Security Basics mailing list archives

Re: kjtsiteserver


From: Jan Lieven <secws.phara0h () googlemail com>
Date: Wed, 3 Dec 2008 15:10:28 +0100

I guess its a FTPd because of the name (kjt-site-server) and the unusual port.
I might be wrong, but you should check your logs and/or monitor traffic on the 
given port.
If the affected box runs a Unix/Linux it might be a good idea to check if the 
inetd or xinetd service is running.

Jan Lieven

Am Dienstag, 2. Dezember 2008 18:39:32 schrieb Greg Jones:
Does anyone know what this service (kjtsiteserver) actually does?  It
uses port 1339, but I've been searching for an article that describes
what it is exactly and what program or service uses it.

Thank you in advance!

Sincerely,

Greg Jones



This e-mail and any documents transmitted with it are the property of
SOUTHBank F.S.B. ? and/or its subsidiary or affiliate companies, is
confidential, and intended solely for the use of the individual or entity
the e-mail is addressed to.  If you have reason to believe that you have
received this message in error, please notify the sender and delete this
message immediately from your computer.  Any other use, retention,
dissemination, forwarding, printing, or copying of this e-mail or
attachments is strictly prohibited.

SOUTHBank, F.S.B. and/or its subsidiary or affiliate companies do not
endorse the use of unsolicited e-mail.  If you believe this e-mail was sent
to you in error or you do not wish to receive these types of e-mail, please
notify us by forwarding this message to remove () southbank com.

Attachment: signature.asc
Description: This is a digitally signed message part.


Current thread: