advICE :Exploits :Ports :groups :PCanywhere

Port PCanywhere

PCanywhere uses a range of ports.

When connecting, PCanywhere first sends a UDP packet to ping whether the system is alive. If the user doesn't know the IP address, PCanywhere will ping the entire local address range with these packets looking for servers. These scans are frequently seen by home users from their neighbors.

These UDP pings are sent to both ports 22 and 5632 (in hex, 0x0016 and 0x1600 respectively). The intended port was 5632, but a programming bug swapped the bytes in order versions.

PCanywhere will not work through a firewall because the UDP packet must go through in both directions.

22 (UDP)
Used in older versions, though newer version still use it for backwards compatibility.
5632 (UDP)
Used to "ping" the host in order to check its status (whether the target host is running PCanywhere, and if the service is currently busy).
5631 (TCP)
Remote control runs over this port
65301 (TCP)


Privacy Policy |  Copyright Info