In computer networking a port is a software construct serving as a communications endpoint in a computer's host OS.

learn more… | top users | synonyms

2
votes
1answer
82 views

Samba open ports, not being filtered

nmap scan of my ubuntu computer, output when ran with -sV: 139/tcp open netbios-ssn Samba smbd 3.X (workgroup: MEDIAPC) 445/tcp open netbios-ssn Samba smbd 3.X (workgroup: MEDIAPC)...
0
votes
2answers
30 views

Wondering about open port found while using VPN service

I have noticed during port scanning that my "anonymous" IP has an open port (111) while I am using VPN. Does this make me vulnerable as user or is it the provider's failure? Should I change ...
4
votes
1answer
265 views

Can the windows Remote Procedure Call subsystem be modified from the default without causing Windows 8/8.1/10 to break?

This is a question that personally as a security professional has bugged me for a long time. So, a default Windows installation, from XP up to 10, typically has a few services listening on the quad-...
1
vote
4answers
335 views

What configuration will allow another computer in the internet to probe my computer's ports?

I've just tested my computer with Gibson's port scan test: The test results stated that my system is "uncommon". It also said that my computer deliberately chose not to return. But I did not do any ...
0
votes
2answers
253 views

Kali Linux/Metasploit in VirtualBox - Issue with ports

I've been attempting to get port 4444 to open these past couple of days. I finally figured I'd try to get it working on my Windows machine first and I finally got it. Now, no matter what I do in the ...
-1
votes
0answers
34 views

Unable to use port and IP scanner in Windows 7 [migrated]

How do fix this: One day all of my port scanners and IP scanners were working, but then the next day they don't discover any other hosts except my computer and router. The other host that I am trying ...
1
vote
3answers
48 views

Can nmap take a list of ports to scan from a file?

Nmap can take a file containing a list of hosts to scan using the -iL flag. Is there similar functionality for a file containing a list of port numbers? I've scoured the man page, online docs at nmap....
12
votes
2answers
46k views

How do hackers take advantage of open ports as a vector for an attack?

It is widespread knowledge, and therefore a common practice, to close open ports on any machines connected to the internet. If for example, a typical program uses port xyz as it's communication ...
-1
votes
1answer
83 views

Strange behavior of Nmap

I do port scanning with Nmap when HotSpot Shield VPN is running; and I am receiving strange result - when HotSpot Shield is running, Nmap tells me that all of the ports are open and when HotSpot is ...
0
votes
1answer
111 views

How can all ports be closed? [closed]

I was faced that, there was an hacker attacking my gmail account. With the help of google service, I got the information about that hacker. Again next day he was attacking my pc. When I scanned ...
3
votes
2answers
101 views

All ports are unfiltered

I'm currently studying a peneteration/hacking course. I am trying to use nmap against a target to find all the ports that are filtered. I thought if I used an ACK-scan nmap would give me all the ...
3
votes
0answers
40 views

What vulnerabilities are associated with port triggering?

Background To address a VoIP voice lag issue, my provider added port triggering rules for over 42,000 ports on my router, which seemed sloppy. And as I understand it, port triggering should only be ...
0
votes
2answers
247 views

What can I do about being heavily port scanned?

I have two devices connected wirelessly to my Linksys router while running Symantec Endpoint Protection on my computer. A few days ago I started using the internet by connecting the cable directly to ...
2
votes
2answers
101 views

Opening remote MySQL database to office IP address at default MySQL port risks?

I read a few questions regarding this topic that were pretty informative, but still wanted to pose my particular case. My company wants to put our data in the MySQL tables we have through our web ...
-5
votes
1answer
109 views

Benefit of checking TCP port or UDP port [closed]

I'm studying port scanning. How can an attacker benefit from the information of checking TCP ports or UDP ports?
0
votes
4answers
152 views

Running SSH on a different port vs adding the port number to a password

So, a pretty typical piece of advice is to run SSH on a high port number, thus decreasing the chances of it being attacked. The thing I have always wondered about though is that it seems more secure ...
2
votes
2answers
186 views

Is QUIC (Quick UDP Internet Connections) safe to allow through firewall?

Our firewall currently blocks QUIC (UDP 443) traffic which seems to be enabled by default in Google Chrome. Is it safe to allow QUIC or should I wait until it is implemented in all the major browsers? ...
1
vote
2answers
62 views

What is this weird localhost IP traffic on multiple ports in the 5400-5600 range?

I am encountering an issue I recently have seen in my Fedora 23 machine (latest updates). I am getting about 130 IP packets passed back and forth over the lo interface in one go, every 1 second (like ...
11
votes
5answers
3k views

Why do hackers scan for open ports?

So, whenever you hear of the mean little hackers who hack websites you hear of "port scanning". I understand what it is (looking for all open ports / services on a remote machine), however that begs ...
-1
votes
2answers
91 views

Determining Firewall settings (Ports, etc) for specific applications

How can we identify the network or network firewall requirements for a Desktop or Web application. Meaning what ports are required by the applications. How the Cloud and non Cloud networks communicate ...
0
votes
3answers
198 views

Why is UDP port scanning slower than TCP port scanning?

I can't seem to find an answer for this. Any suggestions?
1
vote
0answers
62 views

Port scanning on server

My use case is to check open ports on multiple servers, so when I try: nmap -iL list.txt then nmap only scans for some particular ports whether they are open or closed, but when I try: namp -p 1-...
4
votes
2answers
4k views

Setup of Kali Linux for reverse shell connections over the internet

I am running Kali Linux as a VM on my Windows machine which is NAT'd behind my company network, if I wish to pen test a website for a client and believe that a reverse shell is possible, what is a ...
0
votes
2answers
99 views

Windows 10: telnet - Openwall GNU/*/Linux telnetd running on an open port normal?

I noticed my internet connection was acting a little strange (stuttering up abruptly seemingly randomly), so I thought I'd see what's using it using Zenmap. I ran "Intense scan" using the latest ...
10
votes
4answers
11k views

How to listen to all ports (UDP and TCP) or make them all appear open (linux)

I got an external Debian server. The problem is that my university campus doesn't allow connections to go outside when the port is different than TCP port 22, 80, 443, or UDP port 123. I tested them ...
2
votes
2answers
43 views

Why do ALGs restrict traffic on a given TCP port based on the protocol?

My understanding is that application level gateways restrict the traffic they proxy based on port and protocol - say HTTP over port 80 or MQTT over port 1883. Both types of traffic are using TCP as ...
1
vote
1answer
56 views

Multiple users sharing the same IP

I'm setting up a quite unusual proxy for a very specific niche case. I'm allocating (ip,port) addresses to users, from which they can send and receive UDP and TCP packets. e.g. say someone is ...
5
votes
1answer
1k views

Firewalk through a Firewall on our subnet

Having trouble firewalking. I am trying to determine all the open ports on my firewall/gateway. Here is my lab network diagram: (Skip to the bottom of the following explanation for a direct list of ...
1
vote
2answers
105 views

Nmap scan report with all port status

Is there a way to ask nmap to print the final scan report with the state of all ports tested and the reason? For example when the scan is launched with --reason : Nmap scan report for 127.0.0.1 ...
2
votes
1answer
496 views

What is the fastest way to scan all ports of a single machine

I am doing some research and I need a very quick way to scan for open ports on a single machine. To provide some context, I know that my machine will have a port open waiting for UDP packets for about ...
2
votes
1answer
54 views

How to perform an idle scan against a target using Nmap with a list of zombies? [closed]

I want to perform port scan against a target but the firewall at the target only allows traffic to the ports through certain IP address/machines. I tried to perform an idle scan in Nmap but it only ...
0
votes
2answers
243 views

How to scan for ports opened by TCP/UDP sockets with nmap or any other tool?

I'm new to nmap and I've been digging with it lately to scan some devices on the current LAN for ports opened by socket programs which are running. First I ran a simple UDP server on my machine on ...
27
votes
4answers
4k views

How do you deal with massive port scans?

This morning I was looking through firewall logs and saw there were about 500 packets marked as port scan. The scanning range was from 1000-1200 5000-5200. The IP address is 85.25.217.47 which seems ...
1
vote
2answers
148 views

DDoS Mitigation - Whitelist or Blacklist Incoming SOURCE Ports?

For a network offering webservices, I have had recommendations to blacklist a couple of common incoming DESTINATION ports, such as UDP 53, to combat the increasing load from DDoS. I'm wondering if it ...
7
votes
3answers
399 views

Risk of running services on ports >1024

In a Reddit thread on securing SSH access to a Raspberry Pi, one commenter recommended running SSH on a non-standard port of 8123. Another commenter had this to say on the matter: Don't change ...
0
votes
1answer
106 views

Open ports on router

I have a TP-Link TD W8970 modem/router. Just for fun i tried to perform a port scan on it. I found this: $ nmap -p 1-65535 -n 192.168.1.1 Starting Nmap 6.00 ( http://nmap.org ) at 2016-01-21 16:17 ...
1
vote
1answer
403 views

OSSEC, what is it telling me about port changes?

I've been diving into OSSEC for the last couple of months, but I feel unclear on one of it's alerts. I've provided the alert below. The main difference I see in previous output and current output is ...
6
votes
4answers
13k views

Router Ports open

What ports on my home router should be open, say if I'm only using it for browsing the internet. Right now these four are open, 23/tcp open telnet 53/tcp open domain 80/tcp open http 5000/...
1
vote
2answers
111 views

Why does nmap remotely show when I have port 6969 open, but not others?

Specifically, I was running a node.js application on port 6969 which I thought was strictly local. I discovered this was not the case when I ran nmap <myip> from a different computer and found ...
3
votes
1answer
490 views

What do Msgsrvr and Scientia-ssdb do?

I'm having a task in a computer security class in school where I'm supposed to scan a host for open ports in order to find out what services are being run there. I have found out (among other things) ...
5
votes
1answer
48 views

Safely Experimenting With Sockets

I'm learning about TCP/IP and (Berkeley/UNIX) socket programming. Let's say I have two scenarios: 1) I write two programs in C, a client and a server, and bind them each to a non-well-known port on ...
6
votes
1answer
142 views

Exploring unknown service

I'm fairly new to network stuff and currently exploring a Wi-Fi radio device in my home network. In this process I noticed an open port. 58028/tcp open unknown 1 service unrecognized despite ...
-3
votes
1answer
44 views

Little bit confusing with nmap scan

I started MySQL with this command service mysql start and it worked pretty well. So: Using the netstat command, I found 127.0.0.1:3306 was in listening state, this is the MySQL service. So I did a ...
0
votes
2answers
54 views

How do I scan my Routers Ports? [duplicate]

I recently scanned ports from within my LAN, but I recently read in order to determine whether Ports are open to the WAN I need to scan from outside the LAN, how do I do this?
0
votes
1answer
65 views

Resuming an interrupted nmap scan:

I need to: --resume <filename>: Resume an aborted interrupted scan. But I didn’t: -oN/-oX/-oS/-oG <file>: Output scan in normal, XML, s|<rIpt kIddi3, ...
2
votes
1answer
92 views

Static MAC address on Switches and routers

I was having a discussion with a friend of mine in IS industry and he insisted that setting static MAC addresses (i.e. port security) on devices were a effective way to block MAC spoofing. I found ...
-1
votes
2answers
207 views

How to limit source port for accessing blocked website?

My country has a firewall which blocks sites like Facebook, whatsApp etc. However, they use some kind of port blocking, so some important websites for me like Chegg is also getting blocked I think due ...
3
votes
1answer
174 views

Common attacks when no ports are open

If you have a web server with all ports closed (except, of course, the necessary HTTP) what kind of attacks can an attacker use to hack into the system? Are the only vulnerabilities stuff like ...
1
vote
1answer
113 views

FIN Scan: sneak through certain non-stateful firewalls?

Many resources stated that FIN scan can bypass non-stateful firewall: In Nmap document: The key advantage to these scan types is that they can sneak through certain non-stateful firewalls and ...
0
votes
1answer
169 views

What attacks or exploits are possible when MAC address, IP, and Port of a WiFi access point are known? [closed]

I just accepted a position at a small firm and was testing the previous WiFi setup for flaws and exploits that were possible. We have two AP's for business and guest connections, everything checks out ...