Questions tagged [ports]
In computer networking a port is a software construct serving as a communications endpoint in a computer's host OS.
412
questions
2
votes
1
answer
602
views
Is it safe to expose port 22 on a database VM? [closed]
I have seen many answers to this question in different scenarios but I am still unsure of the actual answer.
I have a VM in the cloud (Azure), which will be hosting my production database. Is it safe ...
- 123
2
votes
4
answers
1k
views
Is there a possible security advantage to using a non standard port for ssl/https?
There are documented (albeit debated) advantages to using a non standard port for SSH.
I also read in various places about using a non-standard port for https (e.g. 8443). Is there a possible ...
- 423
0
votes
2
answers
2k
views
Nmap scanning with and without proxychains has different behaviour
I'm doing a nmap scan to my own machine to my own machine. First of all I set the port 333 to listen with this command sudo nc -lvnp 333
On the other terminal I run sudo nmap -O -sV -p 0-65535 IP ...
- 103
1
vote
1
answer
2k
views
Why can I access the internet with all ports closed on firewall? [closed]
For the heck of it I wanted to see how much I could close down my router from the rest of the internet. I was hoping turning on the firewall, removing any port forwarding and turning off UPnP would ...
- 13
0
votes
0
answers
225
views
Very odd traffic - is it legit?
While troubleshooting an unrelated network problem, I noticed an interesting pattern on one of our networks for the last few days (at least). Before crying wolf, I wanted to see if somebody here may ...
- 1,037
0
votes
1
answer
138
views
Attacking through an open but not listened port [duplicate]
Let us say, we open a port, say port 123, so that upon listening, an application on the server can receive incoming packets through the port 123.
If there is no way that an inside application on the ...
- 103
2
votes
1
answer
24k
views
Microsoft DS vulnerability?
I heard that Microsoft DS is a port that is commonly used by hackers to hack computers due to its ability to transfer files.
How do they transfer files with Microsoft DS?
Do they need an exploit to ...
-1
votes
3
answers
19k
views
Is TCP Port 80 (HTTP) vulnerable?
I heard hackers' top ports to hack computers through are port 80 and port 443. How do they do this though aren't port 80 and port 443 just for HTTP requests such as GET, POST?
1
vote
2
answers
863
views
Will blocking outgoing traffic from port 80 and only allowing port 443 from my home network lead to more security?
Is blocking outgoing HTTP connections from a home network and only allowing HTTPS
connections reasonable? Will it reduce the chances of a man in the middle attack?
- 11
5
votes
1
answer
584
views
Is it security risk to host CS:GO server on my PC?
I have quite good hardware in my PC and an optic fiber connection. I opened a CS:GO (Counter Strike Global Offensive) server on it, and made it public. The IP for connecting to this server is my ...
- 51
0
votes
0
answers
172
views
Is it a Bad Idea™ to open all IPv6 ports for devices in an isolated guest network?
At home I have a dual-stack IPv4/IPv6 broadband connection, and I also have a wireless access point. The access point currently bridges all traffic into my LAN, which is not segmented in any way, so ...
- 1
0
votes
1
answer
90
views
Is my server safe from remote hackers if I only allow 1 port and 1 service behind it which only hashs incoming bytes stream & send the hash key back? [duplicate]
I have a python script ,which accepts an incoming connection, reads from the byte stream ,hash it (I'm pretty sure the hash function itself can't be exploited) ,sends the hash key back ,then closes ...
- 101
0
votes
2
answers
355
views
Is it safe to have an opened port on my PC with a proxy server listening?
I have a single port open for my own proxy server. All other ports are closed. Is it safe for my PC? Even if my port will keep getting bombed by hackers could my PC be exposed to them? There is no ...
- 17
3
votes
1
answer
17k
views
How to only display open ports
I'm very new to Nmap. I'm using Nmap to find open ports of an IP by this command:
nmap -v -Pn -p 1-100 "$ip" -oG -
Here is the output:
Host: IP
Ports:
6/closed/tcp/unknown
19/closed/tcp/chargen
20/...
- 143
0
votes
0
answers
35
views
How to secure an open port and public IP address when clients must connect to it [duplicate]
I do not have a lot of experience in networking, however, I have built a live-chat application using socket.io and nodeJS. In order to do this, I had to open a port to allow other networks to connect. ...
2
votes
2
answers
226
views
Risks of leaving my Redis port open and unsecure?
I left port 6005 open on a server of mine. Currently, if the server goes down, it won't be much of a loss. But my port 6005 is open for Redis queues and I don't necessarily want to have deal with it ...
- 199
3
votes
2
answers
3k
views
Why OpenVAS does not find all open ports compared to Nmap?
I recently launched a system discovery scan with OpenVAS to an IP from my net to compare its results to Nmap. As you can see in the image OpenVAS does not find all the ports Nmap does.
Both scans ...
1
vote
1
answer
6k
views
What ports should be closed in windows 10?
How can I close ports in windows 10 and what ports are unnecessary to be open? How do I find these open ports to close?
Also if I close a specific port on windows 10 do I have to close the outbound ...
- 43
0
votes
1
answer
157
views
What's the point of using a firewall to filter ports if they are closed by default? [duplicate]
I'm just learning most of this stuff so bare with me;
Using a firewall service such as iptables, is there a point in filtering/blocking a port that is not in use meaning it's closed by default?
1
vote
2
answers
859
views
Security of port forwarding when the target is turned off
I recently set up a server from an old computer case. I use docker to install and use different services on different ports and I would like to access some services from outside of my house.
I have a ...
0
votes
1
answer
233
views
pycharm opening ports [closed]
By running a simple port scan, I have noticed that pycharm is opening three ports on the machines it is installed on.
Pycharm is a great tool for developer, but it seems fairly awful to me on the ...
- 343
1
vote
1
answer
374
views
How to make VPS more secure with UFW?
I have 3 VPS based on Ubuntu 18.04 server OS and would like to open particular ports on each servers.
The ports, that I would like to open are:
Then let's take a look on the environment:
As you ...
- 113
0
votes
2
answers
760
views
Nessus detect more open ports than nmap
I scan my site via namp , I only see 3 ports open.
nmap -sV {ip}
Starting Nmap 7.80 ( https://nmap.org ) at 2020-01-25 09:42 EST ...
- 125
1
vote
0
answers
429
views
Is there an updated (non-Nmap) top 100 or top 1000 common ports list?
I know Nmap has nmap-services file which gives us the list of top 1000 ports/services found on the Internet. But this list seems to be outdated, as the Nmap top 1000 list doesn't include several ...
- 11
0
votes
0
answers
203
views
Open Ports at ISPs Gateway
I am working to set up OpenVPN access to my home network. To do this, I had to contact my ISP, because they had the necessary port blocked at the Gateway/Router that I do not have access to.
In my ...
- 1
1
vote
2
answers
233
views
Security of using DHCP and non-standard ports for medical devices
I recently came across this comment written in a journal article.
Lastly, medical apparatus are expected to use Dynamic Host Configuration Protocol (DHCP) for the allocation of their IP ...
- 989
3
votes
2
answers
4k
views
Is there practical risk to having UDP ports open?
I understand that everything is potentially an attack vector, but I would like to ask a practical question about UDP ports
Suppose you're pentesting some small organisation and you found a couple of ...
- 188
0
votes
1
answer
302
views
Why should I use firewall to block ports with no running services? [duplicate]
A firewall is for blocking / limiting access to specific service / port.
I know that it can be useful for allowing only certain IPs to a port (for example I don't want to have SSH open for the whole ...
- 389
1
vote
0
answers
94
views
WMI Performance Adapter function for Chrome browser?
Does someone know why the WMI Performance Adapter (WmiApSrv.exe) always starts when launching Chrome browser? Whats the function of this service?
I have heared this service can be maliciously used to ...
- 483
3
votes
1
answer
930
views
Nmap giving different result between Mac OS scan and Linux (Kali) scan [closed]
I try to do a simple TCP scan on an Kubunt VM (is on VirtualBox), from two different OS.
From the Host (Mac OS system) and from a Kali Linux VM (tried VirtualBox and Parallels also).
Kali Linux (...
- 31
1
vote
0
answers
4k
views
Nmap Shows all ports are closed [closed]
I am facing a problem with Nmap while scanning metasploitable.
I am using two different PCs. One with Kali Linux by using USB boot and on other PC using Metasploitable running on VMWare. I have ...
- 11
-4
votes
2
answers
621
views
How to Defend Against Port Scan Attacks
I was told that Hackers scan for open ports in random IPs and if they are open they hack the computer.
What open ports can be hacked? How do I close the ports?
1
vote
1
answer
487
views
Gradle daemon listens on all interfaces by default
Was messing around with a project today that uses the build tool Gradle and I noticed that by default, it's running a daemon server process that listens on all interfaces.
Output of ss below.
State ...
- 111
2
votes
1
answer
162
views
Can a VPN provider or actors within its infrastructure access open ports on the client machine?
