Port 2105 Open on Network
After a long time of worrying about my network being secure and finally understanding the basic job of the ports I would see open. I recently noticed port 2103 Zephyr-clt and port 2105 eklogin open on my daughters computer. I asked her if she was "Instant Messaging" as that seemed like what the ports were for, but she said no. It was near midnight but I did not think she would fib about it? She did just add a printer that day. Can anyone tell me why these would suddenly appear open?
networking ports internet-security
add a comment |
After a long time of worrying about my network being secure and finally understanding the basic job of the ports I would see open. I recently noticed port 2103 Zephyr-clt and port 2105 eklogin open on my daughters computer. I asked her if she was "Instant Messaging" as that seemed like what the ports were for, but she said no. It was near midnight but I did not think she would fib about it? She did just add a printer that day. Can anyone tell me why these would suddenly appear open?
networking ports internet-security
When you say it seemed like the ports were used for "Instant Messaging", did you infer this from research in to what the ports were used for?
– Sam3000
Apr 23 '16 at 16:35
Yes Sam, That's what it looked like from researching ........
– Chucky DuPont
Apr 23 '16 at 16:42
Yes Sam3000, that is what it looked like after researching it........
– Chucky DuPont
Apr 23 '16 at 16:44
You're very welcome, if you're able to vote on my answer or mark it as the answer at any point too that would be much appreciated!
– Sam3000
Apr 23 '16 at 17:27
add a comment |
After a long time of worrying about my network being secure and finally understanding the basic job of the ports I would see open. I recently noticed port 2103 Zephyr-clt and port 2105 eklogin open on my daughters computer. I asked her if she was "Instant Messaging" as that seemed like what the ports were for, but she said no. It was near midnight but I did not think she would fib about it? She did just add a printer that day. Can anyone tell me why these would suddenly appear open?
networking ports internet-security
After a long time of worrying about my network being secure and finally understanding the basic job of the ports I would see open. I recently noticed port 2103 Zephyr-clt and port 2105 eklogin open on my daughters computer. I asked her if she was "Instant Messaging" as that seemed like what the ports were for, but she said no. It was near midnight but I did not think she would fib about it? She did just add a printer that day. Can anyone tell me why these would suddenly appear open?
networking ports internet-security
networking ports internet-security
asked Apr 23 '16 at 16:07
Chucky DuPont
1113
1113
When you say it seemed like the ports were used for "Instant Messaging", did you infer this from research in to what the ports were used for?
– Sam3000
Apr 23 '16 at 16:35
Yes Sam, That's what it looked like from researching ........
– Chucky DuPont
Apr 23 '16 at 16:42
Yes Sam3000, that is what it looked like after researching it........
– Chucky DuPont
Apr 23 '16 at 16:44
You're very welcome, if you're able to vote on my answer or mark it as the answer at any point too that would be much appreciated!
– Sam3000
Apr 23 '16 at 17:27
add a comment |
When you say it seemed like the ports were used for "Instant Messaging", did you infer this from research in to what the ports were used for?
– Sam3000
Apr 23 '16 at 16:35
Yes Sam, That's what it looked like from researching ........
– Chucky DuPont
Apr 23 '16 at 16:42
Yes Sam3000, that is what it looked like after researching it........
– Chucky DuPont
Apr 23 '16 at 16:44
You're very welcome, if you're able to vote on my answer or mark it as the answer at any point too that would be much appreciated!
– Sam3000
Apr 23 '16 at 17:27
When you say it seemed like the ports were used for "Instant Messaging", did you infer this from research in to what the ports were used for?
– Sam3000
Apr 23 '16 at 16:35
When you say it seemed like the ports were used for "Instant Messaging", did you infer this from research in to what the ports were used for?
– Sam3000
Apr 23 '16 at 16:35
Yes Sam, That's what it looked like from researching ........
– Chucky DuPont
Apr 23 '16 at 16:42
Yes Sam, That's what it looked like from researching ........
– Chucky DuPont
Apr 23 '16 at 16:42
Yes Sam3000, that is what it looked like after researching it........
– Chucky DuPont
Apr 23 '16 at 16:44
Yes Sam3000, that is what it looked like after researching it........
– Chucky DuPont
Apr 23 '16 at 16:44
You're very welcome, if you're able to vote on my answer or mark it as the answer at any point too that would be much appreciated!
