[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[cobalt-security] No telnet on saturdays??
- Subject: [cobalt-security] No telnet on saturdays??
- From: "Ervin Tarkhanian" <ervin@xxxxxxxxxx>
- Date: Sat, 11 Aug 2001 13:50:46 -0700
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
Hi All,
I was just trying to telnet in to on of my servers, but I couldn't connect,
no FTP & SMTP either. All of the sites were visible through a browser, but
FTP, SMTP, and TELNET weren't working. I did a port scan and came to find
that these were the only ports open:
#109 pop-2
#110 pop-3
#143 imap2
#444 snpp
#3306 mysql
Usually, these are the ports that are open on my server:
#21 ftp
#23 telnet
#25 smtp
#53 domain
#80 www/socks
#81 tproxy/kamanda
#110 pop-3
#143 imap2
#444 snpp
#3306 mysql
I've never encountered this during the week M-F, this happened on Saturday.
Is there some sort of maintenance RAQ4's do on Saturdays that close these
ports?
What logs should I be checking for any hack attempts?
Any comments or suggestions are appreciated.
Best regards,
Ervin