Today I scanned my router and found out open port 12345, which when googled displays to be NetBus which is potential threat.
As a reference I scanned my router many times before for open ports (all ports) using nmap, and never before seen this port opened.
I logged in to my router via remote shell and ran
netstat which showed that the there is connection from to this port from internal IP, which I was able to figure out is my firestick. I own firestick for a long time, and performed many scans on my router since then but port 12345 was never opened. However whenever I ran
ps I could not see anything that was never there, or anything that would make me anymore scared than I already am.
Is there any step I should take or is this known behaviour, and I simply missed it out when performing my previous scans, or is this coming perhaps from any new update?
canyouseeme.org I checked whatever port 12345 is available to outside world, but the website shows that this port could not be reached.