Port
number |
Protocol
|
Name
of Trojan(s) |
| 2 |
TCP |
Death 1.0 |
| 20 |
TCP |
Senna Spy FTP Server |
21 |
TCP |
Back
Construction, Blade 0.80 Alpha ,
Doly Trojan, Freddy beta 2 - beta 3, Fore, Juggernaut 42, Larva, Net Administrator, Traitor 21,
Web Ex, WinCrash |
| 21 |
FTP |
Dark FTP, Cattivik FTP, CC Invader 1.0, Invisible
FTP |
| 22 |
TCP |
Shaft |
| 23 |
TCP |
Fire
Hacker, My Very Own Trojan, tRuVa Atl 1.2 |
25 |
TCP |
Ajan 1.1, Antigen, Barok 1.0 - 2.1, BSE
Trojan, Email Password
Sender 1.03-1.6, Gip1.10, Kuang2
0.17A-0.30, Mail Bomb Trojan, Magic
Horse Trojan, Moscow Mail, Stukach,
Taprias, WinPC |
31 |
TCP |
Agent 31,
Hackers Paradise, Masters paradise |
|
39 |
TCP |
SubSARI
1.0 - 1.2 |
|
41 |
TCP |
Deep Throat, F0replay |
|
44 |
TCP |
Artic
0.6 beta |
| 48 |
TCP |
DRAT |
| 50 |
TCP |
DRAT |
| 58 |
TCP |
DMSetup |
| 59 |
TCP |
DMSetup |
| 79 |
TCP |
CDK, Firehotcker |
| 80 |
TCP |
711 Beta, Back End, CGI BackDoor, Exector,Hooker,
Ring Zero, Web Serve 2 |
| 80 |
ACK |
AckCmd |
| 81 |
TCP |
RemoConChubo |
| 99 |
TCP |
Hidden
Port |
| 110 |
TCP |
ProMail
Trojan |
| 113 |
TCP |
Invisible
Identd Deamon, Kazimas |
| 199 |
TCP |
Happy99 |
| 121 |
UDP |
Jammer Killah 1.2 |
| 123 |
TCP |
Net
Controller |
| 146 |
TCP |
The Infector 1.3 |
| 170 |
TCP |
A-Trojan |
| 334 |
TCP |
3.1 - 3.1.1 |
| 411 |
TCP |
Backage 3.2 SE |
| 420 |
TCP |
Incognito 1.2 |
| 455 |
TCP |
Fatal Connections 2.0 |
| 456 |
TCP |
Hackers Paradise 2 beta 3, Masters
paradise 98 beta 2 - 99 beta 9.9d |
555 |
TCP |
iNi Killer 4.0 pro, phAse
zero 1.0 - 1.1, Stealth Spy |
| 666 |
TCP |
th3r1pp3r'z trojan 1.0 - 1.1 |
| 667 |
TCP |
SniperNet 2.1 |
| 669 |
TCP |
DP Trojan 2.5 |
| 692 |
TCP |
GayOL 1.6 |
| 911 |
TCP |
DarkShadow's
trojan |
| 911 |
UDP |
DarkShadow's
trojan |
| 1001 |
TCP |
SK Silencer, Web Ex 1.2 - 1.4 |
| 1010 |
TCP |
Doly Trojan 1.35 |
| 1011 |
TCP |
Doly Trojan 1.11 |
| 1015 |
TCP |
Doly Trojan 1.5 |
| 1016 |
TCP |
Doly Trojan 1.6 - 1.70 SE |
| 1024 |
TCP |
Latinus 1.0 - 1.2, NetSpy 0.6.98 Build A |
| 1025 |
TCP |
Fraggle
Rock, NetSpy 0.6.98 Build A |
| 1031 |
TCP |
Xanadu
1.1 |
| 1053 |
TCP |
Thief 2 |
| 1054 |
ACK |
AckCmd |
| 1066 |
TCP |
B.F. Evolution 5.3.12 |
| 1104 |
UDP |
RexxRave
1.01 |
| 1212 |
TCP |
Kaos 1.1 - 1.3 |
| 1234 |
Telnet |
Ultor's Telnet Trojan |
1243 |
TCP |
SubSeven 1.0 - 1.8 |
| 1245 |
TCP |
VooDoo 6 |
| 1256 |
TCP |
Project nEXT 0.5.3 beta, RexxRave
1.01 |
| 1269 |
TCP |
Maverik's Matrix 1.7 - 2.1 |
| 1272 |
TCP |
The Matrix 1.03 |
1349 |
UDP |
Back Ofrice DLL |
|
1386 |
TCP |
Dagger
1.31b |
| 1441 |
TCP |
Remote Storm 1.2 |
1492 |
FTP |
FTP99cmp |
| 1777 |
TCP |
Scarab 1.2c |
| 1967 |
FTP |
FYEO
1.05, WM FTP Server |
| 1981 |
Telnet |
