nmap shows: 1863/tcp open, 5190/tcp open

Hello:

For all three webservers on my DMZ, when they are scanned by nmap they
show this:

22/tcp open ssh OpenSSH 4.0 (protocol 2.0)
80/tcp open http Apache httpd 2.0.54
443/tcp open ssl/http Apache httpd 2.0.54
1863/tcp open unknown
5190/tcp open aol?


It is the last 2 entries that concern me. I really don't know what port
1863 and 5190 being open indicates. Using:

netstat -lnp | grep ":1863"
netstat -lnp | grep ":5190"
Nothing shows up.

Connections to the ports via telnet/ssh/ftp/sftp/http are denied.

Nothing seems to be listening from inside the boxes, which are stripped
down as much as possible.

These are Linux machines and I'm not aware of any chat software running
on them, which I'm told are sometimes associated with those ports.

Can someone provide some advice?

.

Relevant Pages

  • Re: [Full-disclosure] Very strange nmap scan results
    ... I scan the mail relay and although just port 25 is open it report ... open rje 6/tcp open unknown 7/tcp open echo 8/tcp ... Charter: http://lists.grok.org.uk/full-disclosure-charter.html ... Hosted and sponsored by Secunia - http://secunia.com/ ...
    (Full-Disclosure)
  • Re: Scanning--more then one side to the argument
    ... UPnP port open to the internet but just don't know it, ... changes (ie backdoor gets put on a machine, customer starts a new ... > 5241/tcp open unknown ... Filtered means that a firewall, filter, or other network obstacle ...
    (Security-Basics)
  • [Full-Disclosure] backdoor menu on conexant chipset dsl router (Zoom X3)
    ... i have just installed an adsl modem sold under the brand of Zoom X3 ... PORT STATE SERVICE ... 254/tcp open unknown ... ports 23 and 80 give access to the configuration menu and html interface ...
    (Full-Disclosure)
  • backdoor menu on conexant chipset dsl router (Zoom X3)
    ... i have just installed an adsl modem sold under the brand of Zoom X3 ... PORT STATE SERVICE ... 254/tcp open unknown ... ports 23 and 80 give access to the configuration menu and html interface ...
    (Full-Disclosure)
  • RE: Very strange nmap scan results
    ... (assuming your client has an up to date inventory)? ... PORT STATE SERVICE ... 4/tcp open unknown ... buy it or download a solution FREE today! ...
    (Pen-Test)
Quantcast