From my understanding of a VPN, it essentially creates a network between the two 'machines'. So if I have open ports (e.g. HTTP, SSH) on my client machine, those can be accessed by the VPN provider or ...
- 129
3
votes
2
answers
1k
views
Does blocking all ports make a machine more secure?
I have a machine that I use only to browse the Internet. What if I blocked all ports on this machine (inbound and outbound) except for port 80 and port 443, and restricted these two ports to an ...
- 133
2
votes
1
answer
414
views
Access Control Lists - Why block a port rather than block a protocol?
I am studying for my Security + exam. I have just learned that ACLs can be designed to block ports and/or entire protocols. The book I am reading states an example:
"if you want to block HTTP traffic,...
- 61
0
votes
1
answer
2k
views
Disabled Network Discovery for port 5357 but it still shows up as open in NMap scan
as mentioned in the title I have disabled Network Discovery for all of the 3 profiles yet when I run an NMap scan, the port comes up to be open. I have also run the command netstat -a -b to find the ...
- 11
1
vote
0
answers
259
views
Inbound rules for a port is configured and disabled yet an NMap scan shows that the port is opened
I am new to Windows Defender but have read about it to understand the basics of Inbound/Outbound rules.
As mentioned on the app, Inbound connections that do not match a rule are simply blocked.
For ...
- 11
0
votes
1
answer
12k
views
My router is getting port scan attacks [duplicate]
My internet suddenly cut out yesterday, i checked the router and it looked like nothing is wrong. I looked at the logs and i see this
2019-08-18 12:50:39 Security Warning Detect UDP port scan ...
- 1
1
vote
1
answer
1k
views
Why is it okay to run NGiNX or Apache Web Server as root on port 80/443 and not your app directly?
Just like the title says, I would like to understand:
what are the implications of running a custom app (like node or flask) on port 80/443.
Is running a reverse proxy like Nginx mandatory from a ...
- 141
0
votes
1
answer
633
views
Visual Studio Code leaving port open
Running a port scan via Network Utility on OS X 10.14.5, turns up two different outcomes, depending on whether or not I have Visual Studio Code (1.35.1) open.
If the application is open, I'll get ...
0
votes
2
answers
978
views
How to perform a security test/review/penetration testing of Ethernet ports?
I have been engaged by a client who wants its Ethernet ports checked to determine whether port security is functioning effectively.
What can be the approach or steps to do check Ethernet port ...
- 455
1
vote
0
answers
141
views
Compute Engine (Google Cloud) is hacked through remote terminal with port 9090 [closed]
I'm using Compute Engine on GCP. I installed ubuntu + apache (including ModSecurity). We used third party to do penetration testing and they can successfully doing remote connection through port 9090 ...
- 121
34
votes
1
answer
18k
views
I have found ports on my Samsung smart tv running a display service. What can I do with it? [closed]
I have a Samsung Smart TV running Tizen OS, and out of curiosity I scanned it with Nmap. I found multiple open ports. One of those ports is running a "display" service. Does this mean it can cast its ...
user210165
3
votes
1
answer
372
views
Azure publicly exposed resources
Azure's resources are generally made publicly accessible when launched (from a network point-of-view). e.g. An Azure SQL database will be given a public DNS name and the port will be accessible from ...
- 53
2
votes
3
answers
3k
views
2 vs 3 tier network architecture
I am interested in how a 3-tier network topology (web/app/data) provides improved security than a 2-tier topology (web-app/data). I understand the concept of a DMZ as the initial contact point with ...
- 53
0
votes
1
answer
131
views
Is there a software that would scan the ports automatically, then predict if there are any malicious activity going on, on my Win10 PC? [closed]
I've got this malware(or spyware as Kaspersky detected), from the USB storage device by purely a lack of focus. After scanning and defecting all the drives that are connected to my computer with ...
-1
votes
1
answer
2k
views
How to find out which application runs behind port 31337?
I found an open port on a "Kartina Quattro" (https://www.kartina.tv/article/247-kartina-quattro). It's a device for watching russian TV channels.
The port number is 31337 and the Service is called ...
3
votes
1
answer
5k
views
Ports Showing Closed/Filtered in Nmap Scans
hopefully this isn't a stupid question.. I am running some nmap scans and I get a list of ports that show closed. Why would they even show in the scan report? Can these be exploited further with other ...
- 325
1
vote
1
answer
917
views
Detecting port scanning activity of a mobile app
I highly suspect that one of my iPhone apps is scanning for open ports on the local network, but can't think of a way to detect such activity.
I know that I can monitor http(s) connections by using ...
- 113