God knows if this helps, but these are the usual ports one sniffs through and what they are usually used for. All listings in bold were taken from the Trojan Horse Port List (Default Ports)* Compiled by Ofir Arkin on 19/Aug/00.
What is in our list below are the common ones. A comprehensive list can be found at:
Internet Assigned Numbers Authority (IANA)'s Protocol Numbers and Assignment Services - The
full List of Ports
1 tcpmux (TCP Port Service Multiplexer)
2 compressnet (Management Utility)
3 compressnet (Compression Process)
5 rje (Remote Job Entry)
7 echo (Echo)
9 discard (Discard)
11 systat (Active Users)
13 daytime (Daytime)
17 qotd (Quote of the Day)
18 msp (Message Send Protocol)
19 chargen (Character Generator)
20 ftp-data (File Transfer [Default Data])
21 Back Construction, Blade Runner, Doly Trojan, Fore, FTP Trojan, Invisible FTP,
Larva, WebEx, WinCrash
21 ftp (File Transfer [Control])
23 Tint Telnet Server
23 telnet (Telnet)
24 - (any private mail system)
25 Ajan, Antigen, Email Password Sender, Haebu Coceda (=Naebi), Happy 99, Kaung2, Pro
Mail Trojan, Shtrilitz, Stealth, Tapiras, Terminator, WinPC, WinSpy
25 smtp (Simple Mail Transfer)
27 nsw-fe (NSW User System FE)
29 msg-icp (MSG ICP)
31 Agent 31, Hackers Paradise, Masters Paradise
31 msg-auth (MSG Authentication)
33 dsp (Display Support Protocol)
35 - (any private printer server)
37 time (Time)
38 rap (Route Access Protocol)
39 rlp (Resource Location Protocol)
41 Deep Throat
41 graphics (Graphics)
42 nameserver (Host Name Server)
43 nicname (Who Is)
44 mpm-flags (MPM FLAGS Protocol)
45 mpm (Message Processing Module [recv])
46 mpm-snd (MPM [default send])
47 ni-ftp (NI FTP)
48 auditd (Digital Audit Daemon)
49 login (Login Host Protocol)
50 re-mail-ck (Remote Mail Checking Protocol)
51 la-maint (IMP Logical Address Maintenance)
52 xns-time (XNS Time Protocol)
53 domain (Domain Name Server)
54 xns-ch (XNS Clearinghouse)
55 isi-gl (ISI Graphics Language)
56 xns-auth (XNS Authentication)
57 - (any private terminal access)
58 xns-mail (XNS Mail)
59 DMSetup
59 - (any private file service)
60 - (Unassigned)
61 ni-mail (NI MAIL)
62 acas (ACA Services)
64 covia (Communications Integrator (CI))
65 tacacs-ds (TACACS-Database Service)
66 sql*net (Oracle SQL*NET)
67 bootps (Bootstrap Protocol Server)
68 bootpc (Bootstrap Protocol Client)
69 tftp (Trivial File Transfer)
70 gopher (Gopher)
71 netrjs-1 (Remote Job Service)
72 netrjs-2 (Remote Job Service)
73 netrjs-3 (Remote Job Service)
74 netrjs-4 (Remote Job Service)
75 - (any private dial out service)
76 deos (Distributed External Object Store)
77 - (any private RJE service)
78 vettcp (vettcp)
79 Firehotcker
79 finger (Finger)
80 Executer, RingZero
80 www-http (World Wide Web HTTP)
81 hosts2-ns (HOSTS2 Name Server)
82 xfer (XFER Utility)
83 mit-ml-dev (MIT ML Device)
84 ctf (Common Trace Facility)
85 mit-ml-dev (MIT ML Device)
86 mfcobol (Micro Focus Cobol)
87 - (any private terminal link)
88 kerberos (Kerberos)
89 su-mit-tg (SU/MIT Telnet Gateway)
90 dnsix (DNSIX Securit Attribute Token Map)
91 mit-dov (MIT Dover Spooler)
92 npp (Network Printing Protocol)
93 dcp (Device Control Protocol)
94 objcall (Tivoli Object Dispatcher)
95 supdup (SUPDUP)
96 dixie (DIXIE Protocol Specification)
97 swift-rvf (Swift Remote Vitural File Protocol)
98 tacnews (TAC News)
99 Hidden Prot 2.0
99 metagram (Metagram Relay)
100 newacct ([unauthorized use])
101 hostname (NIC Host Name Server)
102 iso-tsap (ISO-TSAP)
103 gppitnp (Genesis Point-to-Point Trans Net)
104 acr-nema (ACR-NEMA Digital Imag. & Comm. 300)
105 csnet-ns (Mailbox Name Nameserver)
106 3com-tsmux (3COM-TSMUX)
107 rtelnet (Remote Telnet Service)
108 snagas (SNA Gateway Access Server)
109 pop2 (Post Office Protocol - Version 2)
110 ProMail Trojan
110 pop3 (Post Office Protocol - Version 3)
111 sunrpc (SUN Remote Procedure Call)
112 mcidas (McIDAS Data Transmission Protocol)
113 Kazimas
113 auth (Authentication Service)
114 audionews (Audio News Multicast)
115 sftp (Simple File Transfer Protocol)
116 ansanotify (ANSA REX Notify)
117 uucp-path (UUCP Path Service)
118 sqlserv (SQL Services)
119 Happy99
119 nntp (Network News Transfer Protocol)
120 cfdptkt (CFDPTKT)
121 Jammer Killah V
121 erpc (Encore Expedited Remote Pro.Call)
122 smakynet (SMAKYNET)
123 ntp (Network Time Protocol)
124 ansatrader (ANSA REX Trader)
125 locus-map (Locus PC-Interface Net Map Ser)
126 unitary (Unisys Unitary Login)
127 locus-con (Locus PC-Interface Conn Server)
128 gss-xlicen (GSS X License Verification)
129 pwdgen (Password Generator Protocol)
130 cisco-fna (cisco FNATIVE)
131 cisco-tna (cisco TNATIVE)
132 cisco-sys (cisco SYSMAINT)
133 statsrv (Statistics Service)
134 ingres-net (INGRES-NET Service)
135 loc-srv (Location Service)
136 profile (PROFILE Naming System)
137 netbios-ns (NETBIOS Name Service)
138 netbios-dgm (NETBIOS Datagram Service)
139 netbios-ssn (NETBIOS Session Service)
140 emfis-data (EMFIS Data Service)
141 emfis-cntl (EMFIS Control Service)
142 bl-idm (Britton-Lee IDM)
143 imap2 (Interim Mail Access Protocol v2)
144 news (NewS)
145 uaac (UAAC Protocol)
146 iso-tp0 (ISO-IP0)
147 iso-ip (ISO-IP)
148 cronus (CRONUS-SUPPORT)
149 aed-512 (AED 512 Emulation Service)
150 sql-net (SQL-NET)
151 hems (HEMS)
152 bftp (Background File Transfer Program)
153 sgmp (SGMP)
154 netsc-prod (NETSC)
155 netsc-dev (NETSC)
156 sqlsrv (SQL Service)
157 knet-cmp (KNET/VM Command/Message Protocol)
158 pcmail-srv (PCMail Server)
159 nss-routing (NSS-Routing)
160 sgmp-traps (SGMP-TRAPS)
161 snmp (SNMP)
162 snmptrap (SNMPTRAP)
163 cmip-man (CMIP Manager)
164 cmip-agent (CMIP Agent)
165 xns-courier (Xerox)
166 s-net (Sirius Systems)
167 namp (NAMP)
168 rsvd (RSVD)
169 send (SEND)
170 print-srv (Network PostScript)
171 multiplex (Network Innovations Multiplex)
172 cl/1 (Network Innovations CL/1)
173 xyplex-mux (Xyplex)
174 mailq (MAILQ)
175 vmnet (VMNET)
176 genrad-mux (GENRAD-MUX)
177 xdmcp (X Display Manager Control Protocol)
178 nextstep (NextStep Window Server)
179 bgp (Border Gateway Protocol)
180 ris (Intergraph)
181 unify (Unify)
182 audit (Unisys Audit SITP)
183 ocbinder (OCBinder)
184 ocserver (OCServer)
185 remote-kis (Remote-KIS)
186 kis (KIS Protocol)
187 aci (Application Communication Interface)
188 mumps (Plus Five's MUMPS)
189 qft (Queued File Transport)
190 gacp (Gateway Access Control Protocol)
191 prospero (Prospero Directory Service)
192 osu-nms (OSU Network Monitoring System)
193 srmp (Spider Remote Monitoring Protocol)
194 irc (Internet Relay Chat Protocol)
195 dn6-nlm-aud (DNSIX Network Level Module Audit)
196 dn6-smm-red (DNSIX Session Mgt Module Audit Redir)
197 dls (Directory Location Service)
198 dls-mon (Directory Location Service Monitor)
199 smux (SMUX)
200 src (IBM System Resource Controller)
201 at-rtmp (AppleTalk Routing Maintenance)
202 at-nbp (AppleTalk Name Binding)
203 at-3 (AppleTalk Unused)
204 at-echo (AppleTalk Echo)
205 at-5 (AppleTalk Unused)
206 at-zis (AppleTalk Zone Information)
207 at-7 (AppleTalk Unused)
208 at-8 (AppleTalk Unused)
209 tam (Trivial Authenticated Mail Protocol)
210 z39.50 (ANSI Z39.50)
211 914c/g (Texas Instruments 914C/G Terminal)
212 anet (ATEXSSTR)
213 ipx (IPX)
214 vmpwscs (VM PWSCS)
215 softpc (Insignia Solutions)
216 atls (Access Technology License Server)
217 dbase (dBASE Unix)
218 mpp (Netix Message Posting Protocol)
219 uarps (Unisys ARPs)
220 imap3 (Interactive Mail Access Protocol v3)
221 fln-spx (Berkeley rlogind with SPX auth)
222 rsh-spx (Berkeley rshd with SPX auth)
223 cdc (Certificate Distribution Center)
243 sur-meas (Survey Measurement)
245 link (LINK)
246 dsp3270 (Display Systems Protocol)
344 pdap (Prospero Data Access Protocol)
345 pawserv (Perf Analysis Workbench)
346 zserv (Zebra server)
347 fatserv (Fatmen Server)
348 csi-sgwp (Cabletron Management Protocol)
371 clearcase (Clearcase)
372 ulistserv (Unix Listserv)
373 legent-1 (Legent Corporation)
374 legent-2 (Legent Corporation)
375 hassle (Hassle)
376 nip (Amiga Envoy Network Inquiry Proto)
377 tnETOS (NEC Corporation)
378 dsETOS (NEC Corporation)
379 is99c (TIA/EIA/IS-99 modem client)
380 is99s (TIA/EIA/IS-99 modem server)
381 hp-collector (hp performance data collector)
382 hp-managed-node (hp performance data managed node)
383 hp-alarm-mgr (hp performance data alarm manager)
384 arns (A Remote Network Server System)
385 ibm-app (IBM Application)
385 ibm-app (IBM Application)
386 asa (ASA Message Router Object Def.)
387 aurp (Appletalk Update-Based Routing Pro.)
388 unidata-ldm (Unidata LDM Version 4)
389 ldap (Lightweight Directory Access Protocol)
390 uis (UIS)
391 synotics-relay (SynOptics SNMP Relay Port)
392 synotics-broker (SynOptics Port Broker Port)
393 dis (Data Interpretation System)
394 embl-ndt (EMBL Nucleic Data Transfer)
395 netcp (NETscout Control Protocol)
396 netware-ip (Novell Netware over IP)
397 mptn (Multi Protocol Trans. Net.)
398 kryptolan (Kryptolan)
400 work-sol (Workstation Solutions)
401 ups (Uninterruptible Power Supply)
402 genie (Genie Protocol)
403 decap (decap)
404 nced (nced)
405 ncld (ncld)
406 imsp (Interactive Mail Support Protocol)
407 timbuktu (Timbuktu)
408 prm-sm (Prospero Resource Manager Sys. Man.)
409 prm-nm (Prospero Resource Manager Node Man.)
410 decladebug (DECLadebug Remote Debug Protocol)
411 rmt (Remote MT Protocol)
412 synoptics-trap (Trap Convention Port)
413 smsp (SMSP)
414 infoseek (InfoSeek)
415 bnet (BNet)
416 silverplatter (Silverplatter)
417 onmux (Onmux)
418 hyper-g (Hyper-G)
419 ariel1 (Ariel)
420 smpte (SMPTE)
421 TCP Wrappers
421 ariel2 (Ariel)
422 ariel3 (Ariel)
423 opc-job-start (IBM Operations Planning and Control Start)
424 opc-job-track (IBM Operations Planning and Control Track)
425 icad-el (ICAD)
426 smartsdp (smartsdp)
427 svrloc (Server Location)
428 ocs_cmu (OCS_CMU)
429 ocs_amu (OCS_AMU)
430 utmpsd (UTMPSD)
431 utmpcd (UTMPCD)
432 iasd (IASD)
433 nnsp (NNSP)
434 mobileip-agent (MobileIP-Agent)
435 mobilip-mn (MobilIP-MN)
436 dna-cml (DNA-CML)
437 comscm (comscm)
438 dsfgw (dsfgw)
439 dasp (dasp)
440 sgcp (sgcp)
441 decvms-sysmgt (decvms-sysmgt)
442 cvc_hostd (cvc_hostd)
443 https (https MCom)
444 snpp (Simple Network Paging Protocol)
445 microsoft-ds (Microsoft-DS)
446 ddm-rdb (DDM-RDB)
447 ddm-dfm (DDM-RFM)
448 ddm-byte (DDM-BYTE)
449 as-servermap (AS Server Mapper)
450 tserver (TServer)
456 Hackers Paradise
512 exec (remote process execution;)
512 exec (remote process execution;)
513 login (remote login a la telnet;)
513 login (remote login a la telnet;)
514 cmd (like exec, but automatic)
514 cmd (like exec, but automatic)
515 printer (spooler)
517 talk (like tenex link, but across)
518 ntalk ()
519 utime (unixtime)
520 efs (extended file name server)
520 efs (extended file name server)
525 timed (timeserver)
526 tempo (newdate)
530 courier (rpc)
531 Rasmin
531 conference (chat)
532 netnews (readnews)
533 netwall (for emergency broadcasts)
539 apertus-ldp (Apertus Technologies Load Determination)
540 uucp (uucpd)
541 uucp-rlogin (uucp-rlogin)
543 klogin ()
544 kshell (krcmd)
550 new-rwho (new-who)
555 ini-Killer, NetAdmin, Phase Zero, Stealth Spy
555 dsf ()
556 remotefs (rfs server)
560 rmonitor (rmonitord)
561 monitor ()
562 chshell (chcmd)
564 9pfs (plan 9 file service)
565 whoami (whoami)
570 meter (demon)
571 meter (udemon)
600 ipcserver (Sun IPC server)
606 urm (Cray Unified Resource Manager)
607 nqs (nqs)
608 sift-uft (Sender-Initiated/Unsolicited File Transfer)
609 npmp-trap (npmp-trap)
610 npmp-local (npmp-local)
611 npmp-gui (npmp-gui)
634 ginad (ginad)
666 Attack FTP, Back Construction, Cain & Able, Satanz Backdoor, ServeU, Shadow
Phyre
666 mdqs ()
666 mdqs ()
704 elcsd (errlog copy/server daemon)
709 entrustmanager (EntrustManager)
729 netviewdm1 (IBM NetView DM/6000 Server/Client)
730 netviewdm2 (IBM NetView DM/6000 send)
731 netviewdm3 (IBM NetView DM/6000 receive)
741 netgw (netGW)
742 netrcs (Network based Rev. Cont. Sys.)
744 flexlm (Flexible License Manager)
747 fujitsu-dev (Fujitsu Device Control)
748 ris-cm (Russell Info Sci Calendar Manager)
749 kerberos-adm (kerberos administration)
750 rfile ()
750 rfile ()
751 pump ()
752 qrh ()
753 rrh ()
754 tell (send)
758 nlogin ()
759 con ()
760 ns ()
761 rxe ()
762 quotad ()
763 cycleserv ()
764 omserv ()
765 webster ()
767 phonebook (phone)
769 vid ()
770 cadlock ()
771 rtip ()
772 cycleserv2 ()
773 submit ()
773 submit ()
774 rpasswd ()
774 rpasswd ()
775 entomb ()
775 entomb ()
776 wpages ()
777 Aimspy
780 wpgs ()
786 concert (Concert)
800 mdbs_daemon ()
801 device ()
911 Dark Shadow
996 xtreelic (Central Point Software)
997 maitrd ()
998 busboy ()
998 busboy ()
999 Deep Throat, WinSatan
999 puprouter ()
999 puprouter ()
999 puprouter ()
1000 Der Spaeher 3
1000 cadlock ()
1001 Silencer, WebEx, Doly Trojan
1010 Doly Trojan 1.35
1011 Doly Trojan
1012 Doly Trojan
1015 Doly Trojan 1.5
1016 Doly Trojan 1.6
1023 - (Reserved)
1024 NetSpy, Psyber Streaming Server
1024 - (Reserved)
1025 blackjack (network blackjack)
1029 InCommand Access
1030 iad1 (BBN IAD)
1031 iad2 (BBN IAD)
1032 iad3 (BBN IAD)
1033 NetSpy
1042 Blah 1.1
1045 Rasmin
1050 Mini Command 1.2 Access
1067 instl_boots (Installation Bootstrap Proto. Serv.)
1068 instl_bootc (Installation Bootstrap Proto. Cli.)
1080 socks (Socks)
1083 ansoft-lm-1 (Anasoft License Manager)
1084 ansoft-lm-2 (Anasoft License Manager)
1090 Xtreme
1155 nfa (Network File Access)
1170 Psyber Stream Server, Streaming Audio Trojan, Voice
1207 Softwar
1222 nerv (SNI R&D network)
1234 Ultors Trojan
1243 BackDoor-G, SunSeven, SubSeven Apocalypse
1245 VooDoo Doll
1248 hermes ()
1269 Mavericks Matrix
1346 alta-ana-lm (Alta Analytics License Manager)
1347 bbn-mmc (multi media conferencing)
1348 bbn-mmx (multi media conferencing)
1349 UDP BackOrifice DLL
1349 sbook (Registration Network Protocol)
1350 editbench (Registration Network Protocol)
1351 equationbuilder (Digital Tool Works (MIT))
1352 lotusnote (Lotus Note)
1353 relief (Relief Consulting)
1354 rightbrain (RightBrain Software)
1355 intuitive-edge (Intuitive Edge)
1356 cuillamartin (CuillaMartin Company)
1357 pegboard (Electronic PegBoard)
1358 connlcli (CONNLCLI)
1359 ftsrv (FTSRV)
1360 mimer (MIMER)
1361 linx (LinX)
1362 timeflies (TimeFlies)
1363 ndm-requester (Network DataMover Requester)
1364 ndm-server (Network DataMover Server)
1365 adapt-sna (Network Software Associates)
1366 netware-csp (Novell NetWare Comm Service Platform)
1367 dcs (DCS)
1368 screencast (ScreenCast)
1369 gv-us (GlobalView to Unix Shell)
1370 us-gv (Unix Shell to GlobalView)
1371 fc-cli (Fujitsu Config Protocol)
1372 fc-ser (Fujitsu Config Protocol)
1373 chromagrafx (Chromagrafx)
1374 molly (EPI Software Systems)
1375 bytex (Bytex)
1376 ibm-pps (IBM Person to Person Software)
1377 cichlid (Cichlid License Manager)
1378 elan (Elan License Manager)
1379 dbreporter (Integrity Solutions)
1380 telesis-licman (Telesis Network License Manager)
1381 apple-licman (Apple Network License Manager)
1382 udt_os ()
1383 gwha (GW Hannaway Network License Manager)
1384 os-licman (Objective Solutions License Manager)
1385 atex_elmd (Atex Publishing License Manager)
1386 checksum (CheckSum License Manager)
1387 cadsi-lm (Computer Aided Design Software Inc LM)
1388 objective-dbc (Objective Solutions DataBase Cache)
1389 iclpv-dm (Document Manager)
1390 iclpv-sc (Storage Controller)
1391 iclpv-sas (Storage Access Server)
1392 iclpv-pm (Print Manager)
1393 iclpv-nls (Network Log Server)
1394 iclpv-nlc (Network Log Client)
1395 iclpv-wsm (PC Workstation Manager software)
1396 dvl-activemail (DVL Active Mail)
1397 audio-activmail (Audio Active Mail)
1398 video-activmail (Video Active Mail)
1399 cadkey-licman (Cadkey License Manager)
1400 cadkey-tablet (Cadkey Tablet Daemon)
1401 goldleaf-licman (Goldleaf License Manager)
1402 prm-sm-np (Prospero Resource Manager)
1403 prm-nm-np (Prospero Resource Manager)
1404 igi-lm (Infinite Graphics License Manager)
1405 ibm-res (IBM Remote Execution Starter)
1406 netlabs-lm (NetLabs License Manager)
1407 dbsa-lm (DBSA License Manager)
1408 sophia-lm (Sophia License Manager)
1409 here-lm (Here License Manager)
1410 hiq (HiQ License Manager)
1411 af (AudioFile)
1412 innosys (InnoSys)
1413 innosys-acl (Innosys-ACL)
1414 ibm-mqseries (IBM MQSeries)
1415 dbstar (DBStar)
1416 novell-lu6.2 (Novell LU6.2)
1417 timbuktu-srv1 (Timbuktu Service 1 Port)
1418 timbuktu-srv2 (Timbuktu Service 2 Port)
1419 timbuktu-srv3 (Timbuktu Service 3 Port)
1420 timbuktu-srv4 (Timbuktu Service 4 Port)
1421 gandalf-lm (Gandalf License Manager)
1422 autodesk-lm (Autodesk License Manager)
1423 essbase (Essbase Arbor Software)
1424 hybrid (Hybrid Encryption Protocol)
1425 zion-lm (Zion Software License Manager)
1426 sas-1 (Satellite-data Acquisition System 1)
1427 mloadd (mloadd monitoring tool)
1428 informatik-lm (Informatik License Manager)
1429 nms (Hypercom NMS)
1430 tpdu (Hypercom TPDU)
1431 rgtp (Reverse Gosip Transport)
1432 blueberry-lm (Blueberry Software License Manager)
1433 ms-sql-s (Microsoft-SQL-Server)
1434 ms-sql-m (Microsoft-SQL-Monitor)
1435 ibm-cics (IBM CISC)
1436 sas-2 (Satellite-data Acquisition System 2)
1437 tabula (Tabula)
1438 eicon-server (Eicon Security Agent/Server)
1439 eicon-x25 (Eicon X25/SNA Gateway)
1440 eicon-slp (Eicon Service Location Protocol)
1441 cadis-1 (Cadis License Management)
1442 cadis-2 (Cadis License Management)
1443 ies-lm (Integrated Engineering Software)
1444 marcam-lm (Marcam License Management)
1445 proxima-lm (Proxima License Manager)
1446 ora-lm (Optical Research Associates License Manager)
1447 apri-lm (Applied Parallel Research LM)
1448 oc-lm (OpenConnect License Manager)
1449 peport (PEport)
1450 dwf (Tandem Distributed Workbench Facility)
1451 infoman (IBM Information Management)
1452 gtegsc-lm (GTE Government Systems License Man)
1453 genie-lm (Genie License Manager)
1454 interhdl_elmd (interHDL License Manager)
1455 esl-lm (ESL License Manager)
1456 dca (DCA)
1457 valisys-lm (Valisys License Manager)
1458 nrcabq-lm (Nichols Research Corp.)
1459 proshare1 (Proshare Notebook Application)
1460 proshare2 (Proshare Notebook Application)
1461 ibm_wrless_lan (IBM Wireless LAN)
1462 world-lm (World License Manager)
1463 nucleus (Nucleus)
1464 msl_lmd (MSL License Manager)
1465 pipes (Pipes Platform)
1466 oceansoft-lm (Ocean Software License Manager)
1467 csdmbase (CSDMBASE)
1468 csdm (CSDM)
1469 aal-lm (Active Analysis Limited License Manager)
1470 uaiact (Universal Analytics)
1471 csdmbase (csdmbase)
1472 csdm (csdm)
1473 openmath (OpenMath)
1474 telefinder (Telefinder)
1475 taligent-lm (Taligent License Manager)
1476 clvm-cfg (clvm-cfg)
1477 ms-sna-server (ms-sna-server)
1478 ms-sna-base (ms-sna-base)
1479 dberegister (dberegister)
1480 pacerforum (PacerForum)
1481 airs (AIRS)
1482 miteksys-lm (Miteksys License Manager)
1483 afs (AFS License Manager)
1484 confluent (Confluent License Manager)
1485 lansource (LANSource)
1486 nms_topo_serv (nms_topo_serv)
1487 localinfosrvr (LocalInfoSrvr)
1488 docstor (DocStor)
1489 dmdocbroker (dmdocbroker)
1490 insitu-conf (insitu-conf)
1491 anynetgateway (anynetgateway)
1492 FTP99CMP
1492 stone-design-1 (stone-design-1)
1493 netmap_lm (netmap_lm)
1494 ica (ica)
1495 cvc (cvc)
1496 liberty-lm (liberty-lm)
1497 rfx-lm (rfx-lm)
1498 watcom-sql (Watcom-SQL)
1499 fhc (Federico Heinz Consultora)
1500 vlsi-lm (VLSI License Manager)
1501 sas-3 (Satellite-data Acquisition System 3)
1502 shivadiscovery (Shiva)
1503 imtc-mcs (Databeam)
1504 evb-elm (EVB Software Engineering License Manager)
1505 funkproxy (Funk Software, Inc.)
1509 Psyber Streaming Server
1524 ingreslock (ingres)
1525 prospero-np (Prospero Directory Service non-priv)
1525 prospero-np (Prospero Directory Service non-priv)
1526 pdap-np (Prospero Data Access Prot non-priv)
1527 tlisrv (oracle)
1529 coauthor (oracle)
1600 Shivka-Burka
1600 issd ()
1650 nkd ()
1651 proshareaudio (proshare conf audio)
1652 prosharevideo (proshare conf video)
1653 prosharedata (proshare conf data)
1654 prosharerequest (proshare conf request)
1655 prosharenotify (proshare conf notify)
1661 netview-aix-1 (netview-aix-1)
1662 netview-aix-2 (netview-aix-2)
1663 netview-aix-3 (netview-aix-3)
1664 netview-aix-4 (netview-aix-4)
1665 netview-aix-5 (netview-aix-5)
1666 netview-aix-6 (netview-aix-6)
1807 Spy Sender
1981 Shockrave
1986 licensedaemon (cisco license management)
1987 tr-rsrb-p1 (cisco RSRB Priority 1 port)
1988 tr-rsrb-p2 (cisco RSRB Priority 2 port)
1989 tr-rsrb-p3 (cisco RSRB Priority 3 port)
1989 tr-rsrb-p3 (cisco RSRB Priority 3 port)
1990 stun-p1 (cisco STUN Priority 1 port)
1991 stun-p2 (cisco STUN Priority 2 port)
1992 stun-p3 (cisco STUN Priority 3 port)
1992 stun-p3 (cisco STUN Priority 3 port)
1993 snmp-tcp-port (cisco SNMP TCP port)
1994 stun-port (cisco serial tunnel port)
1995 perf-port (cisco perf port)
1996 tr-rsrb-port (cisco Remote SRB port)
1997 gdp-port (cisco Gateway Discovery Protocol)
1998 x25-svc-port (cisco X.25 service (XOT))
1999 TransScout, Backdoor
1999 tcp-id-port (cisco identification port)
2000 TransScout, Insane Network 4, Milennium
2000 callbook ()
2001 TransScout, Trojan Cow
2001 dc ()
2001 dc ()
2002 TransScout
2002 globe ()
2003 TransScout
2004 TranScout
2004 mailbox ()
2004 mailbox ()
2005 TransScout
2005 berknet ()
2005 berknet ()
2006 invokator ()
2006 invokator ()
2007 dectalk ()
2007 dectalk ()
2008 conf ()
2008 conf ()
2009 news ()
2009 news ()
2010 search ()
2010 search ()
2011 raid-cc (raid)
2011 raid-cc (raid)
2012 ttyinfo ()
2012 ttyinfo ()
2013 raid-am ()
2013 raid-am ()
2014 troff ()
2014 troff ()
2015 cypress ()
2015 cypress ()
2015 cypress ()
2016 bootserver ()
2017 cypress-stat ()
2017 cypress-stat ()
2018 terminaldb ()
2018 terminaldb ()
2019 whosockami ()
2019 whosockami ()
2020 xinupageserver ()
2021 servexec ()
2021 servexec ()
2022 down ()
2022 down ()
2023 Ripper Pro, PassRipper
2023 xinuexpansion3 ()
2024 xinuexpansion4 ()
2025 ellpack ()
2025 ellpack ()
2026 scrabble ()
2027 shadowserver ()
2028 submitserver ()
2030 device2 ()
2032 blackboard ()
2033 glogger ()
2034 scoremgr ()
2035 imsldoc ()
2038 objectmanager ()
2040 lam ()
2041 interbase ()
2042 isis ()
2043 isis-bcast ()
2044 rimsl ()
2045 cdfunc ()
2046 sdfunc ()
2047 dls ()
2048 dls-monitor ()
2049 shilp ()
2065 dlsrpn (Data Link Switch Read Port Number)
2067 dlswpn (Data Link Switch Write Port Number)
2115 Bugs
2140 Deep Throat, The invasor
2155 illusion Mailer
2201 ats (Advanced Training System Program)
2283 HVL Rat 5
2500 rtsserv (Resource Tracking system server)
2501 rtsclient (Resource Tracking system client)
2564 hp-3000-telnet (HP 3000 NS/VT block mode telnet)
2565 Striker
2583 WinCrash 2
2600 Digital Root Beer
2716 The Prayer 2
2784 www-dev (world wide web - development)
2801 Phineas Phucker
2989 UDP Rat
3024 WinCrash
3049 NSWS ()
3128 RingZero
3129 Masters Paradise
3150 Deep Throat, The invasor
3264 ccmail (cc:mail/lotus)
3333 dec-notes (DEC Notes)
3421 bmap (Bull Apprise portmapper)
3459 Eclipse 2000
3700 Portal Of Doom
3791 Eclypse, Totaleclipse 1.0
3801 UDP Eclypse
3900 udt_os (Unidata UDT OS)
3984 mapper-nodemgr (MAPPER network node manager)
3985 mapper-mapethd (MAPPER TCP/IP server)
3986 mapper-ws_ethd (MAPPER workstation server)
4000 Psyber Streaming Server
4092 WinCrash
4132 nuts_dem (NUTS Daemon)
4133 nuts_bootp (NUTS Bootp Server)
4321 BoBo, SchoolBus 1.0
4343 unicall (UNICALL)
4444 krb524 (KRB524)
4567 File Nail
4590 ICQTrojan
4672 rfa (remote file access server)
5000 Bubbel, Back Door Setup, Sockets de Troie, Socket 23
5000 commplex-main ()
5001 Back Door Setup, Socket de Troie
5001 commplex-link ()
5002 rfe (radio free ethernet)
5010 telelpathstart (TelepathStart)
5011 One Of The Last Trojans (OOTLT), OOTLT Cart
5011 telelpathattack (TelepathAttack)
5031 NetMetropolitan 1.0/1.04
5032 NetMetropolitan
5050 mmcc (multimedia conference control tool)
5145 rmonitor_secure ()
5190 aol (America-Online)
5236 padl2sim ()
5300 hacl-hb (# HA cluster heartbeat)
5301 hacl-gs (# HA cluster general services)
5302 hacl-cfg (# HA cluster configuration)
5303 hacl-probe (# HA cluster probing)
5304 hacl-local ()
5305 hacl-test ()
5321 Filehotcker
5400 Blade Runner, Back Construction 1.2/1.5
5401 Blade Runner, Back Construction
5402 Blade Runner, Back Construciton
5512 illusion Mailer
5521 illusion Mailer
5550 Xtcp, Xtcp2
5555 ServeMe
5556 Bo Facil
5557 Bo Facil
5569 RoboHack
5637 Crasher
5714 WinCrash
5741 WinCrash
5742 WinCrash
6000 The Thing
6000 x11 (X Window System)
6111 sub-process (HP SoftBench Sub-Process Control)
6141 meta-corp (Meta Corporation License Manager)
6142 aspentec-lm (Aspen Technology License Manager)
6143 watershed-lm (Watershed License Manager)
6144 statsci1-lm (StatSci License Manager - 1)
6145 statsci2-lm (StatSci License Manager - 2)
6146 lonewolf-lm (Lone Wolf Systems License Manager)
6147 montage-lm (Montage License Manager)
6400 The Thing
6558 xdsxdm ()
6666 TCPShell (*NIX Backdoor)
6669 Vampyre
6670 Deep Throat
6711 SubSeven
6712 SubSeven
6713 SebSeven
6771 Deep Throat
6776 BackDoor-G, SubSeven
6883 DeltaSource
6912 ShitHeep
6913 ShitHeep Danny
6939 Indoctrination
6969 GeteCrasher, Priority, IRC 3
6970 GeteCrasher
7000 Remote Grab, Kazimas
7000 afs3-fileserver (file server itself)
7001 afs3-callback (callbacks to cache managers)
7002 afs3-prserver (users & groups database)
7003 afs3-vlserver (volume location database)
7004 afs3-kaserver (AFS/Kerberos authentication service)
7005 afs3-volser (volume managment server)
7006 afs3-errors (error interpretation service)
7007 afs3-bos (basic overseer process)
7008 afs3-update (server-to-server updater)
7009 afs3-rmtsys (remote cache manager service)
7010 ups-onlinet (onlinet uninterruptable power supplies)
7100 font-service (X Font Service)
7200 fodms (FODMS FLIP)
7300 NetMonitor
7301 NetMonitor
7302 NetMonitor
7303 NetMonitor
7304 NetMonitor
7305 NetMonitor
7306 NetMonitor
7307 NetMonitor
7308 NetMonitor
7309 NetMonitor
7789 Back Door Setup, ICKiller
8080 RingZero
8787 BO2K
8879 Hack Office Armageddon
9400 InCommand
9535 man ()
9872 Portal Of Doom
9873 Portal Of Doom
9874 Portal Of Doom
9875 Portal Of Doom
9876 Cyber Attack
9878 TransScout
9989 ini-Killer
9999 The Prayer 1
10067 UDP Portal Of Doom
10101 BrainSpy
10167 UDP Portal Of Doom
10520 Acid Shivers
10607 Coma
10666 Ambush
10752 LINUX mounts Backdoor
11000 Senna Spy
11223 Progenic Trojan
12076 Gjamer
12223 Hack 99 KeyLogger
12345 NetBus, GabanBus, X-Bill, Pie Bill Gates
12346 NetBus 1.0, GabanBus, X-Bill
12361 Whack-a-Mule
12362 Whack-a-Mule
12631 Whack Job
12701 Eclipse 2000
13000 Senna Spy
13700 Kuang 2 The Virus
16484 Mosucker
16969 Priority, Portal Of Doom
17007 isode-dua ()
17300 Kaung 2 The Virus
20000 Milennium
20001 Milennium
20034 NetBus 2 Pro
20203 Logged!, Chupacabra
20331 Bla
21544 Girl Friend, Schwindler 1.8, Schwindler 1.82
22222 Prosiak
23456 Evil FTP, Ugly FTP, Whack Job
23476 Donald Duck
23477 Donald Duck
26274 UDP Delta Source
27374 SubSeven 2.1
29891 UDP The Unexplained
30029 AOL Trojan 1.1
30100 NetSphere
30101 NetSphere
30102 NetSphere
30133 NetSphere Final 1.31.337, Trojan Spirit 2001a
30303 Sockets de troie, Socket 23, Socket 25
30999 Kaung 2
31336 BO Whack
31337 Baron Night, BO Client, BO2, BO Facil
31337 UDP Back fire, Back Orifice, Deep BO
31338 NetSpy DK
31338 UDP Back Orifice, Deep BO
31399 NetSpy DK
31554 Schwindler
31666 BoWhack
31785 Hack a Tack
31787 Hack a Tack
31788 Hack a Tack
31789 UDP Hack a Tack
31791 UDP Hack a Tack
31792 Hack a Tack
32418 Acid Battery 1.0
33333 Prosiak
33911 Spirit 2001a
34324 BigGluck, TN, Tiny Telnet Server
37651 Yet Another Trojan
40412 The Spy
40421 Masters Paradise, Agent 40421
40422 Masters Paradise
40423 Masters Paradise
40426 Masters Paradise
43210 SchoolBus 1.6/2.0
44444 Prosiak
47262 UDP Delta Source
49301 Online KeyLogger
50505 Sockets de Troie
50766 Fore, Schwindler
50776 Fore, Remote Windows Shutdown
53001 Remote Windows Shutdown
54320 Back Orifice 2000
54321 Back Orifice 2000, SchoolBus 1.6/2.0
54321 UDP Back Orifice
57341 Netraider
60000 Deep Throat
61466 TeleCommando
65000 Devil 1.03
(*) The List represents the Default Ports for the Trojans listed. With any Trojan source code the default port can be change in order to operate on a different port than listed here.
Please note that
the channel #Dubai home pages are sponsored by your patronage of the link
http://etisalat.charges.too.much.net
This page visited
times since August 19 2000
Copyleft © 1998-99 All rights and wrongs reserved. Copyright
