Security Incidents mailing list archives

Re: Strange ports open


From: George Bakos <alpinista () BIGFOOT COM>
Date: Tue, 17 Oct 2000 08:38:10 -0400

lsof -i :[port in question] should do the trick.  lsof (list open files)
can be had at ftp://vic.cc.purdue.edu/pub/tools/unix/lsof/

On 16 Oct 00, at 17:15, Webmaster wrote:

Anyone have any idea what might cause these ports/responses?

Thanks,

Paul S


20139/tcp  open        unknown

[root@here /root]# telnet xxx.xxx.xxx.xxx 20139
Trying xxx.xxx.xxx.xxx...
Connected to xxx.xxx.xxx.xxx.
Escape character is '^]'.

[RPL]002




45632/tcp  open        unknown
[root@here /root]# telnet xxx.xxx.xxx.xxx 45632
Trying xxx.xxx.xxx.xxx...
Connected to xxx.xxx.xxx.xxx.
Escape character is '^]'.
PWD
error reading password...


George Bakos - Security Engineer
Electronic Warfare Associates
Information & Infrastructure Technologies
http://www.ewa.com
802-338-3213

 To request PGP public key,
 mailto:alpinista () bigfoot com?subject=sendpubkey
 or http://pgpkeys.mit.edu:11371/


Current thread: