>Recently, I received a lot of attempt from several address using 12345/tcp
>to scan the  subnet that was behind some of our firewall.

>Do u  have any idea what is 12345/tcp? How dangerous it is?


Hello


Normally this scan is done by a script kiddy to
see if you are infected by a trojan.
We get this very often every day.

As this "tools" are offered freely in the Internet, 
most kids has nothing more to do than to search
for infected computers.

As long as your net is clear and you firewall is close, 
there is nothing to worry about.

See http://www.simovits.com/nyheter9902.html
for a list of the commonly used ports of trojans.

port 12345 - GabanBus, My Pics, NetBus, Pie Bill Gates, Whack Job, X-bill


Regards, 

Marc Eismann
Senior Consultant

GCS AG
Industriestra�e 23
40822 Mettmann

Telefon: 02104-9106-0
FAX : 02104-9106-40
EMail: <mailto:[EMAIL PROTECTED]>
Internet: <http://www.gcs.de/>



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================

Reply via email to