Common ports and services

Port number	Port specification	Attack skills
21/22/69	ftp/tftp： File transfer protocol	Blast \ Sniffing \ overflow \ back door
22	ssh： Remote connection	Blast OpenSSH;28 A backspace
23	telnet： Remote connection	Blast \ Sniffing
25	smtp： The mail service	Mail forgery
53	DNS： The domain name system	DNS Area transmission \DNS hijacked \DNS  Cache poisoning \DNS cheating \ utilize DNS Tunnel technology penetrates the firewall
67/68	dhcp	hijacked \ cheating
110	pop3	Blast
139	samba	Blast \ Unauthorized access \ Remote code execution
143	imap	Blast
161	snmp	Blast
389	ldap	Injection attack \ Unauthorized access
445	SMB	Remote code execution
512/513/514	linux r	Use it directly rlogin
873	rsync	Unauthorized access
1080	socket	Blast ： To infiltrate the intranet
1352	lotus	Blast ： Weak password \ Information leakage ： Source code
1433	mssql	Blast ： Use system user login \ Injection attack
1521	oracle	Blast ：TNS\ Injection attack
2049	nfs	Improper configuration
2181	zookeeper	Unauthorized access
3306	mysql	Blast \ Denial of service \ Inject
3389	rdp	Blast \Shift back door
4848	glassfish	Blast ： Console weak password \ Authentication bypasses
5000	sybase/DB2	Blast \ Inject
5432	postgresql	out of buffer \ Injection attack \ Blast ： Weak password
5632	pcanywhere	Denial of service \ Code execution
5900	vnc	Blast ： Weak password \ Authentication bypasses
6379	redis	Unauthorized access \ Blast ： Weak password
7001	weblogic	Java Deserialization \ Console weak password \ Console deployment webshell
80/443/8080	web	common web attack \ The console exploded \ Corresponding server version vulnerability
8069	zabbix	Remote command execution
9080	websphere	Remote command execution
9090	websphere Console	Blast ： Console weak password \Java Inverse sequence
9200/9300	elasticsearch	Remote code execution
11211	memcacache	Unauthorized access
27017	mongodb	Blast \ Unauthorized access