June 30, 2007

nmap -sS -p- iphone

Security, Tech

Interesting ports on 192.168.x.y:
PORT STATE SERVICE VERSION
41425/tcp filtered unknown
62078/tcp open unknown

Hrm, what could this mystery port be?

posted by Damon @ 4:16 am |

6 Comments so far
Leave a comment

I don’t see the 41425 port open.

The 62078 doesn’t respond to usual human interfaces (like smtp, http) and if you flood it with data, it leaves the data in the TCP Window until the connection fills up to 65535 bytes (then stalls.)

By Jameson 06.30.07 1:47 pm

Yea, it came up as filtered on that first scan, but it’s coming up as closed. Must have just been an anomaly.

By Damonon 06.30.07 2:35 pm

62078 open here as well

By joejon 06.30.07 7:09 pm

62078 is open on mine too. With telnet it responds but once I hit any key it closes the connection.

By nateon 07.02.07 5:25 pm

I am curious what the -O flag in nmap would bring up, whether it recognizes it as a MacOSX TCP/IP stack or as something else. Have you tried it yet, by chance?

By vitalyon 07.03.07 12:26 am

[...] fact the iphone might have been turned off, or they are really filtered which seems unlikely. Other blogs report, random filtered port [...]

By Iphone communication attack surface | From Information to Intelligenceon 01.21.08 12:37 am

RSS feed for comments on this post. TrackBack URI


Leave a comment
Line and paragraph breaks automatic, e-mail address never displayed, HTML allowed: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>