Security Incidents mailing list archives
Re: Strange set of TCP ports
From: Harlan Carvey <keydet89 () yahoo com>
Date: Mon, 19 Apr 2004 08:40:11 -0700 (PDT)
Run openports.exe from DiamondCS on the suspect boxen. If you don't have physical access, but do have admin access, use psexec.exe from SysInternals, as well. --- Raistlin <raistlin () gioco net> wrote:
Greetings, can someone help me in identifying the following strange subset of open TCP ports ? 3687/tcp open unknown 3688/tcp open unknown 3689/tcp open rendezvous 3690/tcp open unknown 3691/tcp open unknown Googling or looking at the usual known ports lists do not yield any results. I'd like to identify this beast if possible. Thanks in advance. Stefano
---------------------------------------------------------------------------
----------------------------------------------------------------------------
--------------------------------------------------------------------------- ----------------------------------------------------------------------------
Current thread:
- Strange set of TCP ports Raistlin (Apr 19)
- Re: Strange set of TCP ports Harlan Carvey (Apr 19)
- Re: Strange set of TCP ports mgotts (Apr 19)
- Re: Strange set of TCP ports Shashank Rai (Apr 20)
- Re: Strange set of TCP ports Josh Tolley (Apr 20)
- RE: Strange set of TCP ports Benjamin Tomhave (Apr 20)
- Re: Strange set of TCP ports Scott Weeks (Apr 21)
- Re: Strange set of TCP ports mgotts (Apr 19)
- Re: Strange set of TCP ports Jim Matthews (Apr 20)
- <Possible follow-ups>
- RE: Strange set of TCP ports Steven Trewick (Apr 19)
- RE: Strange set of TCP ports Schmehl, Paul L (Apr 19)
- RE: Strange set of TCP ports J Jason Bridge (Apr 19)
- RE: Strange set of TCP ports Romulo M. Cholewa (Apr 20)
(Thread continues...)
- Re: Strange set of TCP ports Harlan Carvey (Apr 19)