port 2745... ?

[RJK]

For the past couple of weeks, I keep getting repeatedly port scanned on 2745

e.g.
Date: 4/26/2004 Time: 9:01:43
Unused port blocking has blocked communications. Details:
Inbound TCP connection
Remote address,local service is (81.50.160.184,2745)

Is it anything to do with
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]
?

or am I blocking 2745 when I shouldn't be ?
I recently severely restricted my ISP home page as it loads in IE6 because
of atdmt, bluestreak, tangozebra, doubleclick etc. coookie activity - top
banner ad. on that page. I've checked my machine for traces of w32.beagle
type worms, and don't have any, and to my knowledge haven't ever had any.

regards, Richard

 

[Sean]

Richard, this appears to be a user running a port scanner
looking for people infected with a certain trojan that
uses port 2745. I have never heard of this port being used
for anything, but apparently it is. You can exclude any
chance that it's anything to do with your firewall seeing
as it was an INCOMING TCP request. That means it was a
machine outside trying to get in. This request is never
administered by a website as suggested by the URL you
typed.

 

[H Leboeuf]

Yes it can very well be. What is blocking it your Firewall.
In any event do not open it.

http://groups.google.ca/groups?hl=e...&oe=UTF-8&newwindow=1&scoring=d&q="port+2745"