Questions tagged [ports]

In computer networking a port is a software construct serving as a communications endpoint in a computer's host OS.

Filter by
Sorted by
Tagged with
1
vote
2answers
726 views

Port forwarding and port blocking security concerns

I am highly concerned about RDP security and about multiple occasions of ransomware infections through RDP, so now I am inspecting possibilities for self-defense against these threats. What interests ...
1
vote
1answer
104 views

About slowloris dos attack in skype

So I scanned my home pc for fun with nmap "vuln" script and it said something about the slowloris vulerability at port 443 . So I started up slowloris.pl and it really worked . After that I wondered ...
1
vote
1answer
2k views

Can't force HTTPS when connecting to proxy server, even though port 443 is open

I've been trying to use HTTPS whenever I do sensitive web browsing through a proxy server. Ideally I use a combination of HTTPS, an anonymous or elite proxy, and DuckDuckGo for all my web searches. ...
1
vote
1answer
2k views

Detecting Router (NAT) via port scan

I am developing a simple port scanner using Python, Scapy, nmap module. I want to detect if the host which I apply the port scan is a router or not. How can I identify or guess if the host is a router?...
1
vote
2answers
352 views

Determining source port

Working on a project where I have to determine the source TCP port used for an executable program (Meaning, when the program is running, what TCP port would it use to connect to the remote location). ...
1
vote
3answers
11k views

What can I do about being heavily port scanned?

I have two devices connected wirelessly to my Linksys router while running Symantec Endpoint Protection on my computer. A few days ago I started using the internet by connecting the cable directly to ...
1
vote
1answer
717 views

FIN Scan: sneak through certain non-stateful firewalls?

Many resources stated that FIN scan can bypass non-stateful firewall: In Nmap document: The key advantage to these scan types is that they can sneak through certain non-stateful firewalls and ...
1
vote
1answer
152 views

Security concerns with opening ports [duplicate]

New to network security here. Is exploiting known/zero day vulnerabilities on "listening" services after scanning for open ports the only way or at least the most common way to compromise a system? ...
1
vote
1answer
1k views

Firewall and Torrent

I use my university internet network and all incoming connection is blocked on every port.(they use netasq firewall) They have no other restrictions which stops me from using a torrent client. Using ...
1
vote
1answer
7k views

Nmap port scan and FTP bounce

Suppose that there is a network of machines, and there is a server with ftp server that allows ftp bounce. I do a nmap scan on the network nmap -sC -some other parameters network address. Does nmap ...
1
vote
1answer
886 views

What security concerns exist in running a glassfish app directly on port 443

I have installed Apache http server in front of glassfish based on recommendations i had in this question. I have been told that i will run into performance problems along with security issues. I was ...
1
vote
0answers
61 views

Is there an updated (non-Nmap) top 100 or top 1000 common ports list?

I know Nmap has nmap-services file which gives us the list of top 1000 ports/services found on the Internet. But this list seems to be outdated, as the Nmap top 1000 list doesn't include several ...
1
vote
0answers
23 views

WMI Performance Adapter function for Chrome browser?

Does someone know why the WMI Performance Adapter (WmiApSrv.exe) always starts when launching Chrome browser? Whats the function of this service? I have heared this service can be maliciously used to ...
1
vote
0answers
140 views

Nmap Shows all ports are closed [closed]

I am facing a problem with Nmap while scanning metasploitable. I am using two different PCs. One with Kali Linux by using USB boot and on other PC using Metasploitable running on VMWare. I have ...
1
vote
0answers
54 views

Inbound rules for a port is configured and disabled yet an NMap scan shows that the port is opened

I am new to Windows Defender but have read about it to understand the basics of Inbound/Outbound rules. As mentioned on the app, Inbound connections that do not match a rule are simply blocked. For ...
1
vote
0answers
83 views

Compute Engine (Google Cloud) is hacked through remote terminal with port 9090 [closed]

I'm using Compute Engine on GCP. I installed ubuntu + apache (including ModSecurity). We used third party to do penetration testing and they can successfully doing remote connection through port 9090 ...
1
vote
0answers
28 views

Nmap showing different open ports every few seconds [duplicate]

I'm running Nmap on an Amazon Web Services EC2 instance but between runs just a couple seconds apart, I'm getting new results. Is this normal? I'm seeing open ports then they don't show. I'm running ...
1
vote
2answers
208 views

Port bound TLS certificates? (1 Self-signed & 1 CA)

For my android game, I want to secure the connection between the server and its clients through TLS certificates on each side, because of the sensitive data that is beeing exchanged through a token ...
1
vote
0answers
60 views

Machine reaching out to Microsoft IP address using NBTstat command

I have limited logs for this event but the IPS says its a NBTstat query outbound over UDP port 137 to a Microsoft owned IP address. Should UDP 137 ever reach out externally? This is about all the ...
1
vote
1answer
2k views

Port scans: 'traffic denied' VS 'close - age out'

I have been investigating logs from the firewall (Juniper) and I've found out that when someone is portscanning my website, the majority of the traffic through different tcp/udp ports is denied (...
1
vote
0answers
326 views

Nethogs showing several IP addresses and ports - Port sniffing?

I have a small Ubuntu server (VPS from provider with control panel) machine for practice purposes - no production or critical stuff. I've set up ufw and nginx with a sample index.html page. I control ...
1
vote
0answers
194 views

zenmap scan explanation for open port & services

I recently scanned my router domain and get this result: What I get from that report is 3 of 1000 my ports are open. But what to do with "telnet" and "BusyBox telnetd" also "ISC BIND Hostmaster"? ...
1
vote
0answers
153 views

Are ephemeral ports random by default in Windows?

I'm analyzing a malware and I've noticed that it is doing some form of ephemeral port exhaustion. My question: Is it normal for ephemeral ports in a Windows system to be selected in series (i.e. ...
1
vote
0answers
1k views

How do I access my webservice on port 443 using https? [closed]

I am trying to run a webservice via https on port 443 via self-signed certificate. Here is what I did first: Forwarded port 8080 Create self-signed certificate with openssl Add certificate to trusted ...
1
vote
0answers
669 views

Open Ports (WAN side) on Netgear R7000 Router using nmap

An nmap scan (WAN side) on my Netgear R7000 router indicates that there are two ports open: 80/tcp (http) and 1720/tcp (h323q931). My method to perform a WAN side scan on the router is to access the ...
1
vote
1answer
38 views

Communication between infected machines via listening to certain port

Are there any detailed case-studies in which infected machines in a certain network or on the internet were communication with each other (I'm not interested in cases with only machine <-> C&C ...
1
vote
0answers
402 views

Port scanning on server

My use case is to check open ports on multiple servers, so when I try: nmap -iL list.txt then nmap only scans for some particular ports whether they are open or closed, but when I try: namp -p 1-...
1
vote
2answers
479 views

DDoS Mitigation - Whitelist or Blacklist Incoming SOURCE Ports?

For a network offering webservices, I have had recommendations to blacklist a couple of common incoming DESTINATION ports, such as UDP 53, to combat the increasing load from DDoS. I'm wondering if it ...
1
vote
2answers
301 views

Mitigating DDoS With Command of Ports

Is there any type of DDoS where closing or taking full control of all port capabilities would be useful in mitigation of an attack?
1
vote
1answer
2k views

How to check whether firewall allows traffic on specific port but not listening on the port [closed]

I have client / server and there is a firewall between them.The server is listening on a port and I want to check if this port is allowed by the firewall. I can only know the ports that the machine ...
1
vote
3answers
385 views

Nmap scanning single port too fast? Shows as filtered?

I ran into an issue when trying to scan a single port on a single machine. I ran a range scan to find machines with port 25 open. Then I just arbitrarily chose one to work on. I scan that machine with ...
1
vote
2answers
483 views

My ISP blocks incoming ports so I can't even run webserver let alone 'reverse shell', any ideas? [closed]

I'm looking for ideas on how to run lab environment from "victim" test PC at work and "attacker" - my home PC. Both are on separate ISPs, but it seems that my ISP at home blocks anyone trying to ...
0
votes
4answers
378 views

What configuration will allow another computer in the internet to probe my computer's ports?

I've just tested my computer with Gibson's port scan test: The test results stated that my system is "uncommon". It also said that my computer deliberately chose not to return. But I did not do any ...
0
votes
3answers
740 views

Is it possible to “close” a port by dos'ing it?

If I see port 25 is open, but I dont have access to the program running the smtp server, could It be flooded with enough information to make it unusable (but not affect any other services)?
0
votes
2answers
790 views

Multiple Open ports on a server, is that safe? [closed]

Using nmap I try to scan a server as a result I get multiple open ports. For example when I try to scan domain.com as a result: 7/tcp open echo 9/tcp open discard 13/tcp open daytime 21/tcp filtered ...
0
votes
4answers
755 views

Running SSH on a different port vs adding the port number to a password

So, a pretty typical piece of advice is to run SSH on a high port number, thus decreasing the chances of it being attacked. The thing I have always wondered about though is that it seems more secure ...
0
votes
2answers
3k views

Which all ports are in danger and needs to be closed with immediate attention?

This is the nmap scan results on my server (used for email and web serving) from a remote scan. Which all ports are in danger and why? PORT STATE SERVICE 21/tcp open ftp 25/tcp open ...
0
votes
2answers
100 views

Compromised server name and port number of a SQL Server DB Server

I would like to get an expert opinion on how dangerous is it to have the database server name and SQL server instance and port number compromised by accidentally exposing it in source code snippet ...
0
votes
2answers
99 views

Client misunderstanding nmap [closed]

My client wants their public facing IP addresses to be secure, but thinks that running nmap port scans will draw attention from hackers. To settle this once and for all, what do you say?
0
votes
3answers
244 views

Can an attacker with MitM privileges perform denial of service and other attacks besides interception on local LAN?

I would like to better understand what an attacker who has MitM control on a LAN can do to the victim. I understand that basically a MitM attack means you intercept traffic and can see the data [and ...
0
votes
2answers
1k views

Bitdefender detected over a hundred port scans and still detects, what does that mean and what should I do?

I have Bitdefender Total Security 2017 installed on my computer and today especially in the last 10 minutes I got over a hundred port scans (detected and blocked) which is weird cause I usually get ...
0
votes
2answers
1k views

Are these Ports safe to have open?

I have a netgear router I recently hooked up to my other router provided by Xfinity(It sucks ass*). And I mostly use this router for my PS4 and Raspberry Pi because it just has a better wifi signal ...
0
votes
2answers
9k views

Does having these ports open indicate any vulnerabilities?

I installed Ubuntu Gnome a couple of weeks ago along with a few packages and some software. When I scanned my localhost using Nmap, I got the following results. Are there any obvious vulnerabilities, ...
0
votes
1answer
540 views

Why adclick.g.doubleclick.net listens on all ports [closed]

I have adclick.g.doubleclick.net listening on all ports. When I launch an application like Starcraft 2, for example, it is listening on localhost. Or for some applications, there was a connection from ...
0
votes
3answers
4k views

Port sweep vs port scan

I was asked this question in an interview: "What is a port sweep?" When I replied with port scan he said that my answer was not a scan, it was a port sweep. I googled and found "tcp sweep: but not "...
0
votes
1answer
917 views

What would cause a port scan to an email server in an office?

I supply email accounts to customers. Occasionally some customers are blocked by our firewall (CSF) if they get the usernames or password wrong. But sometimes they get blocked because their IP address ...
0
votes
1answer
202 views

Is there a way of determining if tor is running on a remote machine?

In most of the companies, IT guys block some sites and by using TOR or other VPNs people walk around these blocks and gain access to blocked content. My question is, assuming TOR is running on ...
0
votes
2answers
372 views

Unexplained downloading

I was just watching as my bandwidth monitor spiked downloading a file. I checked my current netstat and I didn't recognize one of the IPs so I started capturing the data with Wireshark. The situation:...
0
votes
2answers
64 views

Nessus detect more open ports than nmap

I scan my site via namp , I only see 3 ports open. nmap -sV {ip} Starting Nmap 7.80 ( https://nmap.org ) at 2020-01-25 09:42 EST ...
0
votes
3answers
310 views

Using Nmap kicks me out my own network

I am working on a school task, where I have to use Nmap in order to scan for open port on another device on the same network. However, when I use Nmap my network suddenly gets limited. I have tried ...