Re: httpd and port 7200

From: dewey hylton (securityfocus.com_at_hyltown.com)
Date: 10/25/05

  • Next message: tigerblue_at_puzzleapuma.de: "Re: Re: httpd and port 7200" 
    Date: Mon, 24 Oct 2005 21:12:34 -0400
To: focus-linux@securityfocus.com

    Quoting Terry Dooher <tdooher.lists@naturalmotion.com>:

    > tigerblue@puzzleapuma.de wrote:
    > > Hi,
    > >
    > > I´ve just installed an apache on an redhat enterprise. On this machine is
    > only an ssh and this apache, but when I´m using the netstat -a command, I see
    > the an open port tcp on 7200. When I use "fuser -v -n tcp 7200", to find out
    > which process is behind this port I get this Info...
    > >
    > >
    > > 7200/tcp root 2031 f.... httpd
    > [snip]
    > > Any Idea ? The Port is in state "listen" and all other services are
    > deactivated.
    >
    > Best guess is that some kind of dormant web-admin package has been activated
    >
    > when you started apache. Things like Webmin listen of different ports from
    > the
    > default 80.
    >
    > To find out what: grep -r 7200 /etc/apache/*
    >
    > (substitute /etc/apache for wherever RedHat keeps apache's config files these
    >
    > days)
    >
    > What to you get if you browse to http://>:7200?
    >
    > Terry.
    >
    > > best regards
    > >
    > > tigerblue
    > >
    > >
    > >
    > >
    >

    or use the wonderful lsof utility:

    lsof -i | grep :7200

  • Next message: tigerblue_at_puzzleapuma.de: "Re: Re: httpd and port 7200"

    Relevant Pages

    • Re: File permissions for a wiki-like site
      ... to a single web server went out with browsers that don't understand ... Actually you can, and often do, have multiple instances of Apache listening on port 80.. ...
      (comp.lang.php)
    • Re: File permissions for a wiki-like site
      ... to a single web server went out with browsers that don't understand ... Actually you can, and often do, have multiple instances of Apache listening on port 80.. ...
      (comp.lang.php)
    • Re: Error 49, socket problem?
      ... I doubt it's a DoS attack, however it could very well be. ... apache runs on port 80 and 81. ... I've ruled out that it's a problem with the MySQL server in this case, ...
      (freebsd-net)
    • software searched for proxy or port forwarding and web logging
      ... I plan to run Apache on my SuSE 9.0 box for learning. ... Unfortunately I have no settings in my DSL router to route http and/or ... So what I think will happen here is that incoming requests for port 80 ... Assume I work somewhere as admin, and the boss want's me to do that, ...
      (alt.os.linux.suse)
    • RE: possible ssh hack
      ... What version of SSHD were you running, ... Apache and we can help you out. ... Subject: possible ssh hack ... port 4207 ...
      (Incidents)