Ports and Protocols (OBJ 4.5) Flashcards
FTP - File Transfer Protocol
Port 21
TCP
Transfers files from host to host
SSH - Secure shell
SCP - Secure Copy Protocol
SFTP - Secure FTP
Port 22
TCP
SSH - Provides secure remote terminal access and file transfer capabilities.
SCP - Provides secure copy function.
SFTP - Provides secure file transfers.
Telnet
Port 23
TCP
Remotely accessing network devices using text-based environment.
It is an older version of Telnet.
It is unencrypted and considered insecure, and should not be used.
Note: Many questions will focus on using remote control over telnet and ask how you can better secure it. The answer is to use SSH.
SMTP
Simple Mail Transfer Protocol
Port 25
TCP
Provides the ability to send emails over the network.
DNS
Domain Name System
Port 53
TCP and UDP
Translates Domain names into IP addresses.
TFTP
Trivial File Transfer Protocol
Port 69
UDP
Used as a lightweight file transfer method for sending configuration files or network booting of an operating system.
HTTP
Hyper Text Transfer Protocol
Port 80
TCP
Used for insecure browsing
Kerberos
Port 88
UDP
Network authentication protocol.
POP3
Post Office Protocol Version 3
Port 110
TCP
Responsible retrieving emails from a server to a local device.
NNTP
Network News Transfer Protocol
Port 119
TCP
Used to exchange news articles, and manage newsgroups.
RPC
Remote Procedure Call
Port 135
TCP and UDP
Facilitates communication between different system processes.
Often used as part of Windows file sharing system.
NetBIOS
Port 137, 138 & 139
TCP and UDP
A network protocol that allows applications on different computers to communicate over a local area network (LAN).
IMAP
Internet Message Access Protocol
Port 143
TCP
Allows users to access their email messages from a mail server.
SNMP
Simple Network Management Protocol
Port 161
UDP
A protocol that allows network administrators to monitor and manage network devices.
SNMP Trap
Port 162
UDP
An SNMP trap is a message sent from a network device to a management system to notify it of a significant event or status change.
LDAP
Lightweight Directory Access Protocol
Port 389
TCP
A standard protocol for accessing and managing directory services over a network.
HTTPS
Hyper Text Transfer Protocol Secure
Port 443
TCP
Provides secure web communication.
SMB
Server Message Block
Port 445
TCP
A network protocol that allows users to share files, printers, and other resources.
It is a client-server protocol, meaning the client requests and the server responds.
SMTPS
SMTP Secure
Port 465 and 587
TCP
Provide secure SMTP communication
Syslog
Port 514
UDP
Used for sending system log messages
LDAP Secure
Port 636
TCP
LDAP communication over SSL/TLS
IMAPS
Internet Message Access Protocol over SSL/TLS
Port 993
TCP
Allows users to access their email messages from a mail server securely.
POP3S
Post Office Protocol version 3 Secure
Port 995
TCP
Responsible for retrieving emails from a server to a local device.
MSSQL
Port 1433
TCP
Used to facilitate communication with MSSQL Server
RADIUS TCP
Remote Authentication Dial-In User Service
Port 1645, 1646
TCP
The RADIUS request includes a shared secret key that the server uses to authenticate the client.
What RADIUS does ?
Authentication: Determines if a user can access a network
Authorization: Establishes what privileges a user has on a network
Accounting: Records a user’s activity while they’re connected to a network
RADIUS UDP
Port 1812 and 1813
UDP
Used for authentication and accounting as defined by the Internet Engineering Task Force (IETF)
RDP
Remote Desktop Protocol
Port 3389
TCP
Enables Remote Desktop access
Syslog TLS
Port 6514
TCP
Used in a secure syslog that uses SSL/TLS to encrypt the IP packets using a certificate before sending them across the IP network to the syslog collector.
