Port activity of 10 or more probes per
interval normalized to the maximum
value and color coded for frequency |
| 0 | -> < 10 |  |
| 10 | -> < 100 |  |
| 100 | -> < 1000 |  |
| 1000 | -> < 10000 |  |
| 10000 | -> < 100000 |  |
| >= 100000 |  |
|
|
port 12345
trojan or port service description |
| 1 | maximum probes = 100007 | 30 | |
30, 1 day bars scaled to max
newest ... to ... oldest |
|
port 1433
Voyager Alpha Force |
| 1 | max probes = 5721060 | 30 | |
|
|
port 8729
no service name |
| 1 | max probes = 704324 | 30 | |
|
|
port 3389
RDP Protocol (Terminal Server) |
| 1 | max probes = 282230 | 30 | |
|
|
port 1080
WinHole |
| 1 | max probes = 131144 | 30 | |
|
|
port 8000
Shoutcast WWW Server Hack |
| 1 | max probes = 124983 | 30 | |
|
|
port 2967
SSC-AGENT |
| 1 | max probes = 96400 | 30 | |
|
|
port 8080
Brown Orifice, Reverse WWW Tunnel |
| 1 | max probes = 90139 | 30 | |
|
|
port 1521
Oracle SQL |
| 1 | max probes = 68130 | 30 | |
|
|
port 13997
no service name |
| 1 | max probes = 61535 | 30 | |
|
|
port 80
711 trojan (Seven Eleven), AckCmd,... |
| 1 | max probes = 58849 | 30 | |
|
|
port 445
W32.HLLW.Gaobot, W32.HLLW.Lioten, |
| 1 | max probes = 54575 | 30 | |
|
|
port 135
loc-srv/epmap |
| 1 | max probes = 53575 | 30 | |
|
|
port 7212
open proxy |
| 1 | max probes = 50814 | 30 | |
|
|
port 4899
W32.Rahack |
| 1 | max probes = 33777 | 30 | |
|
|
port 28610
no service name |
| 1 | max probes = 20532 | 30 | |
|
|
port 139
God Message worm, Msinit, Netlog, |
| 1 | max probes = 15140 | 30 | |
|
|
port 8081
Tomcat 4 proxy |
| 1 | max probes = 13318 | 30 | |
|
|
port 1112
Hatckel |
| 1 | max probes = 12843 | 30 | |
|
|
port 1049
/sbin/initd |
| 1 | max probes = 12766 | 30 | |
|
|
port 1155
Network File Access |
| 1 | max probes = 12692 | 30 | |
|
|
port 1066
FPO-FNS |
| 1 | max probes = 12596 | 30 | |
|
|
port 1052
Fire HacKer, Slapper, more... |
| 1 | max probes = 12547 | 30 | |
|
|
port 1071
BSQUARE-VOIP |
| 1 | max probes = 12519 | 30 | |
|
|
port 1091
FF System Management |
| 1 | max probes = 12467 | 30 | |
|
|
port 1153
no service name |
| 1 | max probes = 12421 | 30 | |
|
|
port 8733
iBus |
| 1 | max probes = 12368 | 30 | |
|
|
port 1032
Akosch4, Dosh, KWM |
| 1 | max probes = 12321 | 30 | |
|
|
port 1039
Dosh |
| 1 | max probes = 12308 | 30 | |
|
|
port 1065
SYSCOMLAN |
| 1 | max probes = 12306 | 30 | |
|
|
port 1070
GMRUpdateSERV |
| 1 | max probes = 12304 | 30 | |
|
|
port 1067
Installation Bootstrap Proto. Serv. |
| 1 | max probes = 12298 | 30 | |
|
|
port 1138
no service name |
| 1 | max probes = 12298 | 30 | |
|
|
port 1037
Arctic, Dosh, KWM, more... |
| 1 | max probes = 12267 | 30 | |
|
|
port 1106
Hatckel |
| 1 | max probes = 12254 | 30 | |
|
|
port 1160
BlackRat |
| 1 | max probes = 12249 | 30 | |
|
|
port 1077
IMGames |
| 1 | max probes = 12241 | 30 | |
|
|
port 1061
KIOSK |
| 1 | max probes = 12231 | 30 | |
|
|
port 1055
ANSYS - License Manager |
| 1 | max probes = 12204 | 30 | |
|
|
port 1137
no service name |
| 1 | max probes = 12198 | 30 | |
|
|
port 1043
Dosh |
| 1 | max probes = 12196 | 30 | |
|
|
port 1041
Dosh, RemoteNC |
| 1 | max probes = 12186 | 30 | |
|
|
port 1075
RDRMSHC |
| 1 | max probes = 12162 | 30 | |
|
|
port 1081
WinHole |
| 1 | max probes = 12144 | 30 | |
|
|
port 1050
MiniCommand |
| 1 | max probes = 12087 | 30 | |
|
|
port 1157
Oracle iASControl |
| 1 | max probes = 12085 | 30 | |
|
|
port 1031
KWM, Little Witch, Xanadu, more... |
| 1 | max probes = 12057 | 30 | |
|
|
port 1170
Psyber Stream Server PSS, |
| 1 | max probes = 12053 | 30 | |
|
|
port 1167
CrazzyNet |
| 1 | max probes = 12051 | 30 | |
|
|
port 1148
no service name |
| 1 | max probes = 12047 | 30 | |
|
|
port 22
Shaft |
| 1 | max probes = 12043 | 30 | |
|
|
port 1140
no service name |
| 1 | max probes = 11998 | 30 | |
|
|
port 1099
Blood Fest Evolution |
| 1 | max probes = 11992 | 30 | |
|
|
port 1060
POLESTAR |
| 1 | max probes = 11984 | 30 | |
|
|
port 1105
Hatckel |
| 1 | max probes = 11978 | 30 | |
|
|
port 1058
nim |
| 1 | max probes = 11975 | 30 | |
|
|
port 1062
Veracity |
| 1 | max probes = 11971 | 30 | |
|
|
port 1101
PT2-DISCOVER |
| 1 | max probes = 11969 | 30 | |
|
|
port 1069
COGNEX-INSIGHT |
| 1 | max probes = 11950 | 30 | |
|
|
port 1056
VFO |
| 1 | max probes = 11940 | 30 | |
|
|
port 1166
CrazzyNet |
| 1 | max probes = 11939 | 30 | |
|
|
port 1087
CPL Scrambler Internal |
| 1 | max probes = 11936 | 30 | |
|
|
port 1098
Remote Administration Tool - RAT |
| 1 | max probes = 11935 | 30 | |
|
|
port 1124
HP VMM Control |
| 1 | max probes = 11923 | 30 | |
|
|
port 1088
Webus |
| 1 | max probes = 11918 | 30 | |
|
|
port 1139
no service name |
| 1 | max probes = 11891 | 30 | |
|
|
port 1051
Optima VNET |
| 1 | max probes = 11878 | 30 | |
|
|
port 1078
Avocent Proxy Protocol |
| 1 | max probes = 11874 | 30 | |
|
|
port 1076
DAB STI-C |
| 1 | max probes = 11844 | 30 | |
|
|
port 1027
Clandestine, more... |
| 1 | max probes = 11808 | 30 | |
|
|
port 1047
RemoteNC |
| 1 | max probes = 11807 | 30 | |
|
|
port 1171
AT+C FmiApplicationServer |
| 1 | max probes = 11803 | 30 | |
|
|
port 1030
Gibbon, KWM |
| 1 | max probes = 11796 | 30 | |
|
|
port 1158
dbControl OMS |
| 1 | max probes = 11775 | 30 | |
|
|
port 1025
AcidkoR, BDDT, more... |
| 1 | max probes = 11757 | 30 | |
|
|
port 1026
BDDT, Dark IRC, more... |
| 1 | max probes = 11751 | 30 | |
|
|
port 1164
QSM Proxy Service |
| 1 | max probes = 11751 | 30 | |
|
|
port 1119
no service name |
| 1 | max probes = 11719 | 30 | |
|
|
port 1146
no service name |
| 1 | max probes = 11709 | 30 | |
|
|
port 1114
Hatckel |
| 1 | max probes = 11706 | 30 | |
|
|
port 1143
no service name |
| 1 | max probes = 11691 | 30 | |
|
|
port 1126
HP VMM Agent |
| 1 | max probes = 11690 | 30 | |
|
|
port 1036
KWM |
| 1 | max probes = 11678 | 30 | |
|
|
port 1129
Anyserv |
| 1 | max probes = 11669 | 30 | |
|
|
port 1104
Hatckel |
| 1 | max probes = 11663 | 30 | |
|
|
port 1085
WebObjects |
| 1 | max probes = 11660 | 30 | |
|
|
port 1068
Installation Bootstrap Proto. Cli. |
| 1 | max probes = 11658 | 30 | |
|
|
port 1074
FASTechnologies License Manager |
| 1 | max probes = 11656 | 30 | |
|
|
port 1141
no service name |
| 1 | max probes = 11655 | 30 | |
|
|
port 1046
WebFilter Remote Monitor |
| 1 | max probes = 11650 | 30 | |
|
|
port 1063
KyoceraNetDev |
| 1 | max probes = 11650 | 30 | |
|
|
port 1044
Ptakks |
| 1 | max probes = 11645 | 30 | |
|
|
port 1107
Hatckel |
| 1 | max probes = 11645 | 30 | |
|
|
port 1136
no service name |
| 1 | max probes = 11644 | 30 | |
|
|
port 1100
MCTP |
