Trojan ports are commonly used by Trojan horse programs to connect to endpoints. During an outbreak, Trend Micro Apex One blocks the following port numbers
that Trojan programs may use.
Trojan Ports
|
Port Number
|
Trojan Horse Program
|
Port Number
|
Trojan Horse Program
|
|
23432
|
Asylum
|
31338
|
Net Spy
|
|
31337
|
Back Orifice
|
31339
|
Net Spy
|
|
18006
|
Back Orifice 2000
|
139
|
Nuker
|
|
12349
|
Bionet
|
44444
|
Prosiak
|
|
6667
|
Bionet
|
8012
|
Ptakks
|
|
80
|
Codered
|
7597
|
Qaz
|
|
21
|
DarkFTP
|
4000
|
RA
|
|
3150
|
Deep Throat
|
666
|
Ripper
|
|
2140
|
Deep Throat
|
1026
|
RSM
|
|
10048
|
Delf
|
64666
|
RSM
|
|
23
|
EliteWrap
|
22222
|
Rux
|
|
6969
|
GateCrash
|
11000
|
Senna Spy
|
|
7626
|
Gdoor
|
113
|
Shiver
|
|
10100
|
Gift
|
1001
|
Silencer
|
|
21544
|
Girl Friend
|
3131
|
SubSari
|
|
7777
|
GodMsg
|
1243
|
Sub Seven
|
|
6267
|
GW Girl
|
6711
|
Sub Seven
|
|
25
|
Jesrto
|
6776
|
Sub Seven
|
|
25685
|
Moon Pie
|
27374
|
Sub Seven
|
|
68
|
Mspy
|
6400
|
Thing
|
|
1120
|
Net Bus
|
12345
|
Valvo line
|
|
7300
|
Net Spy
|
1234
|
Valvo line
|