Questions tagged [ports]
In computer networking a port is a software construct serving as a communications endpoint in a computer's host OS.
341
questions
0
votes
2answers
62 views
Nessus detect more open ports than nmap
I scan my site via namp , I only see 3 ports open.
nmap -sV {ip}
Starting Nmap 7.80 ( https://nmap.org ) at 2020-01-25 09:42 EST ...
0
votes
1answer
42 views
nmap different results when scanning from different sources [closed]
I get slightly different results when scanning a IP from 2 different hosts.
Here is scan 1 from an internet server with a public IP:
Nmap 7.80 scan initiated Tue Jan 21 18:48:08 2020 as: nmap -Pn -...
1
vote
0answers
61 views
Is there an updated (non-Nmap) top 100 or top 1000 common ports list?
I know Nmap has nmap-services file which gives us the list of top 1000 ports/services found on the Internet. But this list seems to be outdated, as the Nmap top 1000 list doesn't include several ...
0
votes
0answers
52 views
Open Ports at ISPs Gateway
I am working to set up OpenVPN access to my home network. To do this, I had to contact my ISP, because they had the necessary port blocked at the Gateway/Router that I do not have access to.
In my ...
1
vote
2answers
82 views
Security of using DHCP and non-standard ports for medical devices
I recently came across this comment written in a journal article.
Lastly, medical apparatus are expected to use Dynamic Host Configuration Protocol (DHCP) for the allocation of their IP ...
2
votes
2answers
84 views
Is there practical risk to having UDP ports open?
I understand that everything is potentially an attack vector, but I would like to ask a practical question about UDP ports
Suppose you're pentesting some small organisation and you found a couple of ...
0
votes
1answer
69 views
Why should I use firewall to block ports with no running services? [duplicate]
A firewall is for blocking / limiting access to specific service / port.
I know that it can be useful for allowing only certain IPs to a port (for example I don't want to have SSH open for the whole ...
1
vote
0answers
23 views
WMI Performance Adapter function for Chrome browser?
Does someone know why the WMI Performance Adapter (WmiApSrv.exe) always starts when launching Chrome browser? Whats the function of this service?
I have heared this service can be maliciously used to ...
3
votes
1answer
142 views
Nmap giving different result between Mac OS scan and Linux (Kali) scan [closed]
I try to do a simple TCP scan on an Kubunt VM (is on VirtualBox), from two different OS.
From the Host (Mac OS system) and from a Kali Linux VM (tried VirtualBox and Parallels also).
Kali Linux (...
1
vote
0answers
139 views
Nmap Shows all ports are closed [closed]
I am facing a problem with Nmap while scanning metasploitable.
I am using two different PCs. One with Kali Linux by using USB boot and on other PC using Metasploitable running on VMWare. I have ...
-4
votes
2answers
113 views
How to Defend Against Port Scan Attacks
I was told that Hackers scan for open ports in random IPs and if they are open they hack the computer.
What open ports can be hacked? How do I close the ports?
0
votes
1answer
50 views
Gradle daemon listens on all interfaces by default
Was messing around with a project today that uses the build tool Gradle and I noticed that by default, it's running a daemon server process that listens on all interfaces.
Output of ss below.
State ...
2
votes
1answer
91 views
Can a VPN provider or actors within its infrastructure access open ports on the client machine?
From my understanding of a VPN, it essentially creates a network between the two 'machines'. So if I have open ports (e.g. HTTP, SSH) on my client machine, those can be accessed by the VPN provider or ...
2
votes
1answer
415 views
Does blocking all ports make a machine more secure?
I have a machine that I use only to browse the Internet. What if I blocked all ports on this machine (inbound and outbound) except for port 80 and port 443, and restricted these two ports to an ...
2
votes
1answer
60 views
Access Control Lists - Why block a port rather than block a protocol?
I am studying for my Security + exam. I have just learned that ACLs can be designed to block ports and/or entire protocols. The book I am reading states an example:
"if you want to block HTTP traffic,...
0
votes
1answer
170 views
Disabled Network Discovery for port 5357 but it still shows up as open in NMap scan
as mentioned in the title I have disabled Network Discovery for all of the 3 profiles yet when I run an NMap scan, the port comes up to be open. I have also run the command netstat -a -b to find the ...
1
vote
0answers
54 views
Inbound rules for a port is configured and disabled yet an NMap scan shows that the port is opened
I am new to Windows Defender but have read about it to understand the basics of Inbound/Outbound rules.
As mentioned on the app, Inbound connections that do not match a rule are simply blocked.
For ...
0
votes
1answer
932 views
My router is getting port scan attacks [duplicate]
My internet suddenly cut out yesterday, i checked the router and it looked like nothing is wrong. I looked at the logs and i see this
2019-08-18 12:50:39 Security Warning Detect UDP port scan ...
1
vote
1answer
155 views
Why is it okay to run NGiNX or Apache Web Server as root on port 80/443 and not your app directly?
Just like the title says, I would like to understand:
what are the implications of running a custom app (like node or flask) on port 80/443.
Is running a reverse proxy like Nginx mandatory from a ...
0
votes
1answer
106 views
Visual Studio Code leaving port open
Running a port scan via Network Utility on OS X 10.14.5, turns up two different outcomes, depending on whether or not I have Visual Studio Code (1.35.1) open.
If the application is open, I'll get ...
-1
votes
2answers
186 views
How to perform a security test/review/penetration testing of Ethernet ports?
I have been engaged by a client who wants its Ethernet ports checked to determine whether port security is functioning effectively.
What can be the approach or steps to do check Ethernet port ...
1
vote
0answers
83 views
Compute Engine (Google Cloud) is hacked through remote terminal with port 9090 [closed]
I'm using Compute Engine on GCP. I installed ubuntu + apache (including ModSecurity). We used third party to do penetration testing and they can successfully doing remote connection through port 9090 ...
0
votes
0answers
103 views
nmap gives different results in two shells on the same computer
I'm running kali and metasploitable2 in Virtualbox, and have them connected via the host-only networking mode. I can ping and ssh from kali to metasploitable, and have assigned the following IP ...
33
votes
1answer
8k views
I have found ports on my Samsung smart tv running a display service. What can I do with it? [closed]
I have a Samsung Smart TV running Tizen OS, and out of curiosity I scanned it with Nmap. I found multiple open ports. One of those ports is running a "display" service. Does this mean it can cast its ...
3
votes
1answer
66 views
Azure publicly exposed resources
Azure's resources are generally made publicly accessible when launched (from a network point-of-view). e.g. An Azure SQL database will be given a public DNS name and the port will be accessible from ...
2
votes
3answers
468 views
2 vs 3 tier network architecture
I am interested in how a 3-tier network topology (web/app/data) provides improved security than a 2-tier topology (web-app/data). I understand the concept of a DMZ as the initial contact point with ...
0
votes
1answer
83 views
Is there a software that would scan the ports automatically, then predict if there are any malicious activity going on, on my Win10 PC? [closed]
I've got this malware(or spyware as Kaspersky detected), from the USB storage device by purely a lack of focus. After scanning and defecting all the drives that are connected to my computer with ...
-1
votes
1answer
165 views
How to find out which application runs behind port 31337?
I found an open port on a "Kartina Quattro" (https://www.kartina.tv/article/247-kartina-quattro). It's a device for watching russian TV channels.
The port number is 31337 and the Service is called ...
3
votes
1answer
1k views
Ports Showing Closed/Filtered in Nmap Scans
hopefully this isn't a stupid question.. I am running some nmap scans and I get a list of ports that show closed. Why would they even show in the scan report? Can these be exploited further with other ...
1
vote
1answer
161 views
Detecting port scanning activity of a mobile app
I highly suspect that one of my iPhone apps is scanning for open ports on the local network, but can't think of a way to detect such activity.
I know that I can monitor http(s) connections by using ...
0
votes
2answers
540 views
Open ports on my NetGear router
I ran an nmap scan on my home router and I am seeing a ton of open ports. Is this normal? How do I go about closing them?
$ nmap 192.168.1.1
Starting Nmap 7.70 ( https://nmap.org ) at 2019-03-16 20:...
1
vote
0answers
28 views
Nmap showing different open ports every few seconds [duplicate]
I'm running Nmap on an Amazon Web Services EC2 instance but between runs just a couple seconds apart, I'm getting new results. Is this normal? I'm seeing open ports then they don't show.
I'm running ...
0
votes
2answers
651 views
Does having Frontend and Backend on the same port any consequences?
I am currently working on a mean application, with an Angular frontend and an express/node backend. Frontend and backend communicate together with a REST API.
When I deploy the application, both the ...
1
vote
1answer
144 views
Determine victim of port scan's OS
I am taking part in a practice sandbox, and have a pcap file in Wireshark: with the traffic depicting a Vertical Port Scan. Is there anyway to find out the "victim"'s Operating System? The packets are ...
1
vote
2answers
173 views
Do I lose the anonymity of a VPN if they open a port for me?
I currently use a VPN supplier that does not allow for opening ports. They argue that I lose the whole point of a VPN and the anonymity by doing this. I can't see how and they don't seem to be able to ...
-1
votes
1answer
599 views
0
votes
1answer
51 views
Finding how many filtered ports of a host that would be listed as “filtered” on Nmap
I just started working on nmap and was confused by this question. I'm unsure if I understood it correctly, so I appreciate your help with this.
Using Nmap, find how many ports are filtered in testphp....
1
vote
2answers
326 views
What ports are okay to be open on a macbook pro?
When I do a network scan for open ports on my MacBook Pro, I can see the following open TCP ports below. Are these 'standard' open port for a personal computer of this type? Should I be concerned? ...
4
votes
2answers
471 views
Is is bad practice to use non-standard ports? (for example ssh from 22 to something different)
Background is that I am learning some technical stuff with the Enki App. In this case about security. The App states that it is a misuse of a port if I change for example the ssh port from 22 to ...
3
votes
2answers
278 views
Should ports be visible to nmap?
I'm currently working on the firewall when I discovered that the firewall exposes a lot of ports outside of the internal network. I discovered this when setting up a new FTP server using a basic nmap ...
2
votes
1answer
297 views
Is it safe to have port 443 unprotected by firewall without application?
Say I have a website, http://www.mostlysecuresite.com, which runs on a server at my house. Let's say I wanted to get an SSL cert in a few weeks. Because of this, I had my Port 443 forwarded on my ...
46
votes
5answers
16k views
Should I close port 80 forever and ever since the 2018 Google-indicated web-security initiatives?
I often establish Ubuntu-LAMP environments on which I host a few Drupal web applications that I myself own (I don't provide any hosting services and never done so in the past).
Whenever I establish ...
1
vote
2answers
207 views
Port bound TLS certificates? (1 Self-signed & 1 CA)
For my android game, I want to secure the connection between the server and its clients through TLS certificates on each side, because of the sensitive data that is beeing exchanged through a token ...
1
vote
1answer
381 views
Understanding port scanning with firewall enabled
My objective is to do a port scanner in windows and find the ports which are open. Suppose, I run an application which opens up a port 8000. Now I create a new inbound rule to block all incoming ...
1
vote
2answers
584 views
Do I have to block UDP ports when I launch my own server with a public IP?
I am trying to give better security to my Raspberry sever. When I installed UFW, I allowed just port 80/tcp and my own high port for SSH communication, and by default are all others ports "deny".
...
1
vote
1answer
28 views
Why do processes on servers have socket types associated to the port number? [closed]
Why do some servers have TCP/UDP alongside the port they're listening to. To my understanding TCP and UDP are socket layers, they're methods of determining how the traffic is being sent over the ...
1
vote
1answer
446 views
NMAP reporting all ports open
I'm trying to scan my targets for open ports. However, NMAP reports all of them as 'open'. I know there's a firewall in between.
I tried the SYN scan, and when I check the traffic in WireShark I see ...
1
vote
3answers
385 views
Nmap scanning single port too fast? Shows as filtered?
I ran into an issue when trying to scan a single port on a single machine. I ran a range scan to find machines with port 25 open. Then I just arbitrarily chose one to work on. I scan that machine with ...
-1
votes
1answer
90 views
Port knocking is authentication?
In computer networking, port knocking is a method of externally
opening ports on a firewall by generating a connection attempt on a
set of prespecified closed ports. Once a correct sequence of
...
0
votes
1answer
54 views
What is an excessive amount of SYN requests for port scanning?
I have a slow internet connection - about 12Mb/s. In 10 minutes I have detected a distributed port scan on the router from different IPs. I have counted these SYN packets at in 600 seconds (10 minutes ...
