Your Ad Here Your Ad Here
Results 1 to 4 of 4

Thread: Commonly Used Ports By Trojans

  1. #1
    Along with having a good antivirus program one should be aware of the ports used by some of the trojans.

    So take a look and save it somewhere.

    Commonly Used Trojan Port Numbers!

    port 21 - Blade Runner, Doly Trojan, Fore, Invisible FTP, WebEx, WinCrash
    port 23 - Tiny Telnet Server
    port 25 - Antigen, Email Password Sender, Haebu Coceda, Shtrilitz
    Stealth, Terminator, WinPC, WinSpy
    port 31 - Hackers Paradise
    port 80 - Executor
    port 456 - Hackers Paradise
    port 555 - Ini-Killer, Phase Zero, Stealth Spy
    port 666 - Satanz Backdoor
    port 1001 - Silencer, WebEx
    port 1011 - Doly Trojan
    port 1170 - Psyber Stream Server, Voice
    port 1234 - Ultors Trojan
    port 1245 - VooDoo Doll
    port 1492 - FTP99CMP
    port 1600 - Shivka-Burka
    port 1807 - SpySender
    port 1981 - Shockrave
    port 1999 - BackDoor
    port 2001 - Trojan Cow
    port 2023 - Ripper
    port 2115 - Bugs
    port 2140 - Deep Throat, The Invasor
    port 2801 - Phineas Phucker
    port 3024 - WinCrash
    port 3129 - Masters Paradise
    port 3150 - Deep Throat, The Invasor
    port 3700 - Portal of Doom
    port 4092 - WinCrash
    port 4590 - ICQTrojan
    port 5000 - Sockets de Troie
    port 5001 - Sockets de Troie
    port 5321 - Firehotcker
    port 5400 - Blade Runner
    port 5401 - Blade Runner
    port 5402 - Blade Runner
    port 5569 - Robo-Hack
    port 5742 - WinCrash
    port 6670 - DeepThroat
    port 6771 - DeepThroat
    port 6969 - GateCrasher, Priority
    port 7000 - Remote Grab
    port 7300 - NetMonitor
    port 7301 - NetMonitor
    port 7306 - NetMonitor
    port 7307 - NetMonitor
    port 7308 - NetMonitor
    port 7789 - ICKiller
    port 9872 - Portal of Doom
    port 9873 - Portal of Doom
    port 9874 - Portal of Doom
    port 9875 - Portal of Doom
    port 9989 - iNi-Killer
    port 10167 - Portal of Doom
    port 11000 - Senna Spy
    port 11223 - Progenic trojan
    port 12223 - Hack&99 KeyLogger
    port 12345 - GabanBus, NetBus
    port 12346 - GabanBus, NetBus
    port 12361 - Whack-a-mole
    port 12362 - Whack-a-mole
    port 16969 - Priority
    port 20001 - Millennium
    port 20034 - NetBus 2 Pro
    port 21544 - GirlFriend
    port 22222 - Prosiak
    port 23456 - Evil FTP, Ugly FTP
    port 26274 - Delta
    port 31337 - Back Orifice
    port 31338 - Back Orifice, DeepBO
    port 31339 - NetSpy DK
    port 31666 - BOWhack
    port 33333 - Prosiak
    port 34324 - BigGluck, TN
    port 40412 - The Spy
    port 40421 - Masters Paradise
    port 40422 - Masters Paradise
    port 40423 - Masters Paradise
    port 40426 - Masters Paradise
    port 47262 - Delta
    port 50505 - Sockets de Troie
    port 50766 - Fore
    port 53001 - Remote Windows Shutdown
    port 61466 - Telecommando
    port 65000 - Devil


    All I can say is Keep an eye on your ports

    I.am
    <span style='color:black'> I am a part of all that I have met - Lord Tennyson</span>
    <span style='color:blue'>Try not to let your mind wander...it is too small and fragile to be out by itself</span>

  2. Software & Hardware   -   #2
    Thank you.

  3. Software & Hardware   -   #3
    Rip The Jacker's Avatar Retired
    Join Date
    Nov 2002
    Location
    Los Angeles, CA
    Age
    31
    Posts
    6,435
    Good post. Here is a bigger list, comes with details on most of the trojans.

  4. Software & Hardware   -   #4
    shn's Avatar 3μ|\|(7
    Join Date
    May 2003
    Posts
    3,585
    Any trojan that is created to bind to common parts doesnt make too much sense at all.

    Unless its targeted at home users who alot of times may not be running common services like telnet, ssh, ftp, etc. But if they are then the trojan is of no use because the port is already being used by a legitamite system service.

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •