Firewall Wizards mailing list archives

Re: Attack on port 2140??


From: "Jayson Broughton" <jbroughton () allcovered com>
Date: Tue, 25 Jan 2000 14:32:22 -0800

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Whoops,
I abruptly cut off the last message before clueing you into this last
tidbit.  The fact that
the person is trying to connect to 2140 does not necessarily mean
that you have the
Trojan on your computer.  It might just be a harmless Trojan scan.
The best way to
figure this out is to either update your virus definitions and scan
for it, or if you are on a
Windows box, drop into your command line and type 'netstat -a'
without the ' of course.
This will show you a current list of all ports that are open on your
computer.  Look
through that list to see if you find any of those open ports.
Sorry for the confusion, or the paranoia that you might have suffered
in knowing that you
might have a trojan on your box.

~Jayson Broughton
HQ-All Bases Covered
Network & Security Admin

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.2 for non-commercial use <http://www.pgp.com>

iQA/AwUBOI4kW6e75Wq9veF/EQL8ggCg96Iuay+1bYkqtHrRVV869+K78kcAoKBZ
AUYEtdwnckw8ATNMnNPK6O5h
=dZgZ
-----END PGP SIGNATURE-----


Ruben Vandille wrote:

Hi there,

Since a week or something like that, someone/something tries to connect via
UDP to port 2140 of my computer...
I haven't found any information on possible attacks that use "remote port
2140"...

Does anybody know what is happening here?

Thanx in advance,

R.

Current thread: