list of port questions!

anyone know why port 1001 would be open? all i've seen is that its a trojan port. And...does anyone know if port 1433 is still vulnerable or is it ok now? I'm the only one around here running a *nix box but i still see on some servers that port 6000 x11 port is open. Any reason for that?

by the way http://www.bekkoame.ne.jp/~s_ita/port/port1-99.html is a great site listing of ports. Updated today i believe. Thats where i've been checkin but some of my questions still go unanswered and hopefully some of u can help me find a answer.

Hello!!!
I will not be able to help you with your questions regarding the ports, as i am new to this. Please if you can tell me what is a "port" and what does "port 1001" and "port1433" stand for.
I will be great full to you for expanding my knowledge.
:)

Each terminal (anything connected to the internet or "cyberspace") has like a...big wall facing the net i guess u could say. In this wall are communication ports. These communication ports each have they're own purpose. Port 80 is for http...port 23 is for telnet...21 ftp...53 nameserver and so on. Along with ports are IP's which stand for Internet Protocols. With your internet protocol you can specify a IP and a port and connect to something like in telnet. Open up your telnet and enter an IP and after the IP put a port number and hit enter and see what happens. All a port is is a hole for communication to go through to your computer. I'm gonna quit now before this turns into a tutorial. can anyone help me please with ports 1001 and 1433?

Thanx Bro.

well, i looked around... it seems that port 1001 is most likley a spyware port. MY advice, regardless of its main cause, would be to close it, because well, randomly open ports usually hurt you more than help you. To see if its spyware run something like Lavasoft AdAware (free) which scans your hard drive for known spyware files and the such. If you need this tell me and ill post the installation file. I also recommend you close your other port, as it sounds exactly like the hole required to successfully carry out a smurf attack. Good luck

http://www.delamereservices.co.uk/ports1001to1500.html for port listings and purposes and so far 1001 has only come up as a trojan ...

As for Microsoft's SQL security on that port, check this: http://www.giac.org/practical/GCIH/Jeff_Bryner_GCIH.pdf

But since that is quite an old exploit, I'm about 100% Microsoft came out with some kind of patch... try searching their website...

The well known port 1001 is "officially" unassigned. (ports 1001 - 1009). Possible trojan horses using this port are "Der Späher / Der Spaeher", "Le Guardien," "Silencer," and "WebEx." As for 1433, that is typically used for a Micro$oft SQL server. Possible Mal-ware includes the "Digispid.B Worm" (affects M$ SQL server), "SQLsnake" (ditto, may be same worm), and a DoS attack I was not able to get any details on (laptop is currently fried). Unless you have an SQL server, I have no idea why that port would be open. A few references would be in the AntiOnline libraries (right here!) as well as:
http://www.iss.net/security_center/a...ts/default.htm
http://www.iana.org/numbers.html
I'm also including a .txt file listing common ports. I hope it helps.

Umm sorry to burst your bubble and I know you are trying to help but Jaguar291 has already posted Port listings and their purposes :D and one other thing read other peoples posts and the link if there is one it will save you some time

Sorry guys. Jaguar's post wasnt up when i started writing my post, but after looking a few things up, plotting to have my laptop enshrined in the nearest landfill, and several snacks later i posted. And lo and behold, like eveything technology, I was already obsolete! (Sniff, sniff). Kinda depressing... Ciao!

Is there any specific telnet command or software, where u can see all your open ports, and/or close them? Ive heard many names of software going around, will some1 save me a lot of trouble and help me out with opening/closing ports?

ejd1:

Native tool in Win NT/2K/XP = NETSTAT. Is a commandline tool. Run the following syntax: "netstat -an" (-ao for XP). It will show the TCP & UDP ports your computer is either listening on or established. Listening means there is a program of some sort (or OS) listening for something to talk to it at that port number. Established means what it says: a connection has been established.

Freeware and commercial tools that I recommend are:
* DiamondCS OpenPorts (http://www.diamondcs.com.au/openports/)
* Foundstone's FPort (http://www.foundstone.com - go to Resources | Free tools section)

There are many ports that are native to the OS and shouldn't worry about but if you want you can check the following web site to see what uses a certain port:
http://www.treachery.net/security_tools/ports/

There are plenty of sites but I use that one the most.

There's a lot more details to this and sorry I cant post more at this time but this is a start. Also, search AO here on "ports" or something like that and I'm sure you'll find many valuable postings on the topic.

/edit
Forgot to address the closing the ports question: you need to know what is listening on a certain port number and then end that task or process.
/edit

Good luck.

jesus christ!!! RTFD (Read the Freakin' dates)!!! two months!!! please, moderators, i beg you, make an autoclose function!!!

slick:

Did you see that the user asked another question yesterday?

Quote:

---

posted 12-08-2003 06:00 PM
Is there any specific telnet command or software, where u can see all your open ports, and/or close them? Ive heard many names of software going around, will some1 save me a lot of trouble and help me out with opening/closing ports?

---

Or are you complaining that the thread should have been closed, and have him post his question with a new thread? If so I agree with that an AUTOCLOSE feature should be built in so that 2 month old threads are closed.

I'm just trying to help the guy/girl out.