|
|
|
| Port
Number |
Trojan
Name |
| 21 |
Back
Construction, Blade Runner, Doly Trojan, Fore,
FTP trojan, Invisible FTP, Larva, MBT, Motiv,
Net Administrator, Senna Spy FTP Server,
WebEx, WinCrash |
| 23 |
Tiny
Telnet Server, Truva Atl |
| 25 |
Ajan,
Antigen, Email Password Sender, Haebu Coceda
(= Naebi), Happy 99, Kuang2, ProMail trojan,
Shtrilitz, Stealth, Tapiras, Terminator,
WinPC, WinSpy |
| 41 |
DeepThroat
1.0 - 3.1 + Mod (Foreplay) |
| 50 |
DRAT |
| 59 |
DMSetup |
| 79 |
Firehotcker |
| 80 |
Executor,
RingZero |
| 110 |
ProMail
trojan |
| 113 |
Kazimas |
| 121 |
JammerKillah |
| 137 |
NetBios
Name(DoS attack) |
| 138 |
NetBios
Datagram(DoS attack) |
| 139 |
(TCP)
Netbios session (DoS attacks) |
| 170 |
A-trojan |
| 421 |
(TCP)
Wrappers |
| 456 |
(TCP)
Hackers Paradise |
| 531 |
(TCP)
Rasmin |
| 555 |
(UDP)
Ini-Killer, NeTAdmin, Phase Zero, Stealth Spy |
| 555 |
(TCP)
Phase Zero |
| 606 |
Secret
Service |
| 666 |
(UDP)
Attack FTP, Back Construction, Cain &
Abel, Satanz Backdoor, ServeU, Shadow Phyre |
| 911 |
Dark
Shadow |
| 999 |
DeepThroat,
WinSatan |
| 1001 |
(UDP)
Silencer, WebEx |
| 1011 |
Doly
Trojan |
| 1012 |
Doly
Trojan |
| 1015 |
Doly
Trojan |
| 1045 |
(TCP)
Rasmin |
| 1050 |
MiniCommand |
| 1090 |
(TCP)
Xtreme |
| 1170 |
(TCP)
Psyber Stream Server, Streaming Audio trojan,
Voice |
| 1234 |
(UDP)
Ultors Trojan |
| 1243 |
(TCP)
BackDoor-G, SubSeven, SubSeven Apocalypse
(Most Common trojan ever) |
| 1245 |
(UDP)
VooDoo Doll |
| 1269 |
(TCP)
Mavericks Matrix |
| 1349 |
(UDP)
BO DLL |
| 1492 |
(TCP)
FTP99CMP |
| 1509 |
(TCP)
Psyber Streaming Server |
| 1600 |
(TCP)
Shivka-Burka |
| 1807 |
(UDP)
Spy-Sender |
| 1981 |
(TCP)
Shockrave |
| 1999 |
(TCP)
TransScout |
| 2000 |
TransScout |
| 2002 |
TransScout |
| 2003 |
TransScout |
| 2004 |
TransScout |
| 2005 |
TransScout |
| 2023 |
(TCP)
Ripper |
| 2086 |
(TCP)
Netscape/Corba exploit |
| 2115 |
(UDP)
Bugs |
| 2155 |
(TCP)
Illusion Mailer |
| 2400 |
PortD |
| 2565 |
(TCP)
Striker |
| 2583 |
(TCP)
WinCrash2 |
| 2600 |
Digital
RootBeer |
| 2801 |
(TCP)
Phineas Phucker |
| 2989 |
(UDP)
RAT |
| 3128 |
RingZero |
| 3150 |
(UDP)
Deep Throat, The Invasor |
| 3700 |
(UDP)
Portal of Doom |
| 3791 |
(TCP)
Total Eclypse |
| 4092 |
(UDP)
WinCrash-alt |
| 4567 |
(TCP)
File Nail |
| 4590 |
(TCP)
ICQ-Trojan |
| 5000 |
(UDP)
Bubbel, Back Door Setup, Sockets de
Troie/socket23 |
| 5001 |
(UDP)
Back Door Setup, Sockets de Troie/socket23 |
| 5011 |
(TCP)
One of the Last Trojans (OOTLT) |
| 5031 |
(TCP)
Net Metropolitan |
| 5321 |
(UDP)
Firehotcker |
| 5400 |
(UDP)
Blade Runner, Back Construction |
| 5401 |
(UDP)
Blade Runner, Back Construction |
| 5402 |
(UDP)
Blade Runner, Back Construction |
| 5521 |
(TCP)
Illusion Mailer |
| 5550 |
(TCP)
X-Tcp Trojan |
| 5555 |
(TCP)
ServeMe |
| 5556 |
(TCP)
BO Facil |
| 5557 |
(TCP)
BO Facil |
| 5569 |
(TCP)
Robo-Hack |
| 5637 |
PC
Crasher |
| 5638 |
PC
Crasher |
| 5742 |
WinCrash |
| 5742 |
(UDP)
WinCrash |
| 5888 |
Y3K
RAT |
| 6000 |
The
Thing |
| 6006 |
The
Thing |
| 6400 |
(TCP)
The Thing |
| 6670 |
(TCP)
DeepThroat |
| 6771 |
(TCP)
DeepThroat |
| 6776 |
(TCP)
BackDoor-G, SubSeven |
| 6838 |
(UDP)
Mstream (Attacker to handler) |
| 6912 |
Shit
Heep (not 69123!) |
| 6939 |
(TCP)
Indoctrination 0.1 - 0.11 |
| 6969 |
GateCrasher,
Priority, IRC 3 |
| 6969 |
GateCrasher,
Priority, IRC 3, NetController |
| 7000 |
(UDP)
Remote Grab, Kazimas |
| 7300 |
(UDP)
NetMonitor |
| 7301 |
(UDP)
NetMonitor |
| 7302 |
(UDP)
NetMonitor |
| 7303 |
(UDP)
NetMonitor |
| 7304 |
(UDP)
NetMonitor |
| 7305 |
(UDP)
NetMonitor |
| 7789 |
(UDP)
Back Door Setup, ICKiller |
| 8080 |
RingZero |
| 8989 |
Recon,
recon2, xcon |
| 9090 |
Tst2,
telnet server |
| 9872 |
(TCP)
Portal of Doom |
| 9873 |
Portal
of Doom |
| 9874 |
Portal
of Doom |
| 9875 |
Portal
of Doom |
| 9876 |
Cyber
Attacker |
| 9878 |
TransScout |
| 9999 |
(TCP)
theprayer1 |
| 10067 |
(UDP)
Portal of Doom |
| 10085 |
Syphillis |
| 10086 |
Syphillis |
| 10101 |
BrainSpy
Vbeta |
| 10167 |
(UDP)
Portal of Doom |
| 10520 |
Acid
Shivers + LMacid |
| 10666 |
(TCP)
ambush |
| 11000 |
(TCP)
Senna Spy |
| 11223 |
(TCP)
Progenic trojan 1.0 - 1.3 |
| 12076 |
(TCP)
Gjammer |
| 12223 |
(UDP)
Hack 99 KeyLogger |
| 12223 |
(TCP)
Hack 99 |
| 12223 |
Hack´99
KeyLogger |
| 12345 |
(UDP)
GabanBus, NetBus, Pie Bill Gates, X-bill |
| 12346 |
(TCP)
GabanBus, NetBus, X-bill |
| 12361 |
(TCP)
Whack-a-mole |
| 12362 |
(TCP)
Whack-a-mole |
| 12631 |
WhackJob |
| 13000 |
Senna
Spy |
| 16660 |
(TCP)
stacheldraht |
| 16969 |
(TCP)
Priority (Beta) |
| 17300 |
(TCP)
Kuang2 The Virus |
| 20001 |
(UDP)
Millennium |
| 20034 |
(TCP)
NetBus 2 Pro |
| 20203 |
(TCP)
Logged, chupacabra |
| 21544 |
(TCP)
GirlFriend 1.3x (Including Patch 1 and 2) |
| 22222 |
(TCP)
Prosiak |
| 23456 |
(TCP)
Evil FTP, Ugly FTP, Whack Job |
| 23477 |
Donald
Dick |
| 23476 |
Donald
Dick 1.52 - 1.55 |
| 26274 |
(UDP)
Delta Source |
| 27444 |
(UDP)
trinoo |
| 27665 |
(TCP)
trinoo |
| 29891 |
(UDP)
The Unexplained |
| 30029 |
AOL
Trojan |
| 30101 |
(TCP)
NetSphere |
| 30102 |
(TCP)
NetSphere |
| 30133 |
(TCP)
NetSphere final |
| 30303 |
Sockets
de Troi = socket23 |
| 30999 |
(TCP)
Kuang2 |
| 31335 |
(UDP)
trinoo |
| 31336 |
Bo
Whack |
| 31337 |
(TCP)
Baron Night, BO client, BO2, Bo Facil |
| 31337 |
(UDP)
BackFire, Back Orifice, DeepBO |
| 31338 |
(UDP)
Back Orifice, DeepBO |
| 31339 |
(TCP)
Netspy |
| 31339 |
(UDP)
NetSpy DK |
| 31554 |
(TCP)
Schwindler is from gal |
| 31666 |
(UDP)
BOWhack |
| 31785 |
(TCP)
Hack 'a' Tack 1.0 2000 |
| 31787 |
(TCP)
Hack 'a' Tack |
| 31788 |
(TCP)
Hack 'a' Tack |
| 31789 |
(UDP)
Hack 'a' Tack |
| 31791 |
(UDP)
Hack 'a' Tack |
| 31792 |
(UDP)
Hack 'a' Tack |
| 33333 |
Blakharaz,
Prosiak |
| 33577 |
PsychWard |
| 33777 |
PsychWard |
| 34324 |
(TCP)
BigGluck, TN |
| 40412 |
(TCP)
The Spy |
| 40422 |
(UDP)
Masters Paradise |
| 40423 |
(UDP)
Masters Paradise |
| 40426 |
(UDP)
Masters Paradise |
| 47262 |
(UDP)
Delta Source |
| 50505 |
(UDP)
Sockets de Troie = socket23 |
| 53001 |
(TCP)
Remote Windows Shutdown |
| 54321 |
(TCP)
School Bus |
| 58339 |
ButtFunnel |
| 60000 |
Deep
Throat |
| 61348 |
(TCP)
Bunker-Hill Trojan |
| 61466 |
(TCP)
Telecommando |
| 61603 |
(TCP)
Bunker-Hill Trojan |
| 63485 |
(TCP)
Bunker-Hill Trojan |
| 65000 |
(TCP)
Devil |
| 65000 |
(TCP)
stacheldraht |
| 65432 |
The
Traitor |
| 65432 |
(UDP)
The Traitor |
| 65535 |
RC,
ICE |
|
|
