ports listening.

Hi all, i was messing about with netstat, i typed in "netstat -an" to see if any ports where listening. 6 tcp ports were listening- 135
445
1025
1029
1139
11943

is it possible that some of these can be trojan horses waiting for their master or is it just normal? I cant tell, i have tried looking for some where that will tell you what trojans run on certain ports but to no avail. i would be grateful if some one could post a url that contains
what trojans run on which ports.

thanks in advance for people help

alex

Some information !

Quote:

---

Source: http://www.snort.org/ports.html

135 (tcp) = epmap (DCE endpoint resolution)
135 (tcp) = loc-srv (NCS local location broker)
135 (udp) = epmap (DCE endpoint resolution)
135 (udp) = loc-srv (Location Service)
445 (tcp) = microsoft-ds
445 (udp) = microsoft-ds
1025 (tcp) = blackjack (network blackjack)
1025 (tcp) = listen listener (RFS remote_file_sharing)
1025 (udp) = blackjack (network blackjack)
1029 (tcp) = InCommand (trojan, InCommand)
1029 (tcp) = ICQNuke98 (trojan, ICQ Nuke 98)
1139 = ???
11943 = ???

---

I advice you to do a Trojan scan..

Some Trojan Hunters:

The Cleaner - http://www.moosoft.com
Tauscan - http://www.agnitum.com

Some port list's:

http://www.doshelp.com/trojanports.htm
http://www.portsdb.org/


And do install a firewall if you not have that already :).

~micael

Quote:

---

445
In Windows 2000, Microsoft has created a new transport for SMB over TCP and UDP on port 445. This replaces the older implementation that was over ports 137, 138, 139

---

Quote:

---

1025
This is the first dynamically assigned port. Therefore, virtually any program that requests a port can be assigned one at this address.

---

I'm pretty sure you can do the rest of them yourselve :/

Iana
Neohapsis
Iss
Robin Keir

thanks for the help people!