ports listening.
Results 1 to 4 of 4

Thread: ports listening.

  1. #1
    Member
    Join Date
    May 2002
    Posts
    44

    Post ports listening.

    Hi all, i was messing about with netstat, i typed in "netstat -an" to see if any ports where listening. 6 tcp ports were listening- 135
    445
    1025
    1029
    1139
    11943

    is it possible that some of these can be trojan horses waiting for their master or is it just normal? I cant tell, i have tried looking for some where that will tell you what trojans run on certain ports but to no avail. i would be grateful if some one could post a url that contains
    what trojans run on which ports.

    thanks in advance for people help

    alex

  2. #2
    Senior Member
    Join Date
    Nov 2001
    Posts
    742
    Some information !

    Source: http://www.snort.org/ports.html

    135 (tcp) = epmap (DCE endpoint resolution)
    135 (tcp) = loc-srv (NCS local location broker)
    135 (udp) = epmap (DCE endpoint resolution)
    135 (udp) = loc-srv (Location Service)
    445 (tcp) = microsoft-ds
    445 (udp) = microsoft-ds
    1025 (tcp) = blackjack (network blackjack)
    1025 (tcp) = listen listener (RFS remote_file_sharing)
    1025 (udp) = blackjack (network blackjack)
    1029 (tcp) = InCommand (trojan, InCommand)
    1029 (tcp) = ICQNuke98 (trojan, ICQ Nuke 98)
    1139 = ???
    11943 = ???
    I advice you to do a Trojan scan..

    Some Trojan Hunters:

    The Cleaner - http://www.moosoft.com
    Tauscan - http://www.agnitum.com

    Some port list's:

    http://www.doshelp.com/trojanports.htm
    http://www.portsdb.org/


    And do install a firewall if you not have that already .

    ~micael

  3. #3
    Banned
    Join Date
    Aug 2001
    Location
    Yes
    Posts
    4,429
    445
    In Windows 2000, Microsoft has created a new transport for SMB over TCP and UDP on port 445. This replaces the older implementation that was over ports 137, 138, 139
    1025
    This is the first dynamically assigned port. Therefore, virtually any program that requests a port can be assigned one at this address.
    I'm pretty sure you can do the rest of them yourselve :/

    Iana
    Neohapsis
    Iss
    Robin Keir

  4. #4
    Member
    Join Date
    May 2002
    Posts
    44
    thanks for the help people!

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

 Security News

     Patches

       Security Trends

         How-To

           Buying Guides