I am new to systems administration and have a new server running a website with http (at port 80), https (at port 443) and ssh (at port 22).
I did an nmap port scan using my personal laptop and other than these 3 ports, port 1111 was open too. This is the output:
1111/tcp open tcpwrapped
- Should i be concerned about this?
- How can i determine the purpose of this port?
- How do i close it if i need to?
Thanks guys! Nikunj
EDIT: I am on Ubuntu 11.04
EDIT2 : I did a
sudo netstat -lntp | grep -F 1111
tcp 0 0 0.0.0.0:1111 0.0.0.0:* LISTEN 21596/monit
Looks like monit is a montoring tool in ubuntu. Is this ok? What should be my next steps?
[SOLVED]: I finally ended on contacting my hosting service provider, rackspace, and they were using this service to monitor the systems health using a tool called monit.
As mentioned by @Diogo, http://www.cyberciti.biz/faq/what-process-has-open-linux-port/ was an amazing guide for a sys admin noob like me.
Thanks superuser! This was great.