Page 1 of 2 12 LastLast
Results 1 to 10 of 12

Thread: Trojans - Ports

  1. #1
    Senior Member
    Join Date
    Mar 2002
    Posts
    166

    Exclamation Trojans - Ports

    Here is a list i made after about a month's research. By using some of the most popular Anti-Virus programes like Norton Antivirus 2003 and a bit 2004. Hope you find it useful.

    General Ports:
    • Commonly used non-trojaneous common protocol ports:
      13
      17
      19
      21
      23
      25
      79
      80
      103
      110
      113
      135
      139
      1080
    • Targeted TCP Port Scan-List (Proxies, SOCKS, Wingates etc.):
      23
      80
      3128
      1080
      8000
      8080
    • Trojans ports:
      420
      666
      777
      831
      901
      1001
      1005
      1010
      1011
      1012
      1015
      1016
      1234
      1243
      1257
      1492
      1969
      1986
      2000
      2001
      2140
      2300
      2583
      2773
      2989
      5000
      5277
      5742
      5802
      5880
      6317
      6400
      6667
      6670
      6711
      6712
      6713
      6718
      6771
      6776
      6969
      7215
      7300
      7410
      7424
      7597
      7626
      7826
      8000
      8787
      8812
      8976
      9400
      9561
      9696
      10100
      10101
      10111
      11225
      11831
      12345
      12349
      12550
      14285
      15432
      16484
      16661
      16959
      17569
      20001
      20003
      20005
      20023
      20034
      21212
      21544
      21554
      22115
      22222
      23005
      23232
      23432
      23456
      23476
      24000
      25386
      27374
      28000
      28428
      29559
      30000
      30003
      30100
      30303
      30700
      31320
      31337
      31415
      33577
      33777
      35000
      40000
      40123
      40421
      45673
      50505
      51234
      51966
      52978
      54283
      54320
      54321
      60000
      65000


    Ports: Programmes running on them.

