FTP port?

[kev01]

Hi,

just a simple question..I stopped my FTP service on my Windows server 2003. But when i scan for open port using a scanning utility, I can see my FTP Port 21 open. Does that mean that the FTP service is still running??? (Last week, my FTP server has been hacked)

Thanks in advance

 

[rwullems]

Port 21 is indead used for FTP control sessions. So if it is still "open" it means probably that there is still a FTP deamon running on your system.
regards,
robert

 

[kev01]

How shall I stop a FTP deamon running on my system?
Thanks

 

[rwullems]

look in the services menu, it should be there, change the startup from automatic or manual to disabled.

start\controlpanel\administrative tools\services
regards,
robert

 

[kev01]

it is disabled..but when i scan my ports...i can see that port 21 is open.
how can i close down port 21?
thanks in advance,

 

[rwullems]

should be closed?
try netstat -a at the command prompt and see what is popping up there.
regards,
Robert

 

[vop]

Try 'awpta - Atelier Web Ports Traffic Analyser' (shareware):

http://www.atelierweb.com/pta/index.htm

or

http://www.snapfiles.com/get/awpta.html

I does real-time mapping of ports to processes (applications and services)! You get 15 executions or 15 days to try out this tool.

With this tool, you should be able to find out what process is initializing FTP port 21. Highly recommended.

 

[kev01]

hi,

I have actually closed port 21 from my firewall!

Thanks vop for the info! i'll have a look,

cheers,
kev01