1 ICMP
2 IGMP
6 TCP
6-20-0 Ftp Data
6-21-0 FTP Open Server
6-23-0 Telnet
6-25-0 Smtp
6-31-0 Master Paradise.80
6-53-0 DNS,Bonk (DoS Exploit)
6-79-0 Finger
6-80-0 Http
6-110-0 Pop3
6-113-0 Auther Idnet
6-119-0 Nntp
6-121-0 BO jammerkillah
6-137-0 NetBios-NS
6-138-0 NetBios-DGN
6-139-0 NetBios-SSN
6-143-0 IMAP
6-161-0 Snmp
6-162-0 Snmp-Trap
6-194-0 Irc
6-443-0 Https
6-456-0 Hackers Paradise
6-555-0 Stealth Spy(Phase)
6-666-0 Attack FTP
6-1001-0 Silencer
6-1001-0 WebEx
6-1010-0 Doly trojan v1.35
6-1011-0 Doly Trojan
6-1015-0 Doly trojan v1.5
6-1024-0 NetSpy.698 (YAI)
6-1033-0 Netspy
6-1042-0 Bla1.1
6-1047-0 GateCrasher.b
6-1047-0 GateCrasher.c
6-1080-0 Wingate
6-1243-0 SubSeven
6-1245-0 Vodoo
6-1269-0 Maverick's Matrix
6-1492-0 FTP99CMP (BackOriffice.FTP)
6-1807-0 SpySender
6-1981-0 ShockRave
6-1999-0 Backdoor (YAI)
6-1999-0 BackDoor.200
6-1999-0 BackDoor.201
6-1999-0 BackDoor.202
6-1999-0 BackDoor.203
6-1509-0 Streaming Server
6-1600-0 Shiv
6-2001-0 TrojanCow
6-2023-0 Pass Ripper
6-2140-0 DeepThroat.10
6-2140-0 Invasor
6-2140-0 The Invasor
6-2283-0 Rat
6-2565-0 Striker
6-2583-0 Wincrash2
6-2801-0 Phineas
6-3129-0 MastersParadise.92
6-3150-0 Deep Throat 1.0
6-3210-0 SchoolBus
6-4000-0 OICQ Client
6-4567-0 FileNail
6-4950-0 IcqTrojan
6-5000-0 Blazer 5
6-5190-0 ICQ Query
6-5321-0 Firehotcker
6-5400-0 BackConstruction1.2
6-5400-0 BladeRunner
6-5550-0 Xtcp
6-5569-0 RoboHack
6-5714-0 Wincrash3
6-5742-0 Wincrash
6-6400-0 The Thing
6-6669-0 Vampire
6-6670-0 Deep Throat
6-6711-0 SubSeven
6-6713-0 SubSeven
6-6767-0 NT Remote Control
6-6771-0 Deep Throat 3
6-6776-0 SubSeven
6-6883-0 DeltaSource
6-6939-0 Indoctrination
6-6969-0 Gatecrasher.a
6-7306-0 NetMonitor (NetSpy)
6-7307-0 ProcSpy
6-7308-0 X Spy
6-7626-0 木马冰河
6-7789-0 ICQKiller
6-8000-0 OICQ Server
6-9400-0 InCommand
6-9401-0 InCommand
6-9402-0 InCommand
6-9872-0 Portal of Doom
6-9875-0 Portal of Doom
6-9989-0 InIkiller
6-10167-0 Portal Of Doom
6-10607-0 Coma
6-11000-0 Senna Spy Trojans
6-11223-0 ProgenicTrojan
6-12076-0 Gjamer
6-12076-0 MSH.104b
6-12223-0 Hack9 KeyLogger
6-12345-0 NetBus 1.x
6-12346-0 NetBus 1.x
6-12631-0 WhackJob.NB1.7
6-16969-0 Priotrity
6-17300-0 Kuang2
6-20000-0 Millenium II (GrilFriend)
6-20001-0 Millenium II (GrilFriend)
6-20034-0 NetBus Pro
6-20331-0 Bla
6-21554-0 GirlFriend
6-21554-0 Schwindler 1.82
6-22222-0 Prosiak
6-23456-0 Evil FTP
6-23456-0 UglyFtp
6-23456-0 WhackJob
6-27374-0 SubSeven
6-29891-0 The Unexplained
6-30029-0 AOLTrojan
6-30100-0 NetSphere
6-30303-0 Socket23
6-30999-0 Kuang
6-31337-0 BackOriffice
6-31337-0 BackOrifficeLM.LEENTech
6-31339-0 NetSpy
6-31666-0 BO Whackmole
6-31787-0 Hack'a'tack
6-33333-0 Prosiak
6-33911-0 Trojan Spirit 2001 a
6-34324-0 TN
6-34324-0 Tiny Telnet Server
6-40412-0 TheSpy
6-40421-0 MastersParadise.96
6-40423-0 Master Paradise.97
6-47878-0 BirdSpy2
6-50766-0 Fore
6-50766-0 Schwindler
6-53001-0 Remote Shutdown
6-54320-0 Back Orifice 2000
6-54321-0 SchoolBus 1.6
6-61466-0 Telecommando
6-65000-0 Devil
6-65301-0 Pc Anywhere
17 UDP
TCP 7=Echo
TCP 12=Bomber
TCP 20=FTP Data
TCP 21=Back Construction,Blade Runner,Doly Trojan,Fore,FTP trojan,Invisible FTP,Larva, WebEx,WinCrash
TCP 23=Telnet, Tiny Telnet Server (= TTS)
TCP 25=SMTP, Ajan, Antigen, Email Password Sender, Happy 99, Kuang2, ProMail trojan, Shtrilitz, Stealth, Tapiras, Terminator, WinPC, WinSpy, Haebu Coceda
TCP 31=Agent 31, Hackers Paradise, Masters Paradise
TCP 41=DeepThroat
TCP 43=WHOIS
TCP 48=DRAT
TCP 50=DRAT
TCP 53=DNS,Bonk (DOS Exploit)
TCP 58=DMSetup
TCP 59=DMSetup
TCP 70=Gopher
TCP 79=Firehotcker, Finger
TCP 80=Http服务器, Executor, RingZero
TCP 81=Chubo
TCP 99=Hidden Port
TCP 110=Pop3服务器, ProMail
TCP 113=Kazimas, Auther Idnet
TCP 119=Nntp, Happy 99
TCP 121=JammerKiller, Bo jammerkillah
//TCP 137=NetBios-NS
//TCP 138=NetBios-DGN
//TCP 139=NetBios-SSN
TCP 143=IMAP
TCP 146=FC Infector,Infector
TCP 161=Snmp
TCP 162=Snmp-Trap
TCP 194=Irc
TCP 256=Nirvana
TCP 420=Breach
TCP 421=TCP Wrappers
TCP 456=Hackers paradise,FuseSpark
TCP 531=Rasmin
TCP 555=Ini-Killer,Phase Zero,Stealth Spy
TCP 605=SecretService
TCP 606=Noknok8
TCP 661=Noknok8
TCP 666=Attack FTP,Satanz Backdoor,Back Construction,Dark Connection Inside 1.2
TCP 667=Noknok7.2
TCP 668=Noknok6
TCP 777=AIM Spy
TCP 808=RemoteControl
TCP 911=Dark Shadow
TCP 999=DeepThroat
TCP 1000=Der Spaeher
TCP 1001=Silencer,WebEx,Der Spaeher
TCP 1003=BackDoor
TCP 1010=Doly
TCP 1011=Doly
TCP 1012=Doly
TCP 1015=Doly
TCP 1020=Vampire
TCP 1024=NetSpy.698(YAI)
//TCP 1025=NetSpy.698
//TCP 1033=Netspy
//TCP 1042=Bla
//TCP 1045=Rasmin
//TCP 1047=GateCrasher
//TCP 1050=MiniCommand
TCP 1080=Wingate
//TCP 1090=Xtreme, VDOLive
//TCP 1095=Rat
//TCP 1097=Rat
//TCP 1098=Rat
//TCP 1099=Rat
//TCP 1170=Psyber Stream Server,Streaming Audio trojan,Voice
//TCP 1200=NoBackO
//TCP 1201=NoBackO
//TCP 1207=Softwar
//TCP 1212=Nirvana,Visul Killer
//TCP 1234=Ultors
//TCP 1243=BackDoor-G, SubSeven, SubSeven Apocalypse
//TCP 1245=VooDoo Doll
//TCP 1269=Mavericks Matrix
//TCP 1313=Nirvana
//TCP 1349=BioNet
//TCP 1441=Remote Storm
//TCP 1492=FTP99CMP(BackOriffice.FTP)
//TCP 1509=Psyber Streaming Server
//TCP 1600=Shivka-Burka
//TCP 1703=Exloiter 1.1
//TCP 1807=SpySender
//TCP 1966=Fake FTP 2000
//TCP 1976=Custom port
//TCP 1981=Shockrave
//TCP 1999=BackDoor, TransScout
//TCP 2000=Der Spaeher,INsane Network
//TCP 2001=Transmisson scout
//TCP 2002=Transmisson scout
//TCP 2003=Transmisson scout
//TCP 2004=Transmisson scout
//TCP 2005=TTransmisson scout
//TCP 2023=Ripper,Pass Ripper,Hack City Ripper Pro
//TCP 2115=Bugs
//TCP 2121=Nirvana
//TCP 2140=Deep Throat, The Invasor
//TCP 2155=Nirvana
//TCP 2208=RuX
//TCP 2255=Illusion Mailer
//TCP 2283=HVL Rat5
//TCP 2300=PC Explorer
//TCP 2311=Studio54
//TCP 2565=Striker
//TCP 2583=WinCrash
//TCP 2600=Digital RootBeer
//TCP 2716=Prayer Trojan
//TCP 2801=Phineas Phucker
//TCP 2989=Rat
//TCP 3024=WinCrash trojan
//TCP 3128=RingZero
//TCP 3129=Masters Paradise
//TCP 3150=Deep Throat, The Invasor
//TCP 3210=SchoolBus
//TCP 3456=Terror
//TCP 3459=Eclipse 2000
//TCP 3700=Portal of Doom
//TCP 3791=Eclypse
//TCP 3801=Eclypse
TCP 4000=腾讯OICQ客户端
TCP 4092=WinCrash
TCP 4242=VHM
TCP 4321=BoBo
TCP 4567=File Nail
TCP 4590=ICQTrojan
TCP 4950=ICQTrojan
TCP 5000=Blazer 5,Bubbel,Back Door Setup,Sockets de Troie
TCP 5001=Back Door Setup, Sockets de Troie
TCP 5011=One of the Last Trojans (OOTLT)
TCP 5031=Firehotcker,Metropolitan,NetMetro
TCP 5032=Metropolitan
TCP 5190=ICQ Query
TCP 5321=Firehotcker
TCP 5400=Blade Runner, BackConstruction1.2
TCP 5401=Blade Runner,Back Construction
TCP 5402=Blade Runner,Back Construction
TCP 5471=WinCrash
TCP 5521=Illusion Mailer
TCP 5550=Xtcp,INsane Network
TCP 5555=ServeMe
TCP 5556=BO Facil
TCP 5557=BO Facil
TCP 5569=Robo-Hack
TCP 5631=PCAnyWhere data
TCP 5637=PC Crasher
TCP 5638=PC Crasher
TCP 5698=BackDoor
TCP 5714=Wincrash3
TCP 5742=WinCrash
TCP 6000=Backdoor.AB
TCP 6006=Noknok8
TCP 6272=SecretService
TCP 6400=Backdoor.AB,The Thing
TCP 6661=Teman
TCP 6667=NT Remote Control
TCP 6669=Vampyre
TCP 6670=DeepThroat
TCP 6711=SubSeven
TCP 6712=SubSeven1.x
TCP 6713=SubSeven
TCP 6767=NT Remote Control
TCP 6771=DeepThroat
TCP 6776=BackDoor-G,SubSeven,2000 Cracks
TCP 6883=DeltaSource
TCP 6912=Shit Heep
TCP 6939=Indoctrination
TCP 6969=GateCrasher, Priority, IRC 3
TCP 6970=GateCrasher
TCP 7000=Remote Grab,NetMonitor,SubSeven1.x
TCP 7001=Freak88,Freak2k
TCP 7300=NetMonitor
TCP 7301=NetMonitor
TCP 7306=NetMonitor
TCP 7307=NetMonitor, ProcSpy
TCP 7308=NetMonitor, X Spy
TCP 7323=Sygate服务器端
TCP 7626=冰河
TCP 7777=The Thing
TCP 7789=Back Door Setup, ICQKiller
TCP 8000=XDMA, 腾讯OICQ服务器端
TCP 8010=Logfile
TCP 8080=WWW 代理,Ring Zero,Chubo
TCP 8787=BackOfrice 2000
TCP 8897=Hack Office,Armageddon
TCP 8989=Recon
TCP 9000=Netministrator
TCP 9400=InCommand
TCP 9401=InCommand
TCP 9402=InCommand
TCP 9872=Portal of Doom
TCP 9873=Portal of Doom
TCP 9874=Portal of Doom
TCP 9875=Portal of Doom
TCP 9876=Cyber Attacker
TCP 9878=TransScout
TCP 9989=Ini-Killer
TCP 9999=Prayer Trojan
TCP 10067=Portal of Doom
TCP 10084=Syphillis
TCP 10085=Syphillis
TCP 10086=Syphillis
TCP 10101=BrainSpy
TCP 10167=Portal Of Doom
TCP 10520=Acid Shivers
TCP 10607=Coma trojan
TCP 10666=Ambush
TCP 11000=Senna Spy
TCP 11223=Progenic,Hack '99KeyLogger
TCP 11831=TROJ_LATINUS.SVR
TCP 12076=Gjamer, MSH.104b
TCP 12223=Hack?9 KeyLogger
TCP 12345=GabanBus, NetBus, Pie Bill Gates, X-bill
TCP 12346=GabanBus, NetBus, X-bill
TCP 12361=Whack-a-mole
TCP 12362=Whack-a-mole
TCP 12456=NetBus
TCP 12623=DUN Control
TCP 12631=WhackJob
TCP 12701=Eclipse2000
TCP 13000=Senna Spy
TCP 13013=Psychward
TCP 14500=PC Invader
TCP 16969=Priority
TCP 17300=Kuang2 The Virus
TCP 20000=Millennium II (GrilFriend)
TCP 20001=Millennium II (GrilFriend)
TCP 20034=NetBus 2 Pro
TCP 20203=Logged,Chupacabra
TCP 20331=Bla
TCP 21544=Schwindler 1.82,GirlFriend
TCP 21554=Schwindler 1.82,GirlFriend,Exloiter 1.0.1.2
TCP 22222=Prosiak,RuX Uploader 2.0
TCP 23432=Asylum 0.1.3
TCP 23456=Evil FTP, Ugly FTP, WhackJob
TCP 23476=Donald Dick
TCP 23477=Donald Dick
TCP 23777=INet Spy
TCP 26274=Delta
TCP 27374=Sub Seven 2.0+
TCP 27444=Tribal Flood Network,Trinoo
TCP 27665=Tribal Flood Network,Trinoo
TCP 29559=TROJ_LATINUS.SVR
TCP 29891=The Unexplained
TCP 30003=Death,Lamers Death
TCP 30029=AOL trojan
TCP 30100=NetSphere 1.27a,NetSphere 1.31
TCP 30101=NetSphere 1.31,NetSphere 1.27a
TCP 30102=NetSphere 1.27a,NetSphere 1.31
TCP 30103=NetSphere 1.31
TCP 30303=Sockets de Troie
TCP 30999=Kuang2
TCP 21335=Tribal Flood Network,Trinoo
TCP 31336=Bo Whack
TCP 31337=Baron Night,BO client,BO2,Bo Facil,BackFire,Back Orifice,DeepBO,Freak2k,NetSpy
TCP 31338=NetSpy,Back Orifice,DeepBO
TCP 31339=NetSpy DK
TCP 31666=BOWhack
TCP 31785=Hack Attack
TCP 31787=Hack Attack
TCP 31789=Hack Attack
TCP 31791=Hack Attack
TCP 32100=PeanutBrittle
TCP 33333=Prosiak,Blakharaz 1.0
TCP 33577=Son Of Psychward
TCP 33777=Son Of Psychward
TCP 33911=Spirit 2001a
TCP 34324=BigGluck,TN,Tiny Telnet Server
TCP 40412=The Spy
TCP 40421=Agent 40421,Masters Paradise.96
TCP 40422=Masters Paradise
TCP 40423=Masters Paradise.97
TCP 40426=Masters Paradise
TCP 47252=Delta Source
TCP 47262=Delta
TCP 47878=BirdSpy2
TCP 50505=Sockets de Troie
TCP 50766=Fore, Schwindler
TCP 51966=CafeIni
TCP 53001=Remote Windows Shutdown
TCP 54320=Back Orifice 2000,Sheep
TCP 54321=School Bus .69-1.11,Sheep
TCP 60000=Deep Throat
TCP 60606=TROJ_BCKDOR.G2.A
TCP 61466=Telecommando
TCP 65000=Devil
TCP 65432=Th3tr41t0r
TCP 65530=TROJ_WINMITE.10
TCP 69123=ShitHeep
TCP 88798=Armageddon,Hack Office
UDP 1349=BO dll
UDP 2989=RAT
UDP 3801=Eclypse
UDP 10067=Portal of Doom
UDP 10167=Portal of Doom
UDP 26274=Delta Source
UDP 29891=The Unexplained
UDP 31337=Baron Night, BO client, BO2, Bo Facil, BackFire, Back Orifice, DeepBO
UDP 31338=Back Orifice, NetSpy DK, DeepBO
UDP 31789=Hack aTack
UDP 31791=Hack aTack
UDP 47262=Delta Source
UDP 54321=Back Orifice 2000
( 该文章转自论坛：端口一览表 )
