[unisog] Port 33
E. Larry Lidz
ellidz at uchicago.edu
Tue Jun 3 19:44:05 GMT 2003
sbernard at gmu.edu writes:
>I've got a compromised box that is running a service on TCP port 33. I can't
>find anything on from Google, SANS, etc. regarding this port, except that it's
> "supposed to be" the Display Support Protocol. Using telnet to connect to th
>e port provides the following:
># telnet a.b.c.d 33
>Connected to a.b.c.d.
>Escape character is '^]'.
> [Pressed <Enter>]
>500 Not Loged in
>Has anyone else seen this?
An ftp server. The codes (220, 500) are a give away.
More information about the unisog