That would be the PC-Anywhere port.

Odds are, if someone is repeatedly trying to connect to your site
using that number, they transposed a couple digits somewhere in their
IP config...they will figure it out soon.

Worry about your computer at home?  Only if you are 1) running
PC-Anywhere and 2) not behind some kind of firewall or have a
PC-Anywhere tunnel set up through said firewall.  If someone WERE to
get ahold of a system inside your office or home that WAS running
PCAnywhere and guess or figure out your password...um...well, let's
just say thinking quickly, I can't come up with a much worse scenario.

I find it unlikely that a knowledgable cracker (yes, admittedly, that
is a usually a contradiction in terms) would spend a lot of time
working on a PC-Anywhere attempt -- too hard to explain, too easy to
trace, so I'd guess it is an innocent error.  On the other hand, it
could always be one of your own employees trying to "work from home",
trying to get to their own machine and not understanding the issue of
firewalls and NAT.  In this case, it could be a dangerous indicator of
a lack of understanding of security issues inside your office.

Nick. 

Network Adminstrator wrote:
> Ive been receiving alarms for someone trying to connect to TCP/IP
> port 5632.  My question is....is this a port that is commonly used?
> Is it for a particular hack?  Im currently blocking it on the on our
> Gnatbox, but is it something that I should be concerned about ...let
> say on my computer at home??
> 
> Adrian McCray
> LAN Manager

Reply via email to