Re: weird network activity

From: Colonel Flagg (colonel_flagg_at_NOSOUPFORJ00internetwarzone.org)
Date: 08/17/03

  • Next message: Alsvik, Ture: "Listening ports?!" 
    Date: Sun, 17 Aug 2003 14:18:57 -0400

    In article <hh4tjvgs1qh0sm0qdngb2mn7lu3qasaoqq@4ax.com>, none@none.com
    says...
    >
    >
    > I'm using Win XP Pro and have Service Pack 2 and the latest critical
    > updates installed.
    >
    > I'm using Zone Alarm Pro and AVG antivirus with the latest sig file
    > and a
    > hardware router to a cable modem to the internet
    >
    > After rebooting, explorer.exe (Version 6.00.2800.1221 (xpsp2)
    > wants to connect to the local ip 127.0.0.1 Port 1060
    >
    > It also wants to connect to ip 230.255.255.250 Port 1900
    >
    > And sometimes also to ip 192.168.1.1 Port 5678
    >
    > Any ideas why it wants to do that?
    >
    >
    > Tony
    >
    >
    >

    What's the IP of the local machine? 192.168.1.1?

    127.0.0.1 is localhost, meaning, it's fine for it to connect to this
    address for whatever reason. I would however seek to find out why it's
    doing this and if this service is really needed. As for 230.255.255.250,
    I have no idea right off the bat, looks like a subnet mask, not an IP.

    You can get a port monitor for XP to find out what services/applications
    are connecting to particular ports. It's probably not a security
    concern, but you may regain some system resources if the services aren't
    needed and you can shut them down. 

    -- 
Colonel Flagg
http://www.internetwarzone.org/
Privacy at a click:
http://www.cotse.net 
Q: How many Bill Gates does it take to change a lightbulb?
A: None, he just defines Darkness? as the new industry standard..."
"...I see stupid people."
  • Next message: Alsvik, Ture: "Listening ports?!"

    Relevant Pages

    • weird network activity
      ... I'm using Win XP Pro and have Service Pack 2 and the latest critical ... I'm using Zone Alarm Pro and AVG antivirus with the latest sig file ... It also wants to connect to ip 230.255.255.250 Port 1900 ...
      (alt.computer.security)
    • Re: weird network activity
      ... >I'm using Win XP Pro and have Service Pack 2 and the latest critical ... >I'm using Zone Alarm Pro and AVG antivirus with the latest sig file ... I think its harmless. ...
      (alt.computer.security)
    • dllhost.exe
      ... I just downloaded the new Windows XP Service Pack 2. ... have Zone Alarm Pro so I get lots of new alerts when re ... starting my computer after the download. ...
      (microsoft.public.windowsxp.security_admin)
    • Re: dllhost.exe
      ... >> I just downloaded the new Windows XP Service Pack 2. ... >> starting my computer after the download. ... >> A changed program is trying to connect to the Internet ...
      (microsoft.public.windowsxp.security_admin)
    • DSO Exploit
      ... I use windows xp and have downloaded the service pack 2, ... and also use zone alarm pro. ... spybot search it finds a DSO expolit with 5 entries, ...
      (microsoft.public.windowsxp.security_admin)