    0:(Reserved)
    1:TCP-MUX - TCP Port Service Multiplexer. Common start for port-scans
    2:COMPRESSNET - Management Utility, RAT: Death
    3:COMPRESSNET - Compression Process
    4:SFSSD - Self-Certifying File System Daemon
    5:RJE - Remote Job Entry (RFC 725)
    7:Echo Protocol (RFC 862), RAT: GForce
    9:Discard Protocol (RFC 863)
    11:SYSSTAT - System Status, Active Users, RAT: NetSlayer
    12:RAT: Red Horse
    13:Daytime Protocol (RFC 867)
    15:NETSTAT - Network Status
    17:QOTD - Quote of the Day Protocol (RFC 865)
    18:MSP - Message Send Protocol (RFC 1312)
    19:CHARGEN - Character Generator (RFC 864), RAT: Infector
    20:FTP-DATA - File Transfer Protocol [Data] (RFC 354), RAT: Senna Spy FTP server
    21:FTP - File Transfer Protocol [Control] (RFC 354), RAT: Back Construction, Blade Runner, Doly Trojan, Fore, Invisible FTP, Juggernaut, Reverse Trojan, Larva, MotIv FTP, Net Administrator, Senna Spy FTP server, Traitor 21, WebEx, WinCrash, NerTe, LittleWitch FTP, NMKB, MaLPaYo, FTP.Owned FTP, Diems Mutter, TrojMax, FreddyK, LMR
    22:SSH - SSH (Secure Shell) Remote Login Protocol, RAT: Shaft, Shadow Remote, Bingle
    23:Telnet Protocol (RFC 854), WinGate, RAT: Fire HacKer, Tiny Telnet Server - TTS, Truva Atl, RTB666, TelnetPro 1.0, Swarm, Baron Night, AlphaDog, MMX, Net Coach, PEST, Manipulator Lite
    24:PMS - Private Mail System
    25:SMTP - Simple Mail Transfer Protocol (RFC 913), RAT: Ajan, Antigen, Email Password Sender - EPS, EPS II, Gip, Gris, Happy99, Hpteam mail, I love you, Kuang2, Magic Horse, MBT (Mail Bombing Trojan), Moscow Email trojan, Naebi, NewApt worm, ProMail trojan, Shtirlitz, Stealth, Tapiras, Terminator, WinPC, WinSpy
    27:NSW-FE - NSW User System FE
    28:RAT: Googs
    29:MSG-ICP - Messege ICP
    31:MSG Authentication, RAT: Agent 31, Hackers Paradise, Masters Paradise
    33:DSP - Display Support Protocol
    35:PPS - Private Printer Server
    36:RAT: Dizer
    37:Time Protocol (RFC 868)
    38:RAP - Internet Route Access Protocol (RFC 1476)
    39:RLP - Resource Location Protocol (RFC 887)
    41:Graphics Protocol (RFC 493), RAT: Deep Throat, Foreplay or Reduced Foreplay
    42:NAMESERVER - Host Name Server (RFC 953)
    43:WHOIS - Who Is (RFC 812)
    44:MPM-FLAGS - MPM FLAGS Protocol
    45:MPM - Message Processing Module (Receive)
    46:MPM-SND - Message Processeing Module (Send)
    47:NI-FTP - NI FTP (File Transfer Protocol)
    48:AUDITD - Digital Audit Daemon, RAT: DRAT
    49:BBN-LOGIN - Login Host Protocol (TACACS) (RFC 1492)
    50:RE-MAIL-CK - Remote Mail Checking Protocol (RFC 1339), RAT: DRAT
    51:LA-MAINT - IMP Logical Address Maintenance, RAT: FLB
    52:XNS-TIME - XNS Time Protocol, RAT: Muska52
    53:DOMAIN - Domain Name Server, RAT: Muska52
    54:XNS-CH - XNS *************, RAT: Muska52
    55:ISI-GL - ISI Graphics Language, RAT: Muska52
    56:XNS-AUTH - XNS Authentication
    57:MTP - Private terminal access
    58:XNS-MAIL - XNS Mail, RAT: DMSetup
    59:PFS - Private File System, RAT: DMSetup
    61:NI-MAIL
    62:ACAS - ACA Services
    63:WHOIS++ - whois++ (RFC 1834)
    64:COVIA - Communications Integrator (CI)
    65:TACACS-DS - TACACS-Database Service
    66:SQL*NET - Oracle SQL*NET, RAT: Albareki, Storm, Dark Sill
    67:BOOTPS - Bootstrap Protocol Server (RFC 951)
    68:BOOTPC - Bootstrap Protocol Client (RFC 951)
    69:TFTP - Trivial File Transfer Protocol (RFC 1986), RAT: Pasana
    70:GOPHER - Gopher (RFC 1436)
    71:NETRJS-1 - Remote Job Service
    72:NETRJS-2 - Remote Job Service
    73:NETRJS-3 - Remote Job Service
    74:NETRJS-4 - Remote Job Service
    75:PDOS - Private dial out service
    76:DEOS - Distributed External Object Store
    77:RJE - Private RJE (Remote Job Entry) service
    78:VETTCP
    79:Name/Finger Protocol (RFC 742), RAT: CDK, Firehotcker
    80:WWW-HTTP - World Wide Web HTTP (Hyper Text Transfer Protocol) (RFC 1945), RAT: AckCmd, Back End, CGI Backdoor, Executor, Hooker, RingZero, RTB666, NerTe, 23, Keylog.ev0, m invisible webserver lite, IIEx, Haan, ItAdEm, Task-X, HTTP
    81:HOSTS2-NS - HOSTS2 Name Server, RAT: RemoConChubo, 23
    82:XFER Utility
    83:MIT-ML-DEV
    84:CTF - Common Trace Facility
    85:MIT-ML-DEV - MIT ML Device
    86:MFCOBOL - Micro Focus Cobol
    87:LINK - Private terminal link
    88:KERBEROS, RAT: Deaths Corner
    89:SU-MIT-TG - SU/MIT Telnet Gateway
    90:DNSIX - DNSIX Securit Attribute Token Map
    91:MIT Dover Spooler, RAT: Delf.cc
    92:NPP - Network Printing Protocol, RAT: Delf.cc
    93:DCP - Device Control Protocol
    94:OBJCALL - Tivoli Object Dispatcher
    95:SUPDUP
    96:DIXIE - DIXIE Protocol Specification (RFC 1249)
    97:SWIFT-RVF - Swift Remote Virtural File Protocol
    98:TAC News, RAT: Delf.cc
    99:Metagram Relay, RAT: Hidden port, Delf.cc
    100:NEWACCT - [unauthorized use], RAT: Manipulator, Googs, Back Atack
    101:HOSTNAMES - NIC Host Name Server, RAT: Udps, Back Atack
    102:ISO-TSAP Class 0, RAT: Carved, Back Atack
    103:Genesis Point-to-Point Trans Net, Webster Dictionary / x400, RAT: Back Atack
    104:X400-SND - x400-snd, ACR-NEMA Digital Imag. & Comm. 300, RAT: Back Atack
    105:CSNET-NS - Mailbox Name Nameserver
    106:3COM-TSMUX
    107:RTELNET - Remote Telnet Service
    108:SNAGAS - SNA Gateway Access Server
    109:POP - Post Office Protocol - Version 2 (RFC 937)
    110:POP3 - Post Office Protocol - Version 3 (RFC 1081), RAT: ProMail trojan, Latinus or variant, Vagr
    111:SUNRPC - SUN Remote Procedure Call (RFC 1050)
    112:MCIDAS - McIDAS Data Transmission Protocol, RAT: Keylog.PEST
    113:IDENT - Identification/Authentication Service (RFC 1413), RAT: Invisible Identd Deamon, Kazimas, Cyn
    114:AUDIONEWS - Audio News Multicast
    115:SFTP - Simple File Transfer Protocol (RFC 913)
    116:ANSANOTIFY - ANSA REX Notify
    117:UUCP-PATH - UUCP Path Service
    118:SQL Services
    119:NNTP - Network News Transfer Protocol (RFC 977), RAT: Happy99
    120:CFDPTKT
    121:ERPC - Encore Expedited Remote Pro.Call, RAT: BO JammerkillahV, HAW
    122:SMAKYNET, RAT: Skun
    123:NTP - Network Time Protocol (RFC 958), RAT: Net Controller, Gift, Wintrix, Freeze, Propel, ZUD, Ass4ss1n, Peeper
    124:ANSATRADER - ANSA REX Trader
    125:LOCUS-MAP - Locus PC-Interface Net Map Ser
    126:UNITARY - Unisys Unitary Login
    127:LOCUS-CON - Locus PC-Interface Conn Server
    128:GSS-XLICEN - GSS X License Verification
    129:PWDGEN - Password Generator Protocol
    130:Cisco FNATIVE
    131:Cisco TNATIVE, RAT: Delf.cc
    132:Cisco SYSMAINT
    133:STATSRV - Statistics Service, RAT: Farnaz
    134:INGRES-NET - INGRES-NET Service
    135:DCE endpoint resolution, RPC-LOCATOR - RPC (Remote Procedure Location Service
    136:PROFILE - PROFILE Naming System
    137:NBNS - NETBIOS Name Service
    138:NBDGM - NETBIOS Datagram Service, RAT: LazyAdmin
    139:NBSSN - NETBIOS Session Service
    140:EMFIS-DATA - EMFIS Data Service
    141:EMFIS-CNTL - EMFIS Control Service
    142:BL-IDM - Britton-Lee IDM, RAT: NetTaxi
    143:IMAP - Interactive Mail Access Protocol v2 (RFC 1064), RAT: Back Atack
    144:NEWS
    145:UAAC Protocol
    146:ISO-IP0, RAT: Infector
    147:ISO-IP
    148:CRONUS - CRONUS-SUPPORT, Jargon
    149:AED-512 - AED 512 Emulation Service
    150:SQL-NET
    151:HEMS
    152:BFTP - Background File Transfer Program
    153:SGMP
    154:NETSC-PROD - NETSC
    155:NETSC-DEV - NETSC
    156:SQLSRV - SQL Service
    157:KNET-CMP - KNET/VM Command/Message Protocol
    158:PCMAIL-SRV - PCMail Server
    159:NSS-ROUTING - NSS-Routing
    160:SGMP-TRAPS - SGMP-TRAPS, RAT: Infector II
    161:SNMP - Simple Network Management Protocol (RFC 1067)
    162:SNMPTRAP - SNMPTRAP (Simple Network Management Protocol) (RFC 1067)
    163:CMIP-MAN - CMIP/TCP Manager
    164:CMIP-AGENT - CMIP/TCP Agent
    165:XNS-COURIER - Xerox
    166:S-NET - Sirius Systems
    167:NAMP
    168:RSVD
    169:SEND
    170:PRINT-SRV - Network PostScript, RAT: A-trojan
    171:MULTIPLEX - Network Innovations Multiplex
    172:CL/1 - Network Innovations CL/1
    173:XYPLEX-MUX - Xyplex
    174:MAILQ
    175:VMNET
    176:GENRAD-MUX - GENRAD-MUX
    177:XDMCP - X Display Manager Control Protocol
    178:NEXTSTEP - NextStep Window Server
    179:BGP - Border Gateway Protocol (RFC 1105), RAT: Delf.cc
    180:RIS - Intergraph
    181:UNIFY - Unify
    182:AUDIT - Unisys Audit SITP
    183:OCBINDER - OCBinder
    184:OCSERVER - OCServer
    185:REMOTE-KIS - Remote-KIS
    186:KIS - KIS Protocol
    187:ACI - Application Communication Interface
    188:MUMPS - Plus Five's MUMPS
    189:QFT - Queued File Transport
    190:GACP - Gateway Access Control Protocol
    191:PROSPERO - Prospero Directory Service
    192:OSU-NMS - OSU Network Monitoring System
    193:SRMP - Spider Remote Monitoring Protocol
    194:IRC - Internet Relay Chat Protocol (RFC 1459)
    195:DN6-NLM-AUD - DNSIX Network Level Module Audit
    196:DN6-SMM-RED - DNSIX Session Mgt Module Audit Redir
    197:DLS - Directory Location Service
    198:DLS-MON - Directory Location Service Monitor
    199:SMUX
    200:SRC - IBM System Resource Controller, RAT: Cyberspy, Rebate
    201:AT-RTMP - AppleTalk Routing Maintenance, RAT: One, Kernel32
    202:AT-NBP - AppleTalk Name Binding
    203:AT-3 - AppleTalk Unused
    204:AT-ECHO - AppleTalk Echo
    205:AT-5 - AppleTalk Unused
    206:AT-ZIS - AppleTalk Zone Information
    207:AT-7 - AppleTalk Unused
    208:AT-8 - AppleTalk Unused
    209:QMTP - The Quick Mail Transfer Protocol
    210:Z39.50 - ANSI Z39.50, RAT: FTP.Anal FTP
    211:914C/G - Texas Instruments 914C/G Terminal, RAT: One
    212:ANET - ATEXSSTR
    213:IPX
    214:VMPWSCS - VM PWSCS
    215:SOFTPC - Insignia Solutions
    216:CAILIC - Computer Associates Int'l License Server
    217:DBASE - dBASE Unix
    218:MPP - Netix Message Posting Protocol (RFC 1204)
    219:UARPS - Unisys ARPs
    220:IMAP3 - Interactive Mail Access Protocol v3
    221:FLN-SPX - Berkeley rlogind with SPX auth, RAT: Snape
    222:RSH-SPX - Berkeley rshd with SPX auth, RAT: NeuroticKat, Snape
    223:CDC - Certificate Distribution Center
    242:Direct
    243:SUR-MEAS - Survey Measurement
    244:Dayna
    245:LINK - LINK
    246:DSP3270 - Display Systems Protocol
    256:RAP
    257:Secure Electronic Transaction
    258:Yak Winsock Personal Chat
    259:Efficient Short Remote Operations
    260:Openport
    261:IIOP Name Service over TLS/SSL
    262:ARCISDMS - Arcisdms
    263:HDAP
    280:HTTP-MGMT - http-mgmt
    281:Personal Link
    282:CABLEPORT-AX - Cable Port A/X
    285:RAT: Webcam Trojan
    299:RAT: One
    303:RAT: Nova
    304:RAT: Nova
    305:RAT: Nova
    306:RAT: Nova
    309:ENTRUSTTIME - EntrustTime
    314:RAT: Blaire
    333:RAT: NeoPets
    334:RAT: Backage
    344:PDAP - Prospero Data Access Protocol
    345:PAWSERV - Perf Analysis Workbench, RAT: Cang
    346:ZSERV - Zebra server
    347:FATSERV - Fatmen Server
    348:CSI-SGWP - Cabletron Management Protocol
    350:MATIP Type A
    351:MATIP Type B
    352:DTG-STE-SB - DTAG
    370:RAT: NeuroticKat
    371:CLEAR- Clearcase
    372:ULISTSERV - Unix Listserv
    373:LEGENT-1 - Legent Corporation
    374:LEGENT-2 - Legent Corporation
    375:HASSLE
    376:NIP - Amiga Envoy Network Inquiry Proto
    377:TNETOS - NEC Corporation
    378:DSETOS - NEC Corporation
    379:IS99C - TIA/EIA/IS-99 modem client
    380:IS99S - TIA/EIA/IS-99 modem server
    381:HP-COLLECTOR - HP Performance Data Collector
    382:HP-MANAGED-NODE - HP Performance Data Managed Node
    383:HP-ALARM-MGR - HP Performance Data Alarm Manager
    384:ARNS - A Remote Network Server System
    385:IBM-APP - IBM Application
    386:ASA - ASA Message Router Object Def.
    387:AURP - Appletalk Update-Based Routing Pro.
    388:UNIDATA-LDM - Unidata LDM Version 4
    389:LDAP - Lightweight Directory Access Protocol (RFC 1777)
    390:UIS
    391:SYNOTICS-RELAY - SynOptics SNMP Relay Port
    392:SYNOTICS-BROKER - SynOptics Port Broker Port
    393:DIS - Data Interpretation System
    394:EMBL-NDT - EMBL Nucleic Data Transfer
    395:NETCP - NETscout Control Protocol
    396:NETWARE-IP - Novell Netware over IP
    397:MPTN - Multi Protocol Trans. Net.
    398:KRYPTOLAN
    399:ISO-TSAP-C2 - ISO Transport Class 2 Non-Control over TCP
    400:WORK-SOL - Workstation Solutions
    401:UPS - Uninterruptible Power Supply, RAT: One
    402:Genie Protocol
    403:DECAP
    404:NCED
    405:NCLD
    406:IMSP - Interactive Mail Support Protocol
    407:TIMBUKTU - Timbuktu
    408:PRM-SM - Prospero Resource Manager Sys. Man.
    409:PRM-NM - Prospero Resource Manager Node Man.
    410:DECLADEBUG - DECLadebug Remote Debug Protocol
    411:RMT - Remote MT Protocol
    412:SYNOPTICS-TRAP - Trap Convention Port, Direct Connect Peer-2-Peer File Sharing
    413:SMSP - SMSP
    414:INFOSEEK - InfoSeek
    415:BNET - BNet
    416:Silverplatter, RAT: Monator
    417:Onmux
    418:Hyper-G
    419:ARIEL1
    420:SMPTE - SMPTE, RAT: Breach, Exploiter, Freddy K, Girlfriend
    421:ARIEL2, RAT: TCP Wrappers trojan
    422:ARIEL3
    423:OPC-JOB-START - IBM Operations Planning and Control Start
    424:OPC-JOB-TRACK - IBM Operations Planning and Control Track
    425:ICAD-EL
    426:SMARTSDP - smartsdp
    427:SVRLOC - Server Location
    428:OCS_CMU
    429:OCS_AMU
    430:UTMPSD
    431:UTMPCD
    432:IASD
    433:NNSP
    434:MobileIP-Agent
    435:MOBILIP-MN
    436:DNA-CML
    437:COMSCM
    438:DSFGW
    439:DASP
    440:SGCP
    441:DECVMS-SYSMGT
    442:CVC_HOSTD
    443:HTTPS - HTTPS (Hyper Text Transfer Protocol Secure) - SSL (Secure Socket Layer)
    444:SNPP - Simple Network Paging Protocol (RFC 1568)
    445:MICROSOFT-DS
    446:DDM-RDB
    447:DDM-DFM
    448:DDM-BYTE
    449:AS Server Mapper
    450:TSERVER
    451:SFS-SMP-NET - Cray Network Semaphore server
    452:SFS-CONFIG - Cray SFS config server, RAT: OMPN Flash, OMPN Magic
    453:CREATIVESERVER - CreativeServer
    454:CONTENTSERVER - ContentServer, RAT: DTCold
    455:CREATIVEPARTNR - CreativePartnr, RAT: Hackers Paradise, Fatal Connections
    456:MACON-TCP - macon-tcp, RAT: Hackers Paradise, Daniel, Keylog.Clandestine 2
    457:SCOHELP
    458:APPLEQTC - Apple Quick Time
    459:AMPR-RCMD
    460:SKRONK
    461:DATASURFSRV
    462:DATASURFSRVSEC
    463:ALPES
    464:KPASSWD
    465:SSMTP - SMTP Protocol over TLS/SSL (was ssmtp)
    466:DIGITAL-VRC
    467:MYLEX-MAPD
    468:PHOTURIS
    469:RCP - Radio Control Protocol
    470:SCX-PROXY
    471:MONDEX
    472:LJK-LOGIN
    473:HYBRID-POP
    474:TN-TL-W1
    475:TCPNETHASPSRV
    476:TN-TL-FD1
    477:SS7NS
    478:SPSC
    479:IAFSERVER
    480:IAFDBASE
    481:PH - Ph service
    482:BGS-NSI
    483:ULPNET
    484:INTEGRA-SME - Integra Software Management Environment
    485:POWERBURST - Air Soft Power Burst
    486:AVIAN
    487:SAFT
    488:GSS-HTTP
    489:NEST-PROTOCOL
    490:MICOM-PFS
    491:GO-LOGIN
    492:TICF-1 - Transport Independent Convergence for FNA
    493:TICF-2 - Transport Independent Convergence for FNA
    494:POV-RAY
    495:INTECOURIER
    496:PIM-RP-DISC
    497:DANTZ
    498:SIAM
    499:ISO ILL Protocol
    500:ISAKMP, RAT: Optix Pro
    501:STMF
    502:ASA-APPL-PROTO, RAT: Optix Pro
    503:INTRINSA, RAT: Optix Pro
    504:CITADEL
    505:MAILBOX-LM
    506:OHIMSRV
    507:CRS
    508:XVTTP
    509:SNARE
    510:FCP - FirstClass Protocol
    511:MYNET
    512:EXEC - Remote Process Execution
    513:LOGIN - Remote Login via Telnet, RAT: Grlogin
    514:SHELL - Automatic Remote Process Execution, cmd, RAT: RPC Backdoor, Whacky
    515:PRINTER - Printer Spooler
    516:videotex
    517:TALK - like tenex link, but across
    518:NTALK
    519:UTIME - Unix Time
    520:EFS - Extended File Server, RIP
    521:RIPNG
    522:ULP
    523:IBM-DB2
    523:IBM-DB2
    524:NCP
    525:TIMED - Time Server
    526:TEMPO - newdate
    527:Stock IXChange
    528:Customer IXChange
    529:IRC-SERV
    529:IRC-SERV
    530:COURIER - rpc
    531:CONFERENCE - chat, RAT: Trojan.SemiSoft, Net.666, Rasmin
    532:NETNEWS - readnews
    533:NETWALL - Emergency Broadcasts
    534:MM-ADMIN - MegaMedia Admin
    535:IIOP
    536:OPALIS-RDV
    537:NMSP - Networked Media Streaming Protocol
    538:GDOMAP
    539:APERTUS-LDP - Apertus Technologies Load Determination
    540:UUCP - UUCP Daemon
    541:UUCP - UUCP-RLOGIN - uucp (Unix to Unix Copy) - rlogin (Remote Login)
    542:COMMERCE
    543:KLOGIN - Kerberos Authenticated Login, RAT: Cang
    544:KSHELL - krcmd
    545:APPLEQTCSRVR - Apple qtcsrvr
    546:DHCP-CLIENT - DHCP (Dynamic Host Configuration Protocol) Client
    547:DHCP-SERVER - DHCP (Dynamic Host Configuration Protocol) Server
    548:AFPOVERTCP - AFP over TCP
    549:IDFP
    550:NEW-RWHO
    551:CYBERCASH
    552:DEVICESHARE
    553:PIRP
    554:RTSP - Real Time Stream Control Protocol
    555:DSF - DSF, RAT: Net Administrator, Phase Zero, Phase-0, Stealth Spy
    556:REMOTEFS - rfs (Remote File System) server
    557:OPENVMS-SYSIPC - openvms-sysipc
    558:SDNSKMP
    559:TEEDTAP
    560:RMONITOR
    561:MONITOR
    562:CHSHELL
    563:NNTPS - NNTP Protocol over TLS/SSL (was snntp)
    564:9PFS - plan 9 file service, RAT: Oracle
    565:WHOAMI
    566:STREETTALK
    567:BANYAN-RPC, RAT: hRat
    568:Microsoft Shuttle
    569:Microsoft Rome
    570:demon
    571:udemon
    572:sonar
    573:Banyan-VIP
    574:FTP-AGENT - FTP Software Agent System
    575:VEMMI
    576:IPCD
    577:VNAS
    578:IPDD
    579:DECBSRV
    580:SNTP-HEARTBEAT
    581:BDP - Bundle Discovery Protocol (RFC 2701)
    582:SCC-Security
    583:Philips-VC - Philips Video-Conferencing
    584:KeyServer
    585:IMAP4-SSL
    586:PASSWORD-CHG - Password Change
    587:SUBMISSION
    600:IPCSERVER - Sun IPC server
    605:RAT: Secret Service
    606:URM - Cray Unified Resource Manager
    607:NQS
    608:SIFT-UFT - Sender-Initiated/Unsolicited File Transfer
    609:NPMP-TRAP
    610:NPMP-LOCAL
    611:NPMP-GUI
    612:HMMP-IND
    613:HMMP-OP
    614:SSLSHELL
    615:SCO-INETMGR - Internet Configuration Manager
    616:SCO-SYSMGR - SCO System Administration Server
    617:SCO-DTMGR - SCO Desktop Administration Server
    618:DEI-ICDA
    619:DIGITAL-EVM
    620:SCO-WEBSRVRMGR - SCO WebServer Manager
    621:ESCP-IP
    623:RAT: RTB666
    633:SERVSTAT - Service Status update (Sterling Software)
    634:GINAD
    635:RLZDBASE - RLZ DBase
    636:LDAPS - ldap Protocol over TLS/SSL (was sldap)
    637:LANSERVER
    650:RAT: Assasin
    654:RAT: HoaVeLu
    660:RAT: Zaratustra
    661:RAT: NokNok
    665:RAT: Cyn
    666:Doom (Id Software), RAT: Peur de Rien FTP, Attack FTP, Back Construction, Cain & Abel, NokNok, Satans Back Door - SBD, ServU, Shadow Phyre, F-BackDoor, Worm.Grifin Remote Control, Uprising, Dimbus, TiVedo, MAD, Storm, Ulysses, Beast, Plateau, MaLPaYo, Dracula, Cyn, Dark Sill, InetWatch, DXM SMTP
    667:DISCLOSURE - campaign contribution disclosures, RAT: SniperNet
    668:MECOMM
    669:MEREGISTER - MeRegister, RAT: DP trojan
    670:VACDSM-SWS
    671:VACDSM-APP
    672:VPPS-QUA
    673:CIMPLEX, RAT: Hornet
    674:ACAP
    680:RAT: RTB666
    692:RAT: GayOL, Lightning
    693:RAT: Lightning
    704:ELCSD - errlog copy/server daemon
    705:AGENTX - AgentX
    709:ENTRUST-KMSH - EntrustManager
    710:ENTRUST-ASH - Entrust Administration Service Handler
    717:RAT: DDoS.RAT.HLHSI
    729:NETVIEWDM1 - IBM NetView DM/6000 Server/Client
    730:NETVIEWDM2 - IBM NetView DM/6000 send/tcp, RAT: Keylog.typ0
    731:NETVIEWDM3 - IBM NetView DM/6000 receive/tcp
    741:NETGW
    742:NETRCS - Network based Rev. Cont. Sys.
    744:FLEXLM - Flexible License Manager
    747:FUJITSU-DEV - Fujitsu Device Control
    748:RIS-CM - Russell Info Sci Calendar Manager
    749:KERBEROS-ADM - kerberos administration
    750:RFILE - RFILE
    751:PUMP - PUMP
    752:QRH - QRH
    753:RRH - RRH
    754:TELL - SEND, RAT: DTCold
    758:NLOGIN - NLOGIN
    759:CON - CON
    760:NS - NS
    761:RXE - RXE
    762:QUOTAD - QUOTAD
    763:CYCLESERV - CYCLESERV
    764:OMSERV - OMSERV
    765:WEBSTER - WEBSTER
    767:PHONEBOOK - phone
    769:VID - VID
    770:CADLOCK - CADLOCK
    771:RTIP - RTIP
    772:CYCLESERV2 - CYCLESERV2
    773:SUBMIT - SUBMIT
    774:RPASSWD - RPASSWD
    775:ENTOMB - ENTOMB
    776:WPAGES - WPAGES
    777:RAT: AimSpy, Undetected, Tiny, CS Trojan
    780:WPGS - WPGS
    786:CONCERT - Concert
    789:RAT: AIM Robber
    798:RAT: Oracle
    800:MDBS_DAEMON - MDBS_DAEMON, RAT: NeuroticKitten
    801:DEVICE - DEVICE
    808:RAT: WinHole
    831:RAT: NeuroticKat
    886:ICLCNET-LOCATE - ICL coNETion locate server
    887:ICLCNET_SVINFO - ICL coNETion server info
    888:ACCESSBUILDER - AccessBuilder, CDDATABASE - CDDataBase, RAT: LANfiltrator
    901:RAT: Net-Devil
    902:RAT: Net-Devil
    903:RAT: Net-Devil
    910:RAT: DTCold
    911:XACT-BACKUP - xact-backup, RAT: Dark Shadow, NetCrack, Keylog.Dreamscape, Dua ti choi
    912:RAT: NetCrack
    929:RAT: Avone
    939:RAT: Avone
    954:RAT: Hydroleak
    963:RAT: Splitter
    989:FTPS-DATA - FTP Protocol, data, over TLS/SSL
    990:FTPS - FTP Protocol, control, over TLS/SSL
    991:NAS - Netnews Administration System, RAT: Snape
    992:TELNETS - telnet Protocol over TLS/SSL, RAT: Snape
    993:IMAPS - Imap4 Protocol over TLS/SSL
    994:IRCS - irc Protocol over TLS/SSL
    995:POP3S - Pop3 (Post Office Protocol) over TLS/SSL
    996:VSINET - vsinet
    997:MAITRD - MAITRD, RAT: Matrix
    998:BUSBOY - BUSBOY
    999:PUPROUTER - PUPROUTER, RAT: Deep Throat, Foreplay or Reduced Foreplay, WinSatan, LANfiltrator
    1000:CADLOCK - CADLOCK, RAT: Der Spaeher 3, Theef, U321, Destruktor, Nucker
    1001:RAT: Der Spaeher 3, Le Guardien, Silencer, WebEx, Theef, One, Priority, Lula, Eljefe, Havoc, Darkscan, RFM, Winsock Commander, Keylog.RemoteCon, Jinmozhe, Yello, Adele
    1002:RAT: XQDoor
    1003:RAT: Darkscan, FTP.Avanzado, Jinmozhe
    1005:RAT: Theef
    1010:RAT: Doly Trojan
    1011:RAT: Doly Trojan, Arturik
    1012:RAT: Doly Trojan
    1015:RAT: Doly Trojan, JoTroj
    1016:RAT: Doly Trojan
    1020:RAT: Vampire
    1023:RESERVED - Reserved
    1024:OLD_FINGER - old_finger, RAT: Psyber Streaming Server, NetSpy, R.A.T, Alex
    1025:BLACKJACK - network blackjack, LISTEN - listen, RAT: Gaura
    1026:NTERM - nterm
    1027:RAT: Latinus, FTS
    1028:RAT: HacKErZ
    1029:ICQ Instant Messenger, RAT: Latinus
    1030:IAD1 - BBN IAD, RAT: Clandestine
    1031:IAD2 - BBN IAD, RAT: UltimateRAT
    1032:IAD3 - BBN IAD, RAT: G.R.O.B
    1033:RAT: Netspy
    1036:RAT: Way 2002
    1037:RAT: MoSucker
    1039:RAT: Happy
    1040:RAT: Infiltration
    1042:RAT: Bla, Rasmin
    1045:RAT: Rasmin
    1046:RAT: Quetnek
    1047:NEOD1 - Sun's NEO Object Request Broker
    1048:NEOD2 - Sun's NEO Object Request Broker
    1049:/sbin/initd, RAT: NewFuture
    1050:RAT: MiniCommand
    1052:RAT: NK
    1054:RAT: AckCmd
    1058:NIM - nim
    1059:NIMREG - nimreg
    1062:RAT: Newon
    1067:INSTL_BOOTS - Installation Bootstrap Proto. Serv.
    1068:INSTL_BOOTC - Installation Bootstrap Proto. Cli.
    1080:SOCKS - Proxy, RAT: WinHole, Broser
    1081:RAT: WinHole
    1082:RAT: WinHole
    1083:ANSOFT-LM-1 - Anasoft License Manager, RAT: WinHole
    1084:ANSOFT-LM-2 - Anasoft License Manager
    1090:RAT: Xtreme
    1095:RAT: RAT
    1097:RAT: RAT
    1098:RAT: RAT
    1099:RAT: Blood Fest Evolution, RAT
    1101:RAT: Rths
    1102:RAT: Rths
    1103:RAT: Rths
    1104:RAT: Rths
    1105:RAT: Rths
    1106:RAT: Rths
    1107:RAT: Rths
    1108:RAT: Rths
    1109:KPOP - kpop, RAT: Rths
    1110:NFSD-STATUS - Cluster status info, RAT: Rths
    1111:LMSOCIALSERVER - LM Social Server, RAT: RemoteXS, Nemesis, X-Filer, NetSpy II, Way, Rths, Dzyckz
    1112:RAT: Rths
    1113:RAT: Rths
    1114:RAT: TransScout, Way, Rths
    1115:RAT: TransScout, Lurker, Rths
    1116:RAT: TransScout, Lurker
    1117:RAT: TransScout
    1119:RAT: CNGhost
    1122:RAT: Last2000
    1123:MURRAY - Murray
    1130:RAT: NokNok
    1133:RAT: Dindang
    1134:RAT: Dindang
    1155:NFA - Network File Access
    1158:RAT: Stang
    1170:RAT: Psyber Stream Server - PSS, Streaming Audio Server, Voice
    1180:MC-CLIENT - Millicent Client Proxy
    1182:RAT: Dobol
    1183:RAT: GirlBoy, PSW.Remote Fake Login
    1190:RAT: Ojo
    1200:RAT: NoBackO, TMS
    1201:RAT: NoBackO
    1207:RAT: SoftWar
    1212:LUPA - lupa, RAT: Kaos, NeoPets, Red-Spy
    1214:KaZaA - KaZaA P2P File Sharing, RAT: RemoteControl, Muniu
    1215:RAT: Force, RemoteControl, Muniu
    1216:RAT: RemoteControl, Muniu
    1217:RAT: RemoteControl, Muniu
    1218:RAT:Schneckenkorn
    1219:RAT:Schneckenkorn
    1221:RAT: Spy, FLB, RVC
    1222:NERV - SNI R&D network, FLB
    1234:RAT: Ultors Trojan, HackIT (Holzpferd), Kilo, Fade, Remote Operations, NetAmine, NuclearScan, FeRAT
    1243:RAT: BackDoor-G, SubSeven , SubSeven Apocalypse, Tiles, Mainline, HackWorld
    1245:RAT: VooDoo Doll, Ultors Trojan
    1248:HERMES - hermes
    1254:RAT: Monk
    1255:RAT: Scarab, Happy, Global Killer
    1256:RAT: Project nEXT, RexxRave
    1257:RAT: Sub Seven 2.1, Frenzy
    1266:RAT: Global Killer
    1269:RAT: Mavericks Matrix
    1274:RAT: Mavericks Matrix
    1275:RAT: Fredisoft
    1276:RAT: Mavericks Matrix
    1313:BMC_PATROLDB - BMC_PATROLDB, RAT: NETrojan
    1314:PDPS - Photoscript Distributed Printing System
    1324:RAT: Shador
    1337:RAT: Joker DDoS, rSocks
    1338:RAT: Millenium Worm
    1342:VMOTELNET - VMODEM telnet redirect
    1345:VPJP - VPJP
    1346:ALTA-ANA-LM - Alta Analytics License Manager
    1347:BBN-MMC - Multi Media Conferencing
    1348:BBN-MMX - Multi Media Conferencing
    1349:SBOOK - Registration Network Protocol, RAT: Back Orifice DLL
    1350:EDITBENCH - Registration Network Protocol
    1351:EQUATIONBUILDER - Digital Tool Works (MIT)
    1352:LOTUSNOTE - Lotus Note
    1353:RELIEF - Relief Consulting
    1354:RIGHTBRAIN - RightBrain Software, RAT: SkullBurrow Proxy
    1355:INTUITIVE EDGE - Intuitive Edge
    1356:CUILLAMARTIN - CuillaMartin Company
    1357:PEGBOARD - Electronic PegBoard
    1358:CONNLCLI - CONNLCLI
    1359:FTSRV - FTSRV
    1360:MIMER - MIMER
    1361:LINX - LinX
    1362:TIMEFLIES - TimeFlies
    1363:NDM-REQUESTER - Network DataMover Requester
    1364:NDM-SERVER - Network DataMover Server
    1365:ADAPT-SNA - Network Software Associates
    1366:NETWARE-CSP - Novell NetWare Comm Service Platform
    1367:DCS - DCS
    1368:SCREENCAST - ScreenCast
    1369:GV-US - GlobalView to Unix Shell
    1370:US-GV - Unix Shell to GlobalView
    1371:FC-CLI - Fujitsu Config Protocol
    1372:FC-SER - Fujitsu Config Protocol
    1373:CHROMAGRAFX - Chromagrafx
    1374:MOLLY - EPI Software Systems
    1375:BYTEX - Bytex
    1376:IBM-PPS - IBM Person to Person Software
    1377:CICHLID - Cichlid License Manager
    1378:ELAN - Elan License Manager
    1379:DBREPORTER - Integrity Solutions
    1380:TELESIS-LICMAN - Telesis Network License Manager
    1381:APPLE-LICMAN - Apple Network License Manager
    1382:UDT_OS - UDT_OS
    1383:GWHA - GW Hannaway Network License Manager
    1384:OS-LICMAN - Objective Solutions License Manager
    1385:ATEX_ELMD - Atex Publishing License Manager
    1386:CHECKSUM - CheckSum License Manager
    1387:CADSI-LM - Computer Aided Design Software Inc LM
    1388:OBJECTIVE-DBC - Objective Solutions DataBase Cache
    1389:ICLPV-DM - Document Manager
    1390:ICLPV-SC - Storage Controller
    1391:ICLPV-SAS - Storage Access Server
    1392:ICLPV-PM - Print Manager
    1393:ICLPV-NLS - Network Log Server
    1394:ICLPV-NLC - Network Log Client, RAT: Gofriller, BackDoor
    1395:ICLPV-WSM - PC Workstation Manager software
    1396:DVL-ACTIVEMAIL - DVL Active Mail
    1397:AUDIO-ACTIVMAIL - Audio Active Mail
    1398:VIDEO-ACTIVMAIL - Video Active Mail
    1399:CADKEY-LICMAN - Cadkey License Manager
    1400:CADKEY-TABLET - Cadkey Tablet Daemon, RAT: Remote Hack
    1401:GOLDLEAF-LICMAN - Goldleaf License Manager
    1402:PRM-SM-NP - Prospero Resource Manager
    1403:PRM-NM-NP - Prospero Resource Manager
    1404:IGI-LM - Infinite Graphics License Manager
    1405:IBM-RES - IBM Remote Execution Starter
    1406:NETLABS-LM - NetLabs License Manager
    1407:DBSA-LM - DBSA License Manager
    1408:SOPHIA-LM - Sophia License Manager
    1409:HERE-LM - Here License Manager
    1410:HIQ - HiQ License Manager, RAT: Destruktor
    1411:AF - AudioFile
    1412:INNOSYS - InnoSys, RAT: RemoteControl
    1413:INNOSYS-ACL - Innosys-ACL
    1414:IBM-MQSERIES - IBM MQSeries
    1415:DBSTAR - DBStar
    1416:NOVELL-LU6.2 - Novell LU6.2
    1417:TIMBUKTU-SRV1 - Timbuktu Service 1 Port
    1418:TIMBUKTU-SRV2 - Timbuktu Service 2 Port
    1419:TIMBUKTU-SRV3 - Timbuktu Service 3 Port
    1420:TIMBUKTU-SRV4 - Timbuktu Service 4 Port, RAT: SubRoot
    1421:GANDALF-LM - Gandalf License Manager
    1422:AUTODESK-LM - Autodesk License Manager
    1423:ESSBASE - Essbase Arbor Software
    1424:HYBRID - Hybrid Encryption Protocol
    1425:ZION-LM - Zion Software License Manager
    1426:SAIS - Satellite-data Acquisition System 1
    1427:MLOADD - mloadd monitoring tool
    1428:INFORMATIK-LM - Informatik License Manager
    1429:NMS - Hypercom NMS
    1430:TPDU - Hypercom TPDU
    1431:RGTP - Reverse Gossip Transport
    1432:BLUEBERRY-LM - Blueberry Software License Manager
    1433:MS-SQL-S - Microsoft-SQL-Server
    1434:MS-SQL-M - Microsoft-SQL-Monitor
    1435:IBM-CICS - IBM CICS
    1436:SAISM - Satellite-data Acquisition System 2
    1437:TABULA - Tabula
    1438:EICON-SERVER - Eicon Security Agent/Server
    1439:EICON-X25 - Eicon X25/SNA Gateway
    1440:EICON-SLP - Eicon Service Location Protocol (RFC 2165)
    1441:CADIS-1 - Cadis License Management
    1442:CADIS-2 - Cadis License Management
    1443:IES-LM - Integrated Engineering Software
    1444:MARCAM-LM - Marcam License Management
    1445:PROXIMA-LM - Proxima License Manager
    1446:ORA-LM - Optical Research Associates License Manager
    1447:APRI-LM - Applied Parallel Research LM
    1448:OC-LM - OpenConnect License Manager
    1449:PEPORT - PEport
    1450:DWF - Tandem Distributed Workbench Facility
    1451:INFOMAN - IBM Information Management
    1452:GTEGSC-LM - GTE Government Systems License Manager
    1453:GENIE-LM - Genie License Manager
    1454:INTERHDL_ELMD - interHDL License Manager
    1455:ESL-LM - ESL License Manager
    1456:DCA - DCA
    1457:VALISYS-LM - Valisys License Manager
    1458:NRCABQ-LM - Nichols Research Corp.
    1459:PROSHARE1 - Proshare Notebook Application
    1460:PROSHARE2 - Proshare Notebook Application
    1461:IBM_WRLESS_LAN - IBM Wireless LAN
    1462:WORLD-LM - World License Manager
    1463:NUCLEUS - Nucleus
    1464:MSL_LMD - MSL License Manager
    1465:PIPES - Pipes Platform
    1466:OCEANSOFT-LM - Ocean Software License Manager
    1467:CSDMBASE - CSDMBASE
    1468:CSDM - CSDM
    1469:AAL-LM - Active Analysis Limited License Manager, RAT: VC
    1470:UAIACT - Universal Analytics
    1471:CSDMBASE - csdmbase
    1472:CSDM - csdm
    1473:OPENMATH - OpenMath
    1474:TELEFINDER - Telefinder
    1475:TALIGENT-LM - Taligent License Manager
    1476:CLVM-CFG - clvm-cfg
    1477:MS-SNA-SERVER - ms-sna-server
    1478:MS-SNA-BASE - ms-sna-base
    1479:DBEREGISTER - dberegister
    1480:PACERFORUM - PacerForum
    1481:AIRS - AIRS
    1482:MITEKSYS-LM - Miteksys License Manager, RAT: Syskbot
    1483:AFS - AFS License Manager, RAT: Syskbot
    1484:CONFLUENT - Confluent License Manager, RAT: Syskbot
    1485:LANSOURCE - LANSource, RAT: Syskbot
    1486:NMS_TOPO_SERV - nms_topo_serv
    1487:LOCALINFOSRVR - LocalInfoSrvr
    1488:DOCSTOR - DocStor
    1489:DMDOCBROKER - dmdocbroker
    1490:INSITU-CONF - insitu-conf
    1491:ANYNETGATEWAY - anynetgateway
    1492:STONE-DESIGN-1 - stone-design-1, RAT: FTP99CMP
    1493:NETMAP_LM - netmap_lm
    1494:ICA - ica
    1495:CVC - cvc
    1496:LIBERTY-LM - liberty-lm
    1497:RFX-LM - rfx-lm
    1498:WATCOM-SQL - Watcom-SQL
    1499:FHC - Federico Heinz Consultora
    1500:VLSI-LM - VLSI License Manager
    1501:SAISCM - Satellite-data Acquisition System 3
    1502:SHIVADISCOVERY - Shiva
    1503:IMTC-MCS - Databeam
    1504:EVB-ELM - EVB Software Engineering License Manager
    1505:FUNKPROXY - Funk Software Inc.
    1506:UTCD - Universal Time daemon (utcd)
    1507:SYMPLEX - symplex
    1508:DIAGMOND - diagmond
    1509:ROBCAD-LM - Robcad Ltd. License Manager, RAT: Psyber Streaming Server
    1510:MVX-LM - Midland Valley Exploration Ltd. Lic. Man.
    1511:3L-L1 - 3l-l1
    1512:WINS - Microsoft's Windows Internet Name Service
    1513:FUJITSU-DTC - Fujitsu Systems Business of America Inc
    1514:FUJITSU-DTCNS - Fujitsu Systems Business of America Inc
    1515:IFOR-PROTOCOL - ifor-Protocol
    1516:VPAD - Virtual Places Audio data
    1517:VPAC - Virtual Places Audio control
    1518:VPVD - Virtual Places Video data
    1519:VPVC - Virtual Places Video control
    1520:ATM-ZIP-OFFICE - atm zip office
    1521:NCUBE-LM - nCube License Manager
    1522:RNA-LM - Ricardo North America License Manager
    1523:CICHILD-LM - cichild
    1524:INGRESLOCK - ingres, RAT: Trinoo
    1525:ORASRV - Oracle, PROSPERO-NP - Prospero Directory Service
    1526:PDAP-NP - Prospero Data Access Prot non-priv
    1527:TLISRV - Oracle
    1528:MCIAUTOREG
    1529:COAUTHOR - Oracle, RAT: Sky Rat, Sky Rat [Show]
    1530:RAP-SERVICE
    1531:RAP-LISTEN
    1532:MIROCONNECT
    1533:Virtual Places Software, RAT: Back Atack
    1534:MICROMUSE-LM
    1535:AMPR-INFO
    1536:AMPR-INTER
    1537:SDSC-LM
    1538:3DS-LM
    1539:Intellistor License Manager
    1540:RDS
    1541:RDS2
    1542:GRIDGEN-ELMD
    1543:SIMBA-CS
    1544:ASPECLMD
    1545:VISTIUM-SHARE
    1546:ABBACCURAY
    1547:LAPLINK
    1548:Axon License Manager
    1549:Shiva Hose
    1550:3M-IMAGE-LM - Image Storage license manager 3M Company
    1551:HECMTL-DB
    1552:PCIARRAY, RAT: Uprising
    1553:SNA-CS
    1554:CACI-LM - CACI Products Company License Manager
    1555:LIVELAN
    1556:ASHWIN - AshWin CI Tecnologies
    1557:ARBORTEXT-LM - ArborText License Manager
    1558:XINGMPEG
    1559:WEB2HOST
    1560:ASCI-VAL - asci-val, RAT: Duddie
    1561:FACILITYVIEW
    1562:PCONNECTMGR
    1563:CADABRA-LM - Cadabra License Manager
    1564:PAY-PER-VIEW
    1565:WINDDLB
    1566:CORELVIDEO
    1567:JLICELMD
    1568:TSSPMAP
    1569:ETS
    1570:ORBIXD
    1571:RDB-DBS-DISP - Oracle Remote Data Base
    1572:Chipcom License Manager
    1573:ITSCOMM-NS
    1574:MVEL-LM
    1575:ORACLENAMES
    1576:MOLDFLOW-LM
    1577:HYPERCUBE-LM
    1578:Jacobus License Manager, RAT: Shadow Phyre
    1579:IOC-SEA-LM
    1580:TN-TL-R1
    1581:VMF-MSG-PORT
    1582:MSIMS, TAMS-LM - Toshiba America Medical Systems
    1583:SIMBAEXPRESS
    1584:TN-TL-FD2
    1585:INTV
    1586:IBM-ABTACT
    1587:PRA_ELMD
    1588:TRIQUEST-LM
    1589:VQP
    1590:GEMINI-LM
    1591:NCPM-PM
    1592:COMMONSPACE
    1593:MAINSOFT-LM
    1594:SIXTRAK
    1595:RADIO
    1596:RADIO-SM
    1597:ORBPLUS-IIOP
    1598:PICKNFS
    1599:SIMBASERVICES
    1600:ISSD, RAT: Shivka-Burka, Direct Connection
    1601:AAS, RAT: Direct Connection
    1602:INSPECT, RAT: Direct Connection
    1603:PICODBC
    1604:ICABROWSER
    1605:SLP - Salutation Manager (Salutation Protocol)
    1606:SLM-API - Salutation Manager (SLM-API)
    1607:STT
    1608:SMART-LM - Smart Corp. License Manager
    1609:ISYSG-LM
    1610:TAURUS-WH
    1611:ILL - Inter Library Loan
    1612:NETBILL-TRANS - NetBill Transaction Server
    1613:NETBILL-KEYREP - NetBill Key Repository
    1614:NETBILL-CRED - NetBill Credential Server
    1615:NETBILL-AUTH - NetBill Authorization Server
    1616:NETBILL-PROD - NetBill Product Server
    1617:NIMROD-AGENT - Nimrod Inter-Agent Communication
    1618:SKYTELNET - skyt
    1619:XS-OPENSTORAGE - xs-openstorage
    1620:FAXPORTWINPORT - faxportwinport
    1621:SOFTDATAPORT - softdataphone
    1622:ONTIME - ontime
    1623:JALEOSND - jaleosnd
    1624:UDP-SR-PORT - udp-sr-port
    1625:SVS-OMAGENT - svs-omagent
    1634:RAT: NetCrack
    1636:CNCP - CableNet Control Protocol
    1637:CNAP - CableNet Admin Protocol
    1638:CNIP - CableNet Info Protocol
    1639:CERT-INITIATOR - cert-initiator
    1640:CERT-RESPONDER - cert-responder
    1641:INVISION
    1642:ISIS-AM
    1643:ISIS-AMBC
    1644:SAISEH - Satellite-data Acquisition System 4
    1645:DATAMETRICS
    1646:SA-MSG-PORT
    1647:RSAP
    1648:CONCURRENT-LM
    1649:INSPECT
    1650:NDK
    1651:SHIVA_CONFSRVR
    1652:XNMP
    1653:ALPHATECH - alphatech-lm
    1654:STARGATEALERTS - stargatealerts
    1655:DEC-MBADMIN - dec-mbadmin
    1656:DEC-MBADMIN-H - dec-mbadmin-h
    1657:FUJITSU-MMPDC - fujitsu-mmpdc
    1658:SIXNETUDR - sixnetudr
    1659:SM-LG - Silicon Grail License Manager
    1660:SKIP-MC-GIKREQ - skip-mc-gikreq
    1661:NETVIEW-AIX-1, RAT: d0ped
    1662:NETVIEW-AIX-2
    1663:NETVIEW-AIX-3
    1664:NETVIEW-AIX-4
    1665:NETVIEW-AIX-5
    1666:NETVIEW-AIX-6
    1667:NETVIEW-AIX-7, RAT: Jerwin
    1668:NETVIEW-AIX-8, RAT: Jerwin
    1669:NETVIEW-AIX-9
    1670:NETVIEW-AIX-10
    1671:NETVIEW-AIX-11
    1672:NETVIEW-AIX-12
    1673:PROSHARE-MC-1 - Intel Proshare Multicast
    1674:PROSHARE-MC-2 - Intel Proshare Multicast
    1675:PDP - Pacific Data Products
    1676:NETCOMM1
    1677:GROUPWISE
    1678:PROLINK
    1679:DARCORP-LM
    1680:MICROCOM-SBP
    1681:SD-ELMD
    1682:LANYON-LANTERN
    1683:NCMP-HIP
    1684:SNARESECURE
    1685:N2NREMOTE
    1686:CVMON
    1687:NSJTP-CTRL
    1688:NSJTP-DATA
    1689:FIREFOX
    1690:NG-UMDS
    1691:EMPIRE-EMPUMA - empire-empuma
    1692:SSTSYS-LM - sstsys-lm
    1693:RRITR
    1694:RRIMWM
    1695:RRILWM
    1696:RRIFMM
    1697:RRISAT
    1698:RSVP-ENCAP-1 - RSVP-ENCAPSULATION-1
    1699:RSVP-ENCAP-2 - RSVP-ENCAPSULATION-2
    1700:MPS-RAFT, RAT: Udps, SubRoot
    1701:L2F
    1702:DESKSHARE
    1703:HB-ENGINE
    1704:BCS-BROKER
    1705:SLINGSHOT
    1706:JETFORM
    1707:VDMPLAY
    1708:GAT-LMD
    1709:CENTRA
    1710:IMPERA
    1711:PPTCONFERENCE - pptconference
    1712:REGISTRAR - resource monitoring service
    1713:ConferenceTalk
    1714:SESI-LM
    1715:HOUDINI-LM
    1716:XMSG
    1717:FJ-HDNET
    1718:H323GATEDISC - h323gatedisc
    1719:H323GATESTAT - h323gatestat
    1720:H323HOSTCALL - h323hostcall
    1721:CAICCI
    1722:HKS-LM - HKS License Manager
    1723:PPTP
    1724:CSBPHONEMASTER - csbphonemaster
    1725:IDEN-RALP - iden-ralp
    1726:IBERIAGAMES - IBERIAGAMES
    1727:WINDDX - winddx
    1728:TELINDUS - TELINDUS
    1729:CITYNL - CityNL License Management
    1730:ROKETZ - roketz
    1731:MSICCP - MSICCP
    1732:PROXIM - proxim
    1733:SIPAT - sipat
    1734:CAMBERTX-LM - Camber Corporation License Management
    1735:PRIVATECHAT - PrivateChat
    1736:STREETSTREAM - street-stream
    1737:ULTIMAD - ultimad
    1738:GAMEGEN1 - GameGen1
    1739:WEBACCESS - webaccess
    1740:ENCORE - encore
    1741:CISCO-NET-MGMT - cisco-net-mgmt
    1742:3COM-NSD - 3Com-nsd
    1743:CINEGRFX-LM - Cinema Graphics License Manager
    1744:NCPM-FT - ncpm-ft
    1745:REMOTE-WINSOCK - remote-winsock
    1746:FTRAPID-1 - ftrapid-1
    1747:FTRAPID-2 - ftrapid-2
    1748:ORACLE-EM1 - Oracle-em1
    1749:ASPEN-SERVICES - aspen-services
    1750:SSLP - Simple Socket Library's PortMaster
    1751:SWIFTNET - SwiftNet
    1752:LOFR-LM - Leap of Faith Research License Manager
    1753:TRANSLOGIC-LM - Translogic License Manager
    1754:ORACLE-EM2 - Oracle-em2
    1755:MS-STREAMING - ms-streaming
    1756:CAPFAST-LMD - capfast-lmd
    1757:CNHRP - cnhrp
    1758:TFTP-MCAST - tftp-mcast
    1759:SPSS-LM - SPSS License Manager
    1760:WWW-LDAP-GW - www-ldap-gw
    1761:CFT-0 - cft-0
    1762:CFT-1 - cft-1
    1763:CFT-2 - cft-2
    1764:CFT-3 - cft-3
    1765:CFT-4 - cft-4
    1766:CFT-5 - cft-5
    1767:CFT-6 - cft-6
    1768:CFT-7 - cft-7
    1769:BMC-NET-ADM - bmc-net-adm
    1770:BMC-NET-SVC - bmc-net-svc
    1771:VAULTBASE - vaultbase
    1772:ESSWEB-GW - EssWeb Gateway
    1773:KMSCONTROL - KMSControl
    1774:GLOBAL-DTSERV - global-dtserv
    1776:FEMIS - Federal Emergency Management Information System
    1777:POWERGUARDIAN - powerguardian, RAT: Scarab
    1778:PRODIGY-INTERNET - prodigy-internet
    1779:PHARMASOFT - pharmasoft
    1780:DPKEYSERV - dpkeyserv
    1781:ANSWERSOFT-LM - answersoft-lm
    1782:HP-HCIP - hp-hcip
    1783:FJRIS - Fujitsu Remote Install Service
    1784:FINLE-LM - Finle License Manager
    1785:WINDLM - Wind River Systems License Manager
    1786:FUNK-LOGGER - funk-logger
    1787:FUNK-LICENSE - funk-license
    1788:PSMOND - psmond
    1789:HELLO - hello
    1790:NMSP - Narrative Media Streaming Protocol
    1791:EA1 - EA1
    1792:IBM-DT-2 - ibm-dt-2
    1793:RSC-ROBOT - rsc-robot
    1794:CERA-BCM - cera-bcm
    1795:DPI-PROXY - dpi-proxy
    1796:VOCALTEC-ADMIN - Vocaltec Server Administration
    1797:UMA - UMA
    1798:ETP - Event Transfer Protocol
    1799:NETRISK - NETRISK
    1800:ANSYS-LM - ANSYS-License manager
    1801:MSMQ - Microsoft Message Que
    1802:CONCOMP1 - ConComp1
    1803:HP-HCIP-GWY - HP-HCIP-GWY
    1804:ENL - ENL
    1805:ENL-NAME - ENL-Name
    1806:MUSICONLINE - Musiconline
    1807:FHSP - Fujitsu Hot Standby Protocol, RAT: SpySender, Sysroot
    1808:ORACLE-VP2 - Oracle-VP2
    1809:ORACLE-VP1 - Oracle-VP1
    1810:JERAND-LM - Jerand License Manager
    1811:SCIENTIA-SDB - Scientia-SDB
    1812:RADIUS - RADIUS
    1813:RADIUS-ACCT - RADIUS Accounting
    1814:TDP-SUITE - TDP Suite
    1815:MMPFT - MMPFT
    1818:ETFTP - Enhanced Trivial File Transfer Protocol
    1819:PLATO-LM - Plato License Manager
    1820:MCAGENT - mcagent
    1821:DONNYWORLD - donnyworld
    1822:ES-ELMD - es-elmd
    1823:UNISYS-LM - Unisys Natural Language License Manager
    1824:METRICS-PAS - metrics-pas
    1833:RAT: Tcc
    1834:RAT: Tcc
    1835:RAT: Tcc
    1836:RAT: Tcc
    1837:RAT: Tcc
    1850:RAT: Black Angel
    1863:MSN Messenger - MSN Messenger Application
    1871:RAT: Serpa, SerialPager
    1900:SSDP - SSDP (UDP)
    1901:FJICL-TEP-A - Fujitsu ICL Terminal Emulator Program A
    1902:FJICL-TEP-B - Fujitsu ICL Terminal Emulator Program B, RAT: XQDoor
    1903:LINKNAME - Local Link Name Resolution
    1904:FJICL-TEP-C - Fujitsu ICL Terminal Emulator Program C
    1905:SUGP - Secure UP.Link Gateway Protocol
    1906:TPMD - TPortMapperReq
    1907:INTRASTAR - IntraSTAR, RAT: hRat
    1908:DAWN - Dawn
    1909:GLOBAL-WLINK - Global World Link
    1911:MTP - Starlight Networks Multimedia Transport Protocol, RAT: AWD
    1913:ARMADP - armadp
    1914:ELM-MOMENTUM - Elm-Momentum
    1915:FACELINK - FACELINK
    1916:PERSOFT - Persoft Persona
    1917:NOAGENT - nOAgent
    1918:CAN-NDS - Candle Directory Service - NDS
    1919:CAN-DCH - Candle Directory Service - DCH
    1920:CAN-FERRET - Candle Directory Service - FERRET
    1944:CLOSE-COMBAT - close-combat
    1945:DIALOGIC-ELMD - dialogic-elmd
    1946:TEKPLS - tekpls
    1947:HLSERVER - hlserver
    1948:EYE2EYE - eye2eye
    1949:ISMAEASDAQLIVE - ISMA Easdaq Live
    1950:ISMAEASDAQTEST - ISMA Easdaq Test
    1951:BCS-LMSERVER - bcs-lmserver
    1966:RAT: Fake FTP
    1967:RAT: FYEO, WM FTP
    1969:RAT: OpC BO
    1973:DLSRAP - Data Link Switching Remote Access Protocol
    1978:RAT: HideDoor, Feri, Deadcow
    1979:RAT: ZSpyII, Mima, HideDoor, SpyServer
    1980:RAT: ZSpyII
    1981:RAT: Bowl, Shockrave, Ullysse, Habibti, Infinaeon
    1983:RAT: Q-taz, Leszcz, T.O.D
    1984:RAT: Q-taz, BDMania
    1985:FOLIOCORP - Folio Remote Server, HSRP - Cisco Hot Standby Router Protocol (RFC 2281), RAT: Skun
    1986:LICENSEDAEMON - cisco license management, RAT: Muska52, Akosch, Prosty, Snurzi
    1987:TR-RSRB-P1 - cisco RSRB Priority 1 port, RAT: DNS
    1988:TR-RSRB-P2 - cisco RSRB Priority 2 port
    1989:TR-RSRB-P3 - cisco RSRB Priority 3 port
    1989:MHSNET - MHSnet system
    1990:STUN-P1 - cisco STUN Priority 1 port
    1991:STUN-P2 - cisco STUN Priority 2 port
    1992:STUN-P3 - cisco STUN Priority 3 port
    1992:IPSENDMSG - IPsendmsg
    1993:SNMP-TCP-PORT - cisco SNMP TCP port
    1994:STUN-PORT - cisco serial tunnel port
    1995:PERF-PORT - cisco perf port
    1996:TR-RSRB-PORT - cisco Remote SRB port
    1997:GDP-PORT - cisco Gateway Discovery Protocol
    1998:X25-SVC-PORT - cisco X.25 service (XOT)
    1999:TCP-ID-PORT - cisco identification port, RAT: BackDoor (Default), Transcout
    2000:CALLBROOK - callbook, SEAGATE - Seagate Crystal Reports, RAT: Der Spaeher 3, Insane Network, Transscout, Froggys Trojan, Last2000, HAW, RE2000, Fear, Force, Evoloution, Winsock Commander, CS, Amitis, Adele
    2001:DC - dc, SEAGATE - Seagate Crystal Reports, RAT: Der Spaeher 3, TrojanCow, TransScout, Senna Spy 2001 Trojan, Protoss, XQDoor, Codex Data Systems D.I.R.T., OIcqsearch
    2002:GLOBE - globe, RAT: TransScout, Duddie, Sensive
    2003:RAT: TransScout, Tech
    2004:MAILBOX - mailbox, RAT: TransScout, OIcqsearch
    2005:BERKNET - berknet, RAT: TransScout, Sequel, OIcqsearch
    2006:INVOKATOR - invokator
    2007:DECTALK - dectalk, RAT: OIcqsearch
    2008:CONF - conf, RAT: OIcqsearch
    2009:News, RAT: OIcqsearch
    2010:Search, RAT: OIcqsearch
    2011:RAID-CC, RAT: OIcqsearch
    2012:TTYINFO, RAT: Net Control, OIcqsearch
    2013:RAID-AM
    2014:TROFF
    2015:CYPRESS
    2016:BOOTSERVER
    2017:CYPRESS-STAT - cypress-stat
    2018:TERMINALDB
    2019:WHOSOCKAMI
    2020:XINUPAGESERVER - xinupageserver
    2021:SERVEXEC
    2022:DOWN - down
    2023:XINUEXPANSION3 - xinuexpansion3, RAT: Pass Ripper, Hack City Ripper Pro
    2024:XINUEXPANSION4 - xinuexpansion4
    2025:ELLPACK - ell pack, RAT: Shadow Phyre, KS Rain
    2026:SCRABBLE - scrabble
    2027:SHADOWSERVER - shadow server
    2028:SUBMITSERVER - submit server
    2030:DEVICE2 - device2
    2032:BLACKBOARD - blackboard
    2033:GLOGGER - glogger
    2034:SCOREMANAGER - score manager
    2035:IMSLDOC - imsldoc
    2038:OBJECTMANAGER - object manager
    2040:LAM - lab, RAT: Inferno Uploader
    2041:INTERBASE
    2042:ISIS
    2043:ISIS-BCAST
    2044:RIMSL
    2045:CDFUNC
    2046:SDFUNC
    2047:DLS
    2048:DLS-MONITOR - dls-monitor
    2049:SHILP, NFS - Sun Microsystems Network File System Protocol (RFC 1813)
    2060:RAT: Protoss
    2065:DLSRPN - Data Link Switch Read Port Number
    2067:DLSWPN - Data Link Switch Write Port Number
    2078:RAT: ZalivatorR
    2080:RAT: WinHole
    2086:Netscape/Corba Exploit
    2102:ZEPHYR-SRV - Zephyr server
    2103:ZEPHYR-CLT - Zephyr serv-hm connection
    2104:ZEPHYR-HM - Zephyr hostmanager
    2105:MINIPAY - MiniPay
    2115:RAT: Bugs, Feap
    2121:RAT: Burbulatorheads
    2140:RAT: Deep Throat, The Invasor, Foreplay or Reduced Foreplay
    2155:RAT: Illusion Mailer, Nirvana
    2172:RAT: SubSeven
    2177:RAT: Phantom FTP
    2180:MC-GT-SRV - Millicent Vendor Gateway Server
    2189:RAT: Mowang
    2201:ATS - Advanced Training System Program
    2202:IMTC-MAP - Int. Multimedia Teleconferencing Cosortium
    2208:RAT: Screen Control
    2213:KALI - Kali, RAT: Screen Control
    2214:RAT: Screen Control
    2215:RAT: Screen Control
    2216:RAT: Screen Control
    2221:UNREG-AB1 - Allen-Bradley unregistered port
    2222:UNREG-AB2 - Allen-Bradley unregistered port
    2223:UNREG-AB3 - Allen-Bradley unregistered port
    2232:IVS-VIDEO - IVS Video default
    2233:INFOCRYPT - INFOCRYPT
    2234:DIRECTPLAY - DirectPlay
    2235:SERCOMM-WLINK - Sercomm-WLink
    2236:NANI
    2237:OPTECH-PORT1-LM - Optech Port1 License Manager
    2238:AVIVA-SNA - AVIVA SNA SERVER
    2239:IMAGEQUERY - Image Query
    2241:IVSD - IVS Daemon
    2255:RAT: Nirvana
    2279:XMQUERY
    2280:LNVPOLLER
    2281:LNVCONSOLE
    2282:LNVALARM
    2283:LNVSTATUS RAT: HVL Rat5
    2284:LNVMAPS
    2285:LNVMAILMON
    2286:NAS-METERING
    2287:DNA
    2288:NETML
    2299:RAT: Back Atack
    2300:RAT: Xplorer
    2307:PEHELP - pehelp
    2308:SDHELP - sdhelp
    2312:RAT: Izram
    2332:RAT: Silent Spy
    2337:RAT: Hobbit
    2339:OBS!!! namnen har bytt plats, RAT: Voice Spy
    2345:RAT: Doly Trojan
    2376:RAT: Remote Control
    2400:RAT: PortD
    2401:CVSPSERVER - cvspserver
    2444:RAT: Earthquake
    2500:RTSSERV - Resource Tracking system server
    2501:RTSCLIENT - Resource Tracking system client
    2525:RAT: RemoteKit
    2527:RAT: BLHouse
    2564:HP-3000-TELNET - HP 3000 NS/VT block mode telnet
    2565:RAT: Striker
    2583:RAT: Wincrash 2
    2584:RAT: Spie
    2585:RAT: Nethack
    2592:NETREK - netrek
    2600:RAT: Digital RootBeer
    2610:RAT: IP+
    2684:RAT: Red-Spy
    2685:RAT: Red-Spy
    2700:TQDATA - tqdata
    2702:SMS-XFER - SMS XFER, RAT: Black Diver
    2707:RAT: Bigfoot
    2716:RAT: The Prayer
    2721:RAT: Phase Zero
    2727:RAT: Hackers Heaven
    2773:RAT: SubSeven , SubSeven 2.1 Gold
    2784:WWW-DEV - world wide web - development
    2785:AIC-NP - aic-np
    2786:AIC-ONCRPC - Destiny MCD database
    2787:PICCOLO - Cornerstone Software
    2788:FRYESERV - NetWare Loadable Module - Seagate Software
    2789:MEDIA-AGENT - Media Agent
    2801:RAT: Phineas Phucker
    2904:RAT: VB Troyen
    2908:MAO - mao
    2909:FUNK-DIALOUT - Funk Dialout
    2910:TDACCESS - TDAccess
    2911:BLOCKADE - Blockade
    2912:EPICON - Epicon
    2945:RAT: Majesty
    2968:RAT: Theef
    2989:RAT: RAT
    3000:HBCI - HBCI, RAT: Remote Shut, Theef, Xuegi, Izram
    3001:REDWOOD-BROKER - Redwood Broker
    3002:EXLM-AGENT - EXLM Agent
    3010:GW - Telerate Workstation
    3011:TRUSTED-WEB - Trusted Web
    3024:RAT: WinCrash
    3030:RAT: Tomato
    3031:RAT: MicroSpy
    3047:HLSERVER - Fast Security HL Server
    3048:PCTRADER - Sierra Net PC Trader
    3049:NSWS - NSWS
    3065:RAT: Ice Storm Killerz
    3082:RAT: Amoeba
    3100:RAT: Brain Wiper
    3128:Proxy, RAT: RingZero, Command Center
    3129:RAT: Masters Paradise
    3131:RAT: Subsari
    3133:RAT: Yet Another
    3134:RAT: Yet Another
    3141:VMODEM - VMODEM
    3142:RDC-WH-EOS - RDC WH EOS
    3143:SEAVIEW - Sea View
    3144:TARANTELLA - Tarantella
    3145:CSI-LFAP - CSI-LFAP
    3150:RAT: Deep Throat, The Invasor
    3169:RAT: Turkojan
    3180:MS-BRK-SRV - Millicent Broker Server
    3215:RAT: XHX
    3256:RAT: Worm.Dax
    3264:CCMAIL - cc:mail/lotus
    3265:ALTAV-TUNNEL - Altav Tunnel
    3266:NS-CFG-SERVER - NS CFG Server
    3267:IBM-DIAL-OUT - IBM Dial Out
    3268:MSFT-GC - Microsoft Global Catalog
    3269:MSFT-GC-SSL - Microsoft Global Catalog with LDAP/SSL
    3270:VERISMART - Verismart
    3271:CSOFT-PREV - CSoft Prev Port
    3272:USER-MANAGER - Fujitsu User Manager
    3273:SXMP - Simple Experimental Multiplexed Protocol
    3274:ORDINOX-SERVER - Ordinox Server
    3275:SAMD - SAMD
    3276:MAXIM-ASICS - Maxim ASICs
    3306:SQL Server
    3331:RAT: Delf
    3332:RAT: Delf
    3333:EGGDROP - Common for eggdrop bot, DEC-NOTES - DEC Notes, RAT: Delf, Hanuman, Laodai
    3344:RAT: Matrix
    3347:RAT: Control-it!
    3355:RAT: Matrix
    3410:RAT: Optix Pro
    3416:RAT: SpySender
    3417:RAT: SpySender
    3418:RAT: XPosure
    3421:BMAP - Bull Apprise portmapper
    3427:RAT: FireBird
    3454:MIRA - Apple Remote Access Protocol
    3455:PRSVP - RSVP Port
    3456:VAT - VAT default data, RAT: Terror trojan, Fear, Evoloution, Force
    3457:VAT-CONTROL - VAT default control
    3458:D3WINOSFI - D3WinOsfi
    3459:INTEGRAL - Integral, RAT: Eclipse 2000, Sanctuary
    3465:RAT: FireBird
    3500:RAT: Servidor.e
    3505:RAT: AutoSpY
    3527:RAT: BLHouse
    3547:RAT: Amitis
    3587:RAT: ****Head trojan
    3627:RAT: Delta Remote Access
    3700:RAT: Portal of Doom
    3721:RAT: Whirlpool
    3723:RAT: Mantis
    3737:RAT: HelioS
    3791:RAT: Total Eclypse 1.0
    3801:RAT: Total Solar Eclypse
    3900:UDT_OS - Unidata UDT OS
    3984:MAPPER-NODEMGR - MAPPER network node manager
    3985:MAPPER-MAPETHD - MAPPER TCP/IP server
    3986:MAPPER-WS_ETHD - MAPPER workstation server
    4000:TERABASE - Terabase,iChat Communications Hub, RAT: Psyber Streaming Server, SkyDance, Remote Anything, Zzmm
    4001:iChat Rooms
    4004:RAT: KBL FWB
    4008:NETCHEQUE - NetCheque accounting
    4009:CHIMERA-HWM - Chimera HWM
    4010:SAMSUNG-UNIDEX - Samsung Unidex
    4011:ALTSERVICEBOOT - Alternate Service Boot
    4012:PDA-GATE - PDA Gate
    4013:ACL-MANAGER - ACL Manager
    4080:iChat Webserver
    4092:RAT: WinCrash
    4128:RAT: Infector II, Shadow Remote, RedShad
    4132:NUTS_DEM - NUTS Daemon
    4133:NUTS_BOOTP - NUTS Bootp Server
    4134:NIFTY-HMI - NIFTY-Serve HMI Protocol
    4141:OIRTGSVC - Workflow Server, RAT: rada-tat-RAT
    4142:OIDOCSVC - Document Server
    4143:OIDSR - Document Replication
    4201:RAT: War Trojan
    4210:RAT: Muska52, NetKey
    4220:RAT: G-Hack
    4225:RAT: Silent Spy
    4242:RAT: Virtual Hacking Machine - VHM
    4288:RAT: MoSucker
    4321:RWHOIS - Remote Who Is, RAT: BoBo, Schoolbus 1.0
    4343:UNICALL - UNICALL
    4344:VINAINSTALL - VinaInstall
    4369:RAT: Boiling
    4420:RAT: G-Hack
    4429:RAT: WINSF
    4430:RAT: WINSF
    4431:RAT: WINSF
    4432:RAT: WINSF
    4423:RAT: WINSF
    4432:RAT: Acid
    4433:RAT: Acid
    4442:RAT: Oracle
    4444:EGGDROP - Common for eggdrop bot, KRB524 - KRB524, NV-VIDEO - NV Video default, ADSUBTRACT - Ad-Subtract Pro, RAT: Prosiak, Swift Remote, AlexMessoMalex, Avone, Oracle, Controlmachine, Snake
    4445:UPNOTIFYP - UPNOTIFYP, RAT: Oracle
    4446:N1-FWP - N1-FWP
    4447:N1-RMGMT - N1-RMGMT, RAT: Oracle
    4448:ASC-SLMD - ASC Licence Manager
    4449:ARCRYPTOIP - ARCrypto IP, RAT: Oracle
    4450:CAMP - Camp
    4451:CTISYSTEMMSG - CTI System Msg, RAT: Oracle
    4452:CTIPROGRAMLOAD - CTI Program Load
    4453:NSSALERTMGR - NSS Alert Manager
    4454:NSSAGENTMGR - NSS Agent Manager
    4481:RAT: Backstabb LITE
    4500:SAE-URN - sae-urn
    4501:URN-X-CDCHOICE - urn-x-cdchoice
    4523:RAT: Celine
    4527:RAT: BLHouse
    4545:RAT: Remote Revise
    4567:RAT: FileNail, J4Y
    4590:RAT: ICQ Trojan
    4666:RAT: Mneah
    4672:RFA - remote file access server
    4714:RAT: Muska52
    4747:RAT: Fosen, Symes
    4748:RAT: Symes
    4836:RAT: Buttman
    4837:RAT: Buttman
    4865:RAT: Backfire
    4881:RAT: AIMVision
    4950:RAT: ICQ Trojan(Lm)
    4999:RAT: MaLPaYo, Ripjac, Remote Access
    5000:COMMPLEX-MAIN - Complex Main, SSDP - Web-XML Parser for Universal Plug & Play, RAT: Back Door Setup, Blazer5, Bubbel, ICKiller, Sockets des Troie, Bionet Lite, Raid, Angel
    5001:COMMPLEX-LINK - Complex Link, RAT: Back Door Setup, Sockets des Troie, Pinkle
    5002:RFE - radio free ethernet, RAT: cd00r, Shaft
    5003:CLARIS-FMPRO - Claris FileMaker Pro
    5004:AVT-PROFILE-1 - avt-profile-1
    5005:AVT-PROFILE-1 - avt-profile-2, RAT: Aladino
    5010:TELELPATHSTART - TelepathStart, RAT: Solo
    5011:TELELPATHATTACK - TelepathAttack, RAT: OOTLT, OOTLT modified
    5020:ZENGINKYO-1 - zenginkyo-1
    5021:ZENGINKYO-2 - zenginkyo-2
    5025:RAT: WM Remote KeyLogger
    5028:RAT: Shadow Phyre
    5031:RAT: NetMetropolitan
    5032:RAT: NetMetropolitan
    5050:MMCC - multimedia conference control tool, RAT: R0xR4t
    5051:RAT: Minicli
