Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

trinoo_master on port 27665, filtered state!

On my Cisco Router's serial interface, I do a nmap from outside on the Internet. The result is:

" Interesting ports on *.*.50.1:

Not shown: 1676 closed ports

PORT STATE SERVICE

23/tcp filtered telnet

135/tcp filtered msrpc

1524/tcp filtered ingreslock

27665/tcp filtered Trinoo_Master

I am worried about the last two entries. The last nmap was done in Feb this year and I have confirmed that the two ports did not exist.

Though the state "filtered" is a solace but I am still concerned. How can O be sure that the system has not been compromised?

Please Advise!!

1 ACCEPTED SOLUTION

Accepted Solutions
Silver

Re: trinoo_master on port 27665, filtered state!

If it is in a filtered state as said need not be worried.Because Filtered means that a firewall, filter, or other network obstacle is covering the port and preventing nmap from determining whether the port is open.

2 REPLIES
Silver

Re: trinoo_master on port 27665, filtered state!

If it is in a filtered state as said need not be worried.Because Filtered means that a firewall, filter, or other network obstacle is covering the port and preventing nmap from determining whether the port is open.

Re: trinoo_master on port 27665, filtered state!

Hi,

This is a nice scenario. Could you please tell us which IOS version you are using and what all filtering commands you have enabled?

Regards,

Wilson Samuel

154
Views
0
Helpful
2
Replies