Bowl 1.0, Shockrave |
| 1991 |
TCP |
Pitfall
telnet - 2.1 |
1999 |
TCP |
BackDoor 1.00-1.03, Transmission Scout
1.1-1.2 |
| 2000 |
TCP |
Last 2000, Transmission Scout
1.1-1.2 |
| 2001 |
TCP |
Trojan Cow 1.0 |
| 2023 |
TCP |
Ripper Pro |
| 2130 |
UDP |
MiniBackLash 1.0a |
2115 |
TCP |
BUGS |
| 2140 |
UDP |
The Invasor |
| 2311 |
TCP |
Studio 54 1.0 |
| 2565 |
TCP |
Striker 1.0 |
| 2589 |
TCP |
Dagger
1.40 |
| 3000 |
TCP |
InetSpy beta 1, Remote
Shut 1.2 - 1.4 |
| 3031 |
TCP |
Microspy 1.0 |
| 3131 |
TCP |
SubSARI
1.0 - 1.2 |
| 3150 |
TCP |
MiniBackLash 1.0a |
| 3250 |
UDP |
The Invasor |
| 3456 |
TCP |
Doly Trojan 2.0, The Terror
Trojan |
| 3459 |
TCP |
Sanctuary |
| 3700 |
TCP |
Portal of Doom V.3 Beta |
| 3777 |
TCP |
Psychward The First |
| 4000 |
TCP |
Skydance 2.16 Beta - 2.29 Beta |
| 4201 |
TCP |
WarTrojan
1.0 - 2.0 |
| 4242 |
TCP |
Virtual Hacking Machine |
| 4321 |
TCP |
Bo-Bo 1.0 Final Beta |
| 4444 |
TCP |
CrackDown
1.0 beta, Swift Remote 1.06 |
| 4488 |
TCP |
Event
Horizion |
4567 |
TCP |
File Nail 1 |
4653 |
TCP |
Cero 1 |
|
4666 |
TCP |
Mneah
Trojan 0.1 |
5000 |
TCP |
BioNet
lite 1.0, Bubbel |
| 5011 |
TCP |
One of the last trojans |
| 5025 |
TCP |
WM Remote Keylogger |
| 5031 |
TCP |
Net Metropolian 1.00-1.04 |
| 5333 |
TCP |
|
5400 |
TCP |
Blade Runner 0.80 Alpha |
5401 |
TCP |
Blade Runner 0.80 Alpha ,
Mneah Trojan 0.1 |
5402 |
TCP |
Blade Runner 0.80 Alpha ,
Mneah Trojan 0.1 |
| 5534 |
TCP |
The Flu |
| 5569 |
TCP |
Robo Hack 1.2 |
| 5880 |
TCP |
Y3K RAT 1.4 - 1.5 |
| 5882 |
UDP |
Y3K RAT 1.0 |
| 5888 |
UDP |
Y3K RAT 1.0 |
| 6000 |
TCP |
The thing 1.6 |
| 6400 |
TCP |
The thing 1.1 - 1.5 |
| 6661 |
TCP |
Weia-Meia 0.1 |
| 6666 |
TCP |
Dark Connection Inside 1.2 beta |
| 6667 |
TCP |
SubSeven ICQ Fix |
| 6669 |
TCP |
Host Control 1.0 |
| 6711 |
TCP |
SubSARI
1.0 - 1.2
|
| 6712 |
TCP |
Funny Trojan |
| 6912 |
TCP |
ShitHeep |
| 6969 |
TCP |
Gatecrasher 1.1 - 1.2, NetController
1.08 - 2000 |
| 7000 |
TCP |
Remote Grab 1.0 |
| 7001 |
TCP |
Freak 88's DAS |
| 7300 |
TCP |
Net Monitor 1.0 |
| 7301 |
TCP |
Net Monitor 1.0 |
| 7306 |
TCP |
Net Monitor 1.0 - 2.01 |
| 7307 |
TCP |
Net Monitor 1.0 |
| 7308 |
TCP |
Net Monitor 1.0 |
| 7579 |
TCP |
QAZ Trojan |
| 7626 |
TCP |
Glacier 3.0 |
| 7777 |
TCP |
Tini |
| 9000 |
TCP |
Netministrator |
| 9400 |
TCP |
InCommand 1.0-1.6 beta 6 |
| 9876 |
TCP |
RUX |
| 9989 |
TCP |
iNi Killer 1.2 - 3.2 pro |
| 10085 |
TCP |
Syphillis 1.18 Alpha |
| 10100 |
TCP |
Control total beta 4, Gift 1.07.0
- Gift 1.6.13 |
| 10101 |
TCP |
BrainSpy Beta |
10607 |
TCP |
Coma 1.0.9 |
| 10666 |
UDP |
Ambush 1.0 |
| 11223 |
TCP |
Progenic trojan beta 1.0 - 1.0, Secret
Agent 1.0 |
| 12310 |
TCP |
Precursor
1.0 |
12345 |
