[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-security] Help with open ports

Those are ASP Engine ports.

5100 to 5102 = ASP Administration Console
3000 - 3002 = ASP engine for Apache on port 80/443

Turn off ASP Administration Console if you don't need it.
Speaking to those ASP engine ports is like talking to MySQL running on port 3006, it's pure gibberish. 

At 03:00 PM 7/7/2002 +0800, Rick wrote:

Hi,
When i did a check on my system via netstat -ap, i saw many unknown ports
open

[root chkrootkit-pre-0.36]# telnet localhost 5102
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.

Connection closed by foreign host.
[root chkrootkit-pre-0.36]# telnet localhost 5101
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.

Connection closed by foreign host.
[root chkrootkit-pre-0.36]# telnet localhost 5100
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.


<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">


Authorization Required
This server could not verify that you are authorized to access the document requested. Either you supplied the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials required. 

Connection closed by foreign host.
[root chkrootkit-pre-0.36]# telnet localhost 3000
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.

Connection closed by foreign host.
[root chkrootkit-pre-0.36]#

I would like to know
a)What are these ports
b)What do they do
c)How do i close them.




Regards,
Rick

_______________________________________________
cobalt-security mailing list
cobalt-security@xxxxxxxxxxxxxxx
http://list.cobalt.com/mailman/listinfo/cobalt-security