Questions tagged [ports]
In computer networking a port is a software construct serving as a communications endpoint in a computer's host OS.
374
questions
0
votes
0answers
5 views
Openvpn blocks external traffic [migrated]
I am looking to set up self-hosted cloud storage, and need to open a port in order to do this.
This would be hosted on a raspberry pi with an external drive that I used to store my important documents....
0
votes
1answer
55 views
Estimate the number of host computers on the private network by port scanning
If we have a private network connected to the Internet with NAT, how can an attacker estimate the number of host computers in network using port scanning?
For both possible modes, the attacker inside ...
0
votes
0answers
59 views
How to install and use scanlogd [migrated]
I want to install and run scanlogd from my Ubuntu 16.04 machine. I am able to install and run it with apt-get install scanlogd and it works fine.
But I am not able to change the parameters like log ...
10
votes
2answers
2k views
Security implications of granting non-root access to privileged ports (<1024)
Lots of solutions to this problem e.g. here and here but in order to decide which is best I'd need to know more about the security implications of each solution (or at least in general).
My context: I'...
1
vote
1answer
45 views
What is the threat/risk difference in opening multiple ports on one physical NIC on a home server vs creating VLANs and opening ports on each VLAN?
I have a single home server with a single NIC. I intend to run numerous services -- some will be internet exposed, some will not. I don't know if I am going to run them as VMs or Docker container but ...
0
votes
1answer
90 views
What's this port? [closed]
Listing all the ports currently in use on my mac running $ sudo lsof -i -n -P | grep TCP, I see six entries starting with a weird-looking string of "2BUA8C4S2".
A web search for that string ...
2
votes
1answer
79 views
scan forwarded ports with OpenVAS/GVM?
I'm currently learning about network security and came across a problem, maybe I'm just missing something obvious but I'll try to explain my environment:
I have a Kali Linux VM connected to the WAN ...
0
votes
1answer
105 views
Intensive 586 (ms-shuttle) port scan/exploit/hacking attempts
Recently i wanted to play a bit with TCP/UDP networking (and touch some custom HTTP server impl) on C# and found out that i'm getting requests from totally unknown dudes, such as this one:
FROM: [::...
1
vote
0answers
81 views
Is port scanning used by software for legitimate reasons?
Does normal network traffic sent out by software or anything else use port scanning for legitimate reasons?
I'm using psad on my linux server and am unsure if setting the auto-ban IP feature on danger ...
-1
votes
2answers
89 views
What are the advantages of port scanning?
It seems like all the google results to this question answer what port scanning is, but go into little detail about how a pentester or hacker could use the information about what ports a network has ...
0
votes
1answer
48 views
Can anyone tell me at this platform that what is the difference between filtered ports and blocked ports? [duplicate]
please help me out, I am confused in this.
0
votes
1answer
66 views
Is it safe to expose port 22 on a database VM? [closed]
I have seen many answers to this question in different scenarios but I am still unsure of the actual answer.
I have a VM in the cloud (Azure), which will be hosting my production database. Is it safe ...
1
vote
3answers
146 views
Is there a possible security advantage to using a non standard port for ssl/https?
There are documented (albeit debated) advantages to using a non standard port for SSH.
I also read in various places about using a non-standard port for https (e.g. 8443). Is there a possible ...
0
votes
2answers
168 views
Nmap scanning with and without proxychains has different behaviour
I'm doing a nmap scan to my own machine to my own machine. First of all I set the port 333 to listen with this command sudo nc -lvnp 333
On the other terminal I run sudo nmap -O -sV -p 0-65535 IP ...
1
vote
1answer
488 views
Why can I access the internet with all ports closed on firewall? [closed]
For the heck of it I wanted to see how much I could close down my router from the rest of the internet. I was hoping turning on the firewall, removing any port forwarding and turning off UPnP would ...
0
votes
0answers
30 views
Using Windows XP to only read email [duplicate]
Let's settle the obvious: Windows XP is a very obsolete operating system, running it as the main OS on a computer connected to the internet is not a good idea.
But, if say, you would like to run it ...
0
votes
0answers
85 views
Very odd traffic - is it legit?
While troubleshooting an unrelated network problem, I noticed an interesting pattern on one of our networks for the last few days (at least). Before crying wolf, I wanted to see if somebody here may ...
0
votes
1answer
83 views
Attacking through an open but not listened port [duplicate]
Let us say, we open a port, say port 123, so that upon listening, an application on the server can receive incoming packets through the port 123.
If there is no way that an inside application on the ...
0
votes
1answer
4k views
Microsoft DS vulnerability?
I heard that Microsoft DS is a port that is commonly used by hackers to hack computers due to its ability to transfer files.
How do they transfer files with Microsoft DS?
Do they need an exploit to ...
-1
votes
3answers
3k views
Is TCP Port 80 (HTTP) vulnerable?
I heard hackers' top ports to hack computers through are port 80 and port 443. How do they do this though aren't port 80 and port 443 just for HTTP requests such as GET, POST?
1
vote
2answers
133 views
Will blocking outgoing traffic from port 80 and only allowing port 443 from my home network lead to more security?
Is blocking outgoing HTTP connections from a home network and only allowing HTTPS
connections reasonable? Will it reduce the chances of a man in the middle attack?
5
votes
1answer
307 views
Is it security risk to host CS:GO server on my PC?
I have quite good hardware in my PC and an optic fiber connection. I opened a CS:GO (Counter Strike Global Offensive) server on it, and made it public. The IP for connecting to this server is my ...
0
votes
0answers
80 views
Is it a Bad Idea™ to open all IPv6 ports for devices in an isolated guest network?
At home I have a dual-stack IPv4/IPv6 broadband connection, and I also have a wireless access point. The access point currently bridges all traffic into my LAN, which is not segmented in any way, so ...
0
votes
1answer
46 views
Is my server safe from remote hackers if I only allow 1 port and 1 service behind it which only hashs incoming bytes stream & send the hash key back? [duplicate]
I have a python script ,which accepts an incoming connection, reads from the byte stream ,hash it (I'm pretty sure the hash function itself can't be exploited) ,sends the hash key back ,then closes ...
0
votes
2answers
110 views
Is it safe to have an opened port on my PC with a proxy server listening?
I have a single port open for my own proxy server. All other ports are closed. Is it safe for my PC? Even if my port will keep getting bombed by hackers could my PC be exposed to them? There is no ...
1
vote
1answer
184 views
How to only display open ports
I'm very new to Nmap. I'm using Nmap to find open ports of an IP by this command:
nmap -v -Pn -p 1-100 "$ip" -oG -
Here is the output:
Host: IP
Ports:
6/closed/tcp/unknown
19/closed/tcp/chargen
20/...
0
votes
0answers
35 views
How to secure an open port and public IP address when clients must connect to it [duplicate]
I do not have a lot of experience in networking, however, I have built a live-chat application using socket.io and nodeJS. In order to do this, I had to open a port to allow other networks to connect. ...
2
votes
2answers
97 views
Risks of leaving my Redis port open and unsecure?
I left port 6005 open on a server of mine. Currently, if the server goes down, it won't be much of a loss. But my port 6005 is open for Redis queues and I don't necessarily want to have deal with it ...
3
votes
1answer
545 views
Why OpenVAS does not find all open ports compared to Nmap?
I recently launched a system discovery scan with OpenVAS to an IP from my net to compare its results to Nmap. As you can see in the image OpenVAS does not find all the ports Nmap does.
Both scans ...
1
vote
1answer
2k views
What ports should be closed in windows 10?
How can I close ports in windows 10 and what ports are unnecessary to be open? How do I find these open ports to close?
Also if I close a specific port on windows 10 do I have to close the outbound ...
0
votes
1answer
73 views
What's the point of using a firewall to filter ports if they are closed by default? [duplicate]
I'm just learning most of this stuff so bare with me;
Using a firewall service such as iptables, is there a point in filtering/blocking a port that is not in use meaning it's closed by default?
0
votes
2answers
259 views
Security of port forwarding when the target is turned off
I recently set up a server from an old computer case. I use docker to install and use different services on different ports and I would like to access some services from outside of my house.
I have a ...
0
votes
1answer
84 views
pycharm opening ports [closed]
By running a simple port scan, I have noticed that pycharm is opening three ports on the machines it is installed on.
Pycharm is a great tool for developer, but it seems fairly awful to me on the ...
0
votes
1answer
105 views
How to make VPS more secure with UFW?
I have 3 VPS based on Ubuntu 18.04 server OS and would like to open particular ports on each servers.
The ports, that I would like to open are:
Then let's take a look on the environment:
As you ...
0
votes
2answers
265 views
Nessus detect more open ports than nmap
I scan my site via namp , I only see 3 ports open.
nmap -sV {ip}
Starting Nmap 7.80 ( https://nmap.org ) at 2020-01-25 09:42 EST ...
1
vote
0answers
144 views
Is there an updated (non-Nmap) top 100 or top 1000 common ports list?
I know Nmap has nmap-services file which gives us the list of top 1000 ports/services found on the Internet. But this list seems to be outdated, as the Nmap top 1000 list doesn't include several ...
0
votes
0answers
88 views
Open Ports at ISPs Gateway
I am working to set up OpenVPN access to my home network. To do this, I had to contact my ISP, because they had the necessary port blocked at the Gateway/Router that I do not have access to.
In my ...
1
vote
2answers
102 views
Security of using DHCP and non-standard ports for medical devices
I recently came across this comment written in a journal article.
Lastly, medical apparatus are expected to use Dynamic Host Configuration Protocol (DHCP) for the allocation of their IP ...
2
votes
2answers
943 views
Is there practical risk to having UDP ports open?
I understand that everything is potentially an attack vector, but I would like to ask a practical question about UDP ports
Suppose you're pentesting some small organisation and you found a couple of ...
0
votes
1answer
117 views
Why should I use firewall to block ports with no running services? [duplicate]
A firewall is for blocking / limiting access to specific service / port.
I know that it can be useful for allowing only certain IPs to a port (for example I don't want to have SSH open for the whole ...
1
vote
0answers
47 views
WMI Performance Adapter function for Chrome browser?
Does someone know why the WMI Performance Adapter (WmiApSrv.exe) always starts when launching Chrome browser? Whats the function of this service?
I have heared this service can be maliciously used to ...
3
votes
1answer
402 views
Nmap giving different result between Mac OS scan and Linux (Kali) scan [closed]
I try to do a simple TCP scan on an Kubunt VM (is on VirtualBox), from two different OS.
From the Host (Mac OS system) and from a Kali Linux VM (tried VirtualBox and Parallels also).
Kali Linux (...
1
vote
0answers
1k views
Nmap Shows all ports are closed [closed]
I am facing a problem with Nmap while scanning metasploitable.
I am using two different PCs. One with Kali Linux by using USB boot and on other PC using Metasploitable running on VMWare. I have ...
-4
votes
2answers
313 views
How to Defend Against Port Scan Attacks
I was told that Hackers scan for open ports in random IPs and if they are open they hack the computer.
What open ports can be hacked? How do I close the ports?
0
votes
1answer
189 views
Gradle daemon listens on all interfaces by default
Was messing around with a project today that uses the build tool Gradle and I noticed that by default, it's running a daemon server process that listens on all interfaces.
Output of ss below.
State ...
2
votes
1answer
105 views
Can a VPN provider or actors within its infrastructure access open ports on the client machine?
From my understanding of a VPN, it essentially creates a network between the two 'machines'. So if I have open ports (e.g. HTTP, SSH) on my client machine, those can be accessed by the VPN provider or ...
3
votes
1answer
555 views
Does blocking all ports make a machine more secure?
I have a machine that I use only to browse the Internet. What if I blocked all ports on this machine (inbound and outbound) except for port 80 and port 443, and restricted these two ports to an ...
2
votes
1answer
78 views
Access Control Lists - Why block a port rather than block a protocol?
I am studying for my Security + exam. I have just learned that ACLs can be designed to block ports and/or entire protocols. The book I am reading states an example:
"if you want to block HTTP traffic,...
0
votes
1answer
790 views
Disabled Network Discovery for port 5357 but it still shows up as open in NMap scan
as mentioned in the title I have disabled Network Discovery for all of the 3 profiles yet when I run an NMap scan, the port comes up to be open. I have also run the command netstat -a -b to find the ...
1
vote
0answers
65 views
Inbound rules for a port is configured and disabled yet an NMap scan shows that the port is opened
I am new to Windows Defender but have read about it to understand the basics of Inbound/Outbound rules.
As mentioned on the app, Inbound connections that do not match a rule are simply blocked.
For ...
