OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Ports 6667,6668
From: Ryan Casey (caseyryCS.EARLHAM.EDU)
Date: Fri May 19 2000 - 11:18:48 CDT

I ran nmap recently against our servers and found the following
ports open on several of our servers:

6667/tcp open irc
6668/tcp open irc

We should not have any IRC servers running on our servers. Would NT have
these ports open for any legitimate reason? I just rebuilt another
server, and it does not have these ports open. I've checked the services
control panel, and I didn't see anything that jumped out at me, but any
help would be appreciated.

Also, is there a way to connect open ports with processes?

Our servers are NT 4 SP5.

Thanks,
Ryan Casey