Trojans and used Ports

Trojans Port TCP/UDP
Acid Battery 1.0 32418
Acid Shivers 10520 TCP
Agent 31 31 TCP
Agent 40421 40421 TCP
AimSpy 777
Ajan 25
Ambush 10666
Antigen 25
AOL Trojan 1.1 30029 TCP
Attack FTP 666 TCP
Back Construction 21
Back Construction 666
Back Construction 5401
Back Construction 5402
Back Construction 1.2+1.5 5400
Back Door Setup 5000
Back Door Setup 5001
Back Door Setup 7789
Back Orifice 31337
Back Orifice 31338 UDP
Back Orifice 54320 UDP
Back Orifice 54321 TCP
Back Orifice (BO) DLL 1349 UDP
Back Orifice 2000 8787
Back Orifice 2000 54320 TCP
Back Orifice 2000 54321 UDP
BackDoor 1999 TCP
BackDoor-G 1243
BackDoor-G 6776
BackFire 31337 UDP
Backorifice (BO) 31337 UDP
Baron Night 31337 TCP
BigGluck 34324 TCP
Bla 1042 TCP
Bla 20331
Bla 1.1 1024
Blade Runner 21
Blade Runner 5400 TCP
Blade Runner 5401 TCP
Blade Runner 5402 TCP
BO client 31337
BO Facil 5556 TCP
BO Facil 5557 TCP
Bo Facil 31337
BO JammerKillah 121 TCP
Bo Whack 31336 TCP
BO2 31337
BoBo 4321
BOWhack 31666 TCP
BrainSpy 10101
Bubbel 5000
Bugs 2115 TCP
Cain & Abel 666
Chupacabra 20203
Click attack 0 ICMP
Coma 10607 TCP
Cyber Attacker 9876 TCP
Danny 4567
Danny 6912
Danny 10607
Dark Shadow 911 TCP
Deep Throat 2140 TCP/UDP
Deep Throat 1.0 3150 TCP/UDP
Deep Throat 2.0 & 3.0 60000 TCP
DeepBO 31337
DeepBO 31338 UDP
DeepThroat 41 TCP
DeepThroat 999 TCP
DeepThroat 2.0 & 3.0 6670 TCP
DeepThroat 2.0 & 3.0 6771 TCP
Delta Source 26274 TCP/UDP
Delta Source 47252 TCP
Delta Source 47262 UDP
DeltaSource (DarkStar) 6883
Der Spaeher 3 1000
Devil 1.03 65000 TCP
Digital RootBeer 2600
DMSetup 58 TCP
DMSetup 59
Doly Trojan 1012 TCP
Doly Trojan 1.1 21
Doly Trojan 1.1+1.2 1011 TCP
Doly Trojan 1.30 (Subm.Cronco) 1010
Doly Trojan 1.35 1010
Doly Trojan 1.5 1015 TCP
Doly Trojan 1.5 (Subm.Cronco) 1015 TCP
Doly Trojan 1.6 1016
Donald Dick 23476 TCP
Donald Dick 23477 TCP
Eclipse 2000 3459 TCP
Eclipse 2000 12701
Eclypse 3801 UDP
Email Password Sender 25
Evil FTP 23456 TCP
Executor 80 TCP
File Nail 4567 TCP
Firehotcker 79 TCP
Firehotcker 5321 TCP
Fore 21
Fore 50766 TCP
FTP trojan 21
FTP99CMP 1492 TCP
GabanBus 12345
GabanBus 12346
GateCrasher 6969 TCP
GateCrasher 6970 TCP
GirlFriend 21554 TCP
GJamer 12076 TCP
Hack City Ripper Pro 2023
