Ports used by Trojans

Port TCP/UDP Trojans
0 ICMP Click attack
8 ICMP Ping Attack
21 Back Construction
21 Blade Runner
21 Doly Trojan 1.1
21 Fore
21 FTP trojan
21 Invisible FTP
21 Larva
21 WebEx
21 WinCrash
23 Tiny Telnet Server (= TTS)
25 Ajan
25 Antigen
25 Email Password Sender
25 Haebu Coceda (= Naebi)
25 Happy 99
25 Kuang2
25 ProMail Trojan
25 Shtrilitz
25 Stealth
25 Tapiras
25 Terminator
25 WinPC
25 WinSpy
31 TCP Agent 31
31 TCP Hackers Paradise
31 Masters Paradise
41 TCP DeepThroat
58 TCP DMSetup
59 DMSetup
79 TCP Firehotcker
80 TCP Executor
80 RingZero
99 Hidden Port V2.0
110 TCP ProMail Trojan
113 TCP Kazimas
119 TCP Happy 99
121 TCP BO JammerKillah
129 TCP Password Generator Protocol
135 TCP/UDP Netbios Remote procedure call
137 TCP/UDP Netbios name (DoS attacks)
138 TCP/UDP Netbios datagram
139 TCP/UDP Netbios session (DoS attacks)
421 TCP TCP Wrappers
456 TCP Hackers Paradise
531 TCP Rasmin
555 Ini-Killer
555 NeTAdmin
555 TCP Phase Zero
555 TCP Stealth Spy
666 TCP Attack FTP
666 Back Construction
666 Cain & Abel
666 Satanz Backdoor
666 ServeU
666 Shadow Phyre
666 Peur de Rien FTP
777 AimSpy
911 TCP Dark Shadow
999 TCP DeepThroat
999 WinSatan
1000 Der Spaeher 3
1001 TCP Silencer
1001 TCP WebEx
1010 Doly Trojan 1.30 (Subm.Cronco)
1010 Doly Trojan 1.35
1011 TCP Doly Trojan 1.1+1.2
1012 TCP Doly Trojan
1015 TCP Doly Trojan 1.5 (Subm.Cronco)
1015 TCP Doly Trojan 1.5
1016 Doly Trojan 1.6
1024 TCP NetSpy
1024 Psyber Streaming Server
1024 Bla 1.1
1027 TCP ICQ
1029 TCP ICQ
1032 TCP ICQ
1033 NetSpy
1042 TCP Bla
1045 TCP Rasmin
1080 TCP Wingate (Socks-Proxy)
1090 TCP Xtreme
1170 Psyber Streaming Server
1170 TCP Streaming Audio Trojan
1170 TCP Voice
1207 SoftWar
1243 BackDoor-G
1243 TCP SubSeven
1243 SubSeven Apocalypse
1243 Ultors Trojan
1245 TCP VooDoo Doll
1269 TCP Mavericks Matrix