UDP port 2140 ?

[Dave Killion <dkillion () PILOT NET>]

That would be "Deep Throat" - Old 95/98 Trojan.

http://advice.networkice.com/advice/Phauna/RATs/programs/Deep_Throat/default
.htm

Dave Killion
Security Services Engineer
dkillion () pilot net

-----Original Message-----
From: Incidents Mailing List [mailto:INCIDENTS () SECURITYFOCUS COM]On
Behalf Of Alex Popa
Sent: Thursday, August 10, 2000 5:45 AM
To: INCIDENTS () SECURITYFOCUS COM
Subject: UDP port 2140 ?


Any idea what this port is?  I have seen scans on my whole class C
scanned from port 60000 on 193.230.162.187 and from 193.230.162.250,
also source port 2140.

It has happeded some time ago, while I was out of town.  I have looked
in the archives and the usual firewall-seen sites, but no luck.

Thanks,
        Alex

------------+------------------------------------------
Alex Popa,  |There never was a good war or a bad peace
razor () ldc ro|                   -- B. Franklin
------------+------------------------------------------
"It took the computing power of three C-64s to fly to the Moon.
It takes a 486 to run Windows 95. Something is wrong here."