[unisog] Port 33

E. Larry Lidz ellidz at uchicago.edu
Tue Jun 3 19:44:05 GMT 2003


sbernard at gmu.edu writes:
>I've got a compromised box that is running a service on TCP port 33.  I can't 
>find anything on from Google, SANS, etc. regarding this port, except that it's
> "supposed to be" the Display Support Protocol.  Using telnet to connect to th
>e port provides the following:
>
># telnet a.b.c.d 33
>Trying a.b.c.d...
>Connected to a.b.c.d.
>Escape character is '^]'.
>  [Pressed <Enter>]
>220 v:0.2
>?
>500 Not Loged in
>^]
>telnet> close
>Connection closed.
>#
>
>Has anyone else seen this?

An ftp server. The codes (220, 500) are a give away.

-Larry



More information about the unisog mailing list