TCP |
NetBus 1.20-1.70, ValV-N.E.t
2.0b1 |
| 12349 |
TCP |
BioNet 0.84 - 3.13 |
| 12624 |
TCP |
ButtMan 0.9N |
| 13013 |
TCP |
Psychward 01 |
| 13014 |
TCP |
Psychward 02 - 03 |
| 13473 |
TCP |
Chupacabra 1.0 |
| 15382 |
TCP |
SubZero Alpha |
| 16484 |
TCP |
MoSucker 1.0 - MoSucker 1.1 |
| 16969 |
TCP |
Priority |
| 17166 |
TCP |
Mosaic 2.00 |
| 17569 |
TCP |
The Infector |
| 17593 |
TCP |
AudioDoor 1.2 |
| 20001 |
TCP |
Insect
1.0 Y2K1, Millenium 1.0 - 2.0 |
| 20002 |
TCP |
AcidkoR |
| 20005 |
TCP |
MoSucker 2.0 - 2.1b |
20034 |
TCP |
NetBus 2.0 Beta-NetBus 2.10 |
21544 |
TCP |
GirlFriend 1.0 Beta-1.35, Exploiter
1.0 - 1.4, Freddy beta 2 - beta 3,
Kid
Terror 1.0, Maverik's Matrix 1.0 - 1.6 |
| 22222 |
TCP |
Ruler 1.3 Test version |
| 23005 |
TCP |
NetTrash 1.01 |
| 23006 |
TCP |
NetTrash 1.01 |
23023 |
TCP |
Logged 1.0 |
| 23032 |
TCP |
Amanda 2.0 |
23432 |
TCP |
Asylum 0.2 |
23456 |
FTP |
Evil FTP |
| 23777 |
TCP |
InetSpy beta 1 |
| 24000 |
TCP |
The Infector 1.7 |
| 25123 |
FTP |
Goy'Z
TroJaN |
| 25685 |
TCP |
MoonPie 1.0 - 1.2 |
| 25686 |
TCP |
MoonPie 1.0 - 1.2 |
| 25982 |
TCP |
MoonPie 1.1
- 1.3 |
| 27160 |
TCP |
MoonPie
1.3 |
| 29104 |
TCP |
NetTrojan 1.0 |
| 29891 |
UDP |
The Unexplained |
| 30001 |
TCP |
The Infector 1.7 version 2 |
| 30001 |
TCP |
Err0r32 beta |
| 30029 |
TCP |
Aol Trojan 1.1 |
| 30070 |
TCP |
Mantis
by Shaban 1.0 - 1.1 |
30100 |
TCP |
NetSphere 1.27a |
30101 |
TCP |
NetSphere 1.27a |
30102 |
TCP |
NetSphere 1.27a |
| 30947 |
TCP |
Intruse 1.27b |
31337 |
UDP |
BackOfrice 1.20, Freak trojan 2k
|
| 31338 |
TCP |
DK
NetSpy 1.01 - 1.06 |
31338 |
UDP |
DeepBO, DK NetSpy
1.01 - 1.06 |
|
31339 |
TCP |
DK
NetSpy 1.10 |
| 31339 |
UDP |
DK
NetSpy 1.10 |
| 31557 |
TCP |
Xanadu
1.1 |
| 32100 |
TCP |
Peanut Britter 0.2 beta |
| 33333 |
TCP |
Blackharaz, Prosiak
0.45 |
| 33577 |
TCP |
Psychward small 01 - 02 |
34324 |
TCP |
Bigluck |
| 37237 |
TCP |
Mantis 0.1b |
| 40412 |
TCP |
The Spy Beta 1 |
| 41337 |
TCP |
Storm 1.2 |
| 41666 |
TCP |
Remote Boot Tool 1.0 |
| 41666 |
UDP |
Remote Boot Tool 1.0 |
| 44444 |
TCP |
Prosiak 0.65 - Prosiak 0.70 beta 7 |
| 47262 |
TCP |
Delta source 0.5 - 0.7 |
| 47262 |
UDP |
Delta source 0.5 - 0.7 |
| 48004 |
TCP |
Fraggle
Rock |
| 48006 |
TCP |
Fraggle
Rock |
| 49000 |
TCP |
Fraggle
Rock |
| 50000 |
TCP |
SubSARI
1.0 - 1.2 |
| 50130 |
TCP |
Enterprise |
| 50766 |
TCP |
Fore 1.0 Beta |
| 51966 |
TCP |
CAFEiNi 0.8 - 1.1 |
| 53001 |
TCP |
Remote Windows Shutdown 0.02b |
54321 |
TCP |
SchoolBus .6 - 1.60 |
55165 |
TCP |
File Manager Trojan |
| 55166 |
TCP |
File Manager Trojan |
| 61466 |
TCP |
TeLeCoMMaNDo 1.5.40 |
| 65000 |
TCP |
Devil 1.3 |
| 65530 |
TCP |
Windows
Mite 1.0 |
| 65535 |
TCP |
RC |