In computer networking a port is a software construct serving as a communications endpoint in a computer's host OS.

learn more… | top users | synonyms

1
vote
1answer
35 views

Samba open ports, not being filtered

nmap scan of my ubuntu computer, output when ran with -sV: 139/tcp open netbios-ssn Samba smbd 3.X (workgroup: MEDIAPC) 445/tcp open netbios-ssn Samba smbd 3.X (workgroup: ...
0
votes
2answers
126 views

What can I do about being heavily port scanned?

I have two devices connected wirelessly to my Linksys router while running Symantec Endpoint Protection on my computer. A few days ago I started using the internet by connecting the cable directly to ...
1
vote
2answers
35 views

What is this weird localhost IP traffic on multiple ports in the 5400-5600 range?

I am encountering an issue I recently have seen in my Fedora 23 machine (latest updates). I am getting about 130 IP packets passed back and forth over the lo interface in one go, every 1 second (like ...
1
vote
0answers
11 views

Why is the maximum port range 65535 in the TCP/IP Suite ? [migrated]

My doubt is that - a port is just logical, so why such restriction ? Why can't I have a port of 9924593 or something like that ?
0
votes
1answer
62 views

Strange behavior of Nmap

I do port scanning with Nmap when HotSpot Shield VPN is running; and I am receiving strange result - when HotSpot Shield is running, Nmap tells me that all of the ports are open and when HotSpot is ...
11
votes
5answers
3k views

Why do hackers scan for open ports?

So, whenever you hear of the mean little hackers who hack websites you hear of "port scanning". I understand what it is (looking for all open ports / services on a remote machine), however that begs ...
0
votes
3answers
124 views

Why is UDP port scanning slower than TCP port scanning?

I can't seem to find an answer for this. Any suggestions?
1
vote
0answers
39 views

Port scanning on server

My use case is to check open ports on multiple servers, so when I try: nmap -iL list.txt then nmap only scans for some particular ports whether they are open or closed, but when I try: namp -p ...
0
votes
2answers
51 views

Windows 10: telnet - Openwall GNU/*/Linux telnetd running on an open port normal?

I noticed my internet connection was acting a little strange (stuttering up abruptly seemingly randomly), so I thought I'd see what's using it using Zenmap. I ran "Intense scan" using the latest ...
1
vote
1answer
32 views

Multiple users sharing the same IP

I'm setting up a quite unusual proxy for a very specific niche case. I'm allocating (ip,port) addresses to users, from which they can send and receive UDP and TCP packets. e.g. say someone is ...
2
votes
2answers
35 views

Why do ALGs restrict traffic on a given TCP port based on the protocol?

My understanding is that application level gateways restrict the traffic they proxy based on port and protocol - say HTTP over port 80 or MQTT over port 1883. Both types of traffic are using TCP as ...
1
vote
2answers
63 views

Nmap scan report with all port status

Is there a way to ask nmap to print the final scan report with the state of all ports tested and the reason? For example when the scan is launched with --reason : Nmap scan report for 127.0.0.1 ...
3
votes
2answers
52 views

All ports are unfiltered

I'm currently studying a peneteration/hacking course. I am trying to use nmap against a target to find all the ports that are filtered. I thought if I used an ACK-scan nmap would give me all the ...
2
votes
1answer
49 views

How to perform an idle scan against a target using Nmap with a list of zombies? [closed]

I want to perform port scan against a target but the firewall at the target only allows traffic to the ports through certain IP address/machines. I tried to perform an idle scan in Nmap but it only ...
0
votes
2answers
116 views

How to scan for ports opened by TCP/UDP sockets with nmap or any other tool?

I'm new to nmap and I've been digging with it lately to scan some devices on the current LAN for ports opened by socket programs which are running. First I ran a simple UDP server on my machine on ...
-1
votes
2answers
88 views

Determining Firewall settings (Ports, etc) for specific applications

How can we identify the network or network firewall requirements for a Desktop or Web application. Meaning what ports are required by the applications. How the Cloud and non Cloud networks communicate ...
27
votes
4answers
4k views

How do you deal with massive port scans?

