Port 33

sbernard at gmu.edu sbernard at gmu.edu
Tue Jun 3 17:03:14 GMT 2003

I've got a compromised box that is running a service on TCP port 33.  I can't find anything on from Google, SANS, etc. regarding this port, except that it's "supposed to be" the Display Support Protocol.  Using telnet to connect to the port provides the following:

# telnet a.b.c.d 33
Trying a.b.c.d...
Connected to a.b.c.d.
Escape character is '^]'.
  [Pressed <Enter>]
220 v:0.2
500 Not Loged in
telnet> close
Connection closed.

Has anyone else seen this?


Steve Bernard
Sr. Systems Engineer, NET
George Mason University
Fairfax, Virginia

More information about the unisog mailing list