Security Incidents mailing list archives
Re: Strange ports open
From: George Bakos <alpinista () BIGFOOT COM>
Date: Tue, 17 Oct 2000 08:38:10 -0400
lsof -i :[port in question] should do the trick. lsof (list open files) can be had at ftp://vic.cc.purdue.edu/pub/tools/unix/lsof/ On 16 Oct 00, at 17:15, Webmaster wrote:
Anyone have any idea what might cause these ports/responses? Thanks, Paul S 20139/tcp open unknown [root@here /root]# telnet xxx.xxx.xxx.xxx 20139 Trying xxx.xxx.xxx.xxx... Connected to xxx.xxx.xxx.xxx. Escape character is '^]'. [RPL]002 45632/tcp open unknown [root@here /root]# telnet xxx.xxx.xxx.xxx 45632 Trying xxx.xxx.xxx.xxx... Connected to xxx.xxx.xxx.xxx. Escape character is '^]'. PWD error reading password...
George Bakos - Security Engineer Electronic Warfare Associates Information & Infrastructure Technologies http://www.ewa.com 802-338-3213 To request PGP public key, mailto:alpinista () bigfoot com?subject=sendpubkey or http://pgpkeys.mit.edu:11371/
Current thread:
- Strange ports open Webmaster (Oct 16)
- Re: Strange ports open George Bakos (Oct 17)
- Re: Strange ports open NunoTreez (Oct 19)
- <Possible follow-ups>
- Re: Strange ports open Robert G. Ferrell (Oct 19)
- Re: Strange ports open Jose Nazario (Oct 19)
- Re: Strange ports open George Bakos (Oct 19)
- Re: Strange ports open George Bakos (Oct 17)