This morning I was looking through firewall logs and saw there were about 500 packets marked as port scan. The scanning range was from 1000-1200 5000-5200. The IP address is 85.25.217.47 which seems ...
-2
votes
4answers
82 views

Running SSH on a different port vs adding the port number to a password

So, a pretty typical piece of advice is to run SSH on a high port number, thus decreasing the chances of it being attacked. The thing I have always wondered about though is that it seems more secure ...
7
votes
3answers
148 views

Risk of running services on ports >1024

In a Reddit thread on securing SSH access to a Raspberry Pi, one commenter recommended running SSH on a non-standard port of 8123. Another commenter had this to say on the matter: Don't change ...
0
votes
1answer
68 views

Open ports on router

I have a TP-Link TD W8970 modem/router. Just for fun i tried to perform a port scan on it. I found this: $ nmap -p 1-65535 -n 192.168.1.1 Starting Nmap 6.00 ( http://nmap.org ) at 2016-01-21 16:17 ...
1
vote
2answers
137 views

DDoS Mitigation - Whitelist or Blacklist Incoming SOURCE Ports?

For a network offering webservices, I have had recommendations to blacklist a couple of common incoming DESTINATION ports, such as UDP 53, to combat the increasing load from DDoS. I'm wondering if it ...
1
vote
2answers
82 views

Why does nmap remotely show when I have port 6969 open, but not others?

Specifically, I was running a node.js application on port 6969 which I thought was strictly local. I discovered this was not the case when I ran nmap <myip> from a different computer and found ...
5
votes
1answer
48 views

Safely Experimenting With Sockets

I'm learning about TCP/IP and (Berkeley/UNIX) socket programming. Let's say I have two scenarios: 1) I write two programs in C, a client and a server, and bind them each to a non-well-known port on ...
6
votes
1answer
94 views

Exploring unknown service

I'm fairly new to network stuff and currently exploring a Wi-Fi radio device in my home network. In this process I noticed an open port. 58028/tcp open unknown 1 service unrecognized despite ...
-3
votes
1answer
43 views

Little bit confusing with nmap scan

I started MySQL with this command service mysql start and it worked pretty well. So: Using the netstat command, I found 127.0.0.1:3306 was in listening state, this is the MySQL service. So I did a ...
0
votes
2answers
48 views

How do I scan my Routers Ports? [duplicate]

I recently scanned ports from within my LAN, but I recently read in order to determine whether Ports are open to the WAN I need to scan from outside the LAN, how do I do this?
0
votes
1answer
40 views

Resuming an interrupted nmap scan:

I need to: --resume <filename>: Resume an aborted interrupted scan. But I didn’t: -oN/-oX/-oS/-oG <file>: Output scan in normal, XML, s|<rIpt kIddi3, ...
2
votes
1answer
66 views

Static MAC address on Switches and routers

I was having a discussion with a friend of mine in IS industry and he insisted that setting static MAC addresses (i.e. port security) on devices were a effective way to block MAC spoofing. I found ...
-1
votes
2answers
157 views

How to limit source port for accessing blocked website?

My country has a firewall which blocks sites like Facebook, whatsApp etc. However, they use some kind of port blocking, so some important websites for me like Chegg is also getting blocked I think due ...
1
vote
1answer
93 views

FIN Scan: sneak through certain non-stateful firewalls?

Many resources stated that FIN scan can bypass non-stateful firewall: In Nmap document: The key advantage to these scan types is that they can sneak through certain non-stateful firewalls and ...
0
votes
1answer
115 views

What attacks or exploits are possible when MAC address, IP, and Port of a WiFi access point are known? [closed]

I just accepted a position at a small firm and was testing the previous WiFi setup for flaws and exploits that were possible. We have two AP's for business and guest connections, everything checks out ...
1
vote
2answers
55 views

nmap output to file different than interactive output?

I am running a simple SYN scan of all ports on all hosts that I found on a previous ping scan saved to a file: targets like this: nmap -sS -p- -v -T5 -oN puzzling.txt -iL targets As the scan runs ...
-1
votes
1answer
128 views

Unable to open port on Windows 7 [closed]

The scenario is as follows: while a PC was connected to our company's network, a specific application was able to open another process on a predefined port. It worked as expected. But now, this PC ...
3
votes
1answer
150 views

Common attacks when no ports are open

If you have a web server with all ports closed (except, of course, the necessary HTTP) what kind of attacks can an attacker use to hack into the system? Are the only vulnerabilities stuff like ...
2
votes
2answers
421 views

Telnet port open on my router public IPv6 address

Recently I upgraded my home router into this one. It is a cheap one, but it has features I needed: IPv6 support and Gigabit Ethernet. So I decided to give IPv6 a try. I configured a Hurricane ...
2
votes
1answer
83 views

Opening remote MySQL database to office IP address at default MySQL port risks?

I read a few questions regarding this topic that were pretty informative, but still wanted to pose my particular case. My company wants to put our data in the MySQL tables we have through our web ...
3
votes
1answer
201 views

Can the windows Remote Procedure Call subsystem be modified from the default without causing Windows 8/8.1/10 to break?

This is a question that personally as a security professional has bugged me for a long time. So, a default Windows installation, from XP up to 10, typically has a few services listening on the ...
1
vote
3answers
172 views

Does NAT really provide security? [duplicate]

I had an argument with someone on IRC about Network Address Translation. I was under the impression that NAT provided a layer of security to internal networks. I understand that's not the primary ...
-1
votes
2answers
476 views

Does having these ports open indicate any vulnerabilities?

I installed Ubuntu Gnome a couple of weeks ago along with a few packages and some software. When I scanned my localhost using Nmap, I got the following results. Are there any obvious vulnerabilities, ...
1
vote
1answer
62 views

Security concerns with opening ports [duplicate]

New to network security here. Is exploiting known/zero day vulnerabilities on "listening" services after scanning for open ports the only way or at least the most common way to compromise a system? ...
3
votes
2answers
699 views

Scanning multiple subnets with nmap to determine open services & ports

First off, I know nmap's documentation is very powerful and I have been reading through it rather extensively. I will be scanning externally, with permission, to determine ports & services that ...
0
votes
2answers
88 views

Client misunderstanding nmap [closed]

My client wants their public facing IP addresses to be secure, but thinks that running nmap port scans will draw attention from hackers. To settle this once and for all, what do you say?
0
votes
0answers
26 views

Firewall issues

Background I have an Android device (Minix M5) that I handed to a customer The device only does outbound connections, so no inbound traffic The customer confirmed that s/he opened up the ports ...
2
votes
1answer
110 views

explanation of an nmap behaviour

I'm testing some vulnerabilities on a machine which has the port 22333 opened (it's used as the ssh port, and I can connect to it without any problem and the telned command get connected): $ telnet ...
-5
votes
1answer
93 views

how can the hacker benefit from the information of checking tcp port or udp port? [closed]

I studying a scanning and I want to ask how can the hacker benefit from the information of checking tcp port or udp port?
1
vote
1answer
62 views

Port forwarding with VPN

EDIT: My VPN has port forwarded a 5-digit tcp/udp port for me. What kind of attacks am I opening the computer to with VPN port forwarding?
-4
votes
2answers
2k views

What's the risk of opening ports 1-65535? [closed]

Just going to say this right now; this seems absolutely ludicrous. I've had a problem with playing Super Smash Bros. on Wii U ("Cannot connect to partner's device."; also happens for all ...
0
votes
1answer
324 views

Why is Parallels Plesk running on port 8443 > 1023?

Parallels Plesk, a server administration software package, uses HTTP(S) on port 8443 (ref). I know that ports <1024 are only available for root. This means that if the server Plesk is using for ...
1
vote
2answers
289 views

How do I check for inside-out open port? [closed]

I'm inside a corporate network and I want to assess which ports are open for outbound connection. There are such tools that do this test? I remember that years ago I used a website which performed ...
0
votes
1answer
305 views

Source port and destination port [closed]

Just fiddling with wireshark and telegram as part of some learning exercise on security. I realised that the source port for the telegram app is 58939 and the destination port would be 443. Why is ...