2:COMPRESSNET - Management Utility, RAT: Death
3:COMPRESSNET - Compression Process
4:SFSSD - Self-Certifying File System Daemon
5:RJE - Remote Job Entry (RFC 725)
7:Echo Protocol (RFC 862), RAT: GForce
9:Discard Protocol (RFC 863)
11:SYSSTAT - System Status, Active Users, RAT: NetSlayer
13:Daytime Protocol (RFC 867)
15:NETSTAT - Network Status
17:QOTD - Quote of the Day Protocol (RFC 865)
18:MSP - Message Send Protocol (RFC 1312)
19:CHARGEN - Character Generator (RFC 864), RAT: Infector
20:FTP-DATA - File Transfer Protocol [Data] (RFC 354), RAT: Senna Spy FTP server
21:FTP - File Transfer Protocol [Control] (RFC 354), RAT: Back Construction, Blade Runner, Doly Trojan, Fore, Invisible FTP, Juggernaut, Reverse Trojan, Larva, MotIv FTP, Net Administrator, Senna Spy FTP server, Traitor 21, WebEx, WinCrash, NerTe, LittleWitch FTP, NMKB, MaLPaYo, FTP.Owned FTP, Diems Mutter, TrojMax
22:SSH - SSH (Secure Shell) Remote Login Protocol, RAT: Shaft, Shadow Remote
23:Telnet Protocol (RFC 854), WinGate, RAT: Fire HacKer, Tiny Telnet Server - TTS, Truva Atl, RTB666, TelnetPro 1.0, Swarm, Baron Night, AlphaDog, MMX, Net Coach, PEST, Manipulator Lite 24:PMS - Private Mail System
25:SMTP - Simple Mail Transfer Protocol (RFC 913), RAT: Ajan, Antigen, Email Password Sender - EPS, EPS II, Gip, Gris, Happy99, Hpteam mail, I love you, Kuang2, Magic Horse, MBT (Mail Bombing Trojan), Moscow Email trojan, Naebi, NewApt worm, ProMail trojan, Shtirlitz, Stealth, Tapiras, Terminator, WinPC, WinSpy
27:NSW-FE - NSW User System FE
29:MSG-ICP - Messege ICP
31:MSG Authentication, RAT: Agent 31, Hackers Paradise, Masters Paradise
33:DSP - Display Support Protocol
35:PPS - Private Printer Server
36:RAT: Dizer
37:Time Protocol (RFC 868)
38:RAP - Internet Route Access Protocol (RFC 1476)
39:RLP - Resource Location Protocol (RFC 887)
41:Graphics Protocol (RFC 493), RAT: Deep Throat, Foreplay or Reduced Foreplay
42:NAMESERVER - Host Name Server (RFC 953)
43:WHOIS - Who Is (RFC 812)
44:MPM-FLAGS - MPM FLAGS Protocol
45:MPM - Message Processing Module (Receive)
46:MPM-SND - Message Processeing Module (Send)
47:NI-FTP - NI FTP (File Transfer Protocol)
48:AUDITD - Digital Audit Daemon, RAT: DRAT
49:BBN-LOGIN - Login Host Protocol (TACACS) (RFC 1492)
50:RE-MAIL-CK - Remote Mail Checking Protocol (RFC 1339), RAT: DRAT
51:LA-MAINT - IMP Logical Address Maintenance, RAT: FLB
52:XNS-TIME - XNS Time Protocol, RAT: Muska52
53:DOMAIN - Domain Name Server, RAT: Muska52
54:XNS-CH - XNS Clearinghouse, RAT: Muska52
55:ISI-GL - ISI Graphics Language, RAT: Muska52
56:XNS-AUTH - XNS Authentication
57:MTP - Private terminal access
58:XNS-MAIL - XNS Mail, RAT: DMSetup
59:PFS - Private File System, RAT: DMSetup
61:NI-MAIL
62:ACAS - ACA Services
63:WHOIS++ - whois++ (RFC 1834)
64:COVIA - Communications Integrator (CI)
65:TACACS-DS - TACACS-Database Service
66:SQL*NET - Oracle SQL*NET, RAT: Albareki, Storm
67:BOOTPS - Bootstrap Protocol Server (RFC 951)
68:BOOTPC - Bootstrap Protocol Client (RFC 951)
69:TFTP - Trivial File Transfer Protocol (RFC 1986), RAT: Pasana
70:GOPHER - Gopher (RFC 1436)
71:NETRJS-1 - Remote Job Service
72:NETRJS-2 - Remote Job Service
73:NETRJS-3 - Remote Job Service
74:NETRJS-4 - Remote Job Service
75:PDOS - Private dial out service
76:DEOS - Distributed External Object Store
77:RJE - Private RJE (Remote Job Entry) service
78:VETTCP
79:Name/Finger Protocol (RFC 742), RAT: CDK, Firehotcker
80:WWW-HTTP - World Wide Web HTTP (Hyper Text Transfer Protocol) (RFC 1945), RAT: AckCmd, Back End, CGI Backdoor, Executor, Hooker, RingZero, RTB666, NerTe, 23, Keylog.ev0, m invisible webserver lite, IIEx, Haan, ItAdEm, Task-X
81:HOSTS2-NS - HOSTS2 Name Server, RAT: RemoConChubo, 23
82:XFER Utility
83:MIT-ML-DEV
84:CTF - Common Trace Facility
85:MIT-ML-DEV - MIT ML Device
86:MFCOBOL - Micro Focus Cobol
87:LINK - Private terminal link
88:KERBEROS
89:SU-MIT-TG - SU/MIT Telnet Gateway
90:DNSIX - DNSIX Securit Attribute Token Map
91:MIT Dover Spooler, RAT: Delf.cc
92:NPP - Network Printing Protocol, RAT: Delf.cc
93:DCP - Device Control Protocol
94:OBJCALL - Tivoli Object Dispatcher
95:SUPDUP
96:DIXIE - DIXIE Protocol Specification (RFC 1249)
97:SWIFT-RVF - Swift Remote Virtural File Protocol
98:TAC News, RAT: Delf.cc
99:Metagram Relay, RAT: Hidden port, Delf.cc
100:NEWACCT - [unauthorized use], RAT: Manipulator
101:HOSTNAMES - NIC Host Name Server
102:ISO-TSAP Class 0, RAT: Carved
103:Genesis Point-to-Point Trans Net, Webster Dictionary / x400
104:X400-SND - x400-snd, ACR-NEMA Digital Imag. & Comm. 300
105:CSNET-NS - Mailbox Name Nameserver
106:3COM-TSMUX
107:RTELNET - Remote Telnet Service
108:SNAGAS - SNA Gateway Access Server
109:POP - Post Office Protocol - Version 2 (RFC 937) 110:POP3 - Post Office Protocol - Version 3 (RFC 1081), RAT: ProMail trojan, Latinus or variant, Vagr
111:SUNRPC - SUN Remote Procedure Call (RFC 1050)
112:MCIDAS - McIDAS Data Transmission Protocol, RAT: Keylog.PEST
113:IDENT - Identification/Authentication Service (RFC 1413), RAT: Invisible Identd Deamon, Kazimas, Cyn
114:AUDIONEWS - Audio News Multicast
115:SFTP - Simple File Transfer Protocol (RFC 913)
116:ANSANOTIFY - ANSA REX Notify
117:UUCP-PATH - UUCP Path Service
118:SQL Services
119:NNTP - Network News Transfer Protocol (RFC 977), RAT: Happy99
120:CFDPTKT
121:ERPC - Encore Expedited Remote Pro.Call, RAT: BO JammerkillahV, HAW
122:SMAKYNET
123:NTP - Network Time Protocol (RFC 958), RAT: Net Controller, Gift, Wintrix, Freeze, Propel, ZUD
124:ANSATRADER - ANSA REX Trader
125:LOCUS-MAP - Locus PC-Interface Net Map Ser
126:UNITARY - Unisys Unitary Login
127:LOCUS-CON - Locus PC-Interface Conn Server
128:GSS-XLICEN - GSS X License Verification
129:PWDGEN - Password Generator Protocol
130:Cisco FNATIVE
131:Cisco TNATIVE, RAT: Delf.cc
132:Cisco SYSMAINT 133:STATSRV - Statistics Service, RAT: Farnaz
134:INGRES-NET - INGRES-NET Service 135:DCE endpoint resolution, RPC-LOCATOR - RPC (Remote Procedure Location Service
136:PROFILE - PROFILE Naming System
137:NBNS - NETBIOS Name Service
138:NBDGM - NETBIOS Datagram Service, RAT: LazyAdmin
139:NBSSN - NETBIOS Session Service
140:EMFIS-DATA - EMFIS Data Service
141:EMFIS-CNTL - EMFIS Control Service
142:BL-IDM - Britton-Lee IDM, RAT: NetTaxi
143:IMAP - Interactive Mail Access Protocol v2 (RFC 1064)
144:NEWS
145:UAAC Protocol
146:ISO-IP0, RAT: Infector
147:ISO-IP
148:CRONUS - CRONUS-SUPPORT, Jargon
149:AED-512 - AED 512 Emulation Service
150:SQL-NET
151:HEMS
152:BFTP - Background File Transfer Program
153:SGMP
154:NETSC-PROD - NETSC
155:NETSC-DEV - NETSC
156:SQLSRV - SQL Service
157:KNET-CMP - KNET/VM Command/Message Protocol
158:PCMAIL-SRV - PCMail Server
159:NSS-ROUTING - NSS-Routing
160:SGMP-TRAPS - SGMP-TRAPS, RAT: Infector II
161:SNMP - Simple Network Management Protocol (RFC 1067)
162:SNMPTRAP - SNMPTRAP (Simple Network Management Protocol) (RFC 1067)
163:CMIP-MAN - CMIP/TCP Manager
164:CMIP-AGENT - CMIP/TCP Agent
165:XNS-COURIER - Xerox
166:S-NET - Sirius Systems
167:NAMP
168:RSVD
169:SEND
170:PRINT-SRV - Network PostScript, RAT: A-trojan
171:MULTIPLEX - Network Innovations Multiplex
172:CL/1 - Network Innovations CL/1
173:XYPLEX-MUX - Xyplex
174:MAILQ
175:VMNET
176:GENRAD-MUX - GENRAD-MUX
177:XDMCP - X Display Manager Control Protocol
178:NEXTSTEP - NextStep Window Server
179:BGP - Border Gateway Protocol (RFC 1105), RAT: Delf.cc
180:RIS - Intergraph
181:UNIFY - Unify
182:AUDIT - Unisys Audit SITP
183:OCBINDER - OCBinder
184:OCSERVER - OCServer
185:REMOTE-KIS - Remote-KIS
186:KIS - KIS Protocol
187:ACI - Application Communication Interface
188:MUMPS - Plus Five's MUMPS
189:QFT - Queued File Transport
190:GACP - Gateway Access Control Protocol
191:PROSPERO - Prospero Directory Service
192:OSU-NMS - OSU Network Monitoring System
193:SRMP - Spider Remote Monitoring Protocol
194:IRC - Internet Relay Chat Protocol (RFC 1459)
195:DN6-NLM-AUD - DNSIX Network Level Module Audit
196:DN6-SMM-RED - DNSIX Session Mgt Module Audit Redir
197:DLS - Directory Location Service
198:DLS-MON - Directory Location Service Monitor
199:SMUX
200:SRC - IBM System Resource Controller, RAT: Cyberspy, Rebate
201:AT-RTMP - AppleTalk Routing Maintenance, RAT: One
202:AT-NBP - AppleTalk Name Binding
203:AT-3 - AppleTalk Unused
204:AT-ECHO - AppleTalk Echo
205:AT-5 - AppleTalk Unused
206:AT-ZIS - AppleTalk Zone Information
207:AT-7 - AppleTalk Unused 208:AT-8 - AppleTalk Unused
209:QMTP - The Quick Mail Transfer Protocol
210:Z39.50 - ANSI Z39.50
211:914C/G - Texas Instruments 914C/G Terminal, RAT: One
212:ANET - ATEXSSTR
213:IPX
214:VMPWSCS - VM PWSCS
215:SOFTPC - Insignia Solutions
216:CAILIC - Computer Associates Int'l License Server
217:DBASE - dBASE Unix
218:MPP - Netix Message Posting Protocol (RFC 1204)
219:UARPS - Unisys ARPs
220:IMAP3 - Interactive Mail Access Protocol v3
221:FLN-SPX - Berkeley rlogind with SPX auth, RAT: Snape
222:RSH-SPX - Berkeley rshd with SPX auth, RAT: NeuroticKat, Snape
223:CDC - Certificate Distribution Center
242:Direct
243:SUR-MEAS - Survey Measurement
244:Dayna
245:LINK - LINK
246:DSP3270 - Display Systems Protocol
256:RAP
257:Secure Electronic Transaction
258:Yak Winsock Personal Chat
259:Efficient Short Remote Operations
260:Openport
261:IIOP Name Service over TLS/SSL
262:ARCISDMS - Arcisdms
263:HDAP
280:HTTP-MGMT - http-mgmt
281:Personal Link
282:CABLEPORT-AX - Cable Port A/X
285:RAT: Webcam Trojan
299:RAT: One
303:RAT: Nova
304:RAT: Nova
305:RAT: Nova
306:RAT: Nova
309:ENTRUSTTIME - EntrustTime
314:RAT: Blaire
333:RAT: NeoPets 334:RAT: Backage
344:PDAP - Prospero Data Access Protocol
345:PAWSERV - Perf Analysis Workbench, RAT: Cang
346:ZSERV - Zebra server
347:FATSERV - Fatmen Server
348:CSI-SGWP - Cabletron Management Protocol
350:MATIP Type A
351:MATIP Type B
352:DTG-STE-SB - DTAG
370:RAT: NeuroticKat
371:CLEAR- Clearcase
372:ULISTSERV - Unix Listserv
373:LEGENT-1 - Legent Corporation
374:LEGENT-2 - Legent Corporation
375:HASSLE
376:NIP - Amiga Envoy Network Inquiry Proto
377:TNETOS - NEC Corporation
378:DSETOS - NEC Corporation
379:IS99C - TIA/EIA/IS-99 modem client
380:IS99S - TIA/EIA/IS-99 modem server
381:HP-COLLECTOR - HP Performance Data Collector
382:HP-MANAGED-NODE - HP Performance Data Managed Node
383:HP-ALARM-MGR - HP Performance Data Alarm Manager
384:ARNS - A Remote Network Server System
385:IBM-APP - IBM Application
386:ASA - ASA Message Router Object Def.
387:AURP - Appletalk Update-Based Routing Pro.
388:UNIDATA-LDM - Unidata LDM Version 4
389:LDAP - Lightweight Directory Access Protocol (RFC 1777)
390:UIS
391:SYNOTICS-RELAY - SynOptics SNMP Relay Port
392:SYNOTICS-BROKER - SynOptics Port Broker Port
393:DIS - Data Interpretation System
394:EMBL-NDT - EMBL Nucleic Data Transfer
395:NETCP - NETscout Control Protocol
396:NETWARE-IP - Novell Netware over IP
397:MPTN - Multi Protocol Trans. Net.
398:KRYPTOLAN 399:ISO-TSAP-C2 - ISO Transport Class 2 Non-Control over TCP 400:WORK-SOL - Workstation Solutions 401:UPS - Uninterruptible Power Supply, RAT: One 402:Genie Protocol
403:DECAP
404:NCED
405:NCLD
406:IMSP - Interactive Mail Support Protocol
407:TIMBUKTU - Timbuktu
408:PRM-SM - Prospero Resource Manager Sys. Man.
409:PRM-NM - Prospero Resource Manager Node Man.
410:DECLADEBUG - DECLadebug Remote Debug Protocol
411:RMT - Remote MT Protocol
412:SYNOPTICS-TRAP - Trap Convention Port, Direct Connect Peer-2-Peer File Sharing
413:SMSP - SMSP
414:INFOSEEK - InfoSeek
415:BNET - BNet
416:Silverplatter
417:Onmux
418:Hyper-G
419:ARIEL1
420:SMPTE - SMPTE, RAT: Breach, Exploiter, Freddy K, Girlfriend
421:ARIEL2, RAT: TCP Wrappers trojan
422:ARIEL3
423:OPC-JOB-START - IBM Operations Planning and Control Start
424:OPC-JOB-TRACK - IBM Operations Planning and Control Track
425:ICAD-EL
426:SMARTSDP - smartsdp
427:SVRLOC - Server Location
428:OCS_CMU
429:OCS_AMU
430:UTMPSD
431:UTMPCD
432:IASD
433:NNSP
434:MobileIP-Agent
435:MOBILIP-MN
436:DNA-CML
437:COMSCM
438:DSFGW
439:DASP
440:SGCP
441:DECVMS-SYSMGT
442:CVC_HOSTD
443:HTTPS - HTTPS (Hyper Text Transfer Protocol Secure) - SSL (Secure Socket Layer)
444:SNPP - Simple Network Paging Protocol (RFC 1568)
445:MICROSOFT-DS
446:DDM-RDB
447:DDM-DFM
448:DDM-BYTE
449:AS Server Mapper
450:TSERVER
451:SFS-SMP-NET - Cray Network Semaphore server
452:SFS-CONFIG - Cray SFS config server, RAT: OMPN Flash, OMPN Magic
453:CREATIVESERVER - CreativeServer
454:CONTENTSERVER - ContentServer, RAT: DTCold
455:CREATIVEPARTNR - CreativePartnr, RAT: Hackers Paradise, Fatal Connections
456:MACON-TCP - macon-tcp, RAT: Hackers Paradise, Daniel, Keylog.Clandestine 2
457:SCOHELP
458:APPLEQTC - Apple Quick Time
459:AMPR-RCMD
460:SKRONK
461:DATASURFSRV
462:DATASURFSRVSEC
463:ALPES
464:KPASSWD
465:SSMTP - SMTP Protocol over TLS/SSL (was ssmtp)
466:DIGITAL-VRC
467:MYLEX-MAPD
468:PHOTURIS
469:RCP - Radio Control Protocol
470:SCX-PROXY
471:MONDEX
472:LJK-LOGIN
473:HYBRID-POP
474:TN-TL-W1
475:TCPNETHASPSRV
476:TN-TL-FD
477:SS7NS
478:SPSC
479:IAFSERVER
480:IAFDBASE
481:PH - Ph service
482:BGS-NSI
483:ULPNET 484:INTEGRA-SME - Integra Software Management Environment
485:POWERBURST - Air Soft Power Burst
486:AVIAN
487:SAFT
488:GSS-HTTP
489:NEST-PROTOCOL
490:MICOM-PFS
491:GO-LOGIN
492:TICF-1 - Transport Independent Convergence for FNA
493:TICF-2 - Transport Independent Convergence for FNA
494:POV-RAY
495:INTECOURIER
496:PIM-RP-DISC
497:DANTZ
498:SIAM
499:ISO ILL Protocol
500:ISAKMP, RAT: Optix Pro
501:STMF
502:ASA-APPL-PROTO, RAT: Optix Pro
503:INTRINSA, RAT: Optix Pro
504:CITADEL
505:MAILBOX-LM
506:OHIMSRV
507:CRS
508:XVTTP
509:SNARE
510:FCP - FirstClass Protocol
511:MYNET
512:EXEC - Remote Process Execution
513:LOGIN - Remote Login via Telnet, RAT: Grlogin
514:SHELL - Automatic Remote Process Execution, cmd, RAT: RPC Backdoor
515:PRINTER - Printer Spooler
516:videotex
517:TALK - like tenex link, but across
518:NTALK
519:UTIME - Unix Time
520:EFS - Extended File Server, RIP
521:RIPNG
522:ULP
523:IBM-DB2
523:IBM-DB2
524:NCP
525:TIMED - Time Server
526:TEMPO - newdate
527:Stock IXChange
528:Customer IXChange
529:IRC-SERV
529:IRC-SERV
530:COURIER - rpc 531:CONFERENCE - chat, RAT: Trojan.SemiSoft, Net.666, Rasmin
532:NETNEWS - readnews
533:NETWALL - Emergency Broadcasts
534:MM-ADMIN - MegaMedia Admin
535:IIOP
536:OPALIS-RDV
537:NMSP - Networked Media Streaming Protocol
538:GDOMAP
539:APERTUS-LDP - Apertus Technologies Load Determination
540:UUCP - UUCP Daemon
541:UUCP - UUCP-RLOGIN - uucp (Unix to Unix Copy) - rlogin (Remote Login)
542:COMMERCE
543:KLOGIN - Kerberos Authenticated Login, RAT: Cang
544:KSHELL - krcmd
545:APPLEQTCSRVR - Apple qtcsrvr
546:DHCP-CLIENT - DHCP (Dynamic Host Configuration Protocol) Client
547:DHCP-SERVER - DHCP (Dynamic Host Configuration Protocol) Server
548:AFPOVERTCP - AFP over TCP
549:IDFP
550:NEW-RWHO
551:CYBERCASH
552:DEVICESHARE
553:PIRP
554:RTSP - Real Time Stream Control Protocol
555:DSF - DSF, RAT: Net Administrator, Phase Zero, Phase-0, Stealth Spy
556:REMOTEFS - rfs (Remote File System) server
557:OPENVMS-SYSIPC - openvms-sysipc
558:SDNSKMP
559:TEEDTAP
560:RMONITOR
561:MONITOR
562:CHSHELL
563:NNTPS - NNTP Protocol over TLS/SSL (was snntp)
564:9PFS - plan 9 file service, RAT: Oracle
565:WHOAMI
566:STREETTALK
567:BANYAN-RPC
568:Microsoft Shuttle
569:Microsoft Rome
570:demon
571:udemon
572:sonar
573:Banyan-VIP
574:FTP-AGENT - FTP Software Agent System
575:VEMMI
576:IPCD
577:VNAS
578:IPDD
579:DECBSRV
580:SNTP-HEARTBEAT
581:BDP - Bundle Discovery Protocol (RFC 2701)
582:SCC-Security
583:Philips-VC - Philips Video-Conferencing
584:KeyServer
585:IMAP4-SSL
586:PASSWORD-CHG - Password Change
587:SUBMISSION
600:IPCSERVER - Sun IPC server
605:RAT: Secret Service
606:URM - Cray Unified Resource Manager
607:NQS
608:SIFT-UFT - Sender-Initiated/Unsolicited File Transfer
609:NPMP-TRAP
610:NPMP-LOCAL
611:NPMP-GUI
612:HMMP-IND
613:HMMP-OP
614:SSLSHELL
615:SCO-INETMGR - Internet Configuration Manager
616:SCO-SYSMGR - SCO System Administration Server
617:SCO-DTMGR - SCO Desktop Administration Server
618:DEI-ICDA
619:DIGITAL-EVM
620:SCO-WEBSRVRMGR - SCO WebServer Manager
621:ESCP-IP
623:RAT: RTB666
633:SERVSTAT - Service Status update (Sterling Software)
634:GINAD 635:RLZDBASE - RLZ DBase 636:LDAPS - ldap Protocol over TLS/SSL (was sldap) 637:LANSERVER
650:RAT: Assasin
660:RAT: Zaratustra
661:RAT: NokNok
666:Doom (Id Software), RAT: Peur de Rien FTP, Attack FTP, Back Construction, Cain & Abel, NokNok, Satans Back Door - SBD, ServU, Shadow Phyre, F-BackDoor, Worm.Grifin Remote Control, Uprising, Dimbus, TiVedo, MAD, Storm, Ulysses, Beast, Plateau, MaLPaYo, Dracula
667:DISCLOSURE - campaign contribution disclosures, RAT: SniperNet
668:MECOMM
669:MEREGISTER - MeRegister, RAT: DP trojan
670:VACDSM-SWS
671:VACDSM-APP
672:VPPS-QUA
673:CIMPLEX, RAT: Hornet
674:ACAP
680:RAT: RTB666
692:RAT: GayOL, Lightning
693:RAT: Lightning
704:ELCSD - errlog copy/server daemon
705:AGENTX - AgentX
709:ENTRUST-KMSH - EntrustManager
710:ENTRUST-ASH - Entrust Administration Service Handler
717:RAT: DDoS.RAT.HLHSI
729:NETVIEWDM1 - IBM NetView DM/6000 Server/Client
730:NETVIEWDM2 - IBM NetView DM/6000 send/tcp
731:NETVIEWDM3 - IBM NetView DM/6000 receive/tcp
741:NETGW
742:NETRCS - Network based Rev. Cont. Sys.
744:FLEXLM - Flexible License Manager
747:FUJITSU-DEV - Fujitsu Device Control
748:RIS-CM - Russell Info Sci Calendar Manager
749:KERBEROS-ADM - kerberos administration
750:RFILE - RFILE
751:PUMP - PUMP
1000:CADLOCK - CADLOCK, RAT: Der Spaeher 3, Theef, U321
1001:RAT: Der Spaeher 3, Le Guardien, Silencer, WebEx, Theef, One, Priority, Lula, Eljefe, Havoc, Darkscan, RFM, Winsock Commander, Keylog.RemoteCon
1002:RAT: XQDoor
1003:RAT: Darkscan, FTP.Avanzado
1005:RAT: Theef
1010:RAT: Doly Trojan
1011:RAT: Doly Trojan, Arturik
1012:RAT: Doly Trojan
1015:RAT: Doly Trojan, JoTroj
1016:RAT: Doly Trojan
1020:RAT: Vampire
1023:RESERVED - Reserved
1024:OLD_FINGER - old_finger, RAT: Psyber Streaming Server, NetSpy, R.A.T, Alex
1025:BLACKJACK - network blackjack, LISTEN - listen, RAT: Gaura
1026:NTERM - nterm
1027:RAT: Latinus
1028:RAT: HacKErZ
1029:ICQ Instant Messenger, RAT: Latinus
1030:IAD1 - BBN IAD, RAT: Clandestine
1031:IAD2 - BBN IAD, RAT: UltimateRAT
1032:IAD3 - BBN IAD
1033:RAT: Netspy
1037:RAT: MoSucker
1039:RAT: Happy
1040:RAT: Infiltration
1042:RAT: Bla, Rasmin
1045:RAT: Rasmin
1046:RAT: Quetnek
1047:NEOD1 - Sun's NEO Object Request Broker
1048:NEOD2 - Sun's NEO Object Request Broker
1049:/sbin/initd, RAT: NewFuture
1050:RAT: MiniCommand
1052:RAT: NK
1054:RAT: AckCmd
1058:NIM - nim
1059:NIMREG - nimreg
1067:INSTL_BOOTS - Installation Bootstrap Proto. Serv.
1068:INSTL_BOOTC - Installation Bootstrap Proto. Cli.
1080:SOCKS - Proxy, RAT: WinHole, Broser
1081:RAT: WinHole
1082:RAT: WinHole
1083:ANSOFT-LM-1 - Anasoft License Manager, RAT: WinHole
1084:ANSOFT-LM-2 - Anasoft License Manager
1090:RAT: Xtreme
1095:RAT: RAT
1097:RAT: RAT
1098:RAT: RAT
1099:RAT: Blood Fest Evolution, RAT
1101:RAT: Rths
1102:RAT: Rths
1103:RAT: Rths
1104:RAT: Rths
1105:RAT: Rths
1106:RAT: Rths
1107:RAT: Rths
1108:RAT: Rths
1109:KPOP - kpop, RAT: Rths
1110:NFSD-STATUS - Cluster status info, RAT: Rths
1111:LMSOCIALSERVER - LM Social Server, RAT: RemoteXS, Nemesis, X-Filer, NetSpy II, Way, Rths, Dzyckz
1112:RAT: Rths
1113:RAT: Rths
1114:RAT: TransScout, Way, Rths
1115:RAT: TransScout, Lurker, Rths
1116:RAT: TransScout, Lurker
1117:RAT: TransScout
1119:RAT: CNGhost
1122:RAT: Last2000
1123:MURRAY - Murray
1130:RAT: NokNok
1155:NFA - Network File Access
1158:RAT: Stang
1170:RAT: Psyber Stream Server - PSS, Streaming Audio Server, Voice
1180:MC-CLIENT - Millicent Client Proxy
1182:RAT: Dobol
1183:RAT: GirlBoy, PSW.Remote Fake Login
1190:RAT: Ojo
1200:RAT: NoBackO
1201:RAT: NoBackO
1207:RAT: SoftWar
1212:LUPA - lupa, RAT: Kaos, NeoPets
1214:KaZaA - KaZaA P2P File Sharing
1215:RAT: Force
1218:RAT:Schneckenkorn
1219:RAT:Schneckenkorn
1221:RAT: Spy, FLB, RVC
1222:NERV - SNI R&D network, FLB
1234:RAT: Ultors Trojan, HackIT (Holzpferd), Kilo, Fade, Remote Operations, NetAmine
1243:RAT: BackDoor-G, SubSeven , SubSeven Apocalypse, Tiles, Mainline, HackWorld
1245:RAT: VooDoo Doll, Ultors Trojan
1248:HERMES - hermes
1254:RAT: Monk
1255:RAT: Scarab, Happy
1256:RAT: Project nEXT, RexxRave
1257:RAT: Sub Seven 2.1, Frenzy
1269:RAT: Mavericks Matrix
1274:RAT: Mavericks Matrix
1275:RAT: Fredisoft
1276:RAT: Mavericks Matrix
1313:BMC_PATROLDB - BMC_PATROLDB, RAT: NETrojan
1314:PDPS - Photoscript Distributed Printing System
1324:RAT: Shador
1337:RAT: Joker DDoS
1338:RAT: Millenium Worm
1342:VMOTELNET - VMODEM telnet redirect
1345:VPJP - VPJP
1346:ALTA-ANA-LM - Alta Analytics License Manager
1347:BBN-MMC - Multi Media Conferencing
1348:BBN-MMX - Multi Media Conferencing
1349:SBOOK - Registration Network Protocol, RAT: Back Orifice DLL
1350:EDITBENCH - Registration Network Protocol
1351:EQUATIONBUILDER - Digital Tool Works (MIT)
1352:LOTUSNOTE - Lotus Note
1353:RELIEF - Relief Consulting
1354:RIGHTBRAIN - RightBrain Software
1355:INTUITIVE EDGE - Intuitive Edge
1356:CUILLAMARTIN - CuillaMartin Company
1357:PEGBOARD - Electronic PegBoard
1358:CONNLCLI - CONNLCLI
1359:FTSRV - FTSRV
1360:MIMER - MIMER
1361:LINX - LinX
1362:TIMEFLIES - TimeFlies
1363:NDM-REQUESTER - Network DataMover Requester
1364:NDM-SERVER - Network DataMover Server
1365:ADAPT-SNA
1394 Gofriller, BackDoor
1492 FTP99CMP
1509 Psyber Streaming Server
1524 Trinoo
1600 Shivka-Burka
1777 Scarab
1807 SpySender
1966 Fake FTP
1969 OpC BO
1981 Shockrave
1999 BackDoor, TransScout
2000 Der Spaeher 3, Insane Network, TransScout
2001 Der Spaeher 3, TransScout, Trojan Cow
2002 TransScout
2003 TransScout
2004 TransScout
2005 TransScout
2023 Ripper
2080 WinHole
2086 Netscape/Corba exploit
2115 Bugs
2140 Deep Throat, The Invasor
2155 Illusion Mailer
2283 HVL Rat5
2300 Xplorer
2565 Striker
2583 WinCrash
2600 Digital RootBeer
2716 The Prayer
2721 Phase Zero
2773 SubSeven
2801 Phineas Phucker
2889 Rat
3000 Remote Shutdown
3024 WinCrash
3128 RingZero
3129 Masters Paradise
3150 Deep Throat, The Invasor
3456 Teror Trojan
3459 Eclipse 2000, Sanctuary
3587 Sh*tHead Trojan
3700 Portal of Doom
3791 Eclypse
3801 Eclypse
4000 Skydance
4092 WinCrash
4242 Virtual hacking Machine
4321 BoBo
4444 Prosiak, Swift remote
4567 File Nail
4590 ICQTrojan
5000 Bubbel, Back Door Setup, Sockets de Troie
5001 Back Door Setup, Sockets de Troie
5010 Solo
5011 One of the Last Trojans (OOTLT)
5031 NetMetropolitan
5032 NetMetropolitan
5321 Firehotcker
5343 wCrat
5400 Blade Runner, Back Construction
5401 Blade Runner, Back Construction
5402 Blade Runner, Back Construction
5550 Xtcp
5512 Illusion Mailer
5521 Illusion Mailer
5550 X-Tcp Trojan
5555 ServeMe
5556 BO Facil
5557 BO Facil
5569 Robo-Hack
5637 PC Crasher
5638 PC Crasher
5666 PC Crasher
5742 WinCrash
5882 Y3K RAT
5888 Y3K RAT
6000 The Thing
6006 The Thing
6272 Secret Service
6400 The Thing
6667 Schedule Agent
6669 Host Control, Vampyre
6670 DeepThroat, BackWeb Server, WinNuke eXtreame
6711 SubSeven
6712 Funny Trojan, SubSeven
6713 SubSeven
6723 Mstream
6771 DeepThroat
6776 2000 Cracks, BackDoor-G, SubSeven
6838 Mstream
6912 Shit Heep
6939 Indoctrination
6969 GateCrasher, Priority, IRC 3, NetController
6970 GateCrasher
7000 Remote Grab, Kazimas, SubSeven
7001 Freak88
7215 SubSeven
7300 NetMonitor
7301 NetMonitor
7302 NetMonitor
7303 NetMonitor
7304 NetMonitor
7305 NetMonitor
7306 NetMonitor
7307 NetMonitor
7308 NetMonitor
7309 NetMonitor
7323 Sygate Backdoor
7424 Host Control
7424 Host Control
7789 Back Door Setup, ICKiller
7983 Mstream
8080 RingZero
8787 Back Orifice 2000
8897 HackOffice
8988 BacHack
8989 Rcon
9000 Netministrator
9325 Mstream
9400 InCommand
9872 Portal of Doom
9873 Portal of Doom
9874 Portal of Doom
9875 Portal of Doom
9876 Cyber Attacker, RUX
9878 TransScout
9989 iNi-Killer
9999 The Prayer
10067 Portal of Doom
10085 Syphillis
10086 Syphillis
10101 BrainSpy
10167 Portal of Doom
10498 Handler to Agent
10528 Host Control
10520 Acid Shivers
10607 Coma
10666 Ambush
11000 Senna Spy
11050 Host Control
11051 Host Control
11223 Progenic trojan, Secret Agent
12076 Gjamer
12223 Hack´99 KeyLogger
12345 GabanBus, My Pics, NetBus, Pie Bill Gates, Whack Job, X-bill
12346 GabanBus, NetBus, X-bill
12349 BioNet
12361 Whack-a-mole
12362 Whack-a-mole
12456 NetBus
12623 DUN Control
12624 Buttman
12631 WhackJob
12701 Eclipse 2000
12754 Mstream
13000 Senna Spy
13010 Hacker Brazil
15092 Host Control
15104 Mstream
16660 Stacheldracht
16484 Mosucker
16772 ICQ Revenge
16969 Priority
17166 Mosaic
17300 Kuang2 The Virus
17777 Nephron
18753 Shaft
19864 ICQ Revenge
20000 Millennium
20001 Millennium
20002 AcidkoR
20034 NetBus 2 Pro, NetRex, Whack Job
20203 Chupacabra, Logged!
20331 Bla
20432 Shaft Client to handler(s)
20433 Shaft Agent to handler(s)
21544 GirlFriend, Kidterror, Schwindler, WinSp00fer
21554 GirlFriend
22222 Prosiak
23023 Logged
23432 Asylum
23456 Evil FTP, Ugly FTP, Whack Job
23476 Donald Dick
23476 Donald Dick
23477 Donald Dick
26274 Delta Source
26681 Spy Voice
27374 SubSeven
27444 Trinoo
27573 SubSeven
27665 Trinoo,
29104 Host Control
29891 The Unexplained
30001 TerrOr32
30029 AOL Trojan
30100 NetSphere
30101 NetSphere
30102 NetSphere
30103 NetSphere
30103 NetSphere
30133 NetSphere
30303 Sockets de Troie
30947 Intruse
30999 Kuang2
31335 Trinoo
31336 Bo Whack, ButtFunnel
31337 Baron Night, BO client, BO2, Bo Facil
31337 BackFire, Back Orifice, DeepBO, Freak
31338 NetSpy DK, ButtFunnel
31338 Back Orifice, DeepBO
31339 NetSpy DK
31666 BOWhack
31785 Hack´a´Tack
31787 Hack´a´Tack
31788 Hack´a´Tack
31789 Hack´a´Tack
31790 Hack´a´Tack
31791 Hack´a´Tack
31792 Hack´a´Tack
32100 Peanut Brittle, Project nEXT
32418 Acid Battery
33333 Blakharaz, Prosiak
33577 PsychWard
33777 PsychWard
33911 Spirit 2001a
34324 BigGluck, TN
34555 Trinoo (Windows)
35555 Trinoo (Windows)
37651 YAT
40412 The Spy
40421 Agent 40421, Masters Paradise
40422 Masters Paradise
40423 Masters Paradise
40425 Masters Paradise
40426 Masters Paradise
41666 Remote Boot
41666 Remote Boot
44444 Prosiak
47252 Delta Source
47262 Delta Source
49301 Online KeyLogger
50505 Sockets de Troie
50766 Fore, Schwindler
50776 Fore
51996 Cafeini
52317 Acid Battery 2000
53001 Remote Windows Shutdown
54283 SubSeven
54320 Back Orifice 2000
54321 School Bus
54321 Back Orifice 2000
56565 Osiris
57341 NetRaider
58339 ButtFunnel
60000 Deep Throat
60068 Xzip 6000068
60411 Connection
61348 Bunker-Hill
61466 Telecommando
61603 Bunker-Hill
63485 Bunker-Hill
65000 Devil, Stacheldracht
65432 The Traitor
65432 The Traitor
65535 RC