:5355
(TCP/UDP)
LLMNR (Link-Local Multicast Name Resolution)
High 风险TCP/UDP — DNS
On this page
端口概览
端口号
5355
服务名称
LLMNR (Link-Local Multicast Name Resolution)
传输协议
TCP/UDP
类别
DNS
安全风险
High
端口范围
已注册 (1024-49151)
什么是端口 5355?
Port 5355 is used by LLMNR (Link-Local Multicast Name Resolution), a Microsoft protocol that allows name resolution for hosts on the same local network segment without a DNS server. LLMNR is a well-known attack vector in Windows environments, as it can be abused for NBNS/LLMNR poisoning attacks to capture NTLMv2 credentials. Security best practices recommend disabling LLMNR on Windows systems.
TCP/UDP
DNS
常用
安全注意事项
端口5355（LLMNR (Link-Local Multicast Name Resolution)）被归类为高风险。此端口是自动扫描和暴力破解攻击的常见目标。如必须暴露，请将访问限制为已知IP地址。
建议：使用防火墙规则将可信IP列入白名单。启用速率限制和入侵检测。