[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[cobalt-security] No telnet on saturdays??



Hi All,

I was just trying to telnet in to on of my servers, but I couldn't connect,
no FTP & SMTP either.  All of the sites were visible through a browser, but
FTP, SMTP, and TELNET weren't working.  I did a port scan and came to find
that these were the only ports open:
#109     pop-2
#110     pop-3
#143     imap2
#444     snpp
#3306    mysql

Usually, these are the ports that are open on my server:
#21      ftp
#23      telnet
#25      smtp
#53      domain
#80      www/socks
#81      tproxy/kamanda
#110     pop-3
#143     imap2
#444     snpp
#3306    mysql

I've never encountered this during the week M-F, this happened on Saturday.
Is there some sort of maintenance RAQ4's do on Saturdays that close these
ports?

What logs should I be checking for any hack attempts?

Any comments or suggestions are appreciated.

Best regards,
Ervin