Quake 3, add one for each client added, ie. 27960, 27961, etc.
27960 : TCP
|
Elite Force (incoming)
|
27999 : UDP
|
Attribute Certificate Services (Tw-Auth-Key)
|
27999 : TCP
|
Tw Authentication/Key Distribution And (Tw-Auth-Key)
|
28800 : TCP
|
MSN Gaming Zone (incoming) - ports 28800 to 29000
|
28900
|
Masterserver List request / GameSpy Arcade
|
28910 : TCP
|
Heretic II, each client needs it's own port, add one for each. I.e. 28910, 28911, etc. (incoming)
|
29104
|
Nettrojan (Trojan)
|
29891
|
The Unexplained (Trojan)
|
29900
|
GP Connection Manager / GameSpy Arcade
|
29901
|
GP Search Manager / GameSpy Arcade
|
30000 : TCP
|
NetBattle (Server)
|
30000 : UDP
|
Nero (Ahead) SIPPS (SIPPSTAR) IP-telephony, in/out. Ports 30000-300021 dynamically allocated.
|
30001
|
Error32 (Trojan)
|
30003
|
Lamers Death (Trojan)
|
30029
|
Aol Trojan (Trojan)
|
30100
|
Netsphere (Trojan)
|
30101
|
Netsphere (Trojan)
|
30102
|
Netsphere (Trojan)
|
30103 : TCP/UDP
|
Netsphere (Trojan)
|
30133
|
Netsphere (Trojan)
|
30303
|
Sockets Des Troie (Trojan)
|
30947
|
Intruse (Trojan)
|
30999
|
Kuang2 (Trojan)
|
31335
|
Trinoo (Trojan)
|
31336
|
Bo Whack (Trojan)
|
31336
|
Butt Funnel (Trojan)
|
31337
|
Back Fire (Trojan)
|
31337
|
Back Orifice (Lm) (Trojan)
|
31337
|
Back Orifice (Trojan)
|
31337
|
Back Orifice Russian (Trojan)
|
31337
|
Baron Night (Trojan)
|
31337
|
Beeone (Trojan)
|
31337
|
Bo Client (Trojan)
|
31337
|
Bo Facil (Trojan)
|
31337
|
Bo Spy (Trojan)
|
31337
|
Bo2 (Trojan)
|
31337
|
Caution: Trojan Horse (Backorifice)
|
31337
|
Cron/Crontab (Trojan)
|
31337
|
Deep Bo (Trojan)
|
31337
|
Freak88 (Trojan)
|
31337
|
Icmp_Pipe.C (Trojan)
|
31338
|
Back Orifice (Trojan)
|
31338
|
Butt Funnel (Trojan)
|
31338 : UDP
|
Deep Bo (Trojan)
|
31338
|
Netspy (Dk) (Trojan)
|
31339
|
Netspy (Dk) (Trojan)
|
31666
|
Bowhack (Trojan)
|
31785
|
Hack?A?Tack (Trojan)
|
31788
|
Hack?A?Tack (Trojan)
|
31789 : UDP
|
Hack?A?Tack (Trojan)
|
31790
|
Hack?A?Tack (Trojan)
|
31791 : UDP
|
Hack?A?Tack (Trojan)
|
31792
|
Hack?A?Tack (Trojan)
|
32001
|
Donald Dick (Trojan)
|
32100
|
Peanut Brittle (Trojan)
|
32100
|
Project Next (Trojan)
|
32230 : UDP
|
Roger Wilco - Voice Chat
|
32418
|
Acid Battery (Trojan)
|
32768 : TCP/UDP
|
Filenet Tms (Filenet-Tms)
|
32768 : UDP
|
EA Sports NBA LIVE 2003 (Ports 32768-65535)
|
32769 : TCP/UDP
|
Filenet Rpc (Filenet-Rpc)
|
32770 : TCP/UDP
|
Filenet Nch (Filenet-Nch)
|
32771 : TCP/UDP
|
Filenet Rmi (Filenet-Rmi)
|
33270
|
Trinity (Trojan)
|
33333
|
Blakharaz (Trojan)
|
33333
|
Prosiak (Trojan)
|
33434 : TCP/UDP
|
Traceroute Use (Traceroute)
|
33577
|
Psychward (Trojan)
|
33777
|
Psychward (Trojan)
|
33911
|
Spirit 2000 (Trojan)
|
33911
|
Spirit 2001 (Trojan)
|
34249 : TCP/UDP
|
Turbonote Relay Server Default Port (Turbonote-2)
|
34324
|
Big Gluck (Trojan)
|
34324
|
Tn (Trojan)
|
34444
|
Donald Dick (Trojan)
|
34555 : UDP
|
Trinoo (For Windows) (Trojan)
|
35555 : UDP
|
Trinoo (For Windows) (Trojan)
|
36865 : TCP/UDP
|
Kastenx Pipe (Kastenxpipe)
|
37475 : TCP/UDP
|
Science + Computing'S Venus Administration Port (Neckar)
|
37651
|
Yet Another Trojan - Yat (Trojan)
|
38293 : UDP
|
Norton Anti Virus client connecting to Enterprise Anti Virus server behind a firewall
|
39213 : UDP
|
Sygate Home Network Applications (Sygate)
|
39681 : TCP/UDP
|
Turbonote Default Port (Turbonote-1)
|
40412
|
The Spy (Trojan)
|
40421
|
Agent 40421 (Trojan)
|
40422
|
Masters Paradise (Trojan)
|
40423
|
Masters Paradise (Trojan)
|
40426
|
Masters Paradise (Trojan)
|
40841 : TCP/UDP
|
Cscp (Cscp)
|
40842 : TCP/UDP
|
Csccredir (Csccredir)
|
40843 : TCP/UDP
|
Csccfirewall (Csccfirewall)
|
41000 : TCP
|
Audiogalaxy Satellite (incoming) - Ports 41000 to 50000
|
41666
|
Remote Boot Tool - Rbt (Trojan)
|
43188 : TCP/UDP
|
Reachout (Reachout)
|
43189 : TCP/UDP
|
Ndm-Agent-Port (Ndm-Agent-Port)
|
43190 : TCP/UDP
|
Ip-Provision (Ip-Provision)
|
44444
|
Prosiak (Trojan)
|
44818 : TCP/UDP
|
Rockwell Encapsulation (Rockwell-Encap)
|
45054 : TCP/UDP
|
Invision Ag (Invision-Ag)
|
45678 : TCP/UDP
|
Eba Prise (Eba)
|
45966 : TCP/UDP
|
Ssrservermgr (Ssr-Servermgr)
|
47000 : TCP/UDP
|
Message Bus (Mbus)
|
47262 : UDP
|
Delta Source (Trojan)
|
47557 : TCP/UDP
|
Databeam Corporation (Dbbrowse)
|
47624 : TCP
|
Direct Play Server (Directplaysrvr)
|
47624 : UDP
|
Direct Play Server (Directplaysrvr)
|
47624 : TCP
|
Microsoft Gamevoice <1.2A
|
47624 : TCP
|
Microsoft Windows DirectX based games (MS Gaming zone)
|
47624 : TCP
|
MSN Gaming Zone DX (incoming)
|
47624 : TCP
|
Battlecom
|
47806 : TCP/UDP
|
Alc Protocol (Ap)
|
47808 : TCP/UDP
|
Building Automation And Control Networks (Bacnet)
|
48000 : TCP/UDP
|
Nimbus Controller (Nimcontroller)
|
48001 : TCP/UDP
|
Nimbus Spooler (Nimspooler)
|
48002 : TCP/UDP
|
Nimbus Hub (Nimhub)
|
48003 : TCP/UDP
|
Nimbus Gateway (Nimgtw)
|
48556 : TCP/UDP
|
Com-Bardac-Dw (Com-Bardac-Dw)
|
49151
|
Iana Reserved
|
50000 : TCP/UDP
|
Fighter Ace II (incoming) - ports 50000-51000
|
50505
|
Sockets Des Troie (Trojan)
|
50766
|
Fore (Trojan)
|
50766
|
Schwindler (Trojan)
|
51200 : UDP
|
Dialpad (incoming)
|
51201 : TCP
|
Dialpad (trigger)
|
51210 : TCP
|
Dialpad (incoming)
|
51966
|
Cafeini (Trojan)
|
52317
|
Acid Battery 2000 (Trojan)
|
53001
|
Remote Windows Shutdown - Rws (Trojan)
|
54283
|
Subseven (Trojan)
|
54283
|
Subseven 2.1 Gold (Trojan)
|
54320
|
Back Orifice 2000 (Trojan)
|
54321
|
Back Orifice 2000 (Trojan)
|
54321
|
School Bus (Trojan)
|
56800 : UDP
|
CuSeeMe messaging (trigger and incoming)
|
57341
|
Netraider (Trojan)
|
58296
|
Javachat (Xs2Chat)
|
58339
|
Butt Funnel (Trojan)
|
60000
|
Deep Throat (Trojan)
|
60000
|
Foreplay (Trojan)
|
60000
|
Reduced Foreplay (Trojan)
|
60000
|
Sockets Des Troie (Trojan)
|
60068
|
Xzip 6000068 (Trojan)
|
60411
|
Connection (Trojan)
|
61220
|
Need for Speed Hot Pursuit 2 (Internet Query port)
|
61348
|
Bunker-Hill (Trojan)
|
61466
|
Telecommando (Trojan)
|
61603
|
Bunker-Hill (Trojan)
|
63485
|
Bunker-Hill (Trojan)
|
64101
|
Task Manager (Trojan)
|
64101
|
Taskman (Trojan)
|
65000
|
Devil (Trojan)
|
65000
|
Sockets Des Troie (Trojan)
|
65000
|
Stacheldraht (Trojan)
|
65432 : UDP
|
The Traitor / Th3Tr41T0R (Trojan)
|
65534
|
/Sbin/Initd (Trojan)
|
65535
|
Rc1 Trojan (Trojan)
|