    5060:SIP - Session Initiation Protocol (RFC 2543)
    5145:RMONITOR_SECURE - rmonitor secure
    5150:ATMP - Ascend Tunnel Management Protocol
    5151:RAT: Optix Lite
    5152:RAT: Institution
    5155:RAT: Oracle
    5180:RAT: Peeper
    5190:AOL - America-Online, ICQ
    5191:AOL-1 - AmericaOnline1
    5192:AOL-2 - AmericaOnline2
    5193:AOL-3 - AmericaOnline3
    5236:PADL2SIM
    5277:RAT:Winshell
    5295:RAT: Gate Hell
    5296:RAT: Gate Hell
    5297:RAT: Gate Hell
    5298:RAT: Gate Hell
    5299:RAT: Gate Hell
    5300:HA cluster heartbeat, RAT: Gate Hell
    5301:HA cluster general services, RAT: Gate Hell
    5302:HA cluster configuration
    5303:HA cluster probing
    5304:HA Cluster Commands
    5305:HA Cluster Test
    5306:Sun MC Group
    5307:SCO AIP
    5308:CFengine
    5309:J Printer
    5310:OUTLAWS - Outlaws
    5311:TM Login
    5321:RAT: Firehotcker
    5328:RAT: Snow, Fx
    5343:RAT: wCrat - WC Remote Administration Tool
    5377:RAT: Iani
    5400:EXCERPT - Excerpt Search, RAT: Blade Runner, Back Construction, Digital Spy
    5401:EXCERPTS - Excerpt Search Secure, RAT: Blade Runner, Back Construction, Mneah, Digital Spy
    5402:MFTP, RAT: Blade Runner, Back Construction, Mneah, Digital Spy
    5403:HPOMS-CI-LSTN
    5404:HPOMS-DPS-LSTN
    5405:NetSupport
    5406:Systemics Sox
    5407:Foresyte-Clear
    5408:Foresyte-Sec
    5409:Salient Data Server
    5410:Salient User Manager
    5411:ACTNET - ActNet
    5412:CONTINUUS
    5413:WWIOTALK
    5414:STATUSD
    5415:NS Server
    5416:SNS Gateway
    5417:SNS Agent
    5418:MCNTP - MCNTP, RAT: Darksky
    5419:DJ-ICE - DJ-ICE, RAT: Darksky, Eagle Boy
    5420:CYLINK-C - Cylink-C
    5430:RAT: NetAdvance
    5432:RAT: Gate Hell
    5512:RAT: Illusion Mailer, Xtcp
    5521:RAT: Illusion Mailer
    5535:RAT: DarkNova
    5550:RAT: Xtcp
    5553:RAT: Keylog.XLog
    5555:EGGDROP - Common for eggdrop bot, PERSONAL-AGENT - Personal Agent, RAT: ServeMe, NoXcape, ReMod, Sonitro, Stinky
    5556:RAT: BO Facil
    5557:RAT: BO Facil
    5558:RAT: easyServ
    5569:RAT: Robo-Hack
    5597:RAT: Shadow Phyre
    5600:ESMMANAGER - Enterprise Security Manager
    5601:ESMAGENT - Enterprise Security Agent
    5602:A1-MSC
    5603:A1-BS
    5604:A3-SDUNODE - A3-SDUNode
    5605:A4-SDUNODEODE - A4-SDUNode
    5631:PCANYWHEREDATA
    5632:PCANYWHERESTAT
    5637:RAT: PC Crasher
    5638:RAT: PC Crasher
    5639:RAT: PC Crasher
    5666:RAT: PC Crasher
    5678:RRAC - Remote Replication Agent Connection
    5679:DCCM - Direct Cable Connect Manager
    5695:RAT: Assasin
    5696:RAT: Assasin
    5697:RAT: Assasin
    5713:PROSHAREAUDIO - proshare conf audio
    5714:PROSHAREVIDEO - proshare conf video, RAT: WinCrash
    5715:PROSHAREDATA - proshare conf data
    5716:PROSHAREREQUEST - proshare conf request
    5717:PROSHARENOTIFY - proshare conf notify
    5725:RAT: Stang
    5729:OPENMAIL - Openmail User Agent Layer
    5741:RAT: WinCrash
    5742:RAT: WinCrash
    5745:FCOPY-SERVER - fcopy-server
    5755:OPENMAILG - OpenMail Desk Gateway server
    5757:X500MS - OpenMail X.500 Directory Server
    5760:RAT: Portmap Remote Root Linux Exploit
    5766:OPENMAILNS - OpenMail NewMail Server
    5767:S-OPENMAIL - OpenMail Suer Agent Layer (Secure)
    5800:VNC - Virtual Network Computing
    5802:RAT: Y3K RAT
    5803:RAT: Y3K RAT
    5838:RAT: Y3K RAT
    5880:RAT: Y3K RAT
    5882:RAT: Y3K RAT
    5884:RAT: Y3K RAT
    5885:RAT: AIMVision
    5888:RAT: Y3K RAT, CIA
    5889:RAT: Y3K RAT
    5890:RAT: Y3K RAT
    5902:RAT: XQDoor
    5933:RAT: NOSecure
    6000:X11 - X Window System, RAT: The tHing 1.6, RServer
    6001:X11 - X Window System, RAT: Trojan Killer 2.2
    6002:X11 - X Window System
    6003:X11 - X Window System
    6004:X11 - X Window System
    6005:X11 - X Window System
    6006:X11 - X Window System, RAT: Bad Blood
    6007:X11 - X Window System
    6008:X11 - X Window System
    6009:X11 - X Window System
    6010:X11 - X Window System
    6011:X11 - X Window System
    6012:X11 - X Window System
    6013:X11 - X Window System
    6014:X11 - X Window System
    6015:X11 - X Window System
    6016:X11 - X Window System, RAT: Shadow Phyre
    6017:X11 - X Window System
    6018:X11 - X Window System
    6019:X11 - X Window System
    6020:X11 - X Window System
    6021:X11 - X Window System
    6022:X11 - X Window System
    6023:X11 - X Window System
    6024:X11 - X Window System
    6025:X11 - X Window System
    6026:X11 - X Window System
    6027:X11 - X Window System
    6028:X11 - X Window System
    6029:X11 - X Window System
    6030:X11 - X Window System
    6031:X11 - X Window System
    6032:X11 - X Window System
    6033:X11 - X Window System
    6034:X11 - X Window System
    6035:X11 - X Window System
    6036:X11 - X Window System
    6037:X11 - X Window System
    6038:X11 - X Window System
    6039:X11 - X Window System
    6040:X11 - X Window System
    6041:X11 - X Window System
    6042:X11 - X Window System
    6043:X11 - X Window System
    6044:X11 - X Window System
    6045:X11 - X Window System
    6046:X11 - X Window System
    6046:X11 - X Window System
    6048:X11 - X Window System
    6049:X11 - X Window System
    6050:X11 - X Window System
    6051:X11 - X Window System, RAT: Z-dem0n
    6052:X11 - X Window System
    6053:X11 - X Window System
    6054:X11 - X Window System
    6055:X11 - X Window System
    6056:X11 - X Window System
    6057:X11 - X Window System
    6058:X11 - X Window System
    6059:X11 - X Window System
    6060:X11 - X Window System
    6061:X11 - X Window System
    6062:X11 - X Window System
    6063:X11 - X Window System
    6066:RAT: Remote Operations
    6110:SOFTCM - HP SoftBench CM
    6111:SPC - HP SoftBench Sub-Process Control
    6112:DTSPCD - dtspcd
    6123:BACKUP-EXPRESS - Backup Express
    6141:META-CORP - Meta Corporation License Manager
    6142:ASPENTEC-LM - Aspen Technology License Manager
    6143:WATERSHED-LM - Watershed License Manager
    6144:STATSCI1-LM - StatSci License Manager - 1
    6145:STATSCI2-LM - StatSci License Manager - 2
    6146:LONEWOLF-LM - Lone Wolf Systems License Manager
    6147:MONTAGE-LM - Montage License Manager
    6148:RICARDO-LM - Ricardo North America License Manager
    6149:TAL-POD - tal-pod
    6200:RAT: D4v3
    6201:RAT: D4v3
    6213:RAT: Back Atack
    6253:CRIP - CRIP
    6267:RAT: GW Girl
    6272:RAT: Secret Service
    6317:RAT: Latinus
    6346:Gnutella Peer-2-Peer File Sharing
    6347:Gnutella Peer-2-Peer File Sharing
    6348:Gnutella Peer-2-Peer File Sharing
    6389:CLARIION-EVR01 - clariion-evr01
    6400:RAT: The Thing
    6455:SKIP-CERT-RECV - SKIP Certificate Receive
    6456:SKIP-CERT-RECV - SKIP Certificate Send
    6471:LVISION-LM - LVision License Manager
    6521:RAT: Oracle
    6556:RAT: AutoSpY
    6558:XDSXDM - xdsxdm
    6609:RAT: Titi
    6616:RAT: Aeon
    6635:SYNSCAN - SYNScan
    6655:RAT: Aqua
    6660:CIRC - Common for IRCD
    6661:CIRC - Common for IRCD
    6662:CIRC - Common for IRCD
    6663:CIRC - Common for IRCD
    6664:CIRC - Common for IRCD
    6665:CIRC - Common for IRCD
    6666:CIRC - Common for IRCD, RAT: Dark Connection Inside, NetBus worm, Project Mayhem, Albareki, Storm, Dark Sill, Tourniquet
    6667:CIRC - Normal for IRCD/backbone, RAT: ScheduleAgent, Trinity, WinSatan, Pretty Park, SubSeven 2.1.4, Net-Devil, Kilo
    6668:CIRC - Common for IRCD, RAT: KrAIMer, Master
    6669:CIRC - Common for IRCD, RAT: Host Control, Vampire, Master
    6670:CIRC - Common for IRCD, VOCALTEC-GOLD - Vocaltec Global Online Directory, RAT: Deep Throat 2.0 & 3.0, BackWeb Server, Foreplay or Reduced Foreplay, WinNuke eXtreame
    6672:VISION_SERVER - vision_server
    6673:VISION_ELMD - vision_elmd
    6671:RAT: DeepThroat
    6674:RAT: DeepThroat
    6677:RAT: Spy Program, BDirect
    6697:RAT: Force
    6699:WinMX - WinMX P2P File Sharing
    6703:RAT: Theef
    6711:RAT: SubSeven, BackDoor-G, VP Killer, LittleWitch, Kilo, Girlboy, Sociable 2000, Sweetheart, NetSpy II, NetKey, Brouser, NMKB, Dua ti choi
    6712:RAT: SubSeven, Funny trojan, NetSpy II, Spadeace, LYB
    6713:RAT: SubSeven
    6718:RAT: Kilo
    6723:RAT: Mstream
    6767:RAT: NT Remote, UandMe, Kilo, Pasana
    6768:RAT: Predator
    6771:RAT: Deep Throat 2.0 & 3.0, Foreplay or Reduced Foreplay
    6776:RAT: 2000 Cracks, BackDoor-G, SubSeven , VP Killer
    6789:RAT: Cyberjack, Blackice
    6831:AMBIT-LM
    6838:RAT: Mstream
    6883:RAT: Delta Source
    6888:RAT: CIA
    6891:RAT: Force
    6912:RAT: **** Heep
    6939:RAT: Indoctrination
    6942:RAT: FTP.Alicia
    6966:RAT: Sinister
    6968:RAT: Piper
    6969:ACMSODA - acmsoda, RAT: GateCrasher, IRC 3, Net Controller, Priority, Danton, Vagr, Cookie Monster, Bigorna, SpArTa, BlueAdeptz, UPIN
    6970:RealPlayer Time Protocol, RAT: Gatecrasher, BlueAdeptz
    6971:RAT: BlueAdeptz, UPIN
    7000:AFS3-FILESERVER - file server itself, RAT: Exploit Translation Server, Kazimas, Remote Grab, SubSeven 2.1 Gold, MiniCommand, Theef, Grab
    7001:AFS3-CALLBACK - callbacks to cache managers, RAT: Freak88
    7002:AFS3-PRSERVER - users & groups database
    7003:AFS3-VLSERVER - volume location database
    7004:AFS3-KASERVER - AFS/Kerberos authentication service
    7005:AFS3-VOLSER - volume managment server
    7006:AFS3-ERRORS - error interpretation service
    7007:AFS3-BOS - basic overseer process, RAT: Silent Spy
    7008:AFS3-UPDATE - server-to-server updater
    7009:AFS3-RMTSYS - remote cache manager service
    7010:UPS-ONLINET - onlinet uninterruptable power supplies
    7016:RAT: Cheng
    7020:RAT: Hoaxer
    7028:RAT: Unknown Trojan
    7030:RAT: Hoaxer
    7070:ARCP
    7099:LAZY-PTOP
    7100:FONT-SERVICE - X Font Service, RAT: MATRIX Chat
    7119:RAT: Massaker
    7121:VIRPROT - Virtual Prototypes License Manager
    7134:RAT: Remote Operations
    7158:RAT:Lohoboyshik
    7174:CLUTILD
    7200:FODMS FLIP
    7201:DLIP
    7215:RAT: SubSeven , SubSeven 2.1 Gold
    7253:RAT: Jinmozhe, GlobalPatrol
    7300:RAT: NetMonitor
    7301:RAT: NetMonitor
    7302:RAT: NetMonitor
    7303:RAT: NetMonitor
    7304:RAT: NetMonitor
    7305:RAT: NetMonitor
    7306:RAT: NetMonitor
    7307:RAT: NetMonitor
    7308:RAT: NetMonitor, X Spy
    7309:RAT: NetMonitor
    7312:RAT: Yajing
    7323:RAT: Sygate Backdoor
    7332:RAT: J3
    7395:WINQEDIT
    7410:RAT: Phoenix II
    7424:RAT: Host Control
    7426:PMDMGR - OpenView DM Postmaster Manager
    7427:OVEADMGR - OpenView DM Event Agent Manager
    7428:OVLADMGR - OpenView DM Log Agent Manager
    7429:OPI-SOCK - OpenView DM rqt communication
    7430:XMPV7 - OpenView DM xmpv7 api pipe
    7431:PMD - OpenView DM ovc/xmpv3 api pipe
    7491:TELOPS-LMD
    7509:RAT: School
    7511:PAFEC-LM - pafec-lm, RAT: Genue
    7597:RAT: QAZ
    7614:RAT: Wolff, Galaxy
    7626:RAT: Glacier
    7648:Video Conferencing, RAT: XHX
    7649:Video Conferencing
    7673:RAT: Neoturk
    7677:RAT: Neoturk
    7700:RAT: Sub-Mariner
    7721:RAT: Cabronator
    7724:RAT: Cabronator
    7776:RAT: RemoteCtrol
    7777:EGGDROP - Common for eggdrop bot, CBT - cbt, RAT: Tini, Snoopy
    7781:ACCU-LMGR
    7788:RAT: Last2000
    7789:RAT: Back Door Setup, ICKiller, Mozilla, Muska52
    7800:RAT: Ai
    7811:RAT: RemoteSOB
    7823:RAT: Amitis
    7826:RAT: Oblivion, MiniOblivion
    7839:RAT: GreekHackers
    7850:RAT: Ai
    7878:RAT: Ai, My Socket
    7879:RAT: Ai
    7888:RAT: CIA
    7891:RAT: LaMeRi, David
    7980:QUEST-VISTA
    7983:RAT: Mstream
    7999:IRDMI2 - iRDMI2
    8000:IRDMI - iRDMI - Proxy, RAT: NeuroticKat, Seqrat
    8011:RAT: Way
    8012:RAT: PtAkkS
    8023:RAT: Xel
    8032:PRO-ED
    8059:RAT: Shadow Phyre
    8088:Proxy
    8080:Proxy, RAT: Brown Orifice , RemoConChubo, RingZero, HacKErZ, C.A.N.C.E.R
    8081:RAT: HacKErZ
    8083:RAT: NeoNet
    8089:FTGATE - FTGate Web Admin, tinc Virtual Private Network daemon
    8090:RAT: Remote Packet Sniffer
    8108:RAT: LYB
    8110:RAT: LoseLove
    8111:RAT: LoseLove
    8127:RAT:Simply Hack
    8130:RAT:Simply Hack
    8210:RAT: China
    8225:RAT: Way 2002
    8301:RAT: LoseLove
    8302:RAT: LoseLove
    8311:RAT: GirlBoy, Sweetheart
    8372:RAT: Netboy
    8450:NPMP
    8489:RAT: Kilo
    8502:RAT: The[X]
    8508:RAT: The[X]
    8509:RAT: Jeemp
    8536:RAT: DDoS.RAT.Autocrat
    8623:RAT: HeiYing
    8663:RAT: Shadow Phyre
    8681:RAT: Psycho Derek
    8682:RAT: Psycho Derek
    8683:RAT: Psycho Derek
    8684:RAT: Psycho Derek
    8686:RAT: Freak
    8787:RAT: Back Orifice 2000, Freak
    8794:RAT: Shadow Phyre
    8798:RAT: RACS
    8799:RAT: FunFactory
    8811:RAT: Sphere Trojan, Fear, Force
    8812:RAT: Fraggle Rock Lite, Fear
    8813:RAT: Fraggle Rock Lite
    8820:RAT: ZKT
    8821:RAT: FTP.Alicia
    8879:RAT: Hack Office Armageddon
    8888:DDI-TCP-1 - NewsEDGE server TCP (TCP 1), RAT: RMF, DDoS.RAT.DarkIRC
    8889:DDI-TCP-2 - Desktop Data TCP 1, RAT: Luzak
    8890:DDI-TCP-3 - Desktop Data TCP 2
    8891:DDI-TCP-4 - Desktop Data TCP 3: NESS application
    8892:DDI-TCP-5 - Desktop Data TCP 4: FARM product
    8893:DDI-TCP-6 - Desktop Data TCP 5: NewsEDGE/Web application
    8894:DDI-TCP-7 - Desktop Data TCP 6: COAL application
    8943:RAT: iSpyNow
    8976:RAT: Connect4
    8988:RAT: BacHack
    8989:RAT: Rcon, Recon, Xcon
    9000:CLISTENER - CSlistener, RAT: Netministrator, NeuroticKat, Glacier, Way, Predator, Inderpal, Spy.Stealth Eye
    9001:RAT: NeuroticKat
    9002:RAT: NeuroticKat
    9005:RAT: Spy.Stealth Eye
    9090:WEBSM - IBM Web Based Systems Manager, VQSERVER - Free Web Server, SUN - Sun Java Web Administrator, RAT: Spy.Remote Packet Sniffer
    9301:RAT: LoseLove
    9325:RAT: Mstream
    9400:RAT: InCommand
    9408:RAT: Shang Quan
    9414:RAT: NTHacker, Dujian
    9535:MAN - man
    9536:RAT: Lula, StealthPort
    9561:RAT: CRAT Pro
    9563:RAT: CRAT Pro
    9580:RAT: TheefLE
    9696:RAT: Ghost
    9697:RAT: Ghost
    9777:RAT: Spy.Stealth Eye
    9778:RAT: Spy.Stealth Eye
    9846:RAT: Shador
    9870:RAT: R3C
    9872:RAT: Portal of Doom
    9873:RAT: Portal of Doom
    9874:RAT: Portal of Doom
    9875:RAT: Portal of Doom
    9876:SD - Session Director, RAT: Cyber Attacker, Rux
    9878:RAT: TransScout
    9889:RAT: Snakdos
    9932:RAT: Dude
    9933:RAT: Dude
    9989:RAT: iNi-Killer
    9992:PALACE - Palace
    9993:PALACE - Palace
    9994:PALACE - Palace
    9995:PALACE - Palace
    9996:PALACE - Palace
    9997:PALACE - Palace
    9998:PIRC - Possible for IRCD, DISTINCT32 - Distinct32
    9999:DISTINCT - distinct, RAT: The Prayer, Infra, NetControl, Sub-Mariner, Spadeace, Oracle
    10000:NDMP - Network Data Management Protocol, RAT: Oracle, Ojo
    10001:RAT: Lula, Eljefe, DTr
    10002:RAT: Lula, Eljefe
    10003:RAT: Lula, Eljefe, Network Controler
    10008:LiveGate Web Server, Apache Web Server, /bin/sh, BIND
    10067:RAT: Portal of Doom
    10085:RAT: Syphillis
    10086:RAT: Syphillis
    10100:RAT: Gift
    10101:RAT: BrainSpy, Mini Gift
    10111:RAT: Mini Gift
    10150:RAT: Laodai
    10167:RAT: Portal of Doom
    10168:RAT: Worm.Lovgate
    10203:RAT: Jinmozhe
    10240:RAT: Digital Hand
    10520:RAT: Acid Shivers
    10528:RAT: Host Control
    10539:RAT: Back Attack
    10607:RAT: Coma Danny
    10666:RAT: Ambush, R0xR4t
    11000:RAT: Senna Spy Trojan Generator, Datarape, Comando
    11050:RAT: Host Control
    11051:RAT: Host Control
    11171:RAT: DDoS.RAT.Zombot
    11223:RAT: Progenic trojan, Secret Agent
    11225:RAT: Cyn
    11228:RAT: DarkSky
    11264:RAT: Remote Control
    11306:RAT: NokNok
    11568:RAT: Remote Hack
    11666:RAT: H04x3r Telnet
    11777:RAT: Delf.cc
    11831:RAT: Latinus (or variant), Backlash
    12000:RAT: Reverse Trojan
    12076:RAT: Gjamer, MSH
    12122:RAT: HellzAddiction
    12129:RAT: VisualBackdoor
    12223:RAT: Hack'99 KeyLogger
    12310:RAT: Precursor
    12321:RAT: Protoss, Cyber-Hazard
    12333:RAT: GMF
    12345:cron / crontab, RAT: Fat Bitch trojan, GabanBus, icmp_pipe.c, Mypic, NetBus, NetBus Toy, NetBus worm, Pie Bill Gates, Whack Job, X-bill, Q-taz, Snape, Fade, Musdie, Vagr, Neoturk, Sequel
    12346:RAT: Fat Bitch trojan, GabanBus, NetBus , X-bill
    12349:RAT: BioNet
    12361:RAT: Whack-a-mole
    12362:RAT: Whack-a-mole
    12369:RAT: Prior
    12378:RAT: Gibe Worm
    12389:RAT: Khe Sanh
    12471:RAT: Back Attack
    12486:RAT: Muska52
    12504:RAT: Back Attack
    12550:RAT: Back Orifice 2000
    12560:RAT: Alo
    12575:RAT: Mainline
    12623:RAT: DUN Control, ButtMan
    12624:RAT: ButtMan
    12625:RAT: ButtMan
    12631:RAT: Whack Job
    12701:RAT: Eclypse 2000
    12753:TSAF
    12754:RAT: Mstream
    12764:RAT: Remote Control
    12884:RAT: Anthena
    13000:RAT: Senna Spy Trojan Generator, wh-crew Spy
    13010:RAT: Hacker Brasil - HBR, Bitch Controller
    13013:RAT: Psychward, P_Spy
    13014:RAT: FTP.ftppw
    13173:RAT: Amitis
    13401:RAT: Spy Program
    13700:RAT: Kuang2 The Virus
    13753:RAT: Anal FTP
    13818:DSMCC-CONFIG - DSMCC Config
    13819:DSMCC-SESSION - DSMCC Session Messages
    13820:DSMCC-PASSTHRU - DSMCC Pass-Thru Messages
    13821:DSMCC - DOWNLOAD - DSMCC Download Protocol
    13822:DSMCC-CCP - DSMCC Channel Change Protocol
    13830:This portlist by www.DiamondCS.com.au
    14194:RAT: CyberSpy
    14285:RAT: Hell-Driver, Laocoon
    14286:RAT: Hell-Driver, Laocoon
    14287:RAT: Laocoon
    14500:RAT: PC Invader
    14501:RAT: PC Invader
    14502:RAT: PC Invader
    14503:RAT: PC Invader
    14504:RAT: PC Invader
    15000:RAT: Lookspy, IRTTH
    15092:RAT: Host Control
    15104:RAT: Mstream
    15333:RAT: Nethero, Screen Thief
    15432:RAT: Cyn
    15485:RAT: Kilo
    15500:RAT: IRTTH
    15512:RAT: Iani
    15551:RAT: IRTTH
    15555:RAT: ICMIBS
    15858:RAT: CDK
    15888:RAT: Delf.cc
    15963:RAT: XZone
    16322:RAT: Last Door
    16484:RAT: Mosucker
    16514:RAT: Kilo
    16660:RAT: Stacheldraht
    16661:RAT: NetGrisch, DFchGrisch
    16772:RAT: ICQ Revenge
    16780:RAT: Vector
    16959:RAT: SubSeven
    16969:RAT: Priority
    17007:ISODE-DUA
    17012:RAT: Back Orifice 2000
    17166:RAT: Mosaic
    17300:RAT: Kuang2 The Virus
    17449:RAT: Kid Terror
    17499:RAT: CrazzyNet
    17569:RAT: Infector
    17777:RAT: Nephron
    18000:BIIMENU - Beckman Instruments, Inc.
    18753:RAT: Shaft
    19116:RAT: Parasite
    19191:RAT: Bluefire
    19604:RAT: Metal Trojan
    19605:RAT: Metal Trojan
    19730:RAT: Muniu
    19864:RAT: ICQ Revenge
    19949:RAT: Avone
    19991:RAT: DFchGrisch
    20000:RAT: Millenium, Predator, Brouser, SystemSecure
    20001:RAT: Millennium, Millennium(Lm), Insect, Psychofiles
    20002:RAT: AcidkoR, Psychofiles, NinjaSpy
    20003:RAT: NinjaSpy
    20005:RAT: MoSucker
    20023:RAT: VP Killer
    20034:RAT: NetBus 2.0 Pro, NetRex, Whack Job
    20203:RAT: Chupacabra, Logged!
    20331:RAT: Bla
    20432:RAT: Shaft
    20433:RAT: Shaft
    20480:RAT: Adnap
    21000:RAT: FTP.c400s FTP Server
    21183:RAT: R.A.D
    21212:RAT: Sensive
    21300:RAT: Diego
    21544:RAT: Girlfriend, Kid Terror, Katux Girlfriend
    21554:RAT: Exploiter, GirlFriend, Kid Terror, Schwindler, Winsp00fer, Sensive
    21579:RAT: Breach 2001
    21584:RAT: Breach 2001
    21845:WEBPHONE
    21846:NETSPEAK-IS - NetSpeak Corp. Directory Services
    21847:NETSPEAK-CS - NetSpeak Corp. Connection Services
    21848:NETSPEAK-ACD - NetSpeak Corp. Automatic Call Distribution
    21849:NETSPEAK-CPS - NetSpeak Corp. Credit Processing System
    22115:RAT:Cyn
    22179:RAT: Diomedes
    22180:RAT: Diomedes
    22181:RAT: Diomedes
    22222:RAT: Donald Dick, Prosiak, Rux The TIcK, G.R.O.B
    22223:RAT: Rux The TIcK
    22273:WNN6
    22311:RAT: ProRat
    22554:RAT: Anthena
    22555:VOCALTEC-WCONF - Vocaltec Web Conference
    22784:RAT: Intruzzo 2002
    22800:AWS-BRF - Telerate Information Platform LAN
    22951:BRF-GW - Telerate Information Platform WAN
    23000:RAT: RWins
    23001:RAT: RWins
    23002:RAT: RWins
    23005:RAT: NetTrash, Sky Rat, Oxon, Winrat, Scorpina
    23006:RAT: NetTrash, EZ KiLLA, Scorpina
    23023:RAT: Logged
    23032:RAT: Amanda
    23145:RAT: REA2
    23232:RAT: Psychward
    23321:RAT: Konik
    23432:RAT: Asylum, Psychward
    23456:RAT: Evil FTP, Ugly FTP, Whack Job, Vagr, Keylog.Clandestine
    23476:RAT: Donald Dick
    23477:RAT: Donald Dick
    24000:RAT: Infector
    24032:RTP Audio/Video
    24307:RAT: Wildek
    24464:RAT: FTP.Resoil
    25000:ICL-TWOBASE1
    25001:ICL-TWOBASE2
    25002:ICL-TWOBASE3, RAT: CRS-Gate, MOTD
    25003:ICL-TWOBASE4
    25004:ICL-TWOBASE5
    25005:ICL-TWOBASE6
    25006:ICL-TWOBASE7
    25007:ICL-TWOBASE8
    25008:ICL-TWOBASE9
    25009:ICL-TWOBASE10
    25226:RAT: LMR
    25386:RAT: Moonpie
    25486:RAT: Moonpie
    25555:RAT: FreddyK
    25678:RAT: TLPilon
    25680:RAT: TLPilon
    25685:RAT: Moonpie
    25686:RAT: Moonpie
    25758:RAT: Dewin
    25793:VOCALTEC-HOS - Vocaltec Address Server
    25885:RAT: CRS-Gate, MOTD
    26000:QUAKE - quake
    26208:WNN6-DS
    26274:RAT: Delta Source
    26681:RAT: Voice Spy - OBS!!! namnen har bytt plats
    26969:RAT: Mini-Glitch
    27015:3D Internet Game Servers
    27016:3D Internet Game Servers
    27017:3D Internet Game Servers
    27184:RAT: Alvgus (UDP)
    27374:RAT: BadBlood, SubSeven 2.1+, Diems Mutter
    27444:RAT: WinTrinoo
    27499:RAT: Pornu, Sinf
    27500:RAT: Rulezadmin
    27551:RAT: Amitis
    27573:RAT: SubSeven
    27665:RAT: WinTrinoo
    27910:QUAKE - Quake 2
    28000:RAT: Infector
    28034:RAT: Invisible Hunter
    28072:RAT: JustJoke Pro
    28218:RAT: Oracle
    28384:RAT: EZ KiLLA
    28428:RAT: Hack'A'Tack
    28429:RAT: Hack'A'Tack
    28431:RAT: Hack'A'Tack
    28433:RAT: Hack'A'Tack
    28500:RAT: Remote Saucer
    28678:RAT: Exploiter 1.4
    29104:RAT: NetTrojan
    29559:RAT: Latinus (or variant), Sky Rat [Show], Cyber-Hazard, Ducktoy, Anti-Lamer, Backlash
    29589:RAT: Kilo
    29891:RAT: The Unexplained
    29976:RAT: Trojan Spirit 2001a
    29980:RAT: Trojan Spirit 2001a
    29984:RAT: Trojan Spirit 2001a
    29999:RAT: Anti-Lamer
    30000:RAT: Infector, Datarape, Motalases
    30001:RAT: ErrOr32, AntiPC
    30002:RAT: DDoS.RAT.Litmus
    30003:RAT: Lamers Death
    30029:RAT: AOLTrojan
    30072:RAT: Tasks
    30100:RAT: NetSphere
    30101:RAT: NetSphere
    30102:RAT: NetSphere
    30104:RAT: BlueAdeptz
    30133:RAT: Trojan Spirit 2001a, Netsphere Final
    30201:RAT: DDoS.RAT.TankEd
    30303:RAT: Sockets de Troie 25, Socket23, Rulezadmin
    30700:RAT: Mantis
    30947:RAT: Intruse
    30999:RAT: Kuang, MoSucker
    31027:RAT: MDM
    31145:RAT: Frapes
    31163:RAT: Back Attack
    31320:RAT: LittleWitch, LittleWitch Mini
    31332:RAT: G.R.O.B
    31335:RAT: WinTrinoo
    31336:RAT: Bo Whack , Butt Funnel
    31337:PIRC - Possible for IRCD, RAT: Back Fire, Back Orifice, Deep BO, Back Orifice (Lm), Baron Night, Beeone, BO client, BO Facil, BO spy, BO2, cron / crontab, Freak88, icmp_pipe.c, Sockdmini, Igloo
    31338:RAT: Back Orifice, Butt Funnel, DK32 NetSpy, DeepBO
    31339:RAT: DK32 NetSpy, LittleWitch, Kiss
    31340:RAT: LittleWitch
    31341:RAT: Igloo
    31415:RAT: Lithium
    31416:RAT: Lithium
    31556:RAT: Z-dem0n
    31631:RAT: Cleptomania
    31666:RAT: BOWhack
    31693:RAT: Turkojan
    31745:RAT: Buschtrommel
    31785:RAT: Hack'a'tack
    31787:RAT: Hack'a'tack
    31788:RAT: Hack'a'tack
    31789:RAT: Hack'a'tack
    31790:RAT: Hack'a'tack
    31791:RAT: Hack'a'tack
    31792:RAT: Hack'a'tack
    31887:RAT: BDDT
    31900:RAT: Afonso
    31979:RAT: Mima
    32001:RAT: Donald Dick
    32076:RAT: Back Attack
    32100:RAT: Peanut Brittle, Project nEXT
    32222:RAT: Remoter
    32365:RAT: Back Attack
    32418:RAT: Acid Battery 1.0
    32456:RAT: Clandestine Screen Capture
    32791:RAT: Acropolis
    33229:RAT: Amitis
    33270:RAT: Trinity
    33291:RAT: RemoteHAK
    33333:RAT: Blakharaz, Prosiak, Psyber Streaming Server
    33545:RAT: G.R.O.B
    33555:RAT: G.R.O.B
    33577:RAT: Psychward
    33600:RAT: LazyAdmin
    33777:RAT: Psychward
    33812:RAT: Back Attack
    33911:RAT: Trojan Spirit 2000, Trojan Spirit 2001
    34324:RAT: Tiny Telnet Server, BigGluck, TN
    34444:RAT: Donald Dick
    34462:RAT: Delf.cc
    34555:RAT: Win Trinoo Server
    34567:RAT: Mill, Back Orifice
    34763:RAT: Infector
    35000:RAT: Infector
    35555:RAT: Win Trinoo Client
    36663:RAT: Rathead
    36665:RAT: Rathead
    36794:RAT: Worm.Tanatos
    36926:RAT: Remscan
    37237:RAT: The Mantis
    37418:RAT: Taladrator
    37651:RAT: Yet Another Trojan - YAT
    38742:RAT: CyberSpy
    39122:RAT: UpF
    39398:RAT: BirdSpy
    39529:RAT: Taladrator
    39872:RAT: Taladrator, Inferno
    40000:RAT: Infector
    40123:RAT: MoSucker
    40412:RAT: The Spy
    40421:RAT: Masters Paradise (Primary), Agent 40421
    40422:RAT: Masters Paradise (Data)
    40423:RAT: Masters Paradise
    40426:RAT: Masters Paradise
    40999:RAT: Diems Mutter
    41666:RAT: Remote Boot Tool - RBT
    42012:RAT: Net Control
    43192:RAT: Invisible Socks4
    43210:RAT: Schoolbus 1.6 & 2.0
    44280:RAT: Amitis
    44333:Winroute
    44334:Kerio Firewall (Tiny Firewall)
    44390:RAT: Amitis
    44444:RAT: Prosiak
    45632:RAT: LittleWitch
    45654:RAT: Little Busters
    45672:RAT: LMR
    45673:RAT: Acropolis
    47221:RAT: 3x
    47262:RAT: Delta Source
    47387:RAT: Amitis
    47557:DBBROWSE - Databeam Corporation
    47806:AP - ALC Protocol
    47808:BACNET - Building Automation and Control Networks
    47878:RAT: BirdSpy
    47891:RAT: Anti-Lamer
    47899:RAT: Anti-Lamer
    48512:RAT: Arctic
    49301:RAT: Online Keylogger
    50000:RAT: Infector, Starline
    50005:RAT: FLB
    50505:RAT: Sockets de Troie
    50766:RAT: Fore, Schwindler
    50829:RAT: BirdSpy
    51234:RAT: MoSucker, Cyn
    51966:RAT: Cafeini
    51985:RAT: Remote Hack
    52317:RAT: Acid Battery 2000
    52371:RAT: Alcatraz
    52978:RAT: G-Spot Tight
    53001:RAT: Remote Windows Shutdown
    54283:RAT: SubSeven , SubSeven 2.1 Gold
    54312:RAT: Nova
    54320:RAT: Back Orifice 2000, MasterU
    54321:RAT: Back Orifice 2000, Schoolbus, MasterU
    54896:RAT: Omega
    55555:RAT: Delf.cc
    55665:RAT: Pinochet
    55666:RAT: Pinochet
    56309:RAT: NK
    56565:RAT: Osiris
    57319:RAT: Nullbnc
    57341:RAT: NetRaider
    57785:RAT: G.R.O.B
    58339:RAT: Butt Funnel
    58343:RAT: ProRat
    58666:RAT: Redkod
    59090:RAT: Mantice
    59211:RAT: Ducktoy
    60000:RAT: DeepThroat 2.0 & 3.0, Foreplay or Reduced Foreplay, Sockets des Troie
    60006:RAT: FLB
    60068:RAT: Xzip 6000068
    60411:RAT: Connection
    60551:RAT: R0xR4t
    60606:RAT: Cucum
    60666:RAT: BasicHell
    60757:RAT: UPIN
    61337:RAT: Nota
    61348:RAT: Bunker-Hill
    61440:RAT: Dynod
    61466:RAT: Telecommando
    61603:RAT: Bunker-Hill
    61822:RAT: LMR
    62011:RAT: Ducktoy
    62488:RAT: gosocks
    62616:RAT: UPIN
    62884:RAT: R.A.S 2002
    63485:RAT: Bunker-Hill
    63536:RAT: Insane Network 5
    63878:RAT: Aphex FTP
    63879:RAT: Aphex FTP
    64000:RAT: Pitbul
    64101:RAT: Taskman / Task Manager
    64241:RAT: LANfiltrator
    64275:RAT: Parasite
    64666:RAT: RSM
    65000:RAT: Devil, Sockets des Troie, Stacheldraht, R0xR4t
    65008:RAT: Lanbyte
    65010:RAT: R0xR4t
    65124:RAT: LAN Hacker
    65301:pcAnywhere
    65390:RAT: Eclypse
    65420:RAT: ZKT
    65421:RAT: FTP.Alicia
    65422:RAT: FTP.Alicia
    65432:RAT: The Traitor (= th3tr41t0r)
    65534:/sbin/initd
    65535:HIPORT: up port telnet, RAT: RC1 trojan, **** Heep, Peeper, Iddono

    NOTE 1: Any other port that isn't present on this tutorial isn't "registered" by any service or trojan. Or maybe i am wrong, please feel free to reply if i do not have any service on the list. Thanks.
    NOTE 2: *RAT= Remote Access Trojan


    Be aware: I currently make a very long tutorial about hackers, crackers, script kiddies, trojans, virus and.... Don't miss that.
    If you didn't understood it, that was SPAM. :P

  2. #2
    Senior Member
    Join Date
    Aug 2003
    Posts
    1,018
    I'd be quite interested in hearing how you went about your research? What is your favorite tool for port scanning? What tool did you use to determine what apps were listening on what ports?

    Oh yeah....what were your references?

  3. #3
    Banned
    Join Date
    Aug 2001
    Location
    Yes
    Posts
    4,424
    Since this is by no means an original tutorial (not original and not a tutorial), I'm moving this from Tutorials...

  4. #4
    Senior Member
    Join Date
    Jan 2003
    Posts
    1,499

    Incase Anyone Cares

    Heres the rest of the ports.

  5. #5
    Senior Member
    Join Date
    Mar 2002
    Posts
    166
    i currently work on that.

    EDIT:
    Negative what do you mean it is not tutorial and original?? I had many sources that i get this results and of course i have missed many of them and you know what.. this was a source i used.

    2nd EDIT:
    ooh, and welcome back from the ... honey moon negative :P

  6. #6
    Senior Member Maestr0's Avatar
    Join Date
    May 2003
    Posts
    604
    \"If computers are to become smart enough to design their own successors, initiating a process that will lead to God-like omniscience after a number of ever swifter passages from one generation of computers to the next, someone is going to have to write the software that gets the process going, and humans have given absolutely no evidence of being able to write such software.\" -Jaron Lanier

  7. #7
    I'd rather be fishing DjM's Avatar
    Join Date
    Aug 2001
    Location
    The Great White North
    Posts
    1,867
    Originally posted here by GbinaryR
    [B]EDIT:
    Negative what do you mean it is not tutorial and original?? I had many sources that i get this results and of course i have missed many of them and you know what.. this was a source i used./B]
    The point is you did not name your sources you did imply the work was original, it's not, you simply did a cut & paste. Look GbinaryR, I too knew it wasn't original, Negative just found the source before I did. Even groovicus, appeared to be suspicious too, you got busted. You want to write tut's, then you better make sure they are original, because someone on this site is going to call you on it.
    DjM

  8. #8
    Senior Member
    Join Date
    Mar 2002
    Posts
    166
    i said i was working on it. Looking back on the history of my IE and write them down.

  9. #9
    d00d people on here are way to smart to know/believe that you wrote that all yourself and did not just ctrl+c then ctrl+v

  10. #10
    Senior Member
    Join Date
    Mar 2002
    Posts
    166
    If you check it you will that it isn't a well constructed tuto check and compare those two.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •