LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   hack ?help me !! (https://www.linuxquestions.org/questions/linux-security-4/hack-help-me-69709/)

liumang 07-02-2003 10:04 PM

hack ?help me !!
 
I with( nmaps) last each more at other machines( 445 /tcp filtered microsoft-ds) sweep and find and for end mouth in machine, Have too relevant services,spend at I( rh 8.0,) keep being the new everyday, Excuse me, what I or caught by hack? How clear

(The 1593 ports scanned but not shown below are in state: closed)
Port State Service
21/tcp open ftp
22/tcp open ssh
25/tcp open smtp
53/tcp open domain
80/tcp open http
110/tcp open pop-3
443/tcp open https
445/tcp filtered microsoft-ds

shellcode 07-02-2003 10:46 PM

Re: hack ?help me !!
 
Quote:

Originally posted by liumang
How clear
not very....

try google with port 445

unSpawn 07-03-2003 04:56 AM

Port TCP/445 (and UDP IIRC) is only used by Micro$oft, and only if port TCP/139 is blocked. There are no Linux services known to me that run on port TCP/445.

If you have the port open, check if there is a (rogue) daemon listening, or if the state of the port is just seen as open because it is not firewalled. To check for (rogue) daemons listening use "netstat -anp", examine the process ID's (PID) information in /proc and verify the binary that is running has a legitimate purpose.

If unsure, verify your systems integrity using a system integrity checker like Aide, Samhain, Osiris or tripwire (only if installed and used directly after system install), verify for running services and possible cracker activity using chkrootkit(.org), network interface promiscuous mode using /sbin/ip and the rpm database.

If there is no service running on port 445, and you have verified your systems integrity, properly firewall the port, restart the firewall and scan again.

unixvillian 07-03-2003 01:14 PM

liumang, Some ISPs set their firewalls to block port 445, it may not be open but its filtered through ur ISP

xscousr 07-03-2003 03:39 PM

netstat -tupan |grep 445

what's the output?

liumang 07-05-2003 03:27 AM

Quote:

Originally posted by unixvillian
liumang, Some ISPs set their firewalls to block port 445, it may not be open but its filtered through ur ISP
Thank everybody for help, I do not have calm thinking here, say just as upstairs, Where is the reason of isp

brijesh 07-09-2003 01:33 PM

use nmap -sS option it not danger ..by using these nmap it's recorded there

german 07-11-2003 10:00 PM

Any firewall worth its salt will record both

B.

brijesh 07-12-2003 12:09 PM

i have problem in samba cannot mount a ip address
please help me

DrOzz 07-12-2003 12:13 PM

you should have started a new thread brijesh...anyways, your going to have to go into more detail than that, such as what error messages your getting when trying to do so, and how you are going about mounting a share, such as are you using a GUI such as linnieghborhood or xsmbrowser, or are you trying to do this from command line...

soulsniper 11-28-2004 04:21 AM

Port 445 is samba!

Running netstat -tupan |grep 445 gives:

tcp 0 0 12.34.56.78:445 0.0.0.0:* LISTEN 20981/smbd

smbd is the samba daemon..


All times are GMT -5. The time now is 02:58 AM.