mailing list archives
RE: irc port open on 6668/tcp and 6667/tcp
From: "Michael Parker" <mparker () rim net>
Date: Tue, 11 Feb 2003 12:36:05 -0500
There is a great free program called Vision from Foundstone that maps ports to executable and processe, lists running
applications, etc. Their orignal program was FPort...this is the next generation. This should help you identify
what's running, where, and why.
From: Nelson, Ernie [mailto:Ernie.Nelson () wizards com]
Sent: February 11, 2003 12:24 PM
To: Harish Gondavale; security-basics () securityfocus com
Subject: RE: irc port open on 6668/tcp and 6667/tcp
I'd grab the fport utility from http://www.foundstone.com/ and run it on the PDC to see what process is using those
Now my question is, why these port are open on PDC? Is
there something suspicious? What should I do to find
the exact reason?