Get access to immediate incident response assistance.
Eliminate active threats with 24/7 threat detection, investigation, and response.
Maximize your SIEM investment, stop alert fatigue, and enhance your team with hybrid security operations support.
Advance your cybersecurity program and get expert guidance where you need it most.
Test your physical locations and IT infrastructure to shore up weaknesses before exploitation.
Prevent unauthorized access and exceed compliance requirements.
Stop email threats others miss and secure your organization against the #1 ransomware attack vector.
Prepare for the inevitable with 24/7 global breach response in-region and available on-site.
Mitigate risk of a cyberattack with 24/7 incident and health monitoring and the latest threat intelligence.
Follow the steps below to determine if a network port is being used on a server, and the specific application using the port:
Active Connections
Proto Local Address Foreign Address State PID TCP 0.0.0.0:80 0.0.0.0:0 LISTENING 4
Can not obtain ownership information TCP 0.0.0.0:135 0.0.0.0:0 LISTENING 872 RpcSs [svchost.exe] TCP 0.0.0.0:445 0.0.0.0:0 LISTENING 4
Can not obtain ownership information TCP 0.0.0.0:8080 0.0.0.0:0 LISTENING 2308 [WMProxy.exe] TCP 0.0.0.0:8081 0.0.0.0:0 LISTENING 2308 [WMProxy.exe] TCP 0.0.0.0:19100 0.0.0.0:0 LISTENING 2792 [WMArrayMGR.exe] TCP 0.0.0.0:19101 0.0.0.0:0 LISTENING 2792 [WMArrayMGR.exe] TCP 0.0.0.0:19102 0.0.0.0:0 LISTENING 2984 [WMController.exe] TCP 0.0.0.0:49152 0.0.0.0:0 LISTENING 544 [wininit.exe] TCP 0.0.0.0:49153 0.0.0.0:0 LISTENING 996 EventLog [svchost.exe] TCP 0.0.0.0:49154 0.0.0.0:0 LISTENING 244 Schedule [svchost.exe] TCP 0.0.0.0:49155 0.0.0.0:0 LISTENING 636 [lsass.exe] TCP 0.0.0.0:49160 0.0.0.0:0 LISTENING 624 [services.exe] TCP 0.0.0.0:49165 0.0.0.0:0 LISTENING 1796 [sqlservr.exe] TCP 0.0.0.0:49182 0.0.0.0:0 LISTENING 1744 [sqlservr.exe] TCP 10.64.21.63:139 0.0.0.0:0 LISTENING 4
Can not obtain ownership information TCP 10.64.21.63:49165 10.64.21.63:49167 ESTABLISHED 1796 [sqlservr.exe] TCP 10.64.21.63:49167 10.64.21.63:49165 ESTABLISHED 2792 [WMArrayMGR.exe]
Results displayed can vary depending on your permissions, and the results sometimes take a long time to generate.
In some cases you might find that the following steps allow you to get more information more quickly:
To contact Trustwave about this article or to request support: