[pchelpers] Re: program phoning home?
- From: Scott McNay <Wizard@xxxxxxxx>
- To: GCox <pchelpers@xxxxxxxxxxxxx>
- Date: Mon, 14 Jul 2003 22:34:19 -0500
Hi George,
Sunday, July 13, 2003, 8:26:16 PM, you wrote:
G> No, Scott I don't have a router. I think I'll keep blocking this activity
G> til I come upon a good reason not to. You really helped a lot and I do
G> appreciate it all of you who posted on this.
What are you using that tells you that something is trying to access
that IP?
Here's the list of port accesses on my system:
C:> NETSTAT -an
Proto Local Address Foreign Address State
TCP 0.0.0.0:80 0.0.0.0:0 LISTENING
(Redirects to :8129)
TCP 0.0.0.0:88 0.0.0.0:0 LISTENING
(Web server for a program I'm writing)
TCP 0.0.0.0:135 0.0.0.0:0 LISTENING
TCP 0.0.0.0:443 0.0.0.0:0 LISTENING
TCP 0.0.0.0:445 0.0.0.0:0 LISTENING
TCP 0.0.0.0:1025 0.0.0.0:0 LISTENING
TCP 0.0.0.0:1242 0.0.0.0:0 LISTENING
TCP 0.0.0.0:1755 0.0.0.0:0 LISTENING
(My streaming video server)
TCP 0.0.0.0:1756 0.0.0.0:0 LISTENING
(My streaming video server)
TCP 0.0.0.0:2028 0.0.0.0:0 LISTENING
TCP 0.0.0.0:2035 0.0.0.0:0 LISTENING
TCP 0.0.0.0:2756 0.0.0.0:0 LISTENING
TCP 0.0.0.0:2817 0.0.0.0:0 LISTENING
TCP 0.0.0.0:2819 0.0.0.0:0 LISTENING
TCP 0.0.0.0:3537 0.0.0.0:0 LISTENING
TCP 0.0.0.0:3713 0.0.0.0:0 LISTENING
TCP 0.0.0.0:3798 0.0.0.0:0 LISTENING
TCP 0.0.0.0:3799 0.0.0.0:0 LISTENING
TCP 0.0.0.0:4761 0.0.0.0:0 LISTENING
TCP 0.0.0.0:4762 0.0.0.0:0 LISTENING
TCP 0.0.0.0:4764 0.0.0.0:0 LISTENING
TCP 0.0.0.0:4966 0.0.0.0:0 LISTENING
TCP 0.0.0.0:8088 0.0.0.0:0 LISTENING
(Web server for my pictures)
TCP 0.0.0.0:8128 0.0.0.0:0 LISTENING
TCP 0.0.0.0:8129 0.0.0.0:0 LISTENING
(My web server for streaming videos)
TCP 0.0.0.0:8139 0.0.0.0:0 LISTENING
TCP 127.0.0.1:3798 127.0.0.1:8128 ESTABLISHED
TCP 127.0.0.1:3799 127.0.0.1:8139 ESTABLISHED
TCP 127.0.0.1:8128 127.0.0.1:3798 ESTABLISHED
TCP 127.0.0.1:8139 127.0.0.1:3799 ESTABLISHED
TCP 192.168.1.110:139 0.0.0.0:0 LISTENING
TCP 192.168.1.110:2817 64.12.30.108:5190 ESTABLISHED
(Probably AIM or ICQ)
TCP 192.168.1.110:2819 64.12.24.148:5190 ESTABLISHED
(Probably ICQ or AIM)
TCP 192.168.1.110:3537 216.136.226.19:5050 ESTABLISHED
(Probably Yahoo IM)
UDP 0.0.0.0:135 *:*
UDP 0.0.0.0:445 *:*
UDP 0.0.0.0:500 *:*
UDP 0.0.0.0:1026 *:*
UDP 0.0.0.0:1066 *:*
UDP 0.0.0.0:1170 *:*
UDP 0.0.0.0:1467 *:*
UDP 0.0.0.0:1755 *:*
UDP 0.0.0.0:3456 *:*
UDP 127.0.0.1:123 *:*
UDP 127.0.0.1:1319 *:*
UDP 127.0.0.1:1985 *:*
UDP 127.0.0.1:2648 *:*
UDP 127.0.0.1:3129 *:*
UDP 127.0.0.1:3179 *:*
UDP 127.0.0.1:4098 *:*
UDP 127.0.0.1:4912 *:*
UDP 127.0.0.1:4925 *:*
UDP 192.168.1.110:123 *:*
UDP 192.168.1.110:137 *:*
UDP 192.168.1.110:138 *:*
If anyone is feeling curious about some of the stuff mentioned above,
feel free to look:
http://67.9.80.186:88 (any name and password, little to see)
http://67.9.80.186:8088/pics
http://67.9.80.186:8129 (user test, password test)
--Scott.
Regards, John Durham (list moderator) <http://modecideas.com/contact.html?sig>
Freelists login at //www.freelists.org/cgi-bin/lsg2.cgi
List archives at //www.freelists.org/archives/pchelpers
PC-HELPERS list subscribe/unsub at http://modecideas.com/discuss.htm?sig
Good advice is like good paint- it only works if applied.
Other related posts:
