Questions tagged [ports]

In computer networking a port is a software construct serving as a communications endpoint in a computer's host OS.

Filter by
Sorted by
Tagged with
1
vote
0answers
38 views

Inbound rules for a port is configured and disabled yet an NMap scan shows that the port is opened

I am new to Windows Defender but have read about it to understand the basics of Inbound/Outbound rules. As mentioned on the app, Inbound connections that do not match a rule are simply blocked. For ...
0
votes
1answer
109 views

My router is getting port scan attacks

My internet suddenly cut out yesterday, i checked the router and it looked like nothing is wrong. I looked at the logs and i see this 2019-08-18 12:50:39 Security Warning Detect UDP port scan ...
0
votes
1answer
68 views

Visual Studio Code leaving port open

Running a port scan via Network Utility on OS X 10.14.5, turns up two different outcomes, depending on whether or not I have Visual Studio Code (1.35.1) open. If the application is open, I'll get ...
-1
votes
2answers
133 views

How to perform a security test/review/penetration testing of Ethernet ports?

I have been engaged by a client who wants its Ethernet ports checked to determine whether port security is functioning effectively. What can be the approach or steps to do check Ethernet port ...
0
votes
0answers
59 views

Port Forwarding Port 80 to PS4 - what about other devices on port 80 [migrated]

I would like to forward several ports, including port 80, to my husband's PS4 for gaming purposes. On our network I know that there are a few other devices using port 80, notably a nanny-cam. These ...
1
vote
1answer
126 views

Why is it okay to run NGiNX or Apache Web Server as root on port 80/443 and not your app directly?

Just like the title says, I would like to understand: what are the implications of running a custom app (like node or flask) on port 80/443. Is running a reverse proxy like Nginx mandatory from a ...
0
votes
2answers
333 views

Does having Frontend and Backend on the same port any consequences?

I am currently working on a mean application, with an Angular frontend and an express/node backend. Frontend and backend communicate together with a REST API. When I deploy the application, both the ...
1
vote
1answer
144 views

What ports are okay to be open on a macbook pro?

When I do a network scan for open ports on my MacBook Pro, I can see the following open TCP ports below. Are these 'standard' open port for a personal computer of this type? Should I be concerned? ...
25
votes
3answers
5k views

How wise is it to use a tool for portspoofing at your server to confuse attackers?

I came across this tool recently https://github.com/drk1wi/portspoof How efficient will it be to use it to confuse hackers doing port scanning? If it's actually going to be pretty efficient, why ...
3
votes
6answers
1k views

What are the best pratices to avoid my server being port scanned

The title probably says it all. I just wanna know what are the best technics to avoid having a port scanner detecting open ports on my server. I'm using a Linux distro as my OS (Ubuntu Server).
2
votes
1answer
2k views

Nmap scan of iPhone public IP address shows port 21 open

I'm using my iPhone personal hotspot to connect to the internet on my computer via usb connection. I don't go through any other router or connection. The phone is my only means of connecting my ...
1
vote
0answers
77 views

Compute Engine (Google Cloud) is hacked through remote terminal with port 9090 [closed]

I'm using Compute Engine on GCP. I installed ubuntu + apache (including ModSecurity). We used third party to do penetration testing and they can successfully doing remote connection through port 9090 ...
0
votes
0answers
49 views

nmap gives different results in two shells on the same computer

I'm running kali and metasploitable2 in Virtualbox, and have them connected via the host-only networking mode. I can ping and ssh from kali to metasploitable, and have assigned the following IP ...
34
votes
1answer
6k views

I have found ports on my Samsung smart tv running a display service. What can I do with it? [closed]

I have a Samsung Smart TV running Tizen OS, and out of curiosity I scanned it with Nmap. I found multiple open ports. One of those ports is running a "display" service. Does this mean it can cast its ...
2
votes
1answer
1k views

nmap not running as root shows unknown open ports for a fraction of a second

On a server running Ubuntu 14.04.2 I was doing some basic security auditing when I ran the command nmap -p -d 1-65535 as a non-root user. Interestingly it reported a few (1-5 at a time, average, ...
1
vote
0answers
35 views

Azure publicly exposed resources

Azure's resources are generally made publicly accessible when launched (from a network point-of-view). e.g. An Azure SQL database will be given a public DNS name and the port will be accessible from ...
0
votes
1answer
51 views

Finding how many filtered ports of a host that would be listed as “filtered” on Nmap

I just started working on nmap and was confused by this question. I'm unsure if I understood it correctly, so I appreciate your help with this. Using Nmap, find how many ports are filtered in testphp....
2
votes
3answers
153 views

2 vs 3 tier network architecture

I am interested in how a 3-tier network topology (web/app/data) provides improved security than a 2-tier topology (web-app/data). I understand the concept of a DMZ as the initial contact point with ...
8
votes
2answers
16k views

Is opening both TCP/UDP less secured than just TCP or UDP when needed and why?

If application needs opened port X UDP, or X TCP combination. Is there any potential risk by opening both UDP/TCP as I usually am not sure which one the application uses?
0
votes
1answer
77 views

Is there a software that would scan the ports automatically, then predict if there are any malicious activity going on, on my Win10 PC? [closed]

I've got this malware(or spyware as Kaspersky detected), from the USB storage device by purely a lack of focus. After scanning and defecting all the drives that are connected to my computer with ...
1
vote
1answer
696 views

What are the possible solution for blocking VPN connection on a home network?

I am not a techie. I am just wanting to force some parentral control using OPENDNS. Opendns works fine however it is easily broken on android or windows using vpn software like ultrasurf or latern or ...
-1
votes
1answer
107 views

How to find out which application runs behind port 31337?

I found an open port on a "Kartina Quattro" (https://www.kartina.tv/article/247-kartina-quattro). It's a device for watching russian TV channels. The port number is 31337 and the Service is called ...
3
votes
1answer
670 views

Ports Showing Closed/Filtered in Nmap Scans

hopefully this isn't a stupid question.. I am running some nmap scans and I get a list of ports that show closed. Why would they even show in the scan report? Can these be exploited further with other ...
0
votes
1answer
97 views

Detecting port scanning activity of a mobile app

I highly suspect that one of my iPhone apps is scanning for open ports on the local network, but can't think of a way to detect such activity. I know that I can monitor http(s) connections by using ...
6
votes
6answers
29k views

Exploiting through a filtered port

I'm doing some pentesting against a machine the lecturer set up in the lab. NMAP shows port 445 to be filtered and Nessus confirms the ms08_067 vulnerability is present on that machine. I tried ...
0
votes
2answers
213 views

Open ports on my NetGear router

I ran an nmap scan on my home router and I am seeing a ton of open ports. Is this normal? How do I go about closing them? $ nmap 192.168.1.1 Starting Nmap 7.70 ( https://nmap.org ) at 2019-03-16 20:...
1
vote
0answers
27 views

Nmap showing different open ports every few seconds [duplicate]

I'm running Nmap on an Amazon Web Services EC2 instance but between runs just a couple seconds apart, I'm getting new results. Is this normal? I'm seeing open ports then they don't show. I'm running ...
1
vote
2answers
9k views

Can a hacker hack into port 80?

We normally say port 80 is firewall friendly. But can a hacker just hack into port 80 via TCP or UDP? Or is Port 80 by default not always open? It waits for the host to initiate a connection via ...
1
vote
1answer
107 views

Determine victim of port scan's OS

I am taking part in a practice sandbox, and have a pcap file in Wireshark: with the traffic depicting a Vertical Port Scan. Is there anyway to find out the "victim"'s Operating System? The packets are ...
7
votes
1answer
4k views

What are non-standard ports and protocols [closed]

I am new to the security field and reading about how to check if an application is secure. One of the checks involves finding out if the app uses non-standard security ports and protocols. However, ...
5
votes
3answers
2k views

Why would a stealth scan attract more attention than a connect scan?

I'm reading an Information Security book and am faced with the question: Why may nmap stealth scans(SYN) attract more attention than simple connect scans(TCP connect())? Why might it be?
1
vote
2answers
167 views

Do I lose the anonymity of a VPN if they open a port for me?

I currently use a VPN supplier that does not allow for opening ports. They argue that I lose the whole point of a VPN and the anonymity by doing this. I can't see how and they don't seem to be able to ...
3
votes
3answers
7k views

Is QUIC (Quick UDP Internet Connections) safe to allow through firewall?

Our firewall currently blocks QUIC (UDP 443) traffic which seems to be enabled by default in Google Chrome. Is it safe to allow QUIC or should I wait until it is implemented in all the major browsers? ...
-1
votes
1answer
259 views

TCP Scans vs SYN Scans in port scanning

What is the difference between TCP Scans and SYN Scans?
4
votes
2answers
343 views

Is is bad practice to use non-standard ports? (for example ssh from 22 to something different)

Background is that I am learning some technical stuff with the Enki App. In this case about security. The App states that it is a misuse of a port if I change for example the ssh port from 22 to ...
1
vote
2answers
140 views

Should ports be visible to nmap?

I'm currently working on the firewall when I discovered that the firewall exposes a lot of ports outside of the internal network. I discovered this when setting up a new FTP server using a basic nmap ...
0
votes
2answers
765 views

can a backdoor executable be used on an occupied port?

Suppose I am doing a penetration test on a network that has a firewall that blocks all ports except 80, 110, and 443. I want to use a metasploit reverse-TCP backdoor executable written in msfpayload ...
4
votes
3answers
6k views

Setup of Kali Linux for reverse shell connections over the internet

I am running Kali Linux as a VM on my Windows machine which is NAT'd behind my company network, if I wish to pen test a website for a client and believe that a reverse shell is possible, what is a ...
1
vote
1answer
231 views

Understanding port scanning with firewall enabled

My objective is to do a port scanner in windows and find the ports which are open. Suppose, I run an application which opens up a port 8000. Now I create a new inbound rule to block all incoming ...
45
votes
5answers
14k views

Should I close port 80 forever and ever since the 2018 Google-indicated web-security initiatives?

I often establish Ubuntu-LAMP environments on which I host a few Drupal web applications that I myself own (I don't provide any hosting services and never done so in the past). Whenever I establish ...
1
vote
2answers
1k views

OSSEC, what is it telling me about port changes?

I've been diving into OSSEC for the last couple of months, but I feel unclear on one of it's alerts. I've provided the alert below. The main difference I see in previous output and current output is ...
1
vote
3answers
793 views

Spytechphone - iPhone

When port scanning my iPhone I get an RST, ACK from 'Spytechphone' over port 8192, does anyone know what this port does? I can't find any useful information. [1] http://www.iana.org/assignments/...
2
votes
1answer
108 views

Is it safe to have port 443 unprotected by firewall without application?

Say I have a website, http://www.mostlysecuresite.com, which runs on a server at my house. Let's say I wanted to get an SSL cert in a few weeks. Because of this, I had my Port 443 forwarded on my ...
1
vote
2answers
117 views

Port bound TLS certificates? (1 Self-signed & 1 CA)

For my android game, I want to secure the connection between the server and its clients through TLS certificates on each side, because of the sensitive data that is beeing exchanged through a token ...
1
vote
2answers
462 views

Do I have to block UDP ports when I launch my own server with a public IP?

I am trying to give better security to my Raspberry sever. When I installed UFW, I allowed just port 80/tcp and my own high port for SSH communication, and by default are all others ports "deny". ...
20
votes
6answers
32k views

Why do hackers scan for open ports?

So, whenever you hear of the mean little hackers who hack websites you hear of "port scanning". I understand what it is (looking for all open ports / services on a remote machine), however that begs ...
1
vote
1answer
28 views

Why do processes on servers have socket types associated to the port number? [closed]

Why do some servers have TCP/UDP alongside the port they're listening to. To my understanding TCP and UDP are socket layers, they're methods of determining how the traffic is being sent over the ...
0
votes
1answer
1k views

Strange devices & open ports on my network

I have performed several Nmap scans on my network to determine what devices are connected and which ports are open. To my surprise I found a very strange device connected(which I do not know ...
1
vote
3answers
10k views

What can I do about being heavily port scanned?

I have two devices connected wirelessly to my Linksys router while running Symantec Endpoint Protection on my computer. A few days ago I started using the internet by connecting the cable directly to ...
0
votes
3answers
3k views

Port sweep vs port scan

I was asked this question in an interview: "What is a port sweep?" When I replied with port scan he said that my answer was not a scan, it was a port sweep. I googled and found "tcp sweep: but not "...