|
Port number |
Protocol |
Name of the Trojan(s) |
| 2 | TCP | Death 1.0 |
| 20 | TCP | Senna Spy FTP Server |
|
21 |
TCP |
Back Construction, Blade 0.80 Alpha , Doly Trojan, Freddy beta 2 - beta 3, Fore, Juggernaut 42, Larva, Net Administrator, Traitor 21, Web Ex, WinCrash |
| 21 | FTP | Dark FTP, Cattivik FTP, CC Invader 1.0, Invisible FTP |
| 22 | TCP | Shaft |
| 23 | TCP | Fire Hacker, My Very Own Trojan, tRuVa Atl 1.2 |
|
25 |
TCP |
Ajan 1.1, Antigen, Barok 1.0 - 2.1, BSE Trojan, Email Password Sender 1.03-1.6, Gip1.10, Kuang2 0.17A-0.30, Mail Bomb Trojan, Magic Horse Trojan, Moscow Mail, Stukach, Taprias, WinPC |
|
31 |
TCP |
Agent 31, Hackers Paradise, Masters paradise |
|
39 |
TCP |
SubSARI 1.0 - 1.2 |
|
41 |
TCP |
Deep Throat, F0replay |
| 44 | TCP | Artic 0.6 beta |
| 48 | TCP | DRAT |
| 50 | TCP | DRAT |
| 58 | TCP | DMSetup |
| 59 | TCP | DMSetup |
| 79 | TCP | CDK, Firehotcker |
| 80 | TCP | 711 Beta, Back End, CGI BackDoor, Exector,Hooker, Ring Zero, Web Serve 2 |
| 80 | ACK | AckCmd |
| 81 | TCP | RemoConChubo |
| 99 | TCP | Hidden Port |
| 110 | TCP | ProMail Trojan |
| 113 | TCP | Invisible Identd Deamon, Kazimas |
| 199 | TCP | Happy99 |
| 121 | UDP | Jammer Killah 1.2 |
| 123 | TCP | Net Controller |
| 146 | TCP | The Infector 1.3 |
| 170 | TCP | A-Trojan |
| 334 | TCP | 3.1 - 3.1.1 |
| 411 | TCP | Backage 3.2 SE |
| 420 | TCP | Incognito 1.2 |
| 455 | TCP | Fatal Connections 2.0 |
| 456 | TCP | Hackers Paradise 2 beta 3, Masters paradise 98 beta 2 - 99 beta 9.9d |
|
555 |
TCP |
iNi Killer 4.0 pro, phAse zero 1.0 - 1.1, Stealth Spy |
| 666 | TCP | th3r1pp3r'z trojan 1.0 - 1.1 |
| 667 | TCP | SniperNet 2.1 |
| 669 | TCP | DP Trojan 2.5 |
| 692 | TCP | GayOL 1.6 |
| 901 | TCP | NetDevil 1.5 |
| 911 | TCP | DarkShadow's trojan |
| 911 | UDP | DarkShadow's trojan |
| 1001 | TCP | SK Silencer, Web Ex 1.2 - 1.4 |
| 1010 | TCP | Doly Trojan 1.35 |
| 1011 | TCP | Doly Trojan 1.11 |
| 1015 | TCP | Doly Trojan 1.5 |
| 1016 | TCP | Doly Trojan 1.6 - 1.70 SE |
| 1024 | TCP | Latinus 1.0 - 1.2, NetSpy 0.6.98 Build A |
| 1025 | TCP | Fraggle Rock, NetSpy 0.6.98 Build A |
| 1031 | TCP | Xanadu 1.1 |
| 1053 | TCP | Thief 2 |
| 1054 | ACK | AckCmd |
| 1066 | TCP | B.F. Evolution 5.3.12 |
| 1104 | UDP | RexxRave 1.01 |
| 1212 | TCP | Kaos 1.1 - 1.3 |
| 1234 | Telnet | Ultor's Telnet Trojan |
|
1243 |
TCP |
SubSeven 1.0 - 1.8 |
| 1245 | TCP | VooDoo 6 |
| 1256 | TCP | Project nEXT 0.5.3 beta, RexxRave 1.01 |
| 1269 | TCP | Maverik's Matrix 1.7 - 2.1 |
|
1349 |
UDP |
Back Ofrice DLL |
|
1386 |
TCP |
Dagger 1.31b |
| 1441 | TCP | Remote Storm 1.2 |
|
1492 |
FTP |
FTP99cmp |
| 1777 | TCP | Scarab 1.2c |
| 1967 | FTP | FYEO 1.05, WM FTP Server |
| 1981 | Telnet | Bowl 1.0, Shockrave |
| 1991 | TCP | Pitfall telnet - 2.1 |
|
1999 |
TCP |
BackDoor 1.00-1.03, Transmission Scout 1.1-1.2 |
| 2000 | TCP | Last 2000, Transmission Scout 1.1-1.2 |
| 2001 | TCP | Trojan Cow 1.0 |
| 2023 | TCP | Ripper Pro |
| 2130 | UDP | MiniBackLash 1.0a |
|
2115 |
TCP |
BUGS |
| 2140 | UDP | The Invasor |
| 2311 | TCP | Studio 54 1.0 |
| 2565 | TCP | Striker 1.0 |
| 2589 | TCP | Dagger 1.40 |
| 3000 | TCP | InetSpy beta 1, Remote Shut 1.2 - 1.4 |
| 3031 | TCP | Microspy 1.0 |
| 3131 | TCP | SubSARI 1.0 - 1.2 |
| 3150 | TCP | MiniBackLash 1.0a |
| 3250 | UDP | The Invasor |
| 3456 | TCP | Doly Trojan 2.0, The Terror Trojan |
| 3459 | TCP | Sanctuary |
| 3700 | TCP | Portal of Doom V.3 Beta |
| 3777 | TCP | Psychward The First |
| 4000 | TCP | Skydance 2.16 Beta - 2.29 Beta |
| 4201 | TCP | WarTrojan 1.0 - 2.0 |
| 4242 | TCP | Virtual Hacking Machine |
| 4321 | TCP | Bo-Bo 1.0 Final Beta |
| 4444 | TCP | CrackDown 1.0 beta, Swift Remote 1.06 |
| 4488 | TCP | Event Horizion |
|
4567 |
TCP |
File Nail 1 |
|
4653 |
TCP | Cero 1 |
|
4666 |
TCP | Mneah Trojan 0.1 |
|
5000 |
TCP |
BioNet lite 1.0, Bubbel |
| 5011 | TCP | One of the last trojans |
| 5025 | TCP | WM Remote Keylogger |
| 5031 | TCP | Net Metropolian 1.00-1.04 |
|
5400 |
TCP |
Blade Runner 0.80 Alpha |
|
5401 |
TCP |
Blade Runner 0.80 Alpha , Mneah Trojan 0.1 |
|
5402 |
TCP |
Blade Runner 0.80 Alpha , Mneah Trojan 0.1 |
| 5534 | TCP | The Flu |
| 5569 | TCP | Robo Hack 1.2 |
| 5880 | TCP | Y3K RAT 1.4 - 1.5 |
| 5882 | UDP | Y3K RAT 1.0 |
| 5888 | UDP | Y3K RAT 1.0 |
| 6000 | TCP | The thing 1.6 |
| 6400 | TCP | The thing 1.1 - 1.5 |
| 6661 | TCP | Weia-Meia 0.1 |
| 6666 | TCP | Dark Connection Inside 1.2 beta |
| 6667 | TCP | SubSeven ICQ Fix |
| 6669 | TCP | Host Control 1.0 |
| 6711 | TCP |
SubSARI 1.0 - 1.2 |
| 6712 | TCP | Funny Trojan |
| 6912 | TCP | ShitHeep |
| 6969 | TCP | Gatecrasher 1.1 - 1.2, NetController 1.08 - 2000 |
| 7000 | TCP | Remote Grab 1.0 |
| 7001 | TCP | Freak 88's DAS |
| 7300 | TCP | Net Monitor 1.0 |
| 7301 | TCP | Net Monitor 1.0 |
| 7306 | TCP | Net Monitor 1.0 - 2.01 |
| 7307 | TCP | Net Monitor 1.0 |
| 7308 | TCP | Net Monitor 1.0 |
| 7579 | TCP | QAZ Trojan |
| 7626 | TCP | Glacier 3.0 |
| 7777 | TCP | Tini |
| 9000 | TCP | Netministrator |
| 9400 | TCP | InCommand 1.0-1.6 beta 6 |
| 9876 | TCP | RUX |
| 9989 | TCP | iNi Killer 1.2 - 3.2 pro |
| 10085 | TCP | Syphillis 1.18 Alpha |
| 10100 | TCP | Control total beta 4, Gift 1.07.0 - Gift 1.6.13 |
| 10101 | TCP | BrainSpy Beta |
|
10607 |
TCP |
Coma 1.0.9 |
| 10666 | UDP | Ambush 1.0 |
| 11223 | TCP | Progenic trojan beta 1.0 - 1.0, Secret Agent 1.0 |
| 12310 | TCP | Precursor 1.0 |
|
12345 |
TCP |
NetBus 1.20-1.70, ValV-N.E.t 2.0b1 |
| 12349 | TCP | BioNet 0.84 - 3.13 |
| 12624 | TCP | ButtMan 0.9N |
| 13013 | TCP | Psychward 01 |
| 13014 | TCP | Psychward 02 - 03 |
| 13473 | TCP | Chupacabra 1.0 |
| 15382 | TCP | SubZero Alpha |
| 16484 | TCP | MoSucker 1.0 - MoSucker 1.1 |
| 16969 | TCP | Priority |
| 17166 | TCP | Mosaic 2.00 |
| 17569 | TCP | The Infector |
| 17593 | TCP | AudioDoor 1.2 |
| 20001 | TCP | Insect 1.0 Y2K1, Millenium 1.0 - 2.0 |
| 20002 | TCP | AcidkoR |
| 20005 | TCP | MoSucker 2.0 - 2.1b |
|
20034 |
TCP |
NetBus 2.0 Beta-NetBus 2.10 |
|
21544 |
TCP |
GirlFriend 1.0 Beta-1.35, Exploiter 1.0 - 1.4, Freddy beta 2 - beta 3,Kid Terror 1.0, Maverik's Matrix 1.0 - 1.6 |
| 22222 | TCP | Ruler 1.3 Test version |
| 23005 | TCP | NetTrash 1.01 |
| 23006 | TCP | NetTrash 1.01 |
|
23023 |
TCP |
Logged 1.0 |
| 23032 | TCP | Amanda 2.0 |
|
23432 |
TCP | Asylum 0.2 |
|
23456 |
FTP |
Evil FTP |
| 23777 | TCP | InetSpy beta 1 |
| 24000 | TCP | The Infector 1.7 |
| 25123 | FTP | Goy'Z TroJaN |
| 25685 | TCP | MoonPie 1.0 - 1.2 |
| 25686 | TCP | MoonPie 1.0 - 1.2 |
| 25982 | TCP | MoonPie 1.1 - 1.3 |
| 27160 | TCP | MoonPie 1.3 |
| 29104 | TCP | NetTrojan 1.0 |
| 29891 | UDP | The Unexplained |
| 30001 | TCP | The Infector 1.7 version 2 |
| 30001 | TCP | Err0r32 beta |
| 30029 | TCP | Aol Trojan 1.1 |
| 30070 | TCP | Mantis by Shaban 1.0 - 1.1 |
|
30100 |
TCP |
NetSphere 1.27a |
|
30101 |
TCP |
NetSphere 1.27a |
|
30102 |
TCP |
NetSphere 1.27a |
| 30947 | TCP | Intruse 1.27b |
|
31337 |
UDP |
BackOfrice 1.20, Freak trojan 2k |
| 31338 | TCP | DK NetSpy 1.01 - 1.06 |
|
31338 |
UDP |
DeepBO, DK NetSpy 1.01 - 1.06 |
|
31339 |
TCP |
DK NetSpy 1.10 |
| 31339 | UDP | DK NetSpy 1.10 |
| 31557 | TCP | Xanadu 1.1 |
| 32100 | TCP | Peanut Britter 0.2 beta |
| 33333 | TCP | Blackharaz, Prosiak 0.45 |
| 33577 | TCP | Psychward small 01 - 02 |
|
34324 |
TCP |
Bigluck |
| 37237 | TCP | Mantis 0.1b |
| 40412 | TCP | The Spy Beta 1 |
| 41337 | TCP | Storm 1.2 |
| 41666 | TCP | Remote Boot Tool 1.0 |
| 41666 | UDP | Remote Boot Too 1.0 |
| 44444 | TCP | Prosiak 0.65 - Prosiak 0.70 beta 7 |
| 47262 | TCP | Delta source 0.5 - 0.7 |
| 47262 | UDP | Delta source 0.5 - 0.7 |
| 48004 | TCP | Fraggle Rock |
| 48006 | TCP | Fraggle Rock |
| 49000 | TCP | Fraggle Rock |
| 50000 | TCP | SubSARI 1.0 - 1.2 |
| 50130 | TCP | Enterprise |
| 50766 | TCP | Fore 1.0 Beta |
| 51966 | TCP | CAFEiNi 0.8 - 1.1 |
| 53001 | TCP | Remote Windows Shutdown 0.02b |
|
54321 |
TCP |
SchoolBus .6 - 1.60 |
|
55165 |
TCP | File Manager Trojan |
| 55166 | TCP | File Manager Trojan |
| 61466 | TCP | TeLeCoMMaNDo 1.5.40 |
| 65000 | TCP | Devil 1.3 |
| 65530 | TCP | Windows Mite 1.0 |
| 65535 | TCP | RC |