Hack Office Armageddon 8879
Hack´99 12223 TCP
Hack´a´Tack 31785 TCP
Hack´a´Tack 31787 UDP
Hack´a´Tack 31788 UDP
Hack´a´Tack 31789 UDP
Hack´a´Tack 31790 UDP
Hack´a´Tack 31791 UDP
Hack´a´Tack 31792
Hackers Paradise 31 TCP
Hackers Paradise 456 TCP
Haebu Coceda (= Naebi) 25
Happy 99 25
Happy 99 119 TCP
Hidden Port V2.0 99
HVL Rat5 2283 TCP
ICKiller 7789 TCP
ICQ 1027 TCP
ICQ 1029 TCP
ICQ 1032 TCP
ICQTrojan 4590 TCP
IcqTrojan 4950
Illusion Mailer 2155 TCP
Illusion Mailer 5512
Illusion Mailer 5521
InCommand 9400
Indoctrination 6939 TCP
Ini-Killer 555
iNi-Killer 9989 TCP
Invisible FTP 21
IRC 3 6969
Kazimas 113 TCP
Kazimas 7000
KeyLogger 12223 TCP
Kuang 2 30999 TCP
Kuang2 25
Kuang2 The Virus 13700
Kuang2 The Virus 17300 TCP
Larva 21
Logged! 20203
Masters Paradise 31
Masters Paradise 3129 TCP
Masters Paradise 40421 TCP
Masters Paradise 40422 TCP
Masters Paradise 40423 TCP
Masters Paradise 40425 TCP
Masters Paradise 40426 TCP
Mavericks Matrix 1269 TCP
Millennium 20000 TCP
Millennium 20001 TCP
NeTAdmin 555
Netbios datagram 138 TCP/UDP
Netbios name (DoS attacks) 137 TCP/UDP
Netbios Remote procedure call 135 TCP/UDP
Netbios session (DoS attacks) 139 TCP/UDP
NetBus 12345 TCP
NetBus 12456 TCP
NetBus 1.x (avoiding Netbuster) 12346 TCP
NetBus 2 Pro 20034 TCP
NetMetropolitan 1.0 & 1.04 5031
NetMetropolitan 1.04 5032
NetMonitor 7300 TCP
NetMonitor 7301 TCP
NetMonitor 7306 TCP
NetMonitor 7307 TCP
NetMonitor 7308 TCP
Netpatch 31337 TCP
Netscape/Corba exploit 2086 TCP
NetSphere 30100 TCP
NetSphere 30101 TCP
NetSphere 30102 TCP
Netsphere Final 30133
NetSpy 1024 TCP
NetSpy 1033
NetSpy DK 31338 TCP
NetSpy DK 31339 TCP
Nikhil G. 1509
Nikhil G. 1807
Nikhil G. 2140
Nikhil G. 2801
One of the Last Trojans (OOTLT) 5011
Online Keylogger 49301
Pass Ripper 2023 TCP
Password Generator Protocol 129 TCP
Peur de Rien FTP 666
Phase Zero 555 TCP
Phineas Phucker 2801 TCP
Pie Bill Gates 12345
Ping Attack 8 ICMP
Portal of Doom 3700 TCP
Portal of Doom 9872 TCP
Portal of Doom 9873 TCP
Portal of Doom 9874 TCP
Portal of Doom 9875 TCP
Portal of Doom 10067 TCP/UDP
Portal of Doom 10167 TCP
Portal of Doom 10167 UDP
Priority 6969 TCP
Priority 16969 TCP
ProgenicTrojan 11223 TCP
ProMail Trojan 25
ProMail Trojan 110 TCP
