0 ICMP Click attack
19 UDP Chargen
21 TCP Detects if someone is trying to FTP to you.
23 TCP Detects if someone is trying to Telnet to you.
25 * TCP Several trojans use this port.
31 * TCP Agent 31, Hacker's Paradise, Master's Paradise
41 * TCP Deep Throat
53 TCP DNS
58 * TCP DM Setup
80 * TCP Executor
110 * TCP ProMail Trojan
121 * TCP Jammer Killah
129 TCP Password Generator Protocol
137 TCP Netbios name (DoS attacks)
138 TCP Netbios datagram (DoS attacks)
139 TCP Netbios session (DoS attacks)
456 * TCP Hacker's Paradise
555 TCP Stealth Spy, Phaze
666 TCP Attack FTP
1001 * TCP Silencer, WebEx
1011 * TCP Doly Trojan
1012 * TCP Doly Trojan
1024 * TCP NetSpy
1027 TCP ICQ
1029 TCP ICQ
1032 TCP ICQ
1080 TCP Used to detect Wingate sniffers.
1170 * TCP Voice Streaming Audio
1243 TCP Sub Seven
1245 * TCP VooDoo Doll
1492 * TCP FTP99CMP
1981 TCP Shockrave
1999 * TCP BackDoor
2001 * TCP Trojan Cow
2023 * TCP Ripper
2115 * TCP Bugs
2140 * TCP Deep Throat
2140 UDP Deep Throat
2565 * TCP Striker
2583 * TCP WinCrash
2801 * TCP Phineas Phucker
2989 UDP Rat
3024 * TCP WinCrash
3129 * TCP Master's Paradise
3150 * TCP Deep Throat
3150 UDP Deep Throat
3389 3 * TCP See footnote 3 at the bottom of this table.
3700 * TCP Portal of Doom
4092 * TCP WinCrash
4590 * TCP ICQ Trojan
5000 2 TCP Detects & blocks Sokets de Trois v1.
5001 TCP Detects & blocks Sokets de Trois v1.
5400 * TCP Blade Runner
5401 * TCP Blade Runner
5402 * TCP Blade Runner
5569 * TCP Robo-Hack
5742 * TCP WinCrash
6400 * TCP The Thing
6670 * TCP Deep Throat