered 8086 InfluxDB HTTP API Attaquétcp Registered 8089 Splunk Management (splunkd) Attaquétcp Registered 8140 Puppet Server Attaquétcp Registered 8161 Apache ActiveMQ web console Attaquétcp Registered 8388 Shadowsocks proxy Attaquétcp Registered 8443 HTTPS Alternate (web admin / Tomcat SSL) Attaquétcp Registered 8500 HashiCorp Consul HTTP API Attaquétcp Registered 8554 RTSP (alternate streaming port) Attaquétcp Registered 8883 MQTT over TLS Attaquétcp Registered 8888 HTTP Alternate / Jupyter Notebook Attaquétcp Registered 8983 Apache Solr Attaquétcp Registered 9000 PHP-FPM / SonarQube / dev HTTP Attaquétcp Registered 9042 Apache Cassandra CQL Attaquétcp Registered 9050 Tor SOCKS proxy Attaquétcp Registered 9090 Prometheus / web admin Attaquétcp Registered 9092 Apache Kafka Attaquétcp Registered 9100 Printer JetDirect (raw print) / node_exporter Attaquétcp Registered 9200 Elasticsearch HTTP API Attaquétcp Registered 9300 Elasticsearch transport (node-to-node) Attaquétcp Registered 9389 ADWS (Active Directory Web Services) Attaquétcp Registered 9418 Git protocol (git daemon) Attaquétcp Registered 10000 Webmin Attaquétcp Registered 10250 Kubernetes kubelet API Attaquétcp Registered 11211 Memcached Attaquétcp, udp Registered 12345 NetBus (trojan/backdoor) Attaquétcp Registered 16992 Intel AMT / ME (out-of-band management) Attaquétcp Registered 20000 DNP3 Attaquétcp Registered 25565 Minecraft (Java Edition server) Attaquétcp Registered 27015 Source / Steam game server Attaquéudp, tcp Registered 27017 MongoDB Attaquétcp Registered 28017 MongoDB HTTP Status (hérité) Attaquétcp Registered 31337 Back Orifice (trojan/backdoor) Attaquéudp Registered 32400 Plex Media Server (HTTP API/web) Attaquétcp Registered 32764 Router backdoor (SerComm) Attaquétcp Registered 44818 EtherNet/IP (CIP) Attaquétcp, udp Registered 47808 BACnet Attaquéudp Registered 61613 STOMP (ActiveMQ) Attaquétcp Dynamic / private 61616 ActiveMQ OpenWire Attaquétcp Dynamic / private