Prosiak 33333 TCP
Prosiak 0.47 22222 TCP
Psyber Streaming Server 1024
Psyber Streaming Server 1170
Psyber Streaming Server 1509 TCP
Psyber Streaming Server 4000
Rasmin 531 TCP
Rasmin 1045 TCP
RAT 2989 UDP
Remote Explorer 2000 TCP
Remote Grab 7000 TCP
Remote Windows Shutdown 53001 TCP
RingZero 80
RingZero 3028 TCP
RingZero 3128
RingZero 8080 TCP
Robo-Hack 5569 TCP
Satanz Backdoor 666
School Bus 1.6 & 2.0 54321 TCP
Schoolbus 1.0 4321
Schoolbus 1.6 & 2.0 43210
Schwindler 50766
Schwindler 1.82 21544
Senna Spy 11000 TCP
Senna Spy 13000 TCP
ServeMe 5555 TCP
ServeU 666
Shadow Phyre 666
Shit Heep 6912 TCP
Shiva-Burka 1600 TCP
ShockRave 1981 TCP
Shtrilitz 25
Silencer 1001 TCP
Socket 25 30303
Socket23 5000
Sockets de Troie 30303 TCP
Sockets de Troie v1 5000 TCP
Sockets de Troie v1 5001 TCP
Sockets de Troie v2 50505 TCP
SoftWar 1207
SpySender 1807 TCP
Stealth 25
Stealth Spy 555 TCP
Streaming Audio Trojan 1170 TCP
Striker 2565 TCP
SubSeven 1243 TCP
SubSeven 6711 TCP
SubSeven 6712 TCP
SubSeven 6713 TCP
SubSeven 6776 TCP
SubSeven 2.1 27374
SubSeven 2.1 27573 UDP
SubSeven 2.1 27573 TCP
SubSeven Apocalypse 1243
Tapiras 25
TCP Wrappers 421 TCP
Telecommando 61466 TCP
Terminator 25
The Invasor 2140
The Invasor 3150
The Spy 40412 TCP
The tHing 6400 TCP
The tHing 1.6 6000
The Unexplained 29891 TCP/UDP
Tiny Telnet Server 34324
Tiny Telnet Server (= TTS) 23
TN 34324 TCP
Total Eclypse 1.0 (FTP) 3791 TCP
TransScout 1999
TransScout 2000
TransScout 2001
TransScout 2002 TCP
TransScout 2003 TCP
TransScout 2004 TCP
TransScout 2005 TCP
TransScout 9878 TCP
Trin00 DoS Attack 27665 TCP
Trin00 DoS Attack 31335 UDP
Trojan Cow 2001 TCP
Trojan Spirit 2001a 30133
Trojan Spirit 2001a 33911 TCP
Ugly FTP 23456 TCP
Ultors Trojan 1243
Ultor's Trojan 12345 TCP
Unknown Trojan 33390 UDP
Vampyre 1.0 6669 TCP
Voice 1170 TCP
VooDoo Doll 1245 TCP
WebEx 21
WebEx 1001 TCP
Whack Job 23456
Whack-a-mole 12361 TCP
Whack-a-mole 12362 TCP
WhackJob 12631 TCP
WinCrash 21
WinCrash 3024 TCP
WinCrash 4092 TCP
WinCrash 5714
WinCrash 5741
WinCrash 5742 TCP
WinCrash 2 2583 TCP
Wingate (Socks-Proxy) 1080 TCP
WinPC 25
WinSatan 999
WinSpy 25
X-bill 12345
X-bill 12346
Xtcp 5512 TCP
Xtcp 5550 TCP
Xtreme 1090 TCP

Ports used by Trojans

Port TCP/UDP Trojans
0 ICMP Click attack
8 ICMP Ping Attack
21 Back Construction
21 Blade Runner
21 Doly Trojan 1.1
21 Fore
21 FTP trojan
21 Invisible FTP
21 Larva
21 WebEx
21 WinCrash
23 Tiny Telnet Server (= TTS)
25 Ajan
25 Antigen
25 Email Password Sender
25 Haebu Coceda (= Naebi)
25 Happy 99
25 Kuang2
25 ProMail Trojan
25 Shtrilitz
25 Stealth
25 Tapiras
25 Terminator
25 WinPC
25 WinSpy
31 TCP Agent 31
31 TCP Hackers Paradise
31 Masters Paradise
41 TCP DeepThroat
58 TCP DMSetup
59 DMSetup
79 TCP Firehotcker
80 TCP Executor
80 RingZero
99 Hidden Port V2.0
110 TCP ProMail Trojan
113 TCP Kazimas
119 TCP Happy 99
121 TCP BO JammerKillah
129 TCP Password Generator Protocol
135 TCP/UDP Netbios Remote procedure call
137 TCP/UDP Netbios name (DoS attacks)
138 TCP/UDP Netbios datagram
139 TCP/UDP Netbios session (DoS attacks)
421 TCP TCP Wrappers
456 TCP Hackers Paradise
531 TCP Rasmin
555 Ini-Killer
555 NeTAdmin
555 TCP Phase Zero
555 TCP Stealth Spy
666 TCP Attack FTP
666 Back Construction
666 Cain & Abel
666 Satanz Backdoor
666 ServeU
666 Shadow Phyre
666 Peur de Rien FTP
777 AimSpy
911 TCP Dark Shadow
999 TCP DeepThroat
999 WinSatan
1000 Der Spaeher 3
1001 TCP Silencer
1001 TCP WebEx
1010 Doly Trojan 1.30 (Subm.Cronco)
1010 Doly Trojan 1.35
1011 TCP Doly Trojan 1.1+1.2
1012 TCP Doly Trojan
1015 TCP Doly Trojan 1.5 (Subm.Cronco)
1015 TCP Doly Trojan 1.5
1016 Doly Trojan 1.6
1024 TCP NetSpy
1024 Psyber Streaming Server
1024 Bla 1.1
1027 TCP ICQ
1029 TCP ICQ
1032 TCP ICQ
1033 NetSpy
1042 TCP Bla
1045 TCP Rasmin
1080 TCP Wingate (Socks-Proxy)
1090 TCP Xtreme
1170 Psyber Streaming Server
1170 TCP Streaming Audio Trojan
1170 TCP Voice
1207 SoftWar
1243 BackDoor-G
1243 TCP SubSeven
1243 SubSeven Apocalypse
1243 Ultors Trojan
1245 TCP VooDoo Doll
1269 TCP Mavericks Matrix
1349 UDP Back Orifice (BO) DLL
1492 TCP FTP99CMP
1509 TCP Psyber Streaming Server
1509 Nikhil G.
1600 TCP Shiva-Burka
1807 TCP SpySender
1807 Nikhil G.
1981 TCP ShockRave
1999 TransScout
1999 TCP BackDoor
2000 TransScout
2000 TCP Remote Explorer
2001 TransScout
2001 TCP Trojan Cow
2002 TCP TransScout
2003 TCP TransScout
2004 TCP TransScout
2005 TCP TransScout
2023 Hack City Ripper Pro
2023 TCP Pass Ripper
2086 TCP Netscape/Corba exploit
2115 TCP Bugs
2140 TCP/UDP Deep Throat
2140 The Invasor
2140 Nikhil G.
2155 TCP Illusion Mailer
2283 TCP HVL Rat5
2565 TCP Striker
2583 TCP WinCrash 2
2600 Digital RootBeer
2801 TCP Phineas Phucker
2801 Nikhil G.
2989 UDP RAT
3024 TCP WinCrash
3028 TCP RingZero
3128 RingZero
3129 TCP Masters Paradise
3150 TCP/UDP Deep Throat 1.0
3150 The Invasor
3459 TCP Eclipse 2000
3700 TCP Portal of Doom
3791 TCP Total Eclypse 1.0 (FTP)
3801 UDP Eclypse
4000 Psyber Streaming Server
4092 TCP WinCrash
4321 BoBo
4321 Schoolbus 1.0
4567 TCP File Nail
4567 Danny
4590 TCP ICQTrojan
4950 IcqTrojan
5000 Bubbel
5000 Back Door Setup
5000 TCP Sockets de Troie v1
5000 Socket23
5001 Back Door Setup
5001 TCP Sockets de Troie v1
5011 One of the Last Trojans (OOTLT)
5031 NetMetropolitan 1.0 & 1.04
5032 NetMetropolitan 1.04
5321 TCP Firehotcker
5400 TCP Blade Runner
5400 Back Construction 1.2+1.5
5401 TCP Blade Runner
5401 Back Construction
5402 TCP Blade Runner
5402 Back Construction
5512 Illusion Mailer
5512 TCP Xtcp
5521 Illusion Mailer
5550 TCP Xtcp
5555 TCP ServeMe
5556 TCP BO Facil
5557 TCP BO Facil
5569 TCP Robo-Hack
5714 WinCrash
5741 WinCrash
5742 TCP WinCrash
6000 The tHing 1.6
6400 TCP The tHing
6669 TCP Vampyre 1.0
6670 TCP DeepThroat 2.0 & 3.0
6711 TCP SubSeven
6712 TCP SubSeven
6713 TCP SubSeven
6771 TCP DeepThroat 2.0 & 3.0
6776 BackDoor-G
6776 TCP SubSeven
6883 DeltaSource (DarkStar)
6912 TCP Shit Heep
6912 Danny
6939 TCP Indoctrination
6969 TCP GateCrasher
6969 TCP Priority
6969 IRC 3
6970 TCP GateCrasher
7000 TCP Remote Grab
7000 Kazimas
7300 TCP NetMonitor
7301 TCP NetMonitor
7306 TCP NetMonitor
7307 TCP NetMonitor
7308 TCP NetMonitor
7789 Back Door Setup
7789 TCP ICKiller
8080 TCP RingZero
8787 Back Orifice 2000
8879 Hack Office Armageddon
9400 InCommand
9872 TCP Portal of Doom
9873 TCP Portal of Doom
9874 TCP Portal of Doom
9875 TCP Portal of Doom
9876 TCP Cyber Attacker
9878 TCP TransScout
9989 TCP iNi-Killer
10067 TCP/UDP Portal of Doom
10101 BrainSpy
10167 TCP Portal of Doom
10167 UDP Portal of Doom
10520 TCP Acid Shivers
10607 TCP Coma
10607 Danny
10666 Ambush
11000 TCP Senna Spy
11223 TCP ProgenicTrojan
12076 TCP GJamer
12223 TCP Hack´99
12223 TCP KeyLogger
12345 GabanBus
12345 TCP NetBus
12345 Pie Bill Gates
12345 X-bill
12345 TCP Ultor's Trojan
12346 GabanBus
12346 TCP NetBus 1.x (avoiding Netbuster)
12346 X-bill
12361 TCP Whack-a-mole
12362 TCP Whack-a-mole
12456 TCP NetBus
12631 TCP WhackJob
12701 Eclipse 2000
13000 TCP Senna Spy
13700 Kuang2 The Virus
16969 TCP Priority
17300 TCP Kuang2 The Virus
20000 TCP Millennium
20001 TCP Millennium
20034 TCP NetBus 2 Pro
20203 Chupacabra
20203 Logged!
20331 Bla
21544 Schwindler 1.82
21554 TCP GirlFriend
22222 TCP Prosiak 0.47
23456 TCP Evil FTP
23456 TCP Ugly FTP
23456 Whack Job
23476 TCP Donald Dick
23477 TCP Donald Dick
26274 TCP/UDP Delta Source
27374 SubSeven 2.1
27573 UDP SubSeven 2.1
27573 TCP SubSeven 2.1
27665 TCP Trin00 DoS Attack
29891 TCP/UDP The Unexplained
30029 TCP AOL Trojan 1.1
30100 TCP NetSphere
30101 TCP NetSphere
30102 TCP NetSphere
30133 Netsphere Final
30133 Trojan Spirit 2001a
30303 TCP Sockets de Troie
30303 Socket 25
30999 TCP Kuang 2
31335 UDP Trin00 DoS Attack
31336 TCP Bo Whack
31337 TCP Baron Night
31337 UDP Backorifice (BO)
31337 BO client
31337 BO2
31337 Bo Facil
31337 UDP BackFire
31337 Back Orifice
31337 DeepBO
31337 TCP Netpatch
31338 UDP Back Orifice
31338 UDP DeepBO
31338 TCP NetSpy DK
31339 TCP NetSpy DK
31666 TCP BOWhack
31785 TCP Hack´a´Tack
31787 UDP Hack´a´Tack
31788 UDP Hack´a´Tack
31789 UDP Hack´a´Tack
31790 UDP Hack´a´Tack
31791 UDP Hack´a´Tack
31792 Hack´a´Tack
32418 Acid Battery 1.0
33333 TCP Prosiak
33390 UDP Unknown Trojan
33911 TCP Trojan Spirit 2001a
34324 TCP BigGluck
34324 TCP TN
34324 Tiny Telnet Server
40412 TCP The Spy
40421 TCP Agent 40421
40421 TCP Masters Paradise
40422 TCP Masters Paradise
40423 TCP Masters Paradise
40425 TCP Masters Paradise
40426 TCP Masters Paradise
43210 Schoolbus 1.6 & 2.0
47252 TCP Delta Source
47262 UDP Delta Source
49301 Online Keylogger
50505 TCP Sockets de Troie v2
50766 TCP Fore
50766 Schwindler
53001 TCP Remote Windows Shutdown
54320 TCP Back Orifice 2000
54320 UDP Back Orifice
54321 TCP School Bus 1.6 & 2.0
54321 TCP Back Orifice
54321 UDP Back Orifice 2000
60000 TCP Deep Throat 2.0 & 3.0
61466 TCP Telecommando
65000 TCP Devil 1.03