Date: Wed, 21 Nov 2001 22:27:43 -0600 (CST) From: Mike Silbersack <silby@silby.com> To: Geoff Lawn <lawngf@ihug.co.nz> Cc: <security@freebsd.org> Subject: Re: Unknown transient service 1528/tcp Message-ID: <20011121222647.O2710-100000@achilles.silby.com> In-Reply-To: <020801c1730b$8cd21fe0$41414fcb@lawn>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 22 Nov 2001, Geoff Lawn wrote: > Hi there, > > I regularly do an nmap on our server with the following results... > > Port State Service > 21/tcp open ftp > 22/tcp open ssh > 25/tcp open smtp > 110/tcp open pop-3 > 443/tcp open https > > Recently I noticed the following service appear... > 1528/tcp open mciautoreg > > I did another nmap a minute later and the service was no longer there. > > Does anyone know what this might be? > Have I been hacked?? > > Thanks, > Geoff Were you nmapping the machine nmap was running on? You sometimes catch the port nmap is running the scan from when doing it that way, if I recall correctly. Mike "Silby" Silbersack To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011121222647.O2710-100000>