Как понять это статью
Как понять это статью
Список портов и троянов, которые могут на них сидеть.
port 1 (udp) - sockets des troie
port 2 death
port 15 b2
port 20 senna spy ftp server
port 21 back construction, blade runner, cattivik ftp server, cc invader, dark ftp, doly trojan, fore, freddyk, invisible ftp, juggernaut 42, larva, motiv ftp, net administrator, ramen, rtb 666, senna spy ftp server, the flu, traitor 21, webex, wincrash
port 22 adore sshd, shaft
port 23 adm worm, fire hacker, my very own trojan, rtb 666, telnet pro, tiny telnet server - tts, truva atl
port 25 ajan, antigen, barok, bse, email password sender - eps, eps ii, gip, gris, happy99, hpteam mail, hybris, i love you, kuang2, magic horse, mbt (mail bombing trojan), moscow email trojan, naebi, newapt worm, promail trojan, shtirlitz, stealth, stukach, tapiras, terminator, winpc, winspy
port 30 agent 40421
port 31 agent 31, hackers paradise, masters paradise
port 39 subsari
port 41 deep throat, foreplay
port 44 arctic
port 48 drat
port 50 drat
port 53 adm worm, lion
port 58 dmsetup
port 59 dmsetup
port 69 backgate
port 79 cdk, firehotcker
port 80 711 trojan (seven eleven), ackcmd, back end, back orifice 2000 plug-ins, cafeini, cgi backdoor, executor, god message, god message 4 creator, hooker, iisworm, mtx, ncx, noob, ramen, reverse www tunnel backdoor, ringzero, rtb 666, seeker, wan remote, web server ct, webdownloader
port 81 remoconchubo
port 99 hidden port, mandragore, ncx
port 110 promail trojan
port 113 invisible identd deamon, kazimas
port 119 happy99
port 121 attack bot, god message, jammerkillah
port 123 net controller
port 133 farnaz
port 137 chode
port 137 (udp) - msinit, qaz
port 138 chode
port 139 chode, god message worm, msinit, netlog, network, qaz, sadmind, smb relay
port 142 nettaxi
port 146 infector
port 146 (udp) - infector
port 166 noknok
port 170 a-trojan
port 334 backage
port 411 backage
port 420 breach, incognito
port 421 tcp wrappers trojan
port 455 fatal connections
port 456 hackers paradise
port 511 t0rn rootkit
port 513 grlogin
port 514 rpc backdoor
port 515 lpdw0rm, ramen
port 531 net666, rasmin
port 555 711 trojan (seven eleven), ini-killer, net administrator, phase zero, phase-0, stealth spy
port 600 sadmind
port 605 secret service
port 661 noknok
port 666 attack ftp, back construction, bla trojan, cain & abel, lpdw0rm, noknok, satans back door - sbd, servu, shadow phyre, th3r1pp3rz (= therippers)
port 667 snipernet
port 668 th3r1pp3rz (= therippers)
port 669 dp trojan
port 692 gayol
port 777 aimspy, undetected
port 808 winhole
port 911 dark shadow, dark shadow
port 999 chat power, deep throat, foreplay, winsatan
port 1000 connecter, der spaher / der spaeher, direct connection
port 1001 der spaher / der spaeher, le guardien, silencer, theef, webex
port 1005 theef
port 1008 lion
port 1010 doly trojan
port 1011 doly trojan
port 1012 doly trojan
port 1015 doly trojan
port 1016 doly trojan
port 1020 vampire
port 1024 jade, latinus, netspy, remote administration tool - rat [no 2]
port 1025 fraggle rock, md5 backdoor, netspy, remote storm
port 1025 (udp) - remote storm
port 1031 xanadu
port 1035 multidropper
port 1042 bla trojan
port 1042 (udp) - bla trojan
port 1045 rasmin
port 1049 /sbin/initd
port 1050 minicommand
port 1053 the thief
port 1054 ackcmd
port 1080 subseven 2.2, winhole
port 1081 winhole
port 1082 winhole
port 1083 winhole
port 1090 xtreme
port 1095 remote administration tool - rat
port 1097 remote administration tool - rat
port 1098 remote administration tool - rat
port 1099 blood fest evolution, remote administration tool - rat
port 1104 (udp) - rexxrave
port 1150 orion
port 1151 orion
port 1170 psyber stream server - pss, streaming audio server, voice
port 1174 dacryptic
port 1180 unin68
port 1200 (udp) - nobacko
port 1201 (udp) - nobacko
port 1207 softwar
port 1208 infector
port 1212 kaos
port 1234 subseven java client, ultors trojan
port 1243 backdoor-g, subseven, subseven apocalypse, tiles
port 1245 voodoo doll
port 1255 scarab
port 1256 project next, rexxrave
port 1269 matrix
port 1272 the matrix
port 1313 netrojan
port 1337 shadyshell
port 1338 millennium worm
port 1349 bo dll
port 1386 dagger
port 1394 gofriller
port 1441 remote storm
port 1492 ftp99cmp
port 1524 trinoo
port 1568 remote hack
port 1600 direct connection, shivka-burka
port 1703 exploiter
port 1777 scarab
port 1807 spysender
port 1826 glacier
port 1966 fake ftp
port 1967 for your eyes only - fyeo, wm ftp server
port 1969 opc bo
port 1981 bowl, shockrave
port 1991 pitfall
port 1999 back door, subseven, transscout
port 2000 der spaher / der spaeher, insane network, last 2000, remote explorer 2000, senna spy trojan generator
port 2001 der spaher / der spaeher, trojan cow
port 2023 ripper pro
port 2080 winhole
port 2115 bugs
port 2130 (udp) - mini backlash
port 2140 the invasor
port 2140 (udp) - deep throat, foreplay
port 2155 illusion mailer
port 2255 nirvana
port 2283 hvl rat
port 2300 xplorer
port 2311 studio 54
port 2330 irc contact
port 2331 irc contact
port 2332 irc contact
port 2333 irc contact
port 2334 irc contact
port 2335 irc contact
port 2336 irc contact
port 2337 irc contact
port 2338 irc contact
port 2339 irc contact, voice spy
port 2339 (udp) - voice spy
port 2345 doly trojan
port 2400 portd
port 2555 lion, t0rn rootkit
port 2565 striker trojan
port 2583 wincrash
port 2589 dagger
port 2600 digital rootbeer
port 2702 black diver
port 2716 the prayer
port 2773 subseven, subseven 2.1 gold
port 2774 subseven, subseven 2.1 gold
port 2801 phineas phucker
port 2929 konik
port 2989 (udp) - remote administration tool - rat
port 3000 inetspy, remote shut
port 3024 wincrash
port 3031 microspy
port 3128 reverse www tunnel backdoor, ringzero
port 3129 masters paradise
port 3131 subsari
port 3150 the invasor
port 3150 (udp) - deep throat, foreplay, mini backlash
port 3456 terror trojan
port 3459 eclipse 2000, sanctuary
port 3700 portal of doom
port 3777 psychward
port 3791 total solar eclypse
port 3801 total solar eclypse
port 4000 connect-back backdoor, skydance
port 4092 wincrash
port 4201 war trojan
port 4242 virtual hacking machine - vhm
port 4321 bobo
port 4444 crackdown, prosiak, swift remote
port 4488 event horizon
port 4523 celine
port 4545 internal revise
port 4567 file nail
port 4590 icq trojan
port 4653 cero
port 4666 mneah
port 4950 icq trogen (lm)
port 5000 back door setup, bionet lite, blazer5, bubbel, ickiller, ra1d, sockets des troie
port 5001 back door setup, sockets des troie
port 5002 cd00r, linux rootkit iv (4), shaft
port 5005 aladino
port 5010 solo
port 5011 one of the last trojans - ootlt, one of the last trojans - ootlt, modified
port 5025 wm remote keylogger
port 5031 net metropolitan
port 5032 net metropolitan
port 5321 firehotcker
port 5333 backage, netdemon
port 5343 wc remote administration tool - wcrat
port 5400 back construction, blade runner
port 5401 back construction, blade runner, mneah
port 5402 back construction, blade runner, mneah
port 5512 illusion mailer
port 5534 the flu
port 5550 xtcp
port 5555 serveme
port 5556 bo facil
port 5557 bo facil
port 5569 robo-hack
port 5637 pc crasher
port 5638 pc crasher
port 5742 wincrash
port 5760 portmap remote root linux exploit
port 5802 y3k rat
port 5873 subseven 2.2
port 5880 y3k rat
port 5882 y3k rat
port 5882 (udp) - y3k rat
port 5888 y3k rat
port 5888 (udp) - y3k rat
port 5889 y3k rat
port 6000 the thing
port 6006 bad blood
port 6272 secret service
port 6400 the thing
port 6661 teman, weia-meia
port 6666 dark connection inside, netbus worm
port 6667 dark ftp, ego, maniac rootkit, moses, scheduleagent, subseven, subseven 2.1.4 defcon 8, the thing (modified), trinity, winsatan
port 6669 host control, vampire
port 6670 backweb server, deep throat, foreplay, winnuke extreame
port 6711 backdoor-g, subsari, subseven, vp killer
port 6712 funny trojan, subseven
port 6713 subseven
port 6723 mstream
port 6767 uandme
port 6771 deep throat, foreplay
port 6776 2000 cracks, backdoor-g, subseven, vp killer
port 6838 (udp) - mstream
port 6883 delta source darkstar (??)
port 6912 shit heep
port 6939 indoctrination
port 6969 2000 cracks, danton, gatecrasher, irc 3, net controller, priority
port 6970 gatecrasher
port 7000 exploit translation server, kazimas, remote grab, subseven, subseven 2.1 gold
port 7001 freak88, freak2k, netsnooper gold
port 7158 lohoboyshik
port 7215 subseven, subseven 2.1 gold
port 7300 netmonitor
port 7301 netmonitor
port 7306 netmonitor
port 7307 netmonitor, remote process monitor
port 7308 netmonitor, x spy
port 7424 host control
port 7424 (udp) - host control
port 7597 qaz
port 7626 binghe, glacier, hyne
port 7718 glacier
port 7777 god message, the thing (modified), tini
port 7789 back door setup, ickiller, mozilla
port 7826 oblivion
port 7891 the revenger
port 7983 mstream
port 8080 brown orifice, generic backdoor, remoconchubo, reverse www tunnel backdoor, ringzero
port 8685 unin68
port 8787 back orifice 2000
port 8812 fragglerock lite
port 8988 bachack
port 8989 rcon, recon, xcon
Список портов и троянов, которые могут на них сидеть.
port 1 (udp) - sockets des troie
port 2 death
port 15 b2
port 20 senna spy ftp server
port 21 back construction, blade runner, cattivik ftp server, cc invader, dark ftp, doly trojan, fore, freddyk, invisible ftp, juggernaut 42, larva, motiv ftp, net administrator, ramen, rtb 666, senna spy ftp server, the flu, traitor 21, webex, wincrash
port 22 adore sshd, shaft
port 23 adm worm, fire hacker, my very own trojan, rtb 666, telnet pro, tiny telnet server - tts, truva atl
port 25 ajan, antigen, barok, bse, email password sender - eps, eps ii, gip, gris, happy99, hpteam mail, hybris, i love you, kuang2, magic horse, mbt (mail bombing trojan), moscow email trojan, naebi, newapt worm, promail trojan, shtirlitz, stealth, stukach, tapiras, terminator, winpc, winspy
port 30 agent 40421
port 31 agent 31, hackers paradise, masters paradise
port 39 subsari
port 41 deep throat, foreplay
port 44 arctic
port 48 drat
port 50 drat
port 53 adm worm, lion
port 58 dmsetup
port 59 dmsetup
port 69 backgate
port 79 cdk, firehotcker
port 80 711 trojan (seven eleven), ackcmd, back end, back orifice 2000 plug-ins, cafeini, cgi backdoor, executor, god message, god message 4 creator, hooker, iisworm, mtx, ncx, noob, ramen, reverse www tunnel backdoor, ringzero, rtb 666, seeker, wan remote, web server ct, webdownloader
port 81 remoconchubo
port 99 hidden port, mandragore, ncx
port 110 promail trojan
port 113 invisible identd deamon, kazimas
port 119 happy99
port 121 attack bot, god message, jammerkillah
port 123 net controller
port 133 farnaz
port 137 chode
port 137 (udp) - msinit, qaz
port 138 chode
port 139 chode, god message worm, msinit, netlog, network, qaz, sadmind, smb relay
port 142 nettaxi
port 146 infector
port 146 (udp) - infector
port 166 noknok
port 170 a-trojan
port 334 backage
port 411 backage
port 420 breach, incognito
port 421 tcp wrappers trojan
port 455 fatal connections
port 456 hackers paradise
port 511 t0rn rootkit
port 513 grlogin
port 514 rpc backdoor
port 515 lpdw0rm, ramen
port 531 net666, rasmin
port 555 711 trojan (seven eleven), ini-killer, net administrator, phase zero, phase-0, stealth spy
port 600 sadmind
port 605 secret service
port 661 noknok
port 666 attack ftp, back construction, bla trojan, cain & abel, lpdw0rm, noknok, satans back door - sbd, servu, shadow phyre, th3r1pp3rz (= therippers)
port 667 snipernet
port 668 th3r1pp3rz (= therippers)
port 669 dp trojan
port 692 gayol
port 777 aimspy, undetected
port 808 winhole
port 911 dark shadow, dark shadow
port 999 chat power, deep throat, foreplay, winsatan
port 1000 connecter, der spaher / der spaeher, direct connection
port 1001 der spaher / der spaeher, le guardien, silencer, theef, webex
port 1005 theef
port 1008 lion
port 1010 doly trojan
port 1011 doly trojan
port 1012 doly trojan
port 1015 doly trojan
port 1016 doly trojan
port 1020 vampire
port 1024 jade, latinus, netspy, remote administration tool - rat [no 2]
port 1025 fraggle rock, md5 backdoor, netspy, remote storm
port 1025 (udp) - remote storm
port 1031 xanadu
port 1035 multidropper
port 1042 bla trojan
port 1042 (udp) - bla trojan
port 1045 rasmin
port 1049 /sbin/initd
port 1050 minicommand
port 1053 the thief
port 1054 ackcmd
port 1080 subseven 2.2, winhole
port 1081 winhole
port 1082 winhole
port 1083 winhole
port 1090 xtreme
port 1095 remote administration tool - rat
port 1097 remote administration tool - rat
port 1098 remote administration tool - rat
port 1099 blood fest evolution, remote administration tool - rat
port 1104 (udp) - rexxrave
port 1150 orion
port 1151 orion
port 1170 psyber stream server - pss, streaming audio server, voice
port 1174 dacryptic
port 1180 unin68
port 1200 (udp) - nobacko
port 1201 (udp) - nobacko
port 1207 softwar
port 1208 infector
port 1212 kaos
port 1234 subseven java client, ultors trojan
port 1243 backdoor-g, subseven, subseven apocalypse, tiles
port 1245 voodoo doll
port 1255 scarab
port 1256 project next, rexxrave
port 1269 matrix
port 1272 the matrix
port 1313 netrojan
port 1337 shadyshell
port 1338 millennium worm
port 1349 bo dll
port 1386 dagger
port 1394 gofriller
port 1441 remote storm
port 1492 ftp99cmp
port 1524 trinoo
port 1568 remote hack
port 1600 direct connection, shivka-burka
port 1703 exploiter
port 1777 scarab
port 1807 spysender
port 1826 glacier
port 1966 fake ftp
port 1967 for your eyes only - fyeo, wm ftp server
port 1969 opc bo
port 1981 bowl, shockrave
port 1991 pitfall
port 1999 back door, subseven, transscout
port 2000 der spaher / der spaeher, insane network, last 2000, remote explorer 2000, senna spy trojan generator
port 2001 der spaher / der spaeher, trojan cow
port 2023 ripper pro
port 2080 winhole
port 2115 bugs
port 2130 (udp) - mini backlash
port 2140 the invasor
port 2140 (udp) - deep throat, foreplay
port 2155 illusion mailer
port 2255 nirvana
port 2283 hvl rat
port 2300 xplorer
port 2311 studio 54
port 2330 irc contact
port 2331 irc contact
port 2332 irc contact
port 2333 irc contact
port 2334 irc contact
port 2335 irc contact
port 2336 irc contact
port 2337 irc contact
port 2338 irc contact
port 2339 irc contact, voice spy
port 2339 (udp) - voice spy
port 2345 doly trojan
port 2400 portd
port 2555 lion, t0rn rootkit
port 2565 striker trojan
port 2583 wincrash
port 2589 dagger
port 2600 digital rootbeer
port 2702 black diver
port 2716 the prayer
port 2773 subseven, subseven 2.1 gold
port 2774 subseven, subseven 2.1 gold
port 2801 phineas phucker
port 2929 konik
port 2989 (udp) - remote administration tool - rat
port 3000 inetspy, remote shut
port 3024 wincrash
port 3031 microspy
port 3128 reverse www tunnel backdoor, ringzero
port 3129 masters paradise
port 3131 subsari
port 3150 the invasor
port 3150 (udp) - deep throat, foreplay, mini backlash
port 3456 terror trojan
port 3459 eclipse 2000, sanctuary
port 3700 portal of doom
port 3777 psychward
port 3791 total solar eclypse
port 3801 total solar eclypse
port 4000 connect-back backdoor, skydance
port 4092 wincrash
port 4201 war trojan
port 4242 virtual hacking machine - vhm
port 4321 bobo
port 4444 crackdown, prosiak, swift remote
port 4488 event horizon
port 4523 celine
port 4545 internal revise
port 4567 file nail
port 4590 icq trojan
port 4653 cero
port 4666 mneah
port 4950 icq trogen (lm)
port 5000 back door setup, bionet lite, blazer5, bubbel, ickiller, ra1d, sockets des troie
port 5001 back door setup, sockets des troie
port 5002 cd00r, linux rootkit iv (4), shaft
port 5005 aladino
port 5010 solo
port 5011 one of the last trojans - ootlt, one of the last trojans - ootlt, modified
port 5025 wm remote keylogger
port 5031 net metropolitan
port 5032 net metropolitan
port 5321 firehotcker
port 5333 backage, netdemon
port 5343 wc remote administration tool - wcrat
port 5400 back construction, blade runner
port 5401 back construction, blade runner, mneah
port 5402 back construction, blade runner, mneah
port 5512 illusion mailer
port 5534 the flu
port 5550 xtcp
port 5555 serveme
port 5556 bo facil
port 5557 bo facil
port 5569 robo-hack
port 5637 pc crasher
port 5638 pc crasher
port 5742 wincrash
port 5760 portmap remote root linux exploit
port 5802 y3k rat
port 5873 subseven 2.2
port 5880 y3k rat
port 5882 y3k rat
port 5882 (udp) - y3k rat
port 5888 y3k rat
port 5888 (udp) - y3k rat
port 5889 y3k rat
port 6000 the thing
port 6006 bad blood
port 6272 secret service
port 6400 the thing
port 6661 teman, weia-meia
port 6666 dark connection inside, netbus worm
port 6667 dark ftp, ego, maniac rootkit, moses, scheduleagent, subseven, subseven 2.1.4 defcon 8, the thing (modified), trinity, winsatan
port 6669 host control, vampire
port 6670 backweb server, deep throat, foreplay, winnuke extreame
port 6711 backdoor-g, subsari, subseven, vp killer
port 6712 funny trojan, subseven
port 6713 subseven
port 6723 mstream
port 6767 uandme
port 6771 deep throat, foreplay
port 6776 2000 cracks, backdoor-g, subseven, vp killer
port 6838 (udp) - mstream
port 6883 delta source darkstar (??)
port 6912 shit heep
port 6939 indoctrination
port 6969 2000 cracks, danton, gatecrasher, irc 3, net controller, priority
port 6970 gatecrasher
port 7000 exploit translation server, kazimas, remote grab, subseven, subseven 2.1 gold
port 7001 freak88, freak2k, netsnooper gold
port 7158 lohoboyshik
port 7215 subseven, subseven 2.1 gold
port 7300 netmonitor
port 7301 netmonitor
port 7306 netmonitor
port 7307 netmonitor, remote process monitor
port 7308 netmonitor, x spy
port 7424 host control
port 7424 (udp) - host control
port 7597 qaz
port 7626 binghe, glacier, hyne
port 7718 glacier
port 7777 god message, the thing (modified), tini
port 7789 back door setup, ickiller, mozilla
port 7826 oblivion
port 7891 the revenger
port 7983 mstream
port 8080 brown orifice, generic backdoor, remoconchubo, reverse www tunnel backdoor, ringzero
port 8685 unin68
port 8787 back orifice 2000
port 8812 fragglerock lite
port 8988 bachack
port 8989 rcon, recon, xcon
дык именно так и понимать: список портов и троянов, которые могут на них сидеть.... Есть порт, на нем может сидеть троян и фсе... Причем, ты можешь только годать на сколько большая вероятность того, что какой-то занятый порт занят именно трояном, а не какой-нибудь программкой... Можно конечно постоянно отслеживать показания netstat, но это для мазахистов.... Хотя, если ты вылез в инет и видишь, что трафик идет, а ты ничего не грузишь, то это повод для беспокойств: либо твой браузер качает свое обновление, либо netstat :)
А где смотреть список портов :eek: