|
Port 6669 Details
known port assignments and vulnerabilities
threat/application/port search:
| Port(s) |
Protocol |
Service |
Details |
Source |
| 6669 |
tcp,udp |
irc |
IRC (Internet Relay Chat)
Many trojans/backdoors also use this port: Dark Connection Inside, Dark FTP, Host Control, NetBus worm , ScheduleAgent, SubSeven, Trinity, WinSatan, Vampire.
Backdoor.IRC.Flood [Symantec-2001-080313-3306-99]
Backdoor.Hacarmy.E [Symantec-2004-101417-2331-99]
W32.Spybot.EAS [Symantec-2004-093016-3632-99] - DDoS and backdoor capabilities, also attempts to steal confidential info. Uses port 6667/tcp.
Backdoor.Sdbot.AC [Symantec-2004-100415-4933-99] - backdoor trojan, uses port 6667/tcp.
Backdoor.Sdbot.AF [Symantec-2004-111811-0117-99] - backdoor trojan, uses port 6667/tcp.
Backdoor.Alnica [Symantec-2004-110315-5443-99] - backdoor trojan, uses port 6667/tcp to connect to IRC, also sends ICQ messages.
Backdoor.Maxload [Symantec-2004-110420-4659-99] - backdoor trojan, affects Linux and Unix computers ! Attempts to connect to IRC servers on port 6667/tcp.
Backdoor.Hacarmy.E [Symantec-2004-101417-2331-99] - backdoor trojan, uses port 6667/tcp.
Backdoor.Hacarmy.F [Symantec-2004-110511-0258-99] - backdoor trojan, connects to IRC servers on port 6667/tcp.
W32.Bofra.A@mm [Symantec-2004-110916-0038-99] - uses ports 1639 and 6667/tcp.
W32.Bofra.E@mm [Symantec-2004-111213-5143-99] - a mass-mailing worm, runs a HTTP server on port 1639/tcp, attempts to connect to IRC servers on port 6667/tcp.
W32.Cissi.W [Symantec-2005-012811-2022-99] - IRC bot worm with backdoor capabilities. Uses port 6667, propagates through network shares.
Backdoor.Lateda.B [Symantec-2005-011714-4950-99] - backdoor trojan with remote access capabilities. Connects to an IRC server on port 6667, opens a backdoor on port 9999/tcp.
W32.Linkbot.M [Symantec-2005-052109-2651-99] - opens a backdoor on port 6667/tcp. Also listens on port 113/tcp.
W32.Zotob.D [Symantec-2005-081609-4733-99] - a worm that opens a backdoor and exploits the MS Plug and Play Buffer Overflow vulnerability (MS Security Bulletin [MS05-039]) on port 445/tcp. Conects to IRC servers to listen for remote commands on port 6667/tcp. Also opens an FTP server on port 1117/tcp.
W32.Zotob.H [Symantec-2005-081717-2017-99] - a worm that opens a backdoor and exploits the MS Plug and Play Buffer Overflow vulnerability ([MS05-039]) on port 445/tcp. It runs and spreads using all current Windows versions, but only infects Windows 2000. The worm connects to IRC servers and listens for remote commands on port 6667/tcp. It opens port 69/udp to initiate TFTP transfers. It also opens a backdoor on remote compromised computers on port 8563/tcp. |
SG
|
| 6665-6669 |
tcp |
|
Internet Relay Chat (official) |
Wikipedia
|
| 6669 |
tcp |
trojan |
Host Control, Vampire, Voyager Alpha Force |
Trojans
|
| 6669 |
tcp |
HostControl |
[trojan] Host Control |
SANS
|
| 6669 |
tcp |
ircu |
IRCU |
SANS
|
| 6669 |
tcp |
Vampire |
[trojan] Vampire |
SANS
|
| 80, 3783, 4321, 6660-6669, 28900, 29900, 2901 |
tcp |
applications |
Command and Conquer Red Alert 3 |
Portforward
|
| 6669 |
tcp |
irc |
Internet Relay Chat |
Nmap
|
| 6665-6669 |
tcp |
ircu |
IRCU |
IANA
|
| 6665-6669 |
udp |
|
Reserved |
IANA
|
|
10 records found
Related ports: 3783 6500 6515 6660 6661 6662 6663 6664 6665 6666 6667 6668 27900 28900 29900 29901
|