– Sam3000
Apr 23 '16 at 17:27
You're very welcome, if you're able to vote on my answer or mark it as the answer at any point too that would be much appreciated!
– Sam3000
Apr 23 '16 at 17:27
add a comment |
3 Answers
3
active
oldest
votes
The most common use for those ports is Microsoft Message Queuing or MSMQ, described below. At first sight it may appear to be for instant messaging, but is in fact a more fundamental component of some programs that communicate within local networks - such as printers, although I cannot be certain that this is the reason the port is open in your case.
In simple terms, it acts as a digital notice board - you pin a message to it and it remains there until the recipient removes it - the important point being that the recipient does not have to be present and waiting for the message when it is sent. In digital terms, this is similar to sending a document to a printer when it is offline - using MSMQ the message to print the document would wait until the printer is online, instead of scrapping the message.
N.B This is means the printer could be the reason, but there may also be other causes. Either way, it is a low security risk issue, as I understand that is a primary concern. Assuming you have a router between you computers and the internet (and Antivirus programs), system firewalls are almost not needed these days.
What is MSMQ?
From Microsoft:
Microsoft Message Queuing (MSMQ) technology enables applications running at different times to communicate across heterogeneous networks and systems that may be temporarily offline. MSMQ provides guaranteed message delivery, efficient routing, security, and priority-based messaging. It can be used to implement solutions for both asynchronous and synchronous messaging scenarios.
add a comment |
After a fresh install of a Windows system appliance from a system image of a globally used high-security product, I run nmap
and below are the results:
root@kix:~# nmap -sT 192.168.10.2
Starting Nmap 7.70 ( https://nmap.org ) at 2018-12-21 19:37 +08
Nmap scan report for 192.168.10.2
Host is up (0.0012s latency).
Not shown: 995 filtered ports
PORT STATE SERVICE
1801/tcp open msmq
2103/tcp open zephyr-clt
2105/tcp open eklogin
2107/tcp open msmq-mgmt
49155/tcp open unknown
This is fresh install from the appliance's image. So it seems, the above listening TCP ports are Windows basic subsystem components.
add a comment |
I found this port open on my laptop(running Win10) and pretty sure it first appeared after I installed ICQ Instant Messenger. Hope this helps. :)
I should note that you don't have to be actively using the Messenger. Just having the program open and running in the background(this is how these programs are able to accept messages sent to you at any time) is what creates the open port. Just saying this in relation to you asking your daughter if she had been instant messaging at that time. Which in fact she probably wasn't.
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1068963%2fport-2105-open-on-network%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
3 Answers
3
active
oldest
votes
3 Answers
3
active
oldest
votes
active
oldest
votes
active
oldest
votes
The most common use for those ports is Microsoft Message Queuing or MSMQ, described below. At first sight it may appear to be for instant messaging, but is in fact a more fundamental component of some programs that communicate within local networks - such as printers, although I cannot be certain that this is the reason the port is open in your case.
In simple terms, it acts as a digital notice board - you pin a message to it and it remains there until the recipient removes it - the important point being that the recipient does not have to be present and waiting for the message when it is sent. In digital terms, this is similar to sending a document to a printer when it is offline - using MSMQ the message to print the document would wait until the printer is online, instead of scrapping the message.
N.B This is means the printer could be the reason, but there may also be other causes. Either way, it is a low security risk issue, as I understand that is a primary concern. Assuming you have a router between you computers and the internet (and Antivirus programs), system firewalls are almost not needed these days.
What is MSMQ?
From Microsoft:
Microsoft Message Queuing (MSMQ) technology enables applications running at different times to communicate across heterogeneous networks and systems that may be temporarily offline. MSMQ provides guaranteed message delivery, efficient routing, security, and priority-based messaging. It can be used to implement solutions for both asynchronous and synchronous messaging scenarios.
add a comment |
The most common use for those ports is Microsoft Message Queuing or MSMQ, described below. At first sight it may appear to be for instant messaging, but is in fact a more fundamental component of some programs that communicate within local networks - such as printers, although I cannot be certain that this is the reason the port is open in your case.
In simple terms, it acts as a digital notice board - you pin a message to it and it remains there until the recipient removes it - the important point being that the recipient does not have to be present and waiting for the message when it is sent. In digital terms, this is similar to sending a document to a printer when it is offline - using MSMQ the message to print the document would wait until the printer is online, instead of scrapping the message.
N.B This is means the printer could be the reason, but there may also be other causes. Either way, it is a low security risk issue, as I understand that is a primary concern. Assuming you have a router between you computers and the internet (and Antivirus programs), system firewalls are almost not needed these days.
What is MSMQ?
From Microsoft:
Microsoft Message Queuing (MSMQ) technology enables applications running at different times to communicate across heterogeneous networks and systems that may be temporarily offline. MSMQ provides guaranteed message delivery, efficient routing, security, and priority-based messaging. It can be used to implement solutions for both asynchronous and synchronous messaging scenarios.
add a comment |
The most common use for those ports is Microsoft Message Queuing or MSMQ, described below. At first sight it may appear to be for instant messaging, but is in fact a more fundamental component of some programs that communicate within local networks - such as printers, although I cannot be certain that this is the reason the port is open in your case.
In simple terms, it acts as a digital notice board - you pin a message to it and it remains there until the recipient removes it - the important point being that the recipient does not have to be present and waiting for the message when it is sent. In digital terms, this is similar to sending a document to a printer when it is offline - using MSMQ the message to print the document would wait until the printer is online, instead of scrapping the message.
N.B This is means the printer could be the reason, but there may also be other causes. Either way, it is a low security risk issue, as I understand that is a primary concern. Assuming you have a router between you computers and the internet (and Antivirus programs), system firewalls are almost not needed these days.
What is MSMQ?
From Microsoft:
Microsoft Message Queuing (MSMQ) technology enables applications running at different times to communicate across heterogeneous networks and systems that may be temporarily offline. MSMQ provides guaranteed message delivery, efficient routing, security, and priority-based messaging. It can be used to implement solutions for both asynchronous and synchronous messaging scenarios.
The most common use for those ports is Microsoft Message Queuing or MSMQ, described below. At first sight it may appear to be for instant messaging, but is in fact a more fundamental component of some programs that communicate within local networks - such as printers, although I cannot be certain that this is the reason the port is open in your case.
In simple terms, it acts as a digital notice board - you pin a message to it and it remains there until the recipient removes it - the important point being that the recipient does not have to be present and waiting for the message when it is sent. In digital terms, this is similar to sending a document to a printer when it is offline - using MSMQ the message to print the document would wait until the printer is online, instead of scrapping the message.
N.B This is means the printer could be the reason, but there may also be other causes. Either way, it is a low security risk issue, as I understand that is a primary concern. Assuming you have a router between you computers and the internet (and Antivirus programs), system firewalls are almost not needed these days.
What is MSMQ?
From Microsoft:
Microsoft Message Queuing (MSMQ) technology enables applications running at different times to communicate across heterogeneous networks and systems that may be temporarily offline. MSMQ provides guaranteed message delivery, efficient routing, security, and priority-based messaging. It can be used to implement solutions for both asynchronous and synchronous messaging scenarios.
answered Apr 23 '16 at 16:57
Sam3000
2,3252922
2,3252922
add a comment |
add a comment |
After a fresh install of a Windows system appliance from a system image of a globally used high-security product, I run nmap
and below are the results:
root@kix:~# nmap -sT 192.168.10.2
Starting Nmap 7.70 ( https://nmap.org ) at 2018-12-21 19:37 +08
Nmap scan report for 192.168.10.2
Host is up (0.0012s latency).
Not shown: 995 filtered ports
PORT STATE SERVICE
1801/tcp open msmq
2103/tcp open zephyr-clt
2105/tcp open eklogin
2107/tcp open msmq-mgmt
49155/tcp open unknown
This is fresh install from the appliance's image. So it seems, the above listening TCP ports are Windows basic subsystem components.
add a comment |
After a fresh install of a Windows system appliance from a system image of a globally used high-security product, I run nmap
and below are the results:
root@kix:~# nmap -sT 192.168.10.2
Starting Nmap 7.70 ( https://nmap.org ) at 2018-12-21 19:37 +08
Nmap scan report for 192.168.10.2
Host is up (0.0012s latency).
