Compiled a list of ports that Trojans use. If Regex didn't exist, you wouldn't be as lucky as you are finding these lists nice and formatted.
Main Sources:
https://rapidpurple.com/tutorials/linux-server-tutorials/trojan-port-list/
https://rapidpurple.com/tutorials/linux-server-tutorials/trojan-port-list/
https://www.web24.com.au/tutorials/basics-trojan-virus
http://www.relevanttechnologies.com/resources_4.asp
Thought about using this list, but it's 16 years old. Feel free to use it if you'd like.
https://www.speedguide.net/forums/showthread.php?144959-Trojan-Port-List