| Porte Registrate |
| Porta | Tipo | Parola Chiave | Descrizione | Trojan info |
| 10167 | TCP | | | PortalOfDoom |
| 10167 | UDP | | | Portal of Doom - POD, PortalOfDoom |
| 10252 | TCP | apollo-relay | Apollo Relay Port | |
| 10252 | UDP | apollo-relay | Apollo Relay Port | |
| 10260 | TCP | axis-wimp-port | Axis WIMP Port | |
| 10260 | UDP | axis-wimp-port | Axis WIMP Port | |
| 10288 | TCP | blocks | Blocks | |
| 10288 | UDP | blocks | Blocks | |
| 10520 | TCP | | | Acid Shivers |
| 10528 | TCP | | | Host Control, HostControl |
| 10607 | TCP | | | Coma |
| 10666 | TCP | | | Ambush |
| 10666 | UDP | | | Ambush |
| 10752 | TCP | | | LINUX mounts Backdoor |
| 10990 | TCP | rmiaux | Auxiliary RMI Port | |
| 10990 | UDP | rmiaux | Auxiliary RMI Port | |
| 11000 | TCP | irisa | IRISA | Senna Spy Trojan Generator |
| 11000 | UDP | irisa | IRISA | |
| 11001 | TCP | metasys | Metasys | |
| 11001 | UDP | metasys | Metasys | |
| 11011 | TCP | | | Amanda |
| 11050 | TCP | | | Host Control, HostControl |
| 11051 | TCP | | | Host Control, HostControl |
| 11111 | TCP | vce | Viral Computing Environment (VCE) | |
| 11111 | UDP | vce | Viral Computing Environment (VCE) | |
| 11201 | TCP | smsqp | smsqp | |
| 11201 | UDP | smsqp | smsqp | |
| 11223 | TCP | | | Progenic trojan, Secret Agent, AntiNuke |
| 11225 | TCP | | | Cyn |
| 11225 | UDP | | | Cyn |
| 11306 | TCP | | | Noknok |
| 11306 | UDP | | | Noknok |
| 11319 | TCP | imip | IMIP | |
| 11319 | UDP | imip | IMIP | |
| 11320 | TCP | imip-channels | IMIP Channels Port | |
| 11320 | UDP | imip-channels | IMIP Channels Port | |
| 11321 | TCP | arena-server | Arena Server Listen | |
| 11321 | UDP | arena-server | Arena Server Listen | |
| 11367 | TCP | atm-uhas | ATM UHAS | |
| 11367 | UDP | atm-uhas | ATM UHAS | |
| 11371 | TCP | hkp | OpenPGP HTTP Keyserver | |
| 11371 | UDP | hkp | OpenPGP HTTP Keyserver | |
| 11600 | TCP | tempest-port | Tempest Protocol Port | |
| 11600 | UDP | tempest-port | Tempest Protocol Port | |
| 11720 | TCP | h323callsigalt | h323 Call Signal Alternate | |
| 11720 | UDP | h323callsigalt | h323 Call Signal Alternate | |
| 11751 | TCP | intrepid-ssl | Intrepid SSL | |
| 11751 | UDP | intrepid-ssl | Intrepid SSL | |
| 11831 | TCP | | | Katux, Latinus, Pest |
| 11967 | TCP | sysinfo-sp | SysInfo Service Protocol | |
| 11967 | UDP | sysinfo-sp | SysInfo Sercice Protocol | |
| 11991 | TCP | | | PitfallSurprise |
| 12000 | TCP | entextxid | IBM Enterprise Extender SNA XID Exchange | |
| 12000 | UDP | entextxid | IBM Enterprise Extender SNA XID Exchange | |
| 12001 | TCP | entextnetwk | IBM Enterprise Extender SNA COS Network Priority | |
| 12001 | UDP | entextnetwk | IBM Enterprise Extender SNA COS Network Priority | |
| 12002 | TCP | entexthigh | IBM Enterprise Extender SNA COS High Priority | |
| 12002 | UDP | entexthigh | IBM Enterprise Extender SNA COS High Priority | |
| 12003 | TCP | entextmed | IBM Enterprise Extender SNA COS Medium Priority | |
| 12003 | UDP | entextmed | IBM Enterprise Extender SNA COS Medium Priority | |
| 12004 | TCP | entextlow | IBM Enterprise Extender SNA COS Low Priority | |
| 12004 | UDP | entextlow | IBM Enterprise Extender SNA COS Low Priority | |
| 12005 | TCP | dbisamserver1 | DBISAM Database Server - Regular | |
| 12005 | UDP | dbisamserver1 | DBISAM Database Server - Regular | |
| 12006 | TCP | dbisamserver2 | DBISAM Database Server - Admin | |
| 12006 | UDP | dbisamserver2 | DBISAM Database Server - Admin | |
| 12043 | TCP | | | Frenzy |
| 12076 | TCP | | | Gjamer |
| 12109 | TCP | rets-ssl | RETS over SSL | |
| 12109 | UDP | rets-ssl | RETS over SSL | |
| 12172 | TCP | hivep | HiveP | |
| 12172 | UDP | hivep | HiveP | |
| 12223 | TCP | | | Hack99 KeyLogger |
| 12310 | TCP | | | Precursor |
| 12345 | TCP | italk | Italk Chat System | Adore sshd, cron / crontab, Whack Job, ValvNet, Pie Bill Gates, NetBus worm, NetBus Toy, NetBus, Mypic, GabanBus, Fat Bitch trojan, Ashley, X-bill, Fade, icmp_pipe.c |
| 12345 | UDP | italk | Italk Chat System | |
| 12346 | TCP | | | Fat Bitch trojan, NetBus, GabanBus, X-bill |
| 12348 | TCP | | | Bionet |
| 12349 | TCP | | | BioNet, Webhead |
| 12361 | TCP | | | Whack-a-mole |
| 12362 | TCP | | | Whack-a-mole |
| 12363 | TCP | | | Whack-a-mole |
| 12389 | TCP | | | KheSanh |
| 12389 | UDP | | | KheSanh |
| 12478 | TCP | | | Bionet |
| 12623 | TCP | | | Buttman |
| 12623 | UDP | | | DUN Control, Buttman |
| 12624 | TCP | | | ButtMan |
| 12625 | TCP | | | Buttman |
| 12625 | UDP | | | Buttman |
| 12631 | TCP | | | Whack Job |
| 12701 | TCP | | | Eclipse 2000 |
| 12753 | TCP | tsaf | tsaf port | |
| 12753 | UDP | tsaf | tsaf port | |
| 12754 | TCP | | | Mstream |
| 12904 | TCP | | | Akropolis, Rocks |
| 12973 | TCP | | | QR keylogger/remote access |
| 12975 | TCP | | | QR keylogger/remote access |
| 13000 | TCP | | | Senna Spy Trojan Generator, Senna Spy Trojan Generator |
| 13010 | TCP | | | BitchController, Hacker Brasil - HBR |
| 13013 | TCP | | | PsychWard |
| 13014 | TCP | | | PsychWard |
| 13160 | TCP | i-zipqd | I-ZIPQD | |
| 13160 | UDP | i-zipqd | I-ZIPQD | |
| 13223 | TCP | powwow-client | PowWow Client | Hack99 KeyLogger |
| 13223 | UDP | powwow-client | PowWow Client | |
| 13224 | TCP | powwow-server | PowWow Server | |
| 13224 | UDP | powwow-server | PowWow Server | |
| 13473 | TCP | | | Chupacabra |
| 13700 | TCP | | | Kuang 2 The Virus |
| 13720 | TCP | bprd | BPRD Protocol (VERITAS NetBackup) | |
| 13720 | UDP | bprd | BPRD Protocol (VERITAS NetBackup) | |
| 13721 | TCP | bpdbm | BPDBM Protocol (VERITAS NetBackup) | |
| 13721 | UDP | bpdbm | BPDBM Protocol (VERITAS NetBackup) | |
| 13722 | TCP | bpjava-msvc | BP Java MSVC Protocol | |
| 13722 | UDP | bpjava-msvc | BP Java MSVC Protocol | |
| 13724 | TCP | vnetd | Veritas Network Utility | |
| 13724 | UDP | vnetd | Veritas Network Utility | |
| 13753 | TCP | | | AFTP |
| 13782 | TCP | bpcd | VERITAS NetBackup | |
| 13782 | UDP | bpcd | VERITAS NetBackup | |
| 13783 | TCP | vopied | VOPIED Protocol | |
| 13783 | UDP | vopied | VOPIED Protocol | |
| 13818 | TCP | dsmcc-config | DSMCC Config | |
| 13818 | UDP | dsmcc-config | DSMCC Config | |
| 13819 | TCP | dsmcc-session | DSMCC Session Messages | |
| 13819 | UDP | dsmcc-session | DSMCC Session Messages | |
| 13820 | TCP | dsmcc-passthru | DSMCC Pass-Thru Messages | |
| 13820 | UDP | dsmcc-passthru | DSMCC Pass-Thru Messages | |
| 13821 | TCP | dsmcc-download | DSMCC Download Protocol | |
| 13821 | UDP | dsmcc-download | DSMCC Download Protocol | |
| 13822 | TCP | dsmcc-ccp | DSMCC Channel Change Protocol | |
| 13822 | UDP | dsmcc-ccp | DSMCC Channel Change Protocol | |
| 14001 | TCP | sua | SUA | |
| 14001 | UDP | sua | De-Registered (2001 June 06) | |
| 14001 | SCTP | sua | SUA | |