Port |
Protokoll |
Trojaner |
2 |
tcp |
Death
|
7 |
tcp |
echo
|
9 |
tcp |
discard
|
11 |
tcp |
systat
|
13 |
tcp |
daytime
|
17 |
tcp |
qotd
|
18 |
tcp |
msp Message Send Protocol
|
20 |
tcp |
ftp-data
|
21 |
tcp |
Back Construction Blade Runner Doly Trojan Fore 7tp trojan Invisible FTP Larva MBT Motiv Ne Net Administrator Senna Spy FTP Server Traitor WebEx WinCrash
|
22 |
tcp |
abc
|
23 |
tcp |
Prosiak (telnet) Tiny Telnet Server Truva Atl Telnet Wingate
|
25 |
tcp |
Aji Antigen Email Password Sender Email Worms Gip Happy99/Ska Haebu Coceda Loveletter Kuang2 Magic Horse Moscow Email Trojan Neabi ProMail trojan NewApt, Shtrilitz Stealth Taripas Terminator
|
31 |
tcp |
Agent 31 Hackers Paradise Masters Paradise Masters Paradise.80
|
41 |
tcp |
DeepThroat
|
43 |
tcp |
whois
|
48 |
tcp |
DRAT
|
50 |
tcp |
DRAT
|
53 |
udp |
DNS
|
53 |
tcp |
Bonk (DoS)
|
58 |
tcp |
DMSetup
|
59 |
tcp |
DMSetup
|
79 |
tcp |
Firehotcker
|
80 |
tcp |
Back End Executor Hooker RingZero
|
88 |
tcp |
kerberos
|
94 |
tcp |
Tivoli Object Dispatcher
|
99 |
tcp |
Hidden Port
|
109 |
tcp |
pop2
|
110 |
tcp |
ProMail trojan
|
111 |
tcp |
rpc SUN Remote Procedure Call
|
113 |
tcp |
Invisible Identd Deamon Kazimas
|
118 |
tcp |
Infector 1.4.2
|
119 |
tcp |
Happy99/Ska
|
121 |
tcp |
JammerKillah BO jammerkilla
|
123 |
udp |
ntp Zeitdienst
|
123 |
tcp |
Net Controller
|
133 |
tcp |
Farnaz
|
137 |
udp |
netbios nameservice
|
137 |
tcp |
netbios nameservice
|
146 |
tcp |
Infector 1.x
|
170 |
tcp |
A-Trojan
|
220 |
tcp |
pop3
|
315 |
tcp |
The Invasor
|
421 |
tcp |
(TCP Wrappers)
|
443 |
tcp |
SSL
|
456 |
tcp |
Hackers Paradise
|
531 |
tcp |
Rasmin
|
555 |
tcp |
Ini-Killer NeTAdministrator Phase Zero Stealth Spy
|
606 |
tcp |
Secret Service
|
656 |
Goverment Operator FTP Server |
tcp |
666 |
tcp |
Attack FTP Satanz Backdoor
|
667 |
tcp |
SniperNet
|
669 |
tcp |
DP Trojan
|
692 |
tcp |
GayOL
|
777 |
tcp |
Aim Spy
|
808 |
tcp |
WinHole
|
815 |
tcp |
Everyone's Darling Everyone’s Darling
|
911 |
tcp |
Dark Shadow
|
999 |
tcp |
DeepThroat
|
1000 |
tcp |
Der Spaeher 3
|
1001 |
tcp |
Der Spaeher 3 Le Guardian Silencer WebEx
|
1003 |
tcp |
BackDoor 2.0x
|
1010 |
tcp |
Doly Trojan 1.3 + 1.35 CafeIni 0.9 (1010:1100)
|
1011 |
tcp |
Doly Trojan 1.1/1.2
|
1012 |
tcp |
Doly Trojan 1.5
|
1015 |
tcp |
Doly Trojan 1.6
|
1016 |
tcp |
Doly Trojan
|
1020 |
tcp |
Vampire
|
1024 |
tcp |
NetSpy, Latinus
|
1025 |
tcp |
NetSpy Maverick's Matrix RemoteStorm Maverick’s Matrix
|
1029 |
tcp |
InCommand
|
1033 |
tcp |
NetSpy
|
1042 |
tcp |
Bla 1.1
|
1045 |
tcp |
Rasmin
|
1047 |
tcp |
GateCrasher.b, GateCrasher.c
|
1050 |
tcp |
MiniCommand
|
1080 |
tcp |
WinHole Wingate
|
1081 |
tcp |
WinHole
|
1082 |
tcp |
WinHole
|
1083 |
tcp |
WinHole
|
1090 |
tcp |
Xtreme
|
1095 |
tcp |
Rat
|
1097 |
tcp |
Rat
|
1098 |
tcp |
Rat
|
1099 |
tcp |
BFevolution, Rat
|
1100 |
tcp |
CafeIni 0.9 (1010:1100)
|
1137 |
tcp |
MTX
|
1170 |
tcp |
Psyber Stream Server, Streaming Audio Trojan Voice
|
1200 |
tcp |
NoBackO
|
1201 |
tcp |
NoBackO
|
1207 |
tcp |
SoftWAR
|
1208 |
tcp |
Infector 1.3 + 1.4.1
|
1212 |
tcp |
Kaos
|
1225 |
tcp |
Scarab
|
1234 |
tcp |
Ultors Trojan SubSeven 2.0
|
1243 |
tcp |
BackDoor-G SubSeven Sub7(*) SubSeven Apocalypse Tiles
|
1245 |
tcp |
VooDoo Doll
|
1255 |
tcp |
Scarab
|
1256 |
tcp |
Project nEXT
|
1269 |
tcp |
Maverick's Matrix Maverick’s Matrix
|
1313 |
tcp |
NETrojan
|
1338 |
tcp |
Millenium Worm
|
1349 |
tcp |
BO DLL
|
1352 |
tcp |
Lotus Notes / Domino
|
1441 |
tcp |
RemoteStorm
|
1492 |
tcp |
FTP99CMP Back.Orifice.FTP
|
1509 |
tcp |
Psyber Streaming Server
|
1524 |
tcp |
Trin00 (DDoS)
|
1600 |
tcp |
Shivka-Burka
|
1700 |
tcp |
Rux.Tick
|
1777 |
tcp |
Scarab
|
1784 |
tcp |
Snid X2
|
1807 |
tcp |
SpySender
|
1966 |
tcp |
Fake FTP
|
1969 |
tcp |
OpC BO
|
1981 |
tcp |
Shockrave
|
1999 |
tcp |
BackDoor BackDoor 1.00-1.03 BackDoor 2.x TransScout 1.x
|
2000 |
tcp |
Der Spaeher 3 TransScout Insane Network
|
2001 |
tcp |
Der Spaeher 3 TransScout Trojan Cow
|
2002 |
tcp |
TransScout
|
2003 |
tcp |
TransScout
|
2004 |
tcp |
TransScout
|
2005 |
tcp |
TransScout
|
2023 |
tcp |
HackCity Ripper Pro
|
2080 |
tcp |
WinHole
|
2115 |
tcp |
Bugs
|
2140 |
tcp |
Deep Throat (all versions) The Invasor
|
2208 |
tcp |
Rux.PSW
|
2283 |
tcp |
HLV Rat 5 Rat
|
2300 |
tcp |
Xplorer
|
2565 |
tcp |
Striker
|
2583 |
tcp |
WinCrash 2
|
2600 |
tcp |
Digital RootBeer
|
2718 |
tcp |
The Prayer 2
|
2773 |
tcp |
BackDoor-G SubSeven Sub7(*)
|
2801 |
tcp |
Phineas Phucker
|
2989 |
tcp |
Rat 1.2
|
3000 |
tcp |
Remote Shutdown
|
3024 |
tcp |
WinCrash
|
3128 |
tcp |
RingZero
|
3129 |
tcp |
Masters Paradise MastersParadise.92
|
3150 |
tcp |
Deep Throat Deep Throat 10 The Invasor
|
3410 |
Optix |
tcp |
3456 |
tcp |
Teror Trojan
|
3459 |
tcp |
Eclipse 2000 Sanctuary
|
3586 |
tcp |
Snid X2
|
3700 |
tcp |
Portal of Doom (PoD) al of Doom
|
3791 |
tcp |
Total Eclipse (FTP)
|
3801 |
tcp |
Total Eclipse
|
4000 |
tcp |
Skydance
|
4092 |
tcp |
WinCrash
|
4242 |
tcp |
Virtual hacking Machine
|
4245 |
tcp |
Rux.Backdoor
|
4321 |
tcp |
BoBo Schoolbus 1.0
|
4444 |
tcp |
Prosiak Swift remote
|
4567 |
tcp |
File Nail
|
4590 |
tcp |
ICQTrojan
|
4711 |
tcp |
Olfactor
|
4950 |
tcp |
ICQTrojan Icq Trojan
|
5000 |
tcp |
Bubbel Back Door Setup Blazer 5 Socket 23 Sockets de Troie
|
5001 |
tcp |
Back Door Setup Sockets de Troie
|
5011 |
tcp |
OOTLT
|
5031 |
tcp |
NetMetropolitan 1.0 NetMetropolitan 1.04
|
5032 |
tcp |
NetMetropolitan 1.04
|
5321 |
tcp |
Firehotcker
|
5333 |
tcp |
Backage Trojan Box 3
|
5343 |
tcp |
WCrat
|
5400 |
tcp |
Blade Runner Back Construction 1.2
|
5401 |
tcp |
Blade Runner 1.x Back Construction
|
5402 |
tcp |
Blade Runner 2.x Back Construction
|
5512 |
tcp |
Illusion Mailer
|
5521 |
tcp |
Illusion Mailer
|
5550 |
tcp |
Xtcp 2
|
5555 |
tcp |
ServeMe
|
5556 |
tcp |
BO Facil H0rtiga
|
5557 |
tcp |
BO Facil
|
5569 |
tcp |
RoboHack
|
5598 |
tcp |
BackDoor 2.03
|
5637 |
tcp |
PC Crasher
|
5638 |
tcp |
PC Crasher
|
5698 |
tcp |
BackDoor.203
|
5714 |
tcp |
WinCrash WinCrash 3
|
5741 |
tcp |
WinCrash WinCrash 3
|
5742 |
tcp |
WinCrash
|
5881 |
tcp |
Y3K RAT
|
5882 |
tcp |
Y3K RAT
|
5888 |
tcp |
Y3K RAT
|
5889 |
tcp |
Y3K RAT
|
5991 |
tcp |
nuxsl - Network UniX Shell Logger www.nuxsl.org
|
6000 |
tcp |
The Thing APStrojan
|
6006 |
tcp |
The Thing APStrojan
|
6272 |
tcp |
Secret Service
|
6400 |
tcp |
The Thing APStrojan
|
6500 |
tcp |
Devil 1.03
|
6666 |
tcp |
TCPshell.c
|
6667 |
tcp |
Schedule Agent
|
6669 |
tcp |
Host Control Vampyre 1.0
|
6670 |
tcp |
DeepThroat BackWeb Server WinNuke eXtreame
|
6711 |
tcp |
BackDoor-G SubSeven Sub7(*)
|
6712 |
tcp |
BackDoor-G SubSeven Sub7(*) Funny Trojan
|
6713 |
tcp |
BackDoor-G SubSeven Sub7(*)
|
6723 |
tcp |
Mstream
|
6767 |
tcp |
NT Remote Control
|
6771 |
tcp |
DeepThroat
|
6776 |
tcp |
2000 Cracks BackDoor-G SubSeven Sub7(*)
|
6789 |
tcp |
Doly Trojan
|
6838 |
tcp |
Mstream
|
6883 |
tcp |
DeltaSource
|
6912 |
tcp |
Shit Heep
|
6939 |
tcp |
Indoctrination Gatecrasher.a
|
6969 |
tcp |
GateCrasher IRC 3 NetController Priority
|
6970 |
tcp |
GateCrasher
|
7000 |
tcp |
BackDoor-G SubSeven Sub7* Remote Grab Kazimas
|
7001 |
tcp |
Freak88
|
7201 |
tcp |
NetMonitor
|
7215 |
tcp |
BackDoor-G SubSeven Sub7(*)
|
7300 |
tcp |
NetMonitor
|
7301 |
tcp |
NetMonitor
|
7306 |
tcp |
NetMonitor
|
7307 |
tcp |
NetMonitor
|
7308 |
tcp |
NetMonitor
|
7424 |
tcp |
Host Control
|
7597 |
tcp |
Qaz
|
7609 |
tcp |
Snid X2
|
7789 |
tcp |
Back Door Setup ICQKiller
|
7983 |
tcp |
Mstream
|
8080 |
tcp |
RingZero
|
8787 |
tcp |
Back Orifice 2000 BO2K(*)
|
8897 |
tcp |
HackOffice Armageddon
|
8989 |
tcp |
Rcon
|
9000 |
tcp |
Netministrator
|
9325 |
tcp |
Mstream
|
9400 |
tcp |
InCommand
|
9494 |
tcp |
Tivoli
|
9872 |
tcp |
Portal of Doom (PoD)
|
9873 |
tcp |
Portal of Doom (PoD)
|
9874 |
tcp |
Portal of Doom (PoD)
|
9875 |
tcp |
Portal of Doom (PoD)
|
9876 |
tcp |
Cyber Attacker Rux.Backdoor
|
9878 |
tcp |
TransScout
|
9989 |
tcp |
iNi-Killer
|
9999 |
tcp |
The Prayer 1
|
10067 |
tcp |
Portal of Doom (PoD)
|
10085 |
tcp |
Syphillis
|
10086 |
tcp |
Syphillis
|
10101 |
tcp |
BrainSpy
|
10167 |
tcp |
Portal of Doom (PoD)
|
10520 |
tcp |
Acid Shivers
|
10528 |
tcp |
Host Control
|
10607 |
tcp |
Coma
|
10666 |
tcp |
Ambush
|
11000 |
tcp |
Senna Spy Senna Spy Trojans
|
11050 |
tcp |
Host Control
|
11051 |
tcp |
Host Control
|
11223 |
tcp |
Progenic Trojan Secret Agent
|
12076 |
tcp |
GJamer MSH.104b
|
12223 |
tcp |
Hack'99 KeyLogger Hack’99 KeyLogger
|
12345 |
tcp |
GabanBus NetBus 1.x NetBus 1.7(*) Pie Bill Gates WhackJob X-bill
|
12346 |
tcp |
GabanBus NetBus 1.x NetBus 1.7(*) X-bill
|
12349 |
tcp |
BioNet
|
12361 |
tcp |
Whack-a-mole
|
12362 |
tcp |
Whack-a-mole
|
12623 |
tcp |
DUN Control
|
12624 |
tcp |
Buttman
|
12631 |
tcp |
WhackJob WhackJob.NB1.7
|
12701 |
tcp |
Eclipse 2000
|
12754 |
tcp |
Mstream
|
13000 |
tcp |
Senna Spy
|
13010 |
tcp |
Hacker Brazil
|
13700 |
tcp |
Kuang2 The Virus
|
14456 |
tcp |
Solero
|
14500 |
tcp |
PC Invader 0.7
|
14501 |
tcp |
PC Invader 0.7
|
14502 |
tcp |
PC Invader 0.7
|
14503 |
tcp |
PC Invader 0.7
|
15000 |
tcp |
NetDaemon 1.0
|
15092 |
tcp |
Host Control
|
15104 |
tcp |
Mstream
|
16484 |
tcp |
Mosucker
|
16660 |
tcp |
Stacheldraht (DDoS)
|
16772 |
tcp |
ICQ Revenge
|
16969 |
tcp |
Priority
|
17166 |
tcp |
Mosaic
|
17300 |
tcp |
Kuang2 The Virus
|
17490 |
tcp |
CrazyNet
|
17500 |
tcp |
CrazyNet
|
17569 |
tcp |
Infector 1.4.x + 1.6.x
|
17777 |
tcp |
Nephron
|
18753 |
tcp |
Shaft (DDoS)
|
19864 |
tcp |
ICQ Revenge
|
20000 |
tcp |
Millennium II
|
20001 |
tcp |
Millennium
|
20002 |
tcp |
AcidkoR
|
20034 |
tcp |
NetBus 2.0 Pro NetRex WhackJob
|
20203 |
tcp |
Chupacabra Logged!
|
20331 |
tcp |
Bla
|
20432 |
tcp |
Shaft (DDoS)
|
21544 |
tcp |
GirlFriend
|
21554 |
tcp |
GirlFriend Schwindler Schwindler 1.82 WinSp00fer Kidterror
|
22222 |
tcp |
Prosiak
|
23005 |
tcp |
Net Trash 1.0
|
23023 |
tcp |
Logged
|
23432 |
tcp |
Asylum
|
23456 |
tcp |
Evil FTP Ugly FTP WhackJob
|
23476 |
tcp |
Donald Dick
|
23477 |
tcp |
Donald Dick
|
26274 |
tcp |
Delta Source
|
26681 |
tcp |
Spy Voice
|
27374 |
tcp |
BackDoor-G SubSeven Sub7(*)
|
27444 |
tcp |
Trin00 (DDoS)
|
27665 |
tcp |
Trin00 (DDoS)
|
28431 |
tcp |
Hack'a'Tack Hack’a’Tack
|
28432 |
tcp |
Hack'a'Tack Hack’a’Tack
|
29104 |
tcp |
Host Control
|
29891 |
tcp |
The Unexplained
|
30001 |
tcp |
Terr0r32
|
30029 |
tcp |
AOL Trojan
|
30100 |
tcp |
NetSphere 1.27a NetSphere 1.31
|
30101 |
tcp |
NetSphere 1.27a NetSphere 1.31
|
30102 |
tcp |
NetSphere 1.27a NetSphere 1.31
|
30103 |
tcp |
NetSphere 1.31
|
30133 |
tcp |
NetSphere Final
|
30303 |
tcp |
Sockets de Troie Socket 23
|
30947 |
tcp |
Intruse
|
30999 |
tcp |
Kuang2
|
31335 |
tcp |
Trin00 (DDoS)
|
31336 |
tcp |
BOWhack ButtFunnel
|
31337 |
udp |
Backorifice Freak
|
31337 |
tcp |
Backorifice Freak
|
31338 |
tcp |
Back Orifice ButtFunnel DeepBO NetSpy DK
|
31339 |
tcp |
NetSpy DK
|
31554 |
tcp |
Schwindler
|
31666 |
tcp |
BOWhack BOWackmole
|
31778 |
tcp |
Hack'a'Tack Hack’a’Tack
|
31785 |
tcp |
Hack'a'Tack Hack’a’Tack
|
31787 |
tcp |
Hack'a'Tack Hack’a’Tack
|
31788 |
tcp |
Hack'a'Tack Hack’a’Tack
|
31789 |
tcp |
Hack'a'Tack Hack’a’Tack
|
31790 |
tcp |
Hack'a'Tack Hack’a’Tack
|
31791 |
tcp |
Hack'a'Tack Hack’a’Tack
|
31792 |
tcp |
Hack'a'Tack Hack’a’Tack
|
32100 |
tcp |
Peanut Brittle Project nEXT
|
32418 |
tcp |
Acid Battery
|
33333 |
tcp |
Blakharaz Prosiak
|
33577 |
tcp |
PsychWard
|
33777 |
tcp |
PsychWard
|
33911 |
tcp |
Trojan Spirit 2001a
|
34324 |
tcp |
BigGluck TN Tiny Telnet Server
|
34555 |
tcp |
Trin00 (Windows) (DDoS)
|
35555 |
tcp |
Trin00 (Windows) (DDoS)
|
37651 |
tcp |
YAT
|
40412 |
tcp |
The Spy
|
40421 |
tcp |
Agent 40421 Masters Paradise Master Paradise .96
|
40422 |
tcp |
Masters Paradise 1.x
|
40423 |
tcp |
Masters Paradise Masters Paradise .97
|
40425 |
tcp |
Masters Paradise
|
40426 |
tcp |
Masters Paradise 3.x
|
41666 |
tcp |
Remote Boot
|
43210 |
tcp |
Schoolbus 1.6 / 2.0
|
44444 |
tcp |
Prosiak
|
47262 |
tcp |
Delta Source
|
49301 |
tcp |
Online Keylogger
|
50505 |
tcp |
Sockets de Troie
|
50766 |
tcp |
Fore Schwindler
|
51996 |
tcp |
CafeIni
|
53001 |
tcp |
Remote Windows Shutdown
|
53217 |
tcp |
Acid Battery 2000
|
54283 |
tcp |
BackDoor-G SubSeven Sub7(*)
|
54320 |
tcp |
Back Orifice 2000 BO2K(*)
|
54321 |
tcp |
Schoolbus .69-1.11 + 1.6 + 2.0 Back Orifice 2000 BO2K(*)
|
57341 |
tcp |
NetRaider
|
58339 |
tcp |
ButtFunnel
|
60000 |
tcp |
Deep Throat 2.0 / 3.0
|
60068 |
tcp |
Xzip 6000068
|
60411 |
tcp |
Connection
|
61348 |
tcp |
Bunker-Hill
|
61466 |
tcp |
Telecommando
|
61603 |
tcp |
Bunker-Hill
|
63485 |
tcp |
Bunker-Hill
|
65000 |
tcp |
Devil Trojan 1.03 Stacheldraht (DDoS)
|
65432 |
tcp |
The Traitor
|
65535 |
tcp |
R RC
|