Otherwise we’re happy with the service and I personally have been a longtime customer.

The scan of 127.0.0.1 from the server itself is concerning because port 5555 (freeciv) is something I recognize from somewhere else.Īnyone have any insight into these strange scans? What does your own domain scan look like? What does our domain scanned from your system look like?ĭreamhost support is nowhere to be found on this, by the way. Somehow, our company’s web server is running ports we never opened. Granted, these are different versions of nmap, but they seem to show the same thing. Nmap done: 1 IP address (1 host up) scanned in 1.37 seconds Nmap scan report for localhost (127.0.0.1) Nmap done: 1 IP address (1 host up) scanned in 1.39 seconds $ nmap Starting Nmap 5.21 ( ) at 05:21 PST And of course, 517 filtered ports should be closed, not filtered.įrom the server itself after ssh’ing into it, it’s even stranger: 5269 – xmpp-server) and there’s no reason it should be running an HTTP proxy on 8080. That’s from my (director of co.) workstation.

Nmap done: 1 IP address (1 host up) scanned in 15.14 seconds Not shown: 517 filtered ports, 478 closed ports Last login: Mon Feb 11 05:12:25 on ttys000Īndrews-iMac:~ wattersa$ nmap Starting Nmap 6.25 ( ) at 05:18 PST Start your freeciv-server with the -m option if you want it listed here. It’s the nmap output for our company’s domain name, which is on a static IP. Port Version Patches State Players Message.

Does this look normal to anyone? I don’t think so, but I thought I’d ask.

Port 5555 freeciv