30001
tcp ErrOr32 [trojan] ErrOr32
30001 tcp ErrOr32 [trojan] ErrOr32
30003 tcp LamersDeath [trojan] Lamers Death
30003 tcp LamersDeath [trojan] Lamers Death
30005 tcp BackdoorJZ [trojan] Backdoor JZ
30029 tcp AOLTrojan [trojan] AOL Trojan
30029 tcp AOLtrojan [trojan] AOL trojan
30100 tcp NetSphere [trojan] NetSphere
30100 tcp NetSphere [trojan] NetSphere
30101 tcp NetSphere [trojan] NetSphere
30101 tcp NetSphere [trojan] NetSphere
30102 tcp NetSphere [trojan] NetSphere
30102 tcp NetSphere [trojan] NetSphere
30103 tcp NetSphere [trojan] NetSphere
30103 tcp NetSphere [trojan] NetSphere
30103 udp NetSphere [trojan] NetSphere
30103 udp NetSphere [trojan] NetSphere
30133 tcp NetSphere [trojan] NetSphere
30133 tcp NetSphere [trojan] NetSphere
30303 tcp SocketsdesTroie [trojan] Sockets des Troie
30303 tcp SocketsdeTroie [trojan] Sockets de Troie
30700 tcp Mantis [trojan] Mantis
30947 tcp Intruse [trojan] Intruse
30947 tcp Intruse [trojan] Intruse
30999 tcp Kuang2 [trojan] Kuang2
30999 tcp Kuang2 [trojan] Kuang2
31221 tcp Knark [trojan] Knark
31335 tcp Trinoo [trojan] Trinoo
31335 tcp Trinoo [trojan] Trinoo
31335 udp Trinoo_Register Trinoo distributed attack tool
31336 tcp BoWhack [trojan] Bo Whack
31336 tcp BoWhack [trojan] Bo Whack
31336 tcp ButtFunnel [trojan] Butt Funnel
31337 tcp ADMworm [trojan] ADM worm
31337 tcp BackFire [trojan] Back Fire
31337 tcp BackOrifice1.20patches [trojan] Back Orifice 1.20 patches
31337 tcp BackOrifice(Lm) [trojan] Back Orifice (Lm)
31337 tcp BackOrificerussian [trojan] Back Orifice russian
31337 tcp BaronNight [trojan] Baron Night
31337 tcp Beeone [trojan] Beeone
31337 tcp bindshell [trojan] bindshell
31337 tcp BO2 [trojan] BO2
31337 tcp BOclient [trojan] BO client
31337 tcp BOFacil [trojan] BO Facil
31337 tcp BOspy [trojan] BO spy
31337 tcp cron/crontab [trojan] cron / crontab
31337 tcp DeepBO [trojan] Deep BO
31337 tcp Freak2k [trojan] Freak2k
31337 tcp Freak88 [trojan] Freak88
31337 tcp Gummo [trojan] Gummo
31337 tcp icmp_pipe.c [trojan] icmp_pipe.c
31337 tcp LinuxRootkitIV [trojan] Linux Rootkit IV
31337 udp BackOrifice [trojan] cDc Back Orifice remote admin tool
31337 udp BackOrifice [trojan] Back Orifice
31337 tcp psybnc [trojan] psybnc
31338 tcp BackOrifice [trojan] Back Orifice
31338 tcp ButtFunnel [trojan] Butt Funnel
31338 tcp ButtFunnel [trojan] Butt Funnel
31338 udp BackOrifice [trojan] Back Orifice
31338 udp DeepBO [trojan] Deep BO
31339 tcp NetSpyDK [trojan] NetSpy (DK)
31339 tcp NetSpy(DK) [trojan] NetSpy (DK)
31510
tcp KingPin KingPin (game)
31510 udp KingPin KingPin (game)
31557 tcp NetBus [trojan] NetBus
31557 tcp Xanadu [trojan] Xanadu
31666 tcp BOWhack [trojan] BOWhack
31666 tcp BOWhack [trojan] BOWhack
31745 tcp BuschTrommel [trojan] BuschTrommel
31785 tcp HackaTack [trojan] Hack¦a¦Tack
31785 tcp Hack´a´Tack [trojan] Hack´a´Tack
31787 tcp HackaTack [trojan] Hack¦a¦Tack
31787 tcp Hack´a´Tack [trojan] Hack´a´Tack
31788 tcp HackaTack [trojan] Hack¦a¦Tack
31788 tcp Hack´a´Tack [trojan] Hack´a´Tack
31789 udp HackaTack [trojan] Hack¦a¦Tack
31789 udp Hack´a´Tack [trojan] Hack´a´Tack
31790 tcp HackaTack [trojan] Hack´a´Tack
31790 tcp Hack´a´Tack [trojan] Hack´a´Tack
31791 udp HackaTack [trojan] Hack¦a¦Tack
31791 udp Hack´a´Tack [trojan] Hack´a´Tack
31792 tcp HackaTack [trojan] Hack¦a¦Tack
31792 tcp Hack´a´Tack [trojan] Hack´a´Tack
32001 tcp DonaldDick [trojan] Donald Dick
32001 tcp DonaldDick [trojan] Donald Dick
32100 tcp PeanutBrittle [trojan] Peanut Brittle
32100 tcp PeanutBrittle [trojan] Peanut Brittle
32100 tcp ProjectnEXT [trojan] Project nEXT
32418 tcp AcidBattery [trojan] Acid Battery
32418 tcp AcidBattery [trojan] Acid Battery
32768 tcp HackersParadise [trojan] Hacker's Paradise
32768 udp filenet-tms Filenet TMS
32769 tcp filenet-rpc Filenet RPC
32769 udp filenet-rpc Filenet RPC
32769 tcp sgi-iphone SGI InPerson Phone
32770 tcp filenet-nch Filenet NCH
32770 udp filenet-nch Filenet NCH
32771 tcp sometimes-rpc5 Sometimes an RPC port on my Solaris box (rusersd)
32771 udp sometimes-rpc6 Sometimes an RPC port on my Solaris box (rusersd)
32772 tcp sometimes-rpc7 Sometimes an RPC port on my Solaris box (status)
32772 udp sometimes-rpc8 Sometimes an RPC port on my Solaris box (status)
32773 tcp sometimes-rpc9 Sometimes an RPC port on my Solaris box (rquotad)
32773 udp sometimes-rpc10 Sometimes an RPC port on my Solaris box
(rquotad)
32774 tcp sometimes-rpc11 Sometimes an RPC port on my Solaris box
(rusersd)
32774 udp sometimes-rpc12 Sometimes an RPC port on my Solaris box
(rusersd)
32775 tcp sometimes-rpc13 Sometimes an RPC port on my Solaris box
(status)
32775 udp sometimes-rpc14 Sometimes an RPC port on my Solaris box
(status)
32776 tcp sometimes-rpc15 Sometimes an RPC port on my Solaris box
(sprayd)
32776 udp sometimes-rpc16 Sometimes an RPC port on my Solaris box
(sprayd)
32777 tcp sometimes-rpc17 Sometimes an RPC port on my Solaris box
(walld)
32777 udp sometimes-rpc18 Sometimes an RPC port on my Solaris box
(walld)
32778 tcp sometimes-rpc19 Sometimes an RPC port on my Solaris box
(rstatd)
32778 udp sometimes-rpc20 Sometimes an RPC port on my Solaris box
(rstatd)
32779 tcp sometimes-rpc21 Sometimes an RPC port on my Solaris box
32779 udp sometimes-rpc22 Sometimes an RPC port on my Solaris box
32780 tcp sometimes-rpc23 Sometimes an RPC port on my Solaris box
32780 udp sometimes-rpc24 Sometimes an RPC port on my Solaris box
32786 tcp sometimes-rpc25 Sometimes an RPC port (mountd)
32786 udp sometimes-rpc26 Sometimes an RPC port
32787 tcp sometimes-rpc27 Sometimes an RPC port dmispd (DMI Service
Provider)
32787 udp sometimes-rpc28 Sometimes an RPC port
32791 tcp Acropolis [trojan] Acropolis
33270 tcp Trinity [trojan] Trinity
33333 tcp Blakharaz [trojan] Blakharaz
33333 tcp Prosiak [trojan] Prosiak
33334 udp EmpireEarth Empire Earth
33335 tcp EmpireEarth Empire Earth
33567 tcp Lion [trojan] Lion
33567 tcp T0rnRootkit [trojan] T0rn Rootkit
33568 tcp Lion [trojan] Lion
33568 tcp T0rnRootkit [trojan] T0rn Rootkit
33577 tcp SonofPsychWard [trojan] Son of PsychWard
33777 tcp SonofPsychWard [trojan] Son of PsychWard
33911 tcp Spirit2000 [trojan] Spirit 2000
33911 tcp Spirit2001 [trojan] Spirit 2001
34324 tcp BigGluck [trojan] Big Gluck
34324 tcp TinyTelnetServer [trojan] Tiny Telnet Server
34324 tcp TN [trojan] TN
34444 tcp DonaldDick [trojan] Donald Dick
34555 udp Trinoo(forWindows) [trojan] Trinoo (for Windows)
35555 udp Trinoo(forWindows) [trojan] Trinoo (for Windows)
37237 tcp Mantis [trojan] Mantis
37266 tcp TheKillerTrojan [trojan] The Killer Trojan
37651 tcp YetAnotherTrojan [trojan] Yet Another Trojan - YAT
37852 udp linkproof Radware LinkProof Content Mgmt
38293 udp NortonAntiVirus Norton Anti-Virus host discovery
38741 tcp CyberSpy [trojan] CyberSpy
39507 tcp Busters [trojan] Busters |
40412
tcp TheSpy [trojan] The Spy
40421 tcp Agent40421 [trojan] Agent 40421
40421 tcp MastersParadise [trojan] Masters Paradise
40422 tcp MastersParadise [trojan] Masters Paradise
40423 tcp MastersParadise [trojan] Masters Paradise
40423 tcp MastersParadise [trojan] Masters Paradise
40425 tcp MastersParadise [trojan] Masters Paradise
40426 tcp MastersParadise [trojan] Masters Paradise
40841
tcp cscp CSCP
40841 udp cscp CSCP
40842 tcp csccredir CSCCREDIR
40842 udp csccredir CSCCREDIR
40843 tcp csccfirewall CSCCFIREWALL
40843 udp csccfirewall CSCCFIREWALL
41337 tcp Storm [trojan] Storm
41524 udp ArcServe Arc Serve (looks for license violations)
41666 tcp RemoteBootTool [trojan] Remote Boot
Tool - RBT
43188 tcp reachout
43188 udp reachout REACHOUT
43189 tcp ndm-agent-port NDM-AGENT-PORT
43189 udp ndm-agent-port NDM-AGENT-PORT
43190 tcp ip-provision IP-PROVISION
43190 udp ip-provision IP-PROVISION
43330 udp litmus-3.0-cmd [trojan] Litmus Trojan
v3.0 command channel
43594 tcp runescape Runescape (game)
43981 udp vicar Vicar networks X10 mgmt
44333 tcp winroute WinRoute Pro (admin port)
44333 udp winroute WinRoute Pro (admin port)
44444 tcp Prosiak [trojan] Prosiak
44575 tcp Exploiter [trojan] Exploiter
44767 udp SchoolBus [trojan] School Bus
44818 tcp rockwell-encap Rockwell Encapsulation
44818 udp rockwell-encap Rockwell Encapsulation
45000 tcp cisco-ids CiscoSecure IDS communication
45054 tcp invision-ag InVision AG
45054 udp invision-ag InVision AG
45559 tcp Maniacrootkit [trojan] Maniac rootkit
45673 tcp Acropolis [trojan] Acropolis
45678 tcp eba EBA PRISE
45678 udp eba EBA PRISE
45966 tcp ssr-servermgr SSRServerMgr
45966 udp ssr-servermgr SSRServerMgr
46626 tcp Psychward [trojan] Psychward
46882 tcp Psychward [trojan] Psychward
47000 tcp mbus Message Bus
47000 udp mbus Message Bus
47017 tcp T0rnRootkit [trojan] T0rn Rootkit
47262 udp DeltaSource [trojan] Delta Source
47262 udp DeltaSource [trojan] Delta Source
47557 tcp dbbrowse Databeam Corporation
47557 udp dbbrowse Databeam Corporation
47624 tcp directplaysrvr Direct Play Server
47624 udp directplaysrvr Direct Play Server
47806 tcp ap ALC Protocol
47806 udp ap ALC Protocol
47808 tcp bacnet Building Automation and Control Networks
47808 udp bacnet Building Automation and Control Networks
48000 tcp nimcontroller Nimbus Controller
48000 udp nimcontroller Nimbus Controller
48001 tcp nimspooler Nimbus Spooler
48001 udp nimspooler Nimbus Spooler
48002 tcp nimhub Nimbus Hub
48002 udp nimhub Nimbus Hub
48003 tcp nimgtw Nimbus Gateway
48003 udp nimgtw Nimbus Gateway
48004 tcp FraggleRock [trojan] Fraggle Rock
48006 tcp FraggleRock [trojan] Fraggle Rock
48556 tcp com-bardac-dw com-bardac-dw
48556 udp com-bardac-dw com-bardac-dw
49000 tcp FraggleRock [trojan] Fraggle Rock
49301 tcp OnLineKeyLogger [trojan] OnLine KeyLogger
50000 tcp SubSARI [trojan] SubSARI
50000 tcp ibm-db2 IBM DB2 generic listener
50000 tcp Terrarium MS .NET Terrarium
50130 tcp Enterprise [trojan] Enterprise
50505 tcp SocketsdesTroie [trojan] Sockets des Troie
50505 tcp SocketsdeTroie [trojan] Sockets de Troie
50766 tcp Fore [trojan] Fore
50766 tcp Fore [trojan] Fore
50766 tcp Schwindler [trojan] Schwindler
51100 tcp freedom ZeroKnowledge Freedom Firewall
51100 udp freedom ZeroKnowledge Freedom Firewall
51101 udp freedom ZeroKnowledge Freedom Firewall
51102 tcp freedom ZeroKnowledge Freedom Firewall
51107 tcp freedom ZeroKnowledge Freedom Firewall
51109 udp freedom ZeroKnowledge Freedom Firewall
51140 tcp freedom ZeroKnowledge Freedom Firewall
51966 tcp Cafeini [trojan] Cafeini
51966 tcp Cafeini [trojan] Cafeini
52317 tcp AcidBattery2000 [trojan] Acid Battery 2000
52317 tcp AcidBattery2000 [trojan] Acid Battery 2000
53001 tcp RemoteWindowsShutdown [trojan] Remote Windows Shutdown
53001 tcp RemoteWindowsShutdown [trojan] Remote Windows Shutdown -
RWS
54283 tcp SubSeven2.1Gold [trojan] SubSeven 2.1 Gold
54283 tcp SubSeven [trojan] SubSeven
54283 tcp SubSeven [trojan] SubSeven
54320 tcp BackOrifice2000 [trojan] Back Orifice 2000
54320 tcp BackOrifice2000 [trojan] Back Orifice 2000
54321 tcp BackOrifice2000 [trojan] Back Orifice 2000
54321 tcp SchoolBus [trojan] School Bus
54321 tcp SchoolBus [trojan] School Bus
54321 udp BackOrifice2000 [trojan] Back Orifice 2000
55165 tcp WMTrojanGenerator [trojan] WM Trojan Generator
55166 tcp WMTrojanGenerator [trojan] WM Trojan Generator
57341 tcp NetRaider [trojan] NetRaider
57341 tcp NetRaider [trojan] NetRaider
58339 tcp ButtFunnel [trojan] Butt Funnel
58339 tcp ButtFunnel [trojan] Butt Funnel
60000 tcp DeepThroat [trojan] Deep Throat
60000 tcp DeepThroat [trojan] Deep Throat
60000 tcp Foreplay [trojan] Foreplay
60000 tcp SocketsdesTroie [trojan] Sockets des Troie
60001 tcp Trinity [trojan] Trinity
60008 tcp Lion [trojan] Lion
60008 tcp T0rnRootkit [trojan] T0rn Rootkit
60068 tcp Xzip6000068 [trojan] Xzip 6000068
60068 tcp Xzip6000068 [trojan] Xzip 6000068
60411 tcp Connection [trojan] Connection
60411 tcp Connection [trojan] Connection
61348 tcp BunkerHill [trojan] Bunker-Hill
61348 tcp Bunker-Hill [trojan] Bunker-Hill
61439 tcp netprowler Axent NetProwler manager
61440 tcp netprowler Axent NetProwler manager
61441 tcp netprowler Axent NetProwler sensor
61466 tcp TeleCommando [trojan] TeleCommando
61466 tcp TeleCommando [trojan] TeleCommando
61603 tcp BunkerHill [trojan] Bunker-Hill
61603 tcp Bunker-Hill [trojan] Bunker-Hill
63333 tcp TrippLite Tripp Lite PowerAlert UPS
63485 tcp BunkerHill [trojan] Bunker-Hill
63485 tcp Bunker-Hill [trojan] Bunker-Hill
64101 tcp TaskmanTaskManager [trojan] Taskman / Task Manager
64101 tcp Taskman [trojan] Taskman
65000 tcp Devil [trojan] Devil
65000 tcp Devil [trojan] Devil
65000 tcp SocketsdesTroie [trojan] Sockets des Troie
65000 tcp Stacheldrahtagent [trojan] Stacheldraht agent - handler
65000 tcp Stacheldraht [trojan] Stacheldraht
65301 tcp pcanywhere
65390 tcp Eclypse [trojan] Eclypse
65421 tcp Jade [trojan] Jade
65432 tcp TheTraitor=th3tr41t0r [trojan] The Traitor (= th3tr41t0r)
65432 tcp TheTraitor [trojan] The Traitor (= th3tr41t0r)
65432 udp TheTraitor=th3tr41t0r [trojan] The Traitor (= th3tr41t0r)
65432 udp TheTraitor [trojan] The Traitor (= th3tr41t0r)
65530 tcp WindowsMite [trojan] Windows Mite
65534 tcp sbininitd [trojan] /sbin/initd
65534 tcp /sbin/initd [trojan] /sbin/initd
65535 tcp Adoreworm [trojan] Adore worm
65535 tcp RC1trojan [trojan] RC1 trojan
65535 tcp RC1trojan [trojan] RC1 trojan
65535 tcp Sins [trojan] Sins |