Ciscoworks/Sun Solaris issues command

Question

Our Ciscoworks on Solaris always issues commands rusersd to other servers, here is an example to server02, which should not happend. the server itself has nothing to do with ciscoworks.
Can you please tell me why it is issuing this? and how to stop it?
10.Y.Y.101 is the Ciscoworks server,
thanks, Han
Here is one of them:   X.X.100.117  Server02
Here are a couple log entries from :
May  6 12:08:29 Server02 portmap[8173]: connect from 10.Y.Y.101 to getport(rusersd): request from unauthorized host
May  6 16:36:20 Server02 portmap[8479]: connect from 10.Y.Y.101 to getport(rusersd): request from unauthorized host

Answer 1

Not sure about solaris. Various strings of netstat on sof appliance (Linux) work for me. Here showing first connections to my remote workstation IP (192.168.150.137) and then identifying the responsible process (CSCO.Apache server) as what is listening on that port:
[SecLab-LMS/root-ade ~]# netstat -anp | grep 150.137tcp        0      0 192.168.100.121:443         192.168.150.137:22015       TIME_WAIT   -                  [SecLab-LMS/root-ade ~]# netstat -lntp | grep CSCO | grep 443tcp        0      0 0.0.0.0:443                 0.0.0.0:*                   LISTEN      1160/CSCO.Apache   tcp        0      0 :::44300                    :::*                        LISTEN      30305/CSCO.UPMProcetcp        0      0 :::44301                    :::*                        LISTEN      30305/CSCO.UPMProce[SecLab-LMS/root-ade ~]#