Port | Protokoll  Trojans/Backdoors
------+------------------------------
    2 | TCP        Death
   21 | TCP        Back Construction, Blade Runner, Doly Trojan, Fore, FTP trojan,
      |            Invisible FTP, Larva, MBT, Motiv, Net Administrator,
      |            Senna Spy FTP Server, Traitor, WebEx, WinCrash
   23 | TCP        Prosiak (telnet), Tiny Telnet Server, Truva Atl
   25 | TCP        Aji, Antigen, Email Password Sender, Email Worms, Gip, Happy99/Ska,
      |            Haebu Coceda, Loveletter, Kuang2, Magic Horse, Moscow Email Trojan,
      |            Naebi, NewApt, ProMail trojan, Shtrilitz,  Stealth, Tapiras,
      |            Terminator, WinPC, WinSpy
   31 | TCP        Agent 31, Hackers Paradise, Masters Paradise
   41 | TCP        DeepThroat
   48 | TCP        DRAT
   50 | TCP        DRAT
   53 | TCP        Bonk (DoS)
   58 | TCP        DMSetup
   59 | TCP        DMSetup
   79 | TCP        Firehotcker
   80 | TCP        Back End, Executor, Hooker, RingZero
   99 | TCP        Hidden Port
  110 | TCP        ProMail trojan
  113 | TCP        Invisible Identd Deamon, Kazimas
  118 | UDP        Infector 1.4.2
  119 | TCP        Happy99/Ska
  121 | TCP        JammerKillah
  123 | TCP        Net Controller
  133 | TCP        Farnaz
  139 | TCP        WinNuke
  146 | TCP        Infector 1.x
  170 | TCP        A-Trojan
  315 | TCP        The Invasor
  421 | TCP        (TCP Wrappers)
  456 | TCP        Hackers Paradise
  531 | TCP        Rasmin
  555 | TCP/UDP    Ini-Killer, NeTAdministrator, Phase Zero*, Stealth Spy
  606 | TCP        Secret Service
  666 | TCP        Attack FTP, Satanz Backdoor
  667 | TCP        SniperNet
  669 | TCP        DP Trojan
  692 | TCP        GayOL
  777 | TCP        Aim Spy
  808 | TCP        WinHole
  815 | TCP/UDP    Everyone's Darling
  911 | TCP        Dark Shadow
  999 | TCP        DeepThroat
 1000 | TCP        Der Spaeher 3
 1001 | TCP        Der Spaeher 3, Le Guardien, Silencer, WebEx
 1003 | TCP        BackDoor 2.0x
 1010 | TCP        Doly Trojan 1.3, CafeIni 0.9 (1010:1100)
 1011 | TCP        Doly Trojan 1.1/1.2
 1012 | TCP        Doly Trojan 1.5
 1015 | TCP        Doly Trojan 1.6
 1016 | TCP        Doly Trojan
 1020 | TCP        Vampire
 1024 | TCP        NetSpy
 1025 | TCP/UDP    NetSpy, Maverick's Matrix, RemoteStorm
 1029 | TCP/UDP    InCommand
 1033 | TCP        NetSpy
 1042 | TCP        Bla 1.1
 1045 | TCP        Rasmin
 1047 | TCP        GateCrasher.b,c
 1050 | TCP        MiniCommand
 1080 | TCP        WinHole
 1081 | TCP        WinHole
 1082 | TCP        WinHole
 1083 | TCP        WinHole
 1090 | TCP        Xtreme
 1095 | TCP        Rat
 1097 | TCP        Rat
 1098 | TCP        Rat
 1099 | TCP        BFevolution, Rat
 1100 | TCP        CafeIni 0.9 (1010:1100)
 1137 | TCP        MTX
 1170 | TCP        Psyber Stream Server, Streaming Audio Trojan, Voice
 1200 | UDP        NoBackO
 1201 | UDP        NoBackO
 1207 | TCP        SoftWAR
 1208 | TCP/UDP    Infector 1.3 + 1.4.1
 1212 | TCP        Kaos
 1225 | TCP        Scarab
 1234 | TCP        Ultors Trojan, SubSeven 2.0
 1243 | TCP        BackDoor-G/SubSeven/Sub7 *, SubSeven Apocalypse, Tiles
 1245 | TCP        VooDoo Doll
 1255 | TCP        Scarab
 1256 | TCP        Project nEXT
 1269 | TCP        Maverick's Matrix
 1313 | TCP        NETrojan
 1338 | TCP        Millenium Worm
 1349 | UDP        BO DLL
 1441 | TCP        RemoteStorm
 1492 | TCP        FTP99CMP, Back.Orifice.FTP
 1509 | TCP        Psyber Streaming Server
 1524 | TCP        Trin00 (DDoS)
 1600 | TCP        Shivka-Burka
 1700 | TCP        Rux.Tick
 1777 | TCP        Scarab
 1784 | TCP        Snid X2
 1807 | TCP        SpySender
 1966 | TCP        Fake FTP
 1969 | TCP        OpC BO
 1981 | TCP        Shockrave
 1999 | TCP        BackDoor 1.00-1.03, TransScout 1.x
 2000 | TCP        Der Spaeher 3, Insane Network, TransScout
 2001 | TCP        Der Spaeher 3, TransScout, Trojan Cow
 2002 | TCP        TransScout
 2003 | TCP        TransScout
 2004 | TCP        TransScout
 2005 | TCP        TransScout
 2023 | TCP        (Pass) Ripper
 2080 | TCP        WinHole
 2115 | TCP        Bugs
 2140 | UDP        Deep Throat (alle Versionen), The Invasor
 2208 | TCP        Rux.PSW
 2283 | TCP        HLV Rat 5
 2300 | TCP        Xplorer
 2565 | TCP        Striker
 2583 | TCP        WinCrash 2
 2600 | TCP        Digital RootBeer
 2716 | TCP        The Prayer 2
 2773 | TCP        Backdoor-G/SubSeven/Sub7 *
 2801 | TCP        Phineas Phucker
 2989 | TCP/UDP    Rat 1.2
 3000 | TCP        Remote Shutdown
 3024 | TCP        WinCrash
 3128 | TCP        RingZero
 3129 | TCP        Masters Paradise
 3150 | UDP        Deep Throat, The Invasor
 3456 | TCP        Teror Trojan
 3459 | TCP        Eclipse 2000, Sanctuary
 3586 | TCP        Snid X2
 3700 | TCP        Portal of Doom (PoD)
 3791 | TCP        Total Eclipse (FTP)
 3801 | UDP        Total Eclipse
 4000 | TCP        Skydance
 4092 | TCP        WinCrash
 4242 | TCP        Virtual hacking Machine
 4245 | TCP        Rux.Backdoor
 4321 | TCP        BoBo, Schoolbus 1.0
 4444 | TCP        Prosiak, Swift remote
 4711 | UDP        Olfactor
 4567 | TCP        File Nail
 4590 | TCP        ICQTrojan
 4950 | TCP        ICQTrojan
 5000 | TCP        Bubbel, Back Door Setup, Blazer 5, Socket 23, Sockets de Troie
 5001 | TCP        Back Door Setup, Sockets de Troie
 5011 | TCP        OOTLT
 5031 | TCP        NetMetropolitan 1.0
 5031 | TCP        NetMetropolitan 1.04
 5032 | TCP        NetMetropolitan 1.04
 5321 | TCP        Firehotcker
 5333 | TCP        Backage Trojan Box 3
 5343 | TCP        wCrat
 5400 | TCP        Blade Runner, Back Construction 1.2
 5401 | TCP        Blade Runner 1.x, Back Construction
 5402 | TCP        Blade Runner 2.x, Back Construction
 5512 | TCP        Illusion Mailer
 5521 | TCP        Illusion Mailer
 5550 | TCP        Xtcp 2
 5555 | TCP        ServeMe
 5556 | TCP        BO Facil, H0rtiga
 5557 | TCP        BO Facil
 5569 | TCP        RoboHack
 5598 | TCP        BackDoor 2.03
 5637 | TCP        PC Crasher
 5638 | TCP        PC Crasher
 5714 | TCP        WinCrash
 5741 | TCP        WinCrash
 5742 | TCP        WinCrash
 5881 | UDP        Y3K RAT
 5882 | TCP/UDP    Y3K RAT
 5888 | TCP/UDP    Y3K RAT
 5889 | TCP        Y3K RAT
 6000 | TCP        The Thing/APStrojan
 6006 | TCP        The Thing/APStrojan
 6272 | TCP        Secret Service
 6400 | TCP        The Thing/APStrojan
 6500 | TCP        Devil 1.03
 6666 | TCP        TCPshell.c
 6667 | TCP        Schedule Agent
 6669 | TCP        Host Control, Vampyre 1.0
 6670 | TCP        DeepThroat, BackWeb Server, WinNuke eXtreame
 6711 | TCP        BackDoor-G/SubSeven/Sub7 *
 6712 | TCP        BackDoor-G/SubSeven/Sub7 *, Funny Trojan
 6713 | TCP        BackDoor-G/SubSeven/Sub7 *
 6723 | TCP        Mstream
 6771 | TCP        DeepThroat
 6776 | TCP        2000 Cracks, BackDoor-G/SubSeven/Sub7 *
 6789 | TCP        Doly Trojan
 6838 | UDP        Mstream
 6883 | TCP        DeltaSource
 6912 | TCP        Shit Heep
 6939 | TCP        Indoctrination
 6969 | TCP/UDP    GateCrasher, IRC 3, NetController, Priority
 6970 | TCP        GateCrasher
 7000 | TCP        BackDoor-G/SubSeven/Sub7 *, Remote Grab, Kazimas
 7001 | TCP        Freak88
 7215 | TCP        BackDoor-G/SubSeven/Sub7 *
 7300 | TCP        NetMonitor
 7301 | TCP        NetMonitor
 7306 | TCP        NetMonitor
 7307 | TCP        NetMonitor
 7308 | TCP        NetMonitor
 7424 | TCP/UDP    Host Control
 7597 | TCP        Qaz
 7609 | TCP        Snid X2
 7789 | TCP        Back Door Setup, ICKiller
 7983 | TCP        Mstream
 8080 | TCP        RingZero
 8787 | TCP        Back Orifice 2000 (BO2K) *
 8897 | TCP        HackOffice Armageddon
 8989 | TCP        Rcon
 9000 | TCP        Netministrator
 9325 | UDP        Mstream
 9400 | TCP        InCommand
 9872 | TCP        Portal of Doom (PoD)
 9873 | TCP        Portal of Doom (PoD)
 9874 | TCP        Portal of Doom (PoD)
 9875 | TCP        Portal of Doom (PoD)
 9876 | TCP        Cyber Attacker, Rux.Backdoor
 9878 | TCP        TransScout
 9989 | TCP        iNi-Killer
 9999 | TCP        The Prayer 1
10067 | UDP        Portal of Doom (PoD)
10085 | TCP        Syphillis
10086 | TCP        Syphillis
10101 | TCP        BrainSpy
10167 | UDP        Portal of Doom (PoD)
10520 | TCP        Acid Shivers
10528 | TCP        Host Control
10607 | TCP        Coma
10666 | UDP        Ambush
11000 | TCP        Senna Spy
11050 | TCP        Host Control
11051 | TCP        Host Control
11223 | TCP        Progenic Trojan, Secret Agent
12076 | TCP        GJamer
12223 | TCP        Hack´99 KeyLogger
12345 | TCP        GabanBus, NetBus 1.x (v1.7*), Pie Bill Gates, WhackJob, X-bill
12346 | TCP        GabanBus, NetBus 1.x (v1.7*), X-bill
12349 | TCP        BioNet
12361 | TCP        Whack-a-mole
12362 | TCP        Whack-a-mole
12623 | UDP        DUN Control
12624 | TCP        Buttman
12631 | TCP        WhackJob
12701 | TCP        Eclipse 2000
12754 | TCP        Mstream
13000 | TCP        Senna Spy
13010 | TCP        Hacker Brazil
13700 | TCP        Kuang2 The Virus
14456 | TCP        Solero
14500 | TCP        PC Invader 0.7
14501 | TCP        PC Invader 0.7
14502 | TCP        PC Invader 0.7
14503 | TCP        PC Invader 0.7
15000 | TCP        NetDaemon 1.0
15092 | TCP        Host Control
15104 | TCP        Mstream
16484 | TCP        Mosucker
16660 | TCP        Stacheldraht (DDoS)
16772 | TCP        ICQ Revenge
16969 | TCP        Priority
17166 | TCP        Mosaic
17300 | TCP        Kuang2 The Virus
17490 | TCP        CrazyNet
17500 | TCP        CrazyNet
17569 | TCP        Infector 1.4.x + 1.6.x
17777 | TCP        Nephron
18753 | UDP        Shaft (DDoS)
19864 | TCP        ICQ Revenge
20000 | TCP        Millennium
20001 | TCP        Millennium
20002 | TCP        AcidkoR
20034 | TCP        NetBus 2.0 Pro*, NetRex, WhackJob
20203 | TCP        Chupacabra, Logged!
20331 | TCP        Bla
20432 | TCP/UDP    Shaft (DDoS)
20432 | UDP        Shaft (DDoS)
21544 | TCP        GirlFriend, Kidterror, Schwindler, WinSp00fer
21554 | TCP        GirlFriend, Schwindler 1.82
22222 | TCP        Prosiak
23005 | TCP/UDP    Net Trash 1.0
23023 | TCP        Logged
23432 | TCP        Asylum
23456 | TCP/UDP    Evil FTP, Ugly FTP, WhackJob
23476 | TCP/UDP    Donald Dick
23477 | TCP        Donald Dick
26274 | UDP        Delta Source
26681 | TCP        Spy Voice
27374 | TCP        BackDoor-G/SubSeven/Sub7 *
27444 | UDP        Trin00 (DDoS)
27665 | TCP        Trin00 (DDoS)
28431 | UDP        Hack'a'Tack
28432 | UDP        Hack'a'Tack
29104 | TCP        Host Control
29891 | UDP        The Unexplained
30001 | TCP        Terr0r32
30029 | TCP        AOL Trojan
30100 | TCP        NetSphere 1.27a, NetSphere 1.31
30101 | TCP        NetSphere 1.27a, NetSphere 1.31
30102 | TCP        NetSphere 1.27a, NetSphere 1.31
30103 | TCP/UDP    NetSphere 1.31
30133 | TCP        NetSphere Final
30303 | TCP        Sockets de Troie, Socket 23
30947 | TCP        Intruse
30999 | TCP        Kuang2
31335 | UDP        Trin00 (DDoS)
31336 | TCP        BOWhack, ButtFunnel
31337 | TCP/UDP    BackFire, Baron Night, Back Orifice, BO client, BO2K *,
      |            Bo Facil, DeepBO, Freak
31338 | TCP/UDP    Back Orifice, ButtFunnel, DeepBO, NetSpy DK
31339 | TCP        NetSpy DK
31554 | TCP        Schwindler
31666 | TCP        BOWhack
31785 | TCP        Hack'a'Tack
31787 | TCP        Hack'a'Tack
31788 | TCP        Hack'a'Tack
31789 | UDP        Hack'a'Tack
31790 | UDP        Hack'a'Tack
31791 | UDP        Hack'a'Tack
31792 | TCP        Hack'a'Tack
31787 | TCP        Hack'a'Tack
32100 | TCP        Peanut Brittle, Project nEXT
32418 | TCP        Acid Battery
33333 | TCP        Blakharaz, Prosiak
33577 | TCP        PsychWard
33777 | TCP        PsychWard
33911 | TCP        Spirit 2001a
34324 | TCP        BigGluck, TN, Tiny Telnet Server
34555 | UDP        Trin00 (Windows) (DDoS)
35555 | UDP        Trin00 (Windows) (DDoS)
37651 | TCP        YAT
40412 | TCP        The Spy
40421 | TCP        Agent 40421, Masters Paradise
40422 | TCP        Masters Paradise 1.x
40423 | TCP        Masters Paradise
40425 | TCP        Masters Paradise
40426 | TCP        Masters Paradise 3.x
41666 | TCP/UDP    Remote Boot
43210 | TCP        Schoolbus 1.6/2.0
44444 | TCP        Prosiak
47262 | UDP        Delta Source
49301 | TCP        Online Keylogger
50505 | TCP        Sockets de Troie
50766 | TCP        Fore, Schwindler
51996 | TCP        CafeIni
53217 | TCP        Acid Battery 2000
53001 | TCP        Remote Windows Shutdown
54283 | TCP        BackDoor-G/SubSeven/Sub7 *
54320 | UDP        Back Orifice 2000 (BO2K) *
54321 | TCP/UDP    School Bus .69-1.11 + 1.6 + 2.0, Back Orifice 2000 (BO2K) *
57341 | TCP        NetRaider
58339 | TCP        ButtFunnel
60000 | TCP        Deep Throat 2.0/3.0
60068 | TCP        Xzip 6000068
60411 | TCP        Connection
61348 | TCP        Bunker-Hill
61466 | TCP        Telecommando
61603 | TCP        Bunker-Hill
63485 | TCP        Bunker-Hill
61466 | TCP        Telecommando
65000 | TCP        Devil 1.03, Stacheldraht (DDoS)
65432 | TCP/UDP    The Traitor
65535 | TCP        RC