|
|
 ModemHelp.Net Recommends: Click here to run a Free driver update scan
Virus/Worm/Trojan Ports
| Port # | Traffic Type | Virus/Worm/Trojan
| | 1 | UDP | Sockets des Troie, SocketsDeTroie
| | 1 | TCP | Breach, SocketsDeTroie
| | 2 | TCP | Death
| | 15 | TCP | B2
| | 20 | TCP | Senna Spy FTP server
| | 21 | TCP | Back Construction, Blade Runner, Cattivik FTP Server, CC Invader, Dark FTP, Doly Trojan, Fore, FreddyK, Invisible FTP, Juggernaut 42, Larva, MotIv FTP, Net Administrator, Ramen, RTB 666, Senna Spy FTP server, The Flu, Traitor 21, WebEx, WinCrash
| | 22 | TCP | Adore sshd, Shaft
| | 23 | TCP | ADM worm, Fire HacKer, My Very Own trojan, RTB 666, Telnet Pro, Tiny Telnet Server - TTS, Truva Atl
| | 24 | TCP | Back Orifice 2000 (BO2K) Control Port
| | 25 | TCP | Ajan, Antigen, Barok, BSE, Email Password Sender - EPS, EPS II, Gip, Gris, Happy99, Hpteam mail, Hybris, I love you, Kuang2, Magic Horse, MBT (Mail Bombing Trojan), Moscow Email trojan, Naebi, NewApt worm, ProMail trojan, Shtirlitz, Stealth, Stukach, Tapiras, Terminator, WinPC, WinSpy
| | 28 | TCP | Amanda
| | 30 | TCP | Agent 40421
| | 31 | TCP | Agent 31, Hackers Paradise, Masters Paradise, MastersParadise
| | 39 | TCP | SubSARI
| | 41 | TCP | Deep Throat, Foreplay or Reduced Foreplay
| | 44 | TCP | Arctic
| | 48 | TCP | DRAT
| | 50 | TCP | DRAT
| | 53 | TCP | ADM worm, Lion
| | 58 | TCP | DMSetup
| | 59 | TCP | DMSetup
| | 68 | TCP | Subseven
| | 69 | TCP | BackGate
| | 79 | TCP | CDK, Firehotcker
| | 80 | TCP | 711 trojan (Seven Eleven), AckCmd, Back End, Back Orifice 2000 Plug-Ins, Cafeini, CGI Backdoor, Code Red, Executor, God Message, God Message 4 Creator, Hooker, IISworm, MTX, NCX, Nimda, Noob, Ramen, Reverse WWW Tunnel Backdoor, RingZero, RTB 666, Seeker, WAN Remote, Web Server CT, WebDownloader
| | 81 | TCP | RemoConChubo
| | 99 | TCP | Hidden Port, Mandragore, NCX
| | 104 | UDP | Comm. 300
| | 110 | TCP | ProMail trojan
| | 113 | TCP | Invisible Identd Deamon, Kazimas
| | 119 | TCP | Happy99
| | 121 | TCP | Attack Bot, God Message, JammerKillah
| | 123 | TCP | Net Controller
| | 133 | TCP | Faranz, port 146 - Infector, Farnaz
| | 135 | TCP | W32.Blaster.Worm, W32/Lovsan.worm
| | 137 | UDP | Msinit, Qaz, OpaSoft
| | 137 | TCP | Chode
| | 138 | TCP | Chode
| | 139 | TCP | Chode, God Message worm, Msinit, Netlog, Network, Qaz, Sadmind, SMB Relay
| | 142 | TCP | NetTaxi
| | 146 | UDP | Infector
| | 146 | TCP | Infector
| | 166 | TCP | NokNok
| | 170 | TCP | A-trojan
| | 171 | TCP | ATrojan
| | 285 | TCP | WCTrojan
| | 286 | TCP | WCTrojan
| | 334 | TCP | Backage
| | 370 | TCP | NeuroticKat
| | 411 | TCP | Backage
| | 413 | TCP | Coma
| | 420 | TCP | Breach, Incognito
| | 421 | TCP | TCP Wrappers trojan
| | 445 | TCP | Lioten, Randon, WORM_DELODER.A, W32/Deloder.A, W32.HLLW.Deloder, Sasser
| | 455 | TCP | Fatal Connections
| | 456 | TCP | Hackers Paradise
| | 510 | TCP | t0rnkit sshd backdoor
| | 511 | TCP | T0rn Rootkit
| | 514 | TCP | RPC Backdoor
| | 515 | TCP | lpdw0rm, Ramen
| | 531 | TCP | Net666, Rasmin
| | 555 | TCP | 711 trojan (Seven Eleven), Phase-0, Phase Zero, Net Administrator, Ini-Killer, Stealth Spy, Id2001, PhaseZero, StealthSpy
| | 600 | TCP | Sadmind
| | 605 | TCP | Secret Service
| | 623 | TCP | Rtb666
| | 660 | TCP | Zaratustra
| | 661 | TCP | NokNok
| | 666 | UDP | Bla, Noknok
| | 666 | TCP | Attack FTP, lpdw0rm, Shadow Phyre, ServU, Satans Back Door - SBD, NokNok, Cain & Abel, Back Construction, BLA trojan, th3r1pp3rz (= Therippers), BackConstruction
| | 667 | TCP | SniperNet
| | 668 | TCP | th3r1pp3rz (= Therippers), Unicorn
| | 669 | TCP | DP trojan
| | 680 | TCP | Rtb666
| | 692 | TCP | GayOL
| | 730 | UDP | TCP
| | 730 | TCP | TCP
| | 731 | UDP | TCP
| | 731 | TCP | TCP
| | 777 | TCP | AimSpy, Undetected, Tiny
| | 785 | TCP | NetworkTerrorist
| | 800 | TCP | NeuroticKitten
| | 808 | TCP | WinHole
| | 831 | TCP | NeuroticKat
| | 901 | TCP | NetDevil
| | 911 | TCP | Dark Shadow, Dark Shadow
| | 999 | TCP | Deep Throat, Foreplay or Reduced Foreplay, WinSatan, Chat power
| | 1000 | TCP | Connecter, Der Späher / Der Spaeher, Direct Connection, DerSpaeher
| | 1001 | TCP | Der Späher / Der Spaeher, Theef, Silencer, Le Guardien, WebEx
| | 1005 | TCP | Theef
| | 1008 | TCP | Lion, AutoSpy
| | 1010 | TCP | DerSpaeher, Doly Trojan
| | 1011 | TCP | Doly Trojan
| | 1012 | TCP | Doly Trojan
| | 1015 | TCP | Doly Trojan
| | 1016 | TCP | Doly Trojan
| | 1020 | TCP | Vampire
| | 1023 | TCP | Sasser.e FTP
| | 1024 | TCP | Jade, Latinus, NetSpy, Remote Administration Tool - RAT [no 2]
| | 1025 | TCP | Fraggle Rock, md5 Backdoor, NetSpy, Remote Storm
| | 1025 | UDP | Remote Storm
| | 1027 | TCP | ICKiller
| | 1029 | TCP | InCommand Access, ICQ Nuke 98
| | 1031 | TCP | Xanadu
| | 1033 | TCP | NetSpy
| | 1035 | TCP | Multidropper
| | 1042 | TCP | BLA trojan
| | 1042 | UDP | BLA trojan
| | 1045 | TCP | Rasmin
| | 1049 | TCP | /sbin/initd
| | 1050 | TCP | MiniCommand
| | 1053 | TCP | The Thief
| | 1054 | TCP | AckCmd
| | 1080 | TCP | WinHole
| | 1081 | TCP | WinHole
| | 1082 | TCP | WinHole
| | 1083 | TCP | WinHole
| | 1090 | TCP | Xtreme
| | 1095 | TCP | Remote Administration Tool - RAT
| | 1097 | TCP | Remote Administration Tool - RAT
| | 1098 | TCP | Remote Administration Tool - RAT
| | 1099 | TCP | Blood Fest Evolution, Remote Administration Tool - RAT
| | 1104 | UDP | RexxRave
| | 1111 | TCP | TPort
| | 1130 | TCP | Noknok
| | 1130 | UDP | Noknok
| | 1150 | TCP | Orion
| | 1151 | TCP | Orion
| | 1170 | TCP | Psyber Stream Server - PSS, Streaming Audio Server, Voice
| | 1174 | TCP | DaCryptic
| | 1180 | TCP | Unin68
| | 1200 | UDP | NoBackO
| | 1201 | UDP | NoBackO
| | 1207 | TCP | SoftWAR
| | 1208 | TCP | Infector
| | 1212 | TCP | Kaos
| | 1225 | TCP | Scarab
| | 1234 | TCP | SubSeven Java client, Ultors Trojan
| | 1243 | TCP | BackDoor-G, SubSeven Apocalypse, SubSeven, Tiles
| | 1245 | TCP | VooDoo Doll, VoodooDoll
| | 1255 | TCP | Scarab
| | 1256 | TCP | Project nEXT, RexxRave
| | 1269 | TCP | Mavericks Matrix
| | 1272 | TCP | The Matrix
| | 1313 | TCP | NETrojan
| | 1337 | TCP | Shadyshell
| | 1338 | TCP | Millennium Worm
| | 1349 | TCP | Bo dll
| | 1349 | UDP | BackOrifice DLL, BO DLL
| | 1386 | TCP | Dagger
| | 1394 | TCP | GoFriller, Backdoor G-1
| | 1433 | TCP | SQL Snake
| | 1434 | UDP | SQL Slammer
| | 1441 | TCP | Remote Storm
| | 1480 | TCP | RemoteHack
| | 1492 | TCP | FTP99CMP
| | 1509 | TCP | Psyber Streaming Server, Psyber StreamingServer
| | 1524 | TCP | Trinoo
| | 1568 | TCP | Remote Hack, RemoteHack
| | 1600 | TCP | Direct Connection, Shivka-Burka, DirectConnection
| | 1601 | TCP | DirectConnection
| | 1602 | TCP | DirectConnection
| | 1634 | TCP | NetCrack
| | 1703 | TCP | Exploiter
| | 1777 | TCP | Scarab
| | 1784 | TCP | Snid
| | 1807 | TCP | Spy Sender, SpySender
| | 1826 | TCP | Glacier
| | 1966 | TCP | Fake FTP
| | 1967 | TCP | For Your Eyes Only - FYEO, WM FTP Server
| | 1969 | TCP | OpC BO
| | 1981 | TCP | Bowl, Shockrave
| | 1991 | TCP | PitFall
| | 1999 | TCP | Back Door, SubSeven, TransScout, TransmissionScout
| | 2000 | TCP | Remote Explorer 2000, Last 2000, Insane Network, Der Späher / Der Spaeher, Senna Spy Trojan Generator, ATrojan, InsaneNetwork
| | 2001 | TCP | Der Spaeher 3, TransScout, Trojan Cow, Der Späher / Der Spaeher, DIRT, TrojanCow
| | 2002 | TCP | TransScout
| | 2002 | UDP | Peer-to-peer UDP DDoS (PUD)
| | 2003 | TCP | TransScout, TransmissionScout
| | 2004 | TCP | TranScout, TransScout
| | 2005 | TCP | TransScout
| | 2020 | TCP | Backdoor.Rockse
| | 2023 | TCP | PassRipper, Ripper Pro, RipperPro
| | 2040 | TCP | InfernoUploader
| | 2080 | TCP | WinHole
| | 2115 | TCP | Bugs
| | 2130 | UDP | Mini Backlash
| | 2140 | TCP | Deep Throat, The invasor, DeepThroat
| | 2140 | UDP | Deep Throat, Foreplay or Reduced Foreplay, DeepThroat
| | 2155 | TCP | Illusion Mailer
| | 2222 | TCP | Rootshell left by AMD exploit
| | 2255 | TCP | Nirvana
| | 2283 | TCP | HVL Rat 5
| | 2300 | TCP | Xplorer
| | 2311 | TCP | Studio 54
| | 2330 | TCP | IRC Contact
| | 2331 | TCP | IRC Contact
| | 2332 | TCP | IRC Contact, SilentSpy
| | 2333 | TCP | IRC Contact
| | 2334 | TCP | IRC Contact
| | 2335 | TCP | IRC Contact
| | 2336 | TCP | IRC Contact
| | 2337 | TCP | IRC Contact
| | 2338 | TCP | IRC Contact
| | 2339 | TCP | IRC Contact, Voice Spy
| | 2339 | UDP | Voice Spy
| | 2345 | TCP | Doly Trojan
| | 2400 | TCP | PortD
| | 2525 | TCP | Backdoor.Rockse
| | 2535 | TCP | Bagle.aa, Bagle.z
| | 2555 | TCP | Lion, T0rn Rootkit
| | 2565 | TCP | Striker trojan
| | 2583 | TCP | WinCrash 2
| | 2589 | TCP | Dagger
| | 2600 | TCP | Digital Root Beer, Digital RootBeer, DigitalRootbeer
| | 2702 | TCP | Black Diver
| | 2702 | UDP | Black Diver
| | 2716 | TCP | The Prayer 2
| | 2721 | TCP | Phase Zero
| | 2721 | UDP | Phase Zero
| | 2745 | TCP | Bagle, Beagle, Tanx
| | 2773 | TCP | SubSeven
| | 2774 | TCP | SubSeven
| | 2801 | TCP | Phineas Phucker
| | 2929 | TCP | Konik
| | 2989 | TCP | Rat
| | 2989 | UDP | Remote Administration Tool - RAT
| | 3000 | TCP | InetSpy, Remote Shut
| | 3024 | TCP | WinCrash
| | 3031 | TCP | Microspy
| | 3127 | TCP | MyDoom
| | 3128 | TCP | Reverse WWW Tunnel Backdoor, RingZero, MastersParadise, MyDoom
| | 3128 | UDP | MastersParadise
| | 3129 | TCP | Masters Paradise, MastersParadise, MyDoom
| | 3129 | UDP | MastersParadise
| | 3130 | TCP | MyDoom
| | 3131 | TCP | SubSARI, MyDoom
| | 3132 | TCP | MyDoom
| | 3133 | TCP | MyDoom
| | 3134 | TCP | MyDoom
| | 3135 | TCP | MyDoom
| | 3136 | TCP | MyDoom
| | 3137 | TCP | MyDoom
| | 3138 | TCP | MyDoom
| | 3139 | TCP | MyDoom
| | 3140 | TCP | MyDoom
| | 3141 | TCP | MyDoom
| | 3142 | TCP | MyDoom
| | 3143 | TCP | MyDoom
| | 3144 | TCP | MyDoom
| | 3145 | TCP | MyDoom
| | 3146 | TCP | MyDoom
| | 3147 | TCP | MyDoom
| | 3148 | TCP | MyDoom
| | 3149 | TCP | MyDoom
| | 3150 | TCP | Deep Throat, The invasor, DeepThroat, MiniBacklash, MyDoom
| | 3150 | UDP | Deep Throat, Foreplay or Reduced Foreplay, DeepThroat, MiniBacklash
| | 3151 | TCP | MyDoom
| | 3152 | TCP | MyDoom
| | 3153 | TCP | MyDoom
| | 3154 | TCP | MyDoom
| | 3155 | TCP | MyDoom
| | 3156 | TCP | MyDoom
| | 3157 | TCP | MyDoom
| | 3158 | TCP | MyDoom
| | 3159 | TCP | MyDoom
| | 3160 | TCP | MyDoom
| | 3161 | TCP | MyDoom
| | 3162 | TCP | MyDoom
| | 3163 | TCP | MyDoom
| | 3164 | TCP | MyDoom
| | 3165 | TCP | MyDoom
| | 3166 | TCP | MyDoom
| | 3167 | TCP | MyDoom
| | 3168 | TCP | MyDoom
| | 3169 | TCP | MyDoom
| | 3170 | TCP | MyDoom
| | 3171 | TCP | MyDoom
| | 3172 | TCP | MyDoom
| | 3173 | TCP | MyDoom
| | 3174 | TCP | MyDoom
| | 3175 | TCP | MyDoom
| | 3176 | TCP | MyDoom
| | 3177 | TCP | MyDoom
| | 3178 | TCP | MyDoom
| | 3179 | TCP | MyDoom
| | 3180 | TCP | MyDoom
| | 3181 | TCP | MyDoom
| | 3182 | TCP | MyDoom
| | 3183 | TCP | MyDoom
| | 3184 | TCP | MyDoom
| | 3185 | TCP | MyDoom
| | 3186 | TCP | MyDoom
| | 3187 | TCP | MyDoom
| | 3188 | TCP | MyDoom
| | 3189 | TCP | MyDoom
| | 3190 | TCP | MyDoom
| | 3191 | TCP | MyDoom
| | 3192 | TCP | MyDoom
| | 3193 | TCP | MyDoom
| | 3194 | TCP | MyDoom
| | 3195 | TCP | MyDoom
| | 3196 | TCP | MyDoom
| | 3197 | TCP | MyDoom
| | 3198 | TCP | MyDoom
| | 3215 | TCP | BlackStar, Ghost
| | 3333 | TCP | Daodan
| | 3333 | UDP | Daodan
| | 3410 | TCP | OptixPro
| | 3456 | TCP | Terror trojan, Force, TerrorTrojan
| | 3459 | TCP | Eclipse 2000, Sanctuary
| | 3505 | TCP | AutoSpy
| | 3586 | TCP | Snid
| | 3587 | TCP | ****Head trojan
| | 3630 | UDP | S Remote Database Port
| | 3631 | UDP | S Web Services Port
| | 3700 | TCP | Portal of Doom - POD, PortalOfDoom
| | 3723 | TCP | Mantis
| | 3777 | TCP | PsychWard
| | 3791 | TCP | Eclypse, Total Solar Eclypse
| | 3800 | TCP | Eclypse
| | 3800 | UDP | Eclypse
| | 3801 | TCP | Total Solar Eclypse
| | 3801 | UDP | Eclypse
| | 3996 | TCP | RemoteAnything
| | 3996 | UDP | RemoteAnything
| | 4000 | TCP | Psyber Streaming Server, Skydance, Connect-Back Backdoor
| | 4000 | UDP | RemoteAnything
| | 4092 | TCP | WinCrash
| | 4201 | TCP | War trojan, Wartrojan
| | 4225 | TCP | SilentSpy
| | 4242 | TCP | Virtual Hacking Machine - VHM
| | 4321 | TCP | BoBo
| | 4444 | TCP | CrackDown, Prosiak, Swift Remote, AlexTrojan
| | 4488 | TCP | Event Horizon, EventHorizon
| | 4523 | TCP | Celine
| | 4545 | TCP | Internal Revise, InternalRevise, RemoteRevise
| | 4567 | TCP | File Nail, FileNail
| | 4590 | TCP | ICQ Trojan
| | 4653 | TCP | Cero
| | 4666 | TCP | Mneah
| | 4836 | TCP | Buttman
| | 4837 | TCP | Buttman
| | 4950 | TCP | ICQ Trogen (Lm), ICQTrojan
| | 5000 | TCP | Back Door Setup, BioNet Lite, Blazer5, Bubbel, ICKiller, Ra1d, Sockets des Troie, Kibuv
| | 5001 | TCP | Back Door Setup, Sockets des Troie
| | 5002 | TCP | cd00r, Linux Rootkit IV (4), Shaft
| | 5005 | TCP | Aladino
| | 5010 | TCP | Solo
| | 5011 | TCP | One of the Last Trojans - OOTLT, One of the Last Trojans - OOTLT, modified
| | 5025 | TCP | WM Remote KeyLogger
| | 5031 | TCP | Net Metropolitan, NetMetro
| | 5032 | TCP | Net Metropolitan, NetMetro
| | 5033 | TCP | NetMetro
| | 5050 | TCP | RoxRat
| | 5151 | TCP | OptixLite
| | 5190 | TCP | MBomber
| | 5277 | TCP | WinShell
| | 5321 | TCP | Firehotcker
| | 5333 | TCP | Backage, NetDemon
| | 5343 | TCP | wCrat - WC Remote Administration Tool, WC Remote Administration Tool - wCrat
| | 5400 | TCP | Blade Runner, BackConstruction
| | 5401 | TCP | Back Construction, Blade Runner, Mneah, BackConstruction, BladeRunner, DeepThroat
| | 5402 | TCP | Back Construction, Blade Runner, Mneah, BackConstruction, BladeRunner, DeepThroat
| | 5512 | TCP | Illusion Mailer
| | 5521 | TCP | illusion Mailer
| | 5534 | TCP | The Flu, TheFlu
| | 5550 | TCP | Xtcp, Xtcp2
| | 5554 | TCP | Dabber
| | 5555 | TCP | ServeMe, Noxcape
| | 5555 | UDP | Daodan
| | 5556 | TCP | BO Facil
| | 5557 | TCP | BO Facil
| | 5569 | TCP | Robo-Hack
| | 5636 | TCP | PC Crasher
| | 5637 | TCP | PC Crasher
| | 5638 | TCP | PC Crasher
| | 5695 | TCP | Assassin
| | 5714 | TCP | WinCrash
| | 5741 | TCP | WinCrash
| | 5742 | TCP | WinCrash
| | 5760 | TCP | Portmap Remote Root Linux Exploit
| | 5802 | TCP | Y3K RAT, Y3KRat
| | 5810 | TCP | Y3KRat
| | 5838 | TCP | Y3KRat
| | 5858 | TCP | Y3KRat
| | 5880 | TCP | Y3K RAT, Y3KRat
| | 5881 | TCP | Y3KRat
| | 5881 | UDP | Y3KRat
| | 5882 | TCP | Y3K RAT, Y3KRat
| | 5882 | UDP | Y3K RAT, Y3KRat
| | 5883 | TCP | Y3KRat
| | 5883 | UDP | Y3KRat
| | 5884 | TCP | Y3KRat
| | 5884 | UDP | Y3KRat
| | 5885 | TCP | Y3KRat
| | 5885 | UDP | Y3KRat
| | 5886 | TCP | Y3KRat
| | 5886 | UDP | Y3KRat
| | 5887 | TCP | Y3KRat
| | 5887 | UDP | Y3KRat
| | 5888 | TCP | Y3K RAT, Y3KRat
| | 5888 | UDP | Y3K RAT, Y3KRat
| | 5889 | TCP | Y3K RAT, Y3KRat
| | 5890 | TCP | Y3KRat
| | 6000 | TCP | The Thing
| | 6006 | TCP | Bad Blood
| | 6129 | TCP | Dameware Worm
| | 6272 | TCP | Secret Service
| | 6400 | TCP | The Thing, Thething
| | 6556 | TCP | AutoSpy
| | 6655 | TCP | Aqua
| | 6660 | TCP | LameSpy
| | 6661 | TCP | TEMan, Weia-Meia
| | 6666 | TCP | Dark Connection Inside, NetBus worm, LameRemote, ProjectMayhem
| | 6667 | TCP | Dark FTP, EGO, Maniac rootkit, Moses, ScheduleAgent, SubSeven, The Thing (modified), Trinity, WinSatan
| | 6669 | TCP | Host Control, Vampire
| | 6670 | TCP | BackWeb Server, Foreplay or Reduced Foreplay, Deep Throat, WinNuke eXtreame, DeepThroat
| | 6671 | TCP | DeepThroat
| | 6699 | TCP | HostControl
| | 6711 | TCP | BackDoor-G, SubSeven, SubSARI, VP Killer, DeepThroat, Noknok
| | 6712 | TCP | Funny trojan, SubSeven
| | 6713 | TCP | SubSeven
| | 6723 | TCP | Mstream
| | 6767 | TCP | UandMe, NTRC
| | 6771 | TCP | Deep Throat, Foreplay or Reduced Foreplay
| | 6776 | TCP | 2000 Cracks, SubSeven, BackDoor-G, VP Killer
| | 6789 | TCP | Doly
| | 6796 | TCP | SubSeven
| | 6838 | UDP | Mstream
| | 6883 | TCP | Delta Source DarkStar (??)
| | 6912 | TCP | Shit Heep, ShitHeep
| | 6913 | TCP | ShitHeep Danny
| | 6939 | TCP | Indoctrination
| | 6953 | TCP | Lithium
| | 6953 | UDP | Lithium
| | 6969 | TCP | 2000 Cracks, Net Controller, IRC 3, GateCrasher, Danton, Priority, 2000Cracks, Bigorna
| | 6970 | TCP | GateCrasher, Danton
| | 7000 | TCP | Exploit Translation Server, Kazimas, Remote Grab, SubSeven
| | 7001 | TCP | Freak2k, Freak88, NetSnooper Gold
| | 7028 | TCP | Uknown Trojan
| | 7119 | TCP | Massaker
| | 7158 | TCP | Lohoboyshik
| | 7200 | TCP | Massaker
| | 7215 | TCP | SubSeven
| | 7300 | TCP | NetMonitor, Coced
| | 7301 | TCP | NetMonitor, Coced
| | 7302 | TCP | NetMonitor
| | 7303 | TCP | NetMonitor
| | 7304 | TCP | NetMonitor
| | 7305 | TCP | NetMonitor
| | 7306 | TCP | NetMonitor, NetSpy
| | 7307 | TCP | NetMonitor, Remote Process Monitor
| | 7308 | TCP | NetMonitor, X Spy
| | 7309 | TCP | NetMonitor
| | 7323 | TCP | Sygate Backdoor
| | 7410 | TCP | Phoenix
| | 7424 | TCP | Host Control
| | 7424 | UDP | Host Control
| | 7511 | TCP | Genue
| | 7597 | TCP | Qaz
| | 7609 | TCP | Snid
| | 7614 | TCP | Wollf
| | 7626 | TCP | Binghe, Glacier, Hyne
| | 7648 | TCP | BlackStar, Ghost
| | 7718 | TCP | Glacier
| | 7777 | TCP | God Message, The Thing (modified), Tini
| | 7788 | TCP | Last, Matrix
| | 7789 | TCP | Back Door Setup, ICKiller, Mozilla
| | 7826 | TCP | MiniOblivion
| | 7887 | TCP | SmallFun
| | 7891 | TCP | The ReVeNgEr
| | 7979 | TCP | VagrNocker
| | 7983 | TCP | Mstream
| | 7997 | TCP | VagrNocker
| | 8000 | TCP | XConsole
| | 8011 | TCP | Way
| | 8012 | TCP | Ptakks
| | 8012 | UDP | Ptakks
| | 8080 | TCP | Brown Orifice, Generic backdoor, RemoConChubo, Reverse WWW Tunnel Backdoor, RingZero
| | 8110 | TCP | LoseLove
| | 8111 | TCP | LoseLove
| | 8301 | TCP | LoseLove
| | 8302 | TCP | LoseLove
| | 8372 | TCP | NetBoy
| | 8685 | TCP | Unin68
| | 8720 | TCP | Connection
| | 8734 | TCP | AutoSpy
| | 8787 | TCP | Back Orifice 2000
| | 8811 | TCP | Force
| | 8812 | TCP | FraggleRock Lite
| | 8879 | TCP | Hack Office Armageddon
| | 8899 | TCP | Last
| | 8988 | TCP | BacHack
| | 8989 | TCP | Rcon, Recon, Xcon
| | 9000 | TCP | Netministrator, Aristotles
| | 9301 | TCP | LoseLove
| | 9325 | UDP | Mstream
| | 9400 | TCP | InCommand
| | 9401 | TCP | InCommand
| | 9402 | TCP | InCommand
| | 9561 | TCP | CRatPro
| | 9563 | TCP | CRatPro
| | 9580 | TCP | TheefLE
| | 9696 | TCP | Danton, Ghost
| | 9697 | TCP | Danton, Ghost
| | 9870 | TCP | Remote Computer Control Center, R3C
| | 9872 | TCP | Portal of Doom - POD, PortalOfDoom
| | 9873 | TCP | Portal of Doom - POD, PortalOfDoom
| | 9874 | TCP | Portal of Doom - POD, PortalOfDoom
| | 9875 | TCP | Portal of Doom - POD, PortalOfDoom
| | 9876 | TCP | Cyber Attacker, Rux
| | 9877 | TCP | SmallBigBrother
| | 9878 | TCP | TransScout, SmallBigBrother, TransmissionScout
| | 9879 | TCP | SmallBigBrother
| | 9898 | TCP | Dabber
| | 9989 | TCP | Ini-Killer
| | 9999 | TCP | The Prayer 1, ForcedEntry, Infra
| | 10000 | TCP | OpwinTRojan
| | 10001 | TCP | DTr
| | 10005 | TCP | OpwinTRojan
| | 10008 | TCP | Cheese worm, Lion
| | 10013 | TCP | Amanda
| | 10067 | TCP | PortalOfDoom
| | 10067 | UDP | Portal of Doom - POD, PortalOfDoom
| | 10085 | TCP | Syphillis
| | 10086 | TCP | Syphillis
| | 10100 | TCP | Control Total, Gift trojan
| | 10101 | TCP | BrainSpy, Silencer, NewSilencer
| | 10167 | TCP | PortalOfDoom
| | 10167 | UDP | Portal of Doom - POD, PortalOfDoom
| | 10520 | TCP | Acid Shivers
| | 10528 | TCP | Host Control, HostControl
| | 10607 | TCP | Coma
| | 10666 | TCP | Ambush
| | 10666 | UDP | Ambush
| | 10752 | TCP | LINUX mounts Backdoor
| | 11000 | TCP | Senna Spy Trojan Generator
| | 11011 | TCP | Amanda
| | 11050 | TCP | Host Control, HostControl
| | 11051 | TCP | Host Control, HostControl
| | 11223 | TCP | Progenic trojan, Secret Agent, AntiNuke
| | 11225 | TCP | Cyn
| | 11225 | UDP | Cyn
| | 11306 | TCP | Noknok
| | 11306 | UDP | Noknok
| | 11831 | TCP | Katux, Latinus, Pest
| | 11991 | TCP | PitfallSurprise
| | 12043 | TCP | Frenzy
| | 12076 | TCP | Gjamer
| | 12223 | TCP | Hack´99 KeyLogger
| | 12310 | TCP | Precursor
| | 12345 | TCP | Adore sshd, cron / crontab, Whack Job, ValvNet, Pie Bill Gates, NetBus worm, NetBus Toy, NetBus, Mypic, GabanBus, Fat Bitch trojan, Ashley, X-bill, Fade, icmp_pipe.c
| | 12346 | TCP | Fat Bitch trojan, NetBus, GabanBus, X-bill
| | 12348 | TCP | Bionet
| | 12349 | TCP | BioNet, Webhead
| | 12361 | TCP | Whack-a-mole
| | 12362 | TCP | Whack-a-mole
| | 12363 | TCP | Whack-a-mole
| | 12389 | TCP | KheSanh
| | 12389 | UDP | KheSanh
| | 12478 | TCP | Bionet
| | 12623 | TCP | Buttman
| | 12623 | UDP | DUN Control, Buttman
| | 12624 | TCP | ButtMan
| | 12625 | TCP | Buttman
| | 12625 | UDP | Buttman
| | 12631 | TCP | Whack Job
| | 12701 | TCP | Eclipse 2000
| | 12754 | TCP | Mstream
| | 12904 | TCP | Akropolis, Rocks
| | 12973 | TCP | QR keylogger/remote access
| | 12975 | TCP | QR keylogger/remote access
| | 13000 | TCP | Senna Spy Trojan Generator, Senna Spy Trojan Generator
| | 13010 | TCP | BitchController, Hacker Brasil - HBR
| | 13013 | TCP | PsychWard
| | 13014 | TCP | PsychWard
| | 13223 | TCP | Hack´99 KeyLogger
| | 13473 | TCP | Chupacabra
| | 13700 | TCP | Kuang 2 The Virus
| | 13753 | TCP | AFTP
| | 14100 | TCP | Eurosol
| | 14100 | UDP | Eurosol
| | 14194 | TCP | CyberSpy
| | 14286 | TCP | HellDriver
| | 14500 | TCP | PC Invader, PCInvader
| | 14501 | TCP | PC Invader, PCInvader
| | 14502 | TCP | PC Invader, PCInvader
| | 14503 | TCP | PC Invader, PCInvader
| | 14504 | TCP | PCInvader
| | 15000 | TCP | NetDemon
| | 15092 | TCP | Host Control, HostControl
| | 15104 | TCP | Mstream
| | 15382 | TCP | SubZero
| | 15432 | TCP | Cyn
| | 15555 | TCP | ICMIBC
| | 15858 | TCP | CDK
| | 16322 | TCP | LastDoor
| | 16484 | TCP | Mosucker
| | 16660 | TCP | Stracheldracht, Stacheldraht
| | 16661 | TCP | Dfch
| | 16772 | TCP | ICQ Revenge
| | 16959 | TCP | SubSeven
| | 16969 | TCP | Portal Of Doom, Priority, Progenic
| | 16982 | TCP | AcidShiver
| | 17166 | TCP | Mosaic
| | 17300 | TCP | Kaung 2 The Virus, Kuang2 the virus
| | 17449 | TCP | Kid Terror
| | 17499 | TCP | CrazzyNet
| | 17500 | TCP | CrazzyNet
| | 17569 | TCP | Infector
| | 17593 | TCP | Audiodoor
| | 17777 | TCP | Nephron
| | 18667 | TCP | Knark
| | 18753 | UDP | Shaft
| | 19191 | TCP | BlueFire
| | 19604 | TCP | Metal
| | 19605 | TCP | Metal
| | 19864 | TCP | ICQ Revenge
| | 19991 | TCP | Dfch
| | 20000 | TCP | Millenium
| | 20001 | TCP | Insect, Millenium, Millenium (Lm)
| | 20002 | TCP | AcidkoR
| | 20005 | TCP | Mosucker
| | 20023 | TCP | VP Killer
| | 20034 | TCP | NetRex, Whack Job, NetBus 2.0 Pro
| | 20139 | TCP | #skanbotz IRC-SubSeven Trojan
| | 20168 | TCP | W32.HLLW.Lovgate.C@mm
| | 20203 | TCP | Logged!, Chupacabra
| | 20331 | TCP | BLA trojan
| | 20432 | TCP | Shaft
| | 20432 | UDP | Shaft
| | 20433 | UDP | Shaft
| | 21212 | TCP | Schwindler
| | 21544 | TCP | Girl Friend, Kidterror, GirlFriend, Kid Terror, Matrix
| | 21554 | TCP | Exploiter, Schwindler, Kid Terror, FreddyK, Winsp00fer
| | 21579 | TCP | Breach
| | 21584 | TCP | Breach
| | 21684 | TCP | Intruse
| | 21957 | TCP | Latinus
| | 22068 | TCP | AcidShiver
| | 22115 | TCP | Cyn
| | 22222 | TCP | Donald Dick, Ruler, Prosiak
| | 22223 | TCP | Rux
| | 22456 | TCP | Bla
| | 22457 | TCP | AcidShiver, Bla
| | 22784 | TCP | Intruzzo
| | 22845 | TCP | Breach
| | 22847 | TCP | Breach
| | 23005 | TCP | NetTrash, Olive, Oxon, Infinaeon
| | 23006 | TCP | NetTrash, Infinaeon
| | 23023 | TCP | Logged
| | 23032 | TCP | Amanda
| | 23321 | TCP | Konik
| | 23432 | TCP | Asylum
| | 23456 | TCP | Evil FTP, Ugly FTP, Whack Job, EvilFTP, VagrNocker
| | 23476 | TCP | Donald Dick, DonaldDick
| | 23476 | UDP | Donald Dick, DonaldDick
| | 23477 | TCP | Donald Dick, DonaldDick
| | 23777 | TCP | InetSpy
| | 24000 | TCP | Infector
| | 24289 | TCP | Latinus
| | 24307 | TCP | Wildek
| | 25123 | TCP | Goy'Z TroJan
| | 25386 | TCP | MoonPie
| | 25486 | TCP | MoonPie
| | 25555 | TCP | FreddyK
| | 25556 | TCP | FreddyK
| | 25685 | TCP | Moonpie
| | 25686 | TCP | Moonpie
| | 25982 | TCP | Moonpie
| | 26274 | TCP | Delta
| | 26274 | UDP | Delta Source
| | 26681 | TCP | Voice Spy
| | 27160 | TCP | MoonPie
| | 27184 | TCP | Alvgus
| | 27184 | UDP | Alvgus
| | 27374 | TCP | Bad Blood, Ttfloader, The Saint, SubSeven Muie, SubSeven, Seeker, Ramen, Lion, Fake SubSeven, EGO, Webhead, Muerte
| | 27444 | UDP | Trinoo
| | 27573 | TCP | SubSeven
| | 27665 | TCP | Trinoo
| | 28429 | TCP | Hack'a'Tack
| | 28430 | TCP | Hack'a'Tack
| | 28431 | TCP | Hack´a´Tack, Hack'a'Tack
| | 28431 | UDP | Hack'a'Tack 2K
| | 28432 | TCP | Hack'a'Tack
| | 28432 | UDP | Hack'a'Tack
| | 28433 | TCP | Hack'a'Tack
| | 28433 | UDP | Hack'a'Tack
| | 28434 | TCP | Hack'a'Tack
| | 28434 | UDP | Hack'a'Tack
| | 28435 | TCP | Hack'a'Tack
| | 28435 | UDP | Hack'a'Tack
| | 28436 | TCP | Hack'a'Tack
| | 28436 | UDP | Hack'a'Tack
| | 28678 | TCP | Exploiter
| | 29104 | TCP | Host Control, NetTrojan
| | 29292 | TCP | BackGate
| | 29369 | TCP | ovasOn
| | 29559 | TCP | DuckToy, Katux, Latinus, Pest
| | 29891 | TCP | The Unexplained
| | 29891 | UDP | The Unexplained
| | 29976 | TCP | Trojan Spirit 2001a
| | 29980 | TCP | Trojan Spirit 2001a
| | 29984 | TCP | Trojan Spirit 2001a
| | 30000 | TCP | Infector
| | 30001 | TCP | TerrOr32
| | 30003 | TCP | Lamers Death, LamersDeath
| | 30005 | TCP | Backdoor JZ
| | 30029 | TCP | AOLTrojan
| | 30100 | TCP | NetSphere
| | 30101 | TCP | NetSphere
| | 30102 | TCP | NetSphere
| | 30103 | TCP | NetSphere
| | 30103 | UDP | NetSphere
| | 30133 | TCP | Trojan Spirit 2001a, NetSphere
| | 30303 | TCP | Sockets de troie, Socket 23, Socket 25, Sockets des Troie
| | 30700 | TCP | Mantis
| | 30947 | TCP | Intruse
| | 30974 | TCP | Intruse
| | 30999 | TCP | Kaung 2, Kuang2
| | 31221 | TCP | Knark
| | 31320 | TCP | LittleWitch
| | 31320 | UDP | LittleWitch
| | 31335 | TCP | Trinoo
| | 31335 | UDP | Trinoo
| | 31336 | TCP | Bo Whack, Butt Funnel
| | 31337 | TCP | ADM worm, cron / crontab, bindshell, Sm4ck, Linux Rootkit IV (4), Gummo, Freak88, Freak2k, Beeone, Baron Night, Back Orifice russian, Back Orifice (Lm), Back Fire, BO2, BO spy, BO client, BO Facil, Sockdmini, BackOrifice, Khaled, OPC, icmp_pipe.c
| | 31337 | UDP | Back Orifice, Back fire, Deep BO, BackOrifice, OPC
| | 31338 | TCP | Back Orifice, Butt Funnel, NetSpy (DK)
| | 31338 | UDP | Back Orifice, Deep BO
| | 31339 | TCP | NetSpy (DK), NetSpy (DK)
| | 31399 | TCP | NetSpy DK
| | 31415 | TCP | Lithium
| | 31416 | TCP | Lithium
| | 31416 | UDP | Lithium
| | 31554 | TCP | Schwindler
| | 31557 | TCP | Xanadu
| | 31631 | TCP | CleptoManicos
| | 31666 | TCP | BOWhack
| | 31745 | TCP | Buschtrommel
| | 31785 | TCP | Hack´a´Tack, Hack'a'Tack
| | 31787 | TCP | Hack´a´Tack, Hack'a'Tack
| | 31788 | TCP | Hack´a´Tack
| | 31789 | TCP | Hack'a'Tack
| | 31789 | UDP | Hack´a´Tack, Hack'a'Tack
| | 31790 | TCP | Hack´a´Tack
| | 31791 | TCP | Hack'a'Tack
| | 31791 | UDP | Hack´a´Tack, Hack'a'Tack
| | 31792 | TCP | Hack´a´Tack
| | 31887 | TCP | BDDT
| | 31889 | TCP | BDDT
| | 32001 | TCP | Donald Dick
| | 32100 | TCP | Peanut Brittle, Project nEXT, ProjectNext
| | 32418 | TCP | AcidBattery
| | 32768 | TCP | Hacker's Paradise
| | 32791 | TCP | Acropolis, Akropolis, Rocks
| | 33270 | TCP | Trinity
| | 33291 | TCP | RemoteHak
| | 33333 | TCP | Blakharaz, Prosiak, Blackharaz
| | 33333 | UDP | Blackharaz
| | 33567 | TCP | Lion, T0rn Rootkit
| | 33568 | TCP | Lion, T0rn Rootkit
| | 33577 | TCP | Son of PsychWard, SonOfPsychward
| | 33777 | TCP | Son of PsychWard
| | 33911 | TCP | Spirit 2000, Spirit 2001
| | 34324 | TCP | BigGluck, TN, Tiny Telnet Server, Big Gluck, TelnetServer
| | 34444 | TCP | Donald Dick
| | 34555 | UDP | Trinoo (for Windows)
| | 34763 | TCP | Infector
| | 35000 | TCP | Infector
| | 35555 | UDP | Trinoo (for Windows)
| | 35600 | TCP | Subsari
| | 36794 | TCP | BugBear
| | 37237 | TCP | Mantis
| | 37266 | TCP | The Killer Trojan
| | 37651 | TCP | Yet Another Trojan - YAT
| | 37653 | TCP | YAT
| | 38741 | TCP | CyberSpy
| | 39507 | TCP | Busters
| | 40308 | TCP | Subsari
| | 40412 | TCP | The Spy, TheSpy
| | 40421 | TCP | Agent 40421, Masters Paradise, MastersParadise
| | 40422 | TCP | Masters Paradise, MastersParadise
| | 40423 | TCP | Masters Paradise
| | 40425 | TCP | Masters Paradise
| | 40426 | TCP | Masters Paradise
| | 40999 | TCP | DiemsMutter
| | 41337 | TCP | Storm
| | 41626 | TCP | Shah
| | 41666 | TCP | Remote Boot Tool - RBT, Remote Boot Tool - RBT
| | 41666 | UDP | Remote Boot
| | 44444 | TCP | Prosiak
| | 44575 | TCP | Exploiter
| | 45559 | TCP | Maniac rootkit
| | 45673 | TCP | Acropolis, Akropolis, Rocks
| | 46626 | TCP | Psychward
| | 46882 | TCP | Psychward
| | 47017 | TCP | T0rn Rootkit
| | 47262 | TCP | Delta
| | 47262 | UDP | Delta Source
| | 48004 | TCP | Fraggle Rock
| | 48006 | TCP | Fraggle Rock, Fragglerock
| | 49000 | TCP | Fraggle Rock
| | 49301 | TCP | OnLine KeyLogger
| | 49683 | TCP | HolzPferd
| | 49683 | UDP | HolzPferd
| | 50000 | TCP | SubSARI, Infector
| | 50130 | TCP | Enterprise
| | 50505 | TCP | Sockets des Troie
| | 50766 | TCP | Fore, Schwindler
| | 50776 | TCP | Fore, Remote Windows Shutdown
| | 51234 | TCP | Cyn
| | 51966 | TCP | Cafeini
| | 51996 | TCP | Cafeini
| | 52317 | TCP | Acid Battery 2000
| | 53001 | TCP | Remote Windows Shutdown - RWS
| | 54283 | TCP | SubSeven
| | 54320 | TCP | Back Orifice 2000
| | 54321 | TCP | Back Orifice 2000, PCInvader, School Bus
| | 54321 | UDP | Back Orifice, Back Orifice 2000
| | 55165 | TCP | File Manager trojan, File Manager trojan, WM Trojan Generator
| | 55166 | TCP | WM Trojan Generator
| | 57341 | TCP | NetRaider
| | 57922 | TCP | Bionet
| | 58008 | TCP | Tron
| | 58009 | TCP | Tron
| | 58339 | TCP | Butt Funnel
| | 59090 | TCP | AcidReign
| | 59211 | TCP | DuckToy
| | 59345 | TCP | NewFuture
| | 60000 | TCP | Deep Throat, Foreplay or Reduced Foreplay, Sockets des Troie, DeepThroat, MiniBacklash
| | 60000 | UDP | MiniBacklash
| | 60001 | TCP | Trinity
| | 60008 | TCP | Lion, T0rn Rootkit
| | 60068 | TCP | Xzip 6000068
| | 60411 | TCP | Connection
| | 60412 | TCP | Connection
| | 60552 | TCP | RoxRat
| | 61348 | TCP | Bunker-Hill
| | 61466 | TCP | TeleCommando
| | 61603 | TCP | Bunker-Hill
| | 63485 | TCP | Bunker-Hill
| | 63536 | TCP | InsaneNetwork
| | 63878 | TCP | AphexFTP
| | 63879 | TCP | AphexFTP
| | 64101 | TCP | Taskman / Task Manager
| | 64969 | TCP | Lithium
| | 65000 | TCP | Devil, Sockets des Troie, Stacheldraht
| | 65390 | TCP | Eclypse
| | 65421 | TCP | Jade
| | 65432 | TCP | The Traitor (= th3tr41t0r)
| | 65432 | UDP | The Traitor (= th3tr41t0r)
| | 65506 | TCP | PhatBot, Agobot, Gaobot
| | 65530 | TCP | Windows Mite
| | 65534 | TCP | /sbin/initd
| | 65535 | TCP | Adore worm, RC1 trojan, Sins
|
|
|
|
|
