Honeypots for Windows (Books for Professionals by Professionals)
| ||||||||||||
| | |||||
Many other common applications run on Windows and open network ports. Some of these applications are listed in Table 3-15. You can include them to make your Windows honeypots more realistic and also to monitor exploits against those applications if you use them within your organization.
| Port | Application |
|---|---|
| 666 | Doom game |
| 1214 | KaZaA |
| 1352 | Lotus Notes |
| 1494, 1604 | Citrix ICA Server |
| 1521 | Oracle SQL Server |
| 1680 | Carbon Copy |
| 1863, 1503, 6891–6900 | MSN Messenger (1863, instant messaging, 1503 for white board; 6891–6900 for file transfer) |
| 4000 | ICQ |
| 5010 | Yahoo Messenger |
| 5190 | AOL Instant Messenger (AIM) |
| 5631–5634 | Symantec PC Anywhere |
| 5800, 5900 | VNC Remote Access Software |
| 6346 | Gnutella |
| 6665–6670, 7000 | Internet Relay Chat (IRC) |
| 6699 | Napster |
| 6970 | Quicktime |
| 7070 | RealAudio/RealServer/Quicktime |
| 7778 | Unreal game |
| 27910, 27660 | QuakeII |
| | |||||