| microsoft-ds (445) | 219 | Microsoft
Domain Service, now called Common Internet File Sharing, used for SMB
file and print sharing. Virtually all traffic to this port from foreign
hosts should be considered hostile. This port should be firewalled in
both directions to prevent attacks and information leakage. |
| rpc (135) | 156 | Microsoft
Remote Procedure call, used for application procedure calls across the
network. Virtually all traffic to this port from foreign hosts should
be considered hostile. This port should be firewalled in both
directions to prevent attacks and information leakage such as account
names and passwords. |
| netbios-ssn (139) | 150 | NetBIOS
Session Service, used by SMB file and print sharing. Virtually all
traffic to this port from foreign hosts should be considered hostile.
This port should be firewalled in both directions to prevent attacks. |
| netbios-ns (137) | 19 | NetBIOS
Name service, used by SMB file and print sharing. Virtually all traffic
to this port from foreign hosts should be considered hostile. This port
should be firewalled in both directions to prevent attacks. |
| smtp (25) | 11 | This service is used to transfer email to servers from clients or other servers. |
| ms-sql-s (1433) | 10 | Server
port for Microsoft SQL Server, used by clients to connect to and access
database. Most traffic to this port from foreign hosts should be
considered hostile. |
| ms-sql-m (1434) | 6 | Monitoring port for Microsoft SQL Server. Most traffic to this port from foreign hosts should be considered hostile. |
| Port 7212 | 6 | |
| ssh (22) | 5 | This
service offers the secure shell (SSH) protocol. SSH scanning for
default and weak user account and password combinations is extremely
common on the Internet. |
| Port 1025 | 1 | This
service allows the Microsoft Task Scheduler to use RPC. Virtually all
traffic to this port from foreign hosts should be considered hostile.
This port should be firewalled in both directions to prevent attacks by
trojans such as NetSpy and Fraggle Rock. |
