:5355 (TCP/UDP)

LLMNR (Link-Local Multicast Name Resolution)

High 风险

TCP/UDP — DNS

端口概览

端口号 5355
服务名称 LLMNR (Link-Local Multicast Name Resolution)
传输协议 TCP/UDP
类别 DNS
安全风险 High
端口范围 已注册 (1024-49151)

什么是端口 5355?

Port 5355 is used by LLMNR (Link-Local Multicast Name Resolution), a Microsoft protocol that allows name resolution for hosts on the same local network segment without a DNS server. LLMNR is a well-known attack vector in Windows environments, as it can be abused for NBNS/LLMNR poisoning attacks to capture NTLMv2 credentials. Security best practices recommend disabling LLMNR on Windows systems.

TCP/UDP DNS 常用

安全注意事项

端口5355(LLMNR (Link-Local Multicast Name Resolution))被归类为高风险。此端口是自动扫描和暴力破解攻击的常见目标。如必须暴露,请将访问限制为已知IP地址。

建议:使用防火墙规则将可信IP列入白名单。启用速率限制和入侵检测。

相关端口 — DNS

相关术语