Port scan says port 21 is open

Discussion in 'Security Software' started by cro, Jun 21, 2007.

  1. cro

    cro Guest

    I did a port scan and the report says FTP port 21 is open on all the machines.
    On the host firewall of each machine, port 21 is not open though.
    But I could telnet to port 21 on all of them.
    Is this normal?

    cro, Jun 21, 2007
    1. Advertisements

  2. No, that is not normal.
    You could use TcpView from Sysinternals (now part of Microsoft)
    or PortRptr (also from Microsoft) to find what is binding to the port.
    Roger Abell [MVP], Jun 22, 2007
    1. Advertisements

  3. cro

    Bogwitch Guest

    A little more information may be useful. Where you performed the scan
    from, what you scanned, what you were looking for, etc.

    It is fairly common for ISPs to intercept incoming FTP connections and
    drop them into a black hole. The thinking is that home users should not
    be running such a service at home and if they do, they are clearly up to
    no good, and use up the ISPs available bandwidth. I don't agree with
    that, BTW!

    Bogwitch, Jun 22, 2007
  4. cro

    cro Guest

    I just ran TcpView and I don't see port 21 or ftp bound to anything...
    It's not even listening on port 21 but I can telnet to port 21.
    FYI, I'm scanning our own local network from our own local subnet so not
    going through ISP or anything.
    cro, Jun 25, 2007
  5. PortRptr may still help you. If not, then . . .
    Have you tried any of the rootkit checkers ?
    Roger Abell [MVP], Jun 25, 2007
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.