Not shown: 995 filtered ports
PORT STATE SERVICE
1801/tcp open msmq
2103/tcp open zephyr-clt
2105/tcp open eklogin
2107/tcp open msmq-mgmt
49155/tcp open unknown
This is fresh install from the appliance's image. So it seems, the above listening TCP ports are Windows basic subsystem components.
add a comment |
After a fresh install of a Windows system appliance from a system image of a globally used high-security product, I run nmap
and below are the results:
root@kix:~# nmap -sT 192.168.10.2
Starting Nmap 7.70 ( https://nmap.org ) at 2018-12-21 19:37 +08
Nmap scan report for 192.168.10.2
Host is up (0.0012s latency).
Not shown: 995 filtered ports
PORT STATE SERVICE
1801/tcp open msmq
2103/tcp open zephyr-clt
2105/tcp open eklogin
2107/tcp open msmq-mgmt
49155/tcp open unknown
This is fresh install from the appliance's image. So it seems, the above listening TCP ports are Windows basic subsystem components.
After a fresh install of a Windows system appliance from a system image of a globally used high-security product, I run nmap
and below are the results:
root@kix:~# nmap -sT 192.168.10.2
Starting Nmap 7.70 ( https://nmap.org ) at 2018-12-21 19:37 +08
Nmap scan report for 192.168.10.2
Host is up (0.0012s latency).
Not shown: 995 filtered ports
PORT STATE SERVICE
1801/tcp open msmq
2103/tcp open zephyr-clt
2105/tcp open eklogin
2107/tcp open msmq-mgmt
49155/tcp open unknown
This is fresh install from the appliance's image. So it seems, the above listening TCP ports are Windows basic subsystem components.
answered Dec 21 '18 at 14:46
daixtr
1114
1114
add a comment |
add a comment |
I found this port open on my laptop(running Win10) and pretty sure it first appeared after I installed ICQ Instant Messenger. Hope this helps. :)
I should note that you don't have to be actively using the Messenger. Just having the program open and running in the background(this is how these programs are able to accept messages sent to you at any time) is what creates the open port. Just saying this in relation to you asking your daughter if she had been instant messaging at that time. Which in fact she probably wasn't.
add a comment |
I found this port open on my laptop(running Win10) and pretty sure it first appeared after I installed ICQ Instant Messenger. Hope this helps. :)
I should note that you don't have to be actively using the Messenger. Just having the program open and running in the background(this is how these programs are able to accept messages sent to you at any time) is what creates the open port. Just saying this in relation to you asking your daughter if she had been instant messaging at that time. Which in fact she probably wasn't.
add a comment |
I found this port open on my laptop(running Win10) and pretty sure it first appeared after I installed ICQ Instant Messenger. Hope this helps. :)
I should note that you don't have to be actively using the Messenger. Just having the program open and running in the background(this is how these programs are able to accept messages sent to you at any time) is what creates the open port. Just saying this in relation to you asking your daughter if she had been instant messaging at that time. Which in fact she probably wasn't.
I found this port open on my laptop(running Win10) and pretty sure it first appeared after I installed ICQ Instant Messenger. Hope this helps. :)
I should note that you don't have to be actively using the Messenger. Just having the program open and running in the background(this is how these programs are able to accept messages sent to you at any time) is what creates the open port. Just saying this in relation to you asking your daughter if she had been instant messaging at that time. Which in fact she probably wasn't.
edited Jun 11 '18 at 13:43
answered Jun 11 '18 at 13:36
Clyde Berrow
11
11
add a comment |
add a comment |
Thanks for contributing an answer to Super User!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Some of your past answers have not been well-received, and you're in danger of being blocked from answering.
Please pay close attention to the following guidance:
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1068963%2fport-2105-open-on-network%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
When you say it seemed like the ports were used for "Instant Messaging", did you infer this from research in to what the ports were used for?
– Sam3000
Apr 23 '16 at 16:35
Yes Sam, That's what it looked like from researching ........
– Chucky DuPont
Apr 23 '16 at 16:42
Yes Sam3000, that is what it looked like after researching it........
– Chucky DuPont
Apr 23 '16 at 16:44
You're very welcome, if you're able to vote on my answer or mark it as the answer at any point too that would be much appreciated!
– Sam3000
Apr 23 '16 at 17:27