port scan results
Results 1 to 7 of 7

Thread: port scan results

  1. #1
    Junior Member
    Join Date
    Oct 2001
    Posts
    7

    Thumbs up port scan results

    I am new to port scanning and all those types of things and I trying to learn as much as I can about internet and network security, I have a copy of XP that I got yesterday and have done some port scans on it to test the build in fire wall and it shows open ports, how can I found out what these ports are:

    135 DCE endpoint resolution
    1025 Network Blackjack
    5000 ?

    I dont know what these results mean, any help would be great.
    Share on Google+

  2. #2
    Senior Member
    Join Date
    Oct 2001
    Posts
    752
    It means Windows XPs firewall is terrible and you should go back to whatever OS you were using before.
    Share on Google+

  3. #3
    Junior Member
    Join Date
    Sep 2001
    Posts
    1

    Post

    For a list of ports goto :

    www.iana.org/assignments/port-numbers

    You can then refer to RFC's for info about ports, protocols etc:

    www.rfc-editor.org
    Share on Google+

  4. #4
    Senior Member
    Join Date
    Oct 2001
    Posts
    175

    Just a Hypothesis

    hornet

    I have a hypothesis as to why those ports are open...I've read about the new feature in Windows XP that allows individuals the ability to get help by remote access. I wouldn't be surprised if those ports correspond to those used by the remote help option.

    I haven't been able to find any articles or document that list the ports used by the remote access help. though

    <------------------------------------------------------------->

    If your curious what those ports could be being used for, I can give a brief explanation for each.

    DCE endpoint resolution (135) - From what I understand Distributed Computing Environment (DCE) provides sharing capabitlies between different hardware and software platforms. It provides services such as File Sharing, etc.
    You can go here to learn more about DCE:
    http://www.transarc.ibm.com/Library/..._dce_main.html

    Port 1025 - This port has been know to be used by the Trojans Fraggle Rock and Remote Storm
    You can go here for more information on those:
    http://www.simovits.com/sve/nyhetsar...heter9902.html

    Port 5000 - When I researched this port in the port database it returned the following Trojans that use port 5000:
    Bubbel
    Back Door Setup
    Sockets de Troie
    Blazer5

    Again...I'm not sure how much this has helped..but if you do find out the uses for the ports, and it is in regards to XP..let us know
    Simon Templer

    \"Your work is to discover your world and then with all your heart give yourself to it. \"
    -The Buddha
    Share on Google+

  5. #5
    Senior Member
    Join Date
    Sep 2001
    Posts
    800
    I have a hypothesis as to why those ports are open...I've read about the new feature in Windows XP that allows individuals the ability to get help by remote access. I wouldn't be surprised if those ports correspond to those used by the remote help option.
    That would be kinda scary. If they wanted to they could access more files than they would really need to figure out what is wrong. They would heve full access to your computer.
    [gloworange]\"A hacker is someone who has a passion for technology, someone who is possessed by a desire to figure out how things work.\" [/gloworange]
    Share on Google+

  6. #6
    Senior Member bAgZ's Avatar
    Join Date
    Jul 2001
    Posts
    206

    Thumbs down

    Some ports may be open for users that need remote help. I actually played with this shortly. Bassicaly if you have a problem you request a remote help and then who ever is helping you out would disable your keyboard and mouse remotely. After that they could do whatever they want on the machine. Scary ...
    Share on Google+

  7. #7
    Junior Member
    Join Date
    Sep 2001
    Posts
    4

    Re: port scan results

    One thing you must do NOW is diable them ports.
    Go into the regedit

    Start/run/regedit
    and search for P.C.Anwhere

    This is installed be default under all XP systems.

    Open the key and set the port to 0 for all connection Listening.

    Then reboot.

    go to

    start/run/netstat -a

    There should now be no open ports.
    Install a fire wall for all ports and that is you save as houses.

    Type_0_Giz
    Share on Google+

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •