Those are ASP Engine ports. 5100 to 5102 = ASP Administration Console 3000 - 3002 = ASP engine for Apache on port 80/443
Turn off ASP Administration Console if you don't need it. Speaking to those ASP engine ports is like talking to MySQL running on port 3006, it's pure gibberish. At 03:00 PM 7/7/2002 +0800, Rick wrote: >Hi, >When i did a check on my system via netstat -ap, i saw many unknown ports >open > >[root chkrootkit-pre-0.36]# telnet localhost 5102 >Trying 127.0.0.1... >Connected to localhost. >Escape character is '^]'. > >Connection closed by foreign host. >[root chkrootkit-pre-0.36]# telnet localhost 5101 >Trying 127.0.0.1... >Connected to localhost. >Escape character is '^]'. > >Connection closed by foreign host. >[root chkrootkit-pre-0.36]# telnet localhost 5100 >Trying 127.0.0.1... >Connected to localhost. >Escape character is '^]'. > > ><!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> > > >Authorization Required > > > >This server could not verify that you are authorized to access the >document requested. Either you supplied the wrong credentials (e.g., bad >password), or your browser doesn't understand how to supply the >credentials required. > >Connection closed by foreign host. >[root chkrootkit-pre-0.36]# telnet localhost 3000 >Trying 127.0.0.1... >Connected to localhost. >Escape character is '^]'. > >Connection closed by foreign host. >[root chkrootkit-pre-0.36]# > >I would like to know >a)What are these ports >b)What do they do >c)How do i close them. > > > > >Regards, >Rick > >_______________________________________________ >cobalt-security mailing list >[EMAIL PROTECTED] >http://list.cobalt.com/mailman/listinfo/cobalt-security _______________________________________________ cobalt-security mailing list [EMAIL PROTECTED] http://list.cobalt.com/mailman/listinfo/cobalt-security
