Re: weird network activity
From: Colonel Flagg (colonel_flagg_at_NOSOUPFORJ00internetwarzone.org)
Date: Sun, 17 Aug 2003 14:18:57 -0400
In article <email@example.com>, firstname.lastname@example.org
> I'm using Win XP Pro and have Service Pack 2 and the latest critical
> updates installed.
> I'm using Zone Alarm Pro and AVG antivirus with the latest sig file
> and a
> hardware router to a cable modem to the internet
> After rebooting, explorer.exe (Version 6.00.2800.1221 (xpsp2)
> wants to connect to the local ip 127.0.0.1 Port 1060
> It also wants to connect to ip 126.96.36.199 Port 1900
> And sometimes also to ip 192.168.1.1 Port 5678
> Any ideas why it wants to do that?
What's the IP of the local machine? 192.168.1.1?
127.0.0.1 is localhost, meaning, it's fine for it to connect to this
address for whatever reason. I would however seek to find out why it's
doing this and if this service is really needed. As for 188.8.131.52,
I have no idea right off the bat, looks like a subnet mask, not an IP.
You can get a port monitor for XP to find out what services/applications
are connecting to particular ports. It's probably not a security
concern, but you may regain some system resources if the services aren't
needed and you can shut them down.
-- Colonel Flagg http://www.internetwarzone.org/ Privacy at a click: http://www.cotse.net Q: How many Bill Gates does it take to change a lightbulb? A: None, he just defines Darkness? as the new industry standard..." "...I see stupid people."