These ports may be listening on a typical webserver… PROT PORT# Usage —– ——– ——– tcp 993 imaps – Encrypted IMAP mail tcp 995 pop3 – Encrypted POP3 mail tcp 3306 mysql – MySQL database tcp 110 pop3 – POP3 mail tcp 143 imap – IMAP mail tcp 80 http – HTTP traffic tcp 19638 [...]
Really these are ways for finding the spoor left by rootkits and such… and partially dealing with them. Best practise is to rebuild the server once it’s been rooted, but these techniques may give you the breathing space necessary to get a new server built. To kill processes that won’t die try.. # kill -s [...]
If you enjoyed the post, make sure you subscribe to the RSS feed.
© 2012
Powered by WordPress. Design by 
