• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

security - port open

arnold22

arnold22

Member
Hi,

I was running some security scan on my network and on each device and notice my Android phone had port 22 open. Everything else on my RJ45 wired router and wireless router is not visible to the internet.

I have determined it is an app on my phone which is exposing Port 22 but having a hard time figuring out which one. Is there a app or software to scan Android OS to see which app is requesting a certain port to stay open???

Thanks,
Kris
 
Well port 22 is usually assign to SSH (Secure Shell). Perhaps you have some sort of file transfer program on your phone that uses sftp or scp with SSH.
 
i knew the port is ssh and that there was an app on my phone which caused the port to be open as stated in my first post.

and scanning app which will tell me which app is using which port?
 
Here is the list of app I have collected since I got the phone. Most of them are games. I was hoping there was a command line, line netstat on windows or nmap for linux which would show which app is using wifi/3G and which port they are communicating over.

Guns
Advance task Killer Free
Air Control Lite
Air Horn
Alchemy
Android LightSaber
Angry Birds
AVG AntiVirus
Atomic Bomber
Barcode Scanner
Blow up (lite)
Dubble Blast
Color Flashlight
Connect 4
Doodle Jump
Drag Racing
Fart Attack
Fruit Ninja
Gem Miner: Dig Deeper
GPS Test
Gun N Glory
IMobsters
Mad Shooting
MapDroyd
Maps
MiniGore
Mouse Trap
MyBackup Pro
Opera Mini
Paper Tos
Robo Defense
Root Explorer
Space Buster 3D
Text Edit
Untangle Me
X Construct
 
Check out Quick System Info Pro, free in Market.

Has Net States tab which lists details for network connections, including IP, port, and application, Unix netstat-like.

There are likely other apps that do similar. This one happens to be my choice.
 
I tried Quick System Info Pro when I got home late last night and nothing showed up for Port 22. I will try again tonight and will also try netstat in Terminal to see if I get the same results.

Kris
 
I gave Quick System Info Pro another go last night and port 22 did not come up yet the port is still shown as open when I perform a network scan. I tried netstat in Terminal but only scanned the Loopback (127.0.0.1) and was unable to use any syntax in Terminal.

It is still a mystery as to what is opened and using port 22.
 
I know this is an old thread but I manage to figure out why port 22 was open on my phone. When performing my scan I notice that my personal IP address was not being shown but instead came back as 141.0.9.3. It turns out it is Opera Mini which uses a transcoder server through port 22 (SSL) to shrink and reformat each website before being sent to your phone. They claim it is to increase speed and screen display.

This issue I have is Opera need to unencrypted the website on their server in order to reformat everything. If you are doing some banking, your information is most likely in plain text waiting for a hacker to steal.

The transcoder server essentially removes end-to-end encryption from your phone to the website and is now what is called hop to hop encryption.

Opera stats that only Opera Mini uses this transcoder server and that their non mini Opera does not. I have no confidence in this company anymore and have switch to a new browser.

Below is Opera FAQ page:
Opera Mini FAQ

Opera Mini transcoder server:
https://dns.l4x.org/141.0.9.3

Thanks,
Kris
 
You must log in or register to reply here.
Back
Top Bottom