| 1 | max probes = 11637 | 30 | |
|
|
port 1165
QSM GUI Service |
| 1 | max probes = 11627 | 30 | |
|
|
port 1042
BLA trojan |
| 1 | max probes = 11622 | 30 | |
|
|
port 1131
no service name |
| 1 | max probes = 11612 | 30 | |
|
|
port 1073
Bridge Control |
| 1 | max probes = 11597 | 30 | |
|
|
port 1048
Sun's NEO Object Request Broker |
| 1 | max probes = 11588 | 30 | |
|
|
port 1108
ratio-adp |
| 1 | max probes = 11588 | 30 | |
|
|
port 1094
rootd |
| 1 | max probes = 11582 | 30 | |
|
|
port 1072
CARDAX |
| 1 | max probes = 11574 | 30 | |
|
|
port 1083
WinHole |
| 1 | max probes = 11552 | 30 | |
|
|
port 23
Fire HacKer, Tiny Telnet Server - ... |
| 1 | max probes = 11532 | 30 | |
|
|
port 1086
CPL Scrambler Logging |
| 1 | max probes = 11514 | 30 | |
|
|
port 1152
no service name |
| 1 | max probes = 11506 | 30 | |
|
|
port 1029
Clandestine, KWM, Litmus, more... |
| 1 | max probes = 11504 | 30 | |
|
|
port 1161
Health Polling |
| 1 | max probes = 11500 | 30 | |
|
|
port 1115
Lurker, Protoss |
| 1 | max probes = 11499 | 30 | |
|
|
port 1034
Zincite, W32.Mydoom, W32.Zindos |
| 1 | max probes = 11493 | 30 | |
|
|
port 1024
RAT:NetSpy, Jade, Latinus, Randex, |
| 1 | max probes = 11485 | 30 | |
|
|
port 1028
DataSpy Network X, Dosh, more... |
| 1 | max probes = 11485 | 30 | |
|
|
port 1163
SmartDialer Data Protocol |
| 1 | max probes = 11471 | 30 | |
|
|
port 1150
Orion |
| 1 | max probes = 11463 | 30 | |
|
|
port 1035
Multidropper |
| 1 | max probes = 11461 | 30 | |
|
|
port 1151
Orion |
| 1 | max probes = 11451 | 30 | |
|
|
port 1162
Health Trap |
| 1 | max probes = 11450 | 30 | |
|
|
port 1149
no service name |
| 1 | max probes = 11444 | 30 | |
|
|
port 1125
HP VMM Agent |
| 1 | max probes = 11430 | 30 | |
|
|
port 1113
Hatckel |
| 1 | max probes = 11427 | 30 | |
|
|
port 1168
VChat Conference Service |
| 1 | max probes = 11423 | 30 | |
|
|
port 1135
no service name |
| 1 | max probes = 11414 | 30 | |
|
|
port 1132
no service name |
| 1 | max probes = 11409 | 30 | |
|
|
port 1147
no service name |
| 1 | max probes = 11407 | 30 | |
|
|
port 1038
Message Tracking Query Protocol |
| 1 | max probes = 11406 | 30 | |
|
|
port 1059
nimreg |
| 1 | max probes = 11400 | 30 | |
|
|
port 1122
Last 2000, Singularity |
| 1 | max probes = 11396 | 30 | |
|
|
port 1145
CHCP |
| 1 | max probes = 11395 | 30 | |
|
|
port 1057
STARTRON |
| 1 | max probes = 11390 | 30 | |
|
|
port 5547
no service name |
| 1 | max probes = 11375 | 30 | |
|
|
port 1123
Murray |
| 1 | max probes = 11369 | 30 | |
|
|
port 1130
no service name |
| 1 | max probes = 11363 | 30 | |
|
|
port 1120
no service name |
| 1 | max probes = 11362 | 30 | |
|
|
port 1121
Datalode RMPP |
| 1 | max probes = 11360 | 30 | |
|
|
port 1092
Lovgate |
| 1 | max probes = 11335 | 30 | |
|
|
port 1118
SACRED |
| 1 | max probes = 11297 | 30 | |
|
|
port 1084
Anasoft License Manager |
| 1 | max probes = 11282 | 30 | |
|
|
port 1111
Daodan, Ultors Trojan |
| 1 | max probes = 11279 | 30 | |
|
|
port 1096
Common Name Resolution Protocol |
| 1 | max probes = 11273 | 30 | |
|
|
port 1109
Hatckel |
| 1 | max probes = 11267 | 30 | |
|
|
port 1128
no service name |
| 1 | max probes = 11259 | 30 | |
|
|
port 1045
Rasmin |
| 1 | max probes = 11221 | 30 | |
|
|
port 1156
iasControl OMS |
| 1 | max probes = 11209 | 30 | |
|
|
port 1054
AckCmd |
| 1 | max probes = 11202 | 30 | |
|
|
port 1093
proofd |
| 1 | max probes = 11198 | 30 | |
|
|
port 1033
Dosh, KWM, Little Witch, more... |
| 1 | max probes = 11184 | 30 | |
|
|
port 1082
WinHole |
| 1 | max probes = 11135 | 30 | |
|
|
port 1064
JSTEL |
| 1 | max probes = 11104 | 30 | |
|
|
port 1040
Netarx |
| 1 | max probes = 11062 | 30 | |
|
|
port 1053
The Thief |
| 1 | max probes = 11049 | 30 | |
|
|
port 1103
Hatckel |
| 1 | max probes = 11039 | 30 | |
|
|
port 1127
supfiledbg |
| 1 | max probes = 11018 | 30 | |
|
|
port 1079
ASPROVATalk |
| 1 | max probes = 11005 | 30 | |
|
|
port 1097
Remote Administration Tool - RAT |
| 1 | max probes = 10906 | 30 | |
|
|
port 1144
no service name |
| 1 | max probes = 10818 | 30 | |
|
|
port 1089
FF Annunciation |
| 1 | max probes = 10800 | 30 | |
|
|
port 1090
Xtreme |
| 1 | max probes = 10725 | 30 | |
|
|
port 1172
DNA Protocol |
| 1 | max probes = 10641 | 30 | |
|
|
port 1110
Cluster status info |
| 1 | max probes = 10628 | 30 | |
|
|
port 1154
no service name |
| 1 | max probes = 10624 | 30 | |
|
|
port 1142
no service name |
| 1 | max probes = 10585 | 30 | |
|
|
port 1116
Lurker |
| 1 | max probes = 10583 | 30 | |
|
|
port 1117
ARDUS Multicast Transfer |
| 1 | max probes = 10564 | 30 | |
|
|
port 1159
Oracle OMS |
| 1 | max probes = 10543 | 30 | |
|
|
port 1134
no service name |
| 1 | max probes = 10498 | 30 | |
|
|
port 1095
Remote Administration Tool - RAT |
| 1 | max probes = 10481 | 30 | |
|
|
port 1169
TRIPWIRE |
| 1 | max probes = 10461 | 30 | |
|
|
port 1102
Hatckel |
| 1 | max probes = 10263 | 30 | |
|
|
port 1133
SweetHeart |
| 1 | max probes = 10119 | 30 | |
|
|
port 3128
Reverse WWW Tunnel Backdoor, |
| 1 | max probes = 9989 | 30 | |
|
|
port 8084
no service name |
| 1 | max probes = 9708 | 30 | |
|
|
port 40389
no service name |
| 1 | max probes = 9435 | 30 | |
|
|
port 1720
H.323/Q.931 |
| 1 | max probes = 9348 | 30 | |
|
|
port 8219
no service name |
| 1 | max probes = 8498 | 30 | |
|
|
port 1540
rds |
| 1 | max probes = 7892 | 30 | |
|
|
port 35423
no service name |
| 1 | max probes = 7873 | 30 | |
|
|
port 8089
no service name |
| 1 | max probes = 7197 | 30 | |
|
|
port 90
DNSIX Securit Attribute Token Map |
| 1 | max probes = 7195 | 30 | |
|
|
port 9080
Groove GLRPC |
| 1 | max probes = 7064 | 30 | |
|
|
port 7070
RealServer/QuickTime |
| 1 | max probes = 6455 | 30 | |
|
|
port 8800
W32.Noomy |
| 1 | max probes = 6455 | 30 | |
|
|
port 14404
no service name |
| 1 | max probes = 6450 | 30 | |
|
|
port 8082
BlackICE exploit |
| 1 | max probes = 6234 | 30 | |
|
|
port 1173
D-Cinema Request-Response |
| 1 | max probes = 5920 | 30 | |
|
|
port 20865
no service name |
| 1 | max probes = 5755 | 30 | |
|
|
port 8087
no service name |
| 1 | max probes = 5741 | 30 | |
|
|
port 1815
MMPFT |
| 1 | max probes = 5678 | 30 | |
|
|
port 1763
cft-2 |
| 1 | max probes = 5675 | 30 | |
|
|
port 1226
STGXFWS |
| 1 | max probes = 5672 | 30 | |
|
|
port 1625
svs-omagent |
| 1 | max probes = 5672 | 30 | |
|
|
port 1605
Salutation Manager (Salutation Pro... |
| 1 | max probes = 5659 | 30 | |
|
|
port 4444
CrackDown, Oracle, more... |
| 1 | max probes = 5616 | 30 | |
|
|
port 8083
no service name |
| 1 | max probes = 5090 | 30 | |
|
|
|
