Suspecious Connections
Results 1 to 9 of 9

Thread: Suspecious Connections

  1. #1
    Senior Member
    Join Date
    Nov 2003
    Posts
    285

    Suspecious Connections

    in my netstat command i found two connectins with both local and foreign address as localhost, can any body tell me what these connections are.

  2. #2
    Senior Member
    Join Date
    Feb 2004
    Posts
    201
    Have you tried a netstat -a -o -n to get a little more information?? This will give you the PID which may help you determine what is causing these connections.

  3. #3
    I just did a quick little netstat and i got the same thing but with different numbers for example..


    i got
    TCP Sarah:1025 0.0.0.0:0
    TCP Sarah:137 0.0.0.0:0
    TCP Sarah:138 0.0.0.0:0
    TCP Sarah:nbsession 0.0.0.0:0
    UDP Sarah:1025 *:*
    UDP Sarah:nbname *:*
    UDP Sarah:nbdatagram *:*


    so if i'm not mistaken then there's nothing there that you shouldn't be paranoid about.

    cheers
    ..::front2back::..

  4. #4
    Just a Virtualized Geek MrLinus's Avatar
    Join Date
    Sep 2001
    Location
    Redondo Beach, CA
    Posts
    7,324
    IIRC, Ports 1025 and 1026 are both used by Task Scheduler (RPC). This Article may help you in locking down your Windows services and keeping them to a minimum.
    Goodbye, Mittens (1992-2008). My pillow will be cold without your purring beside my head
    Extra! Extra! Get your FREE copy of Insight Newsletter||MsMittens' HomePage

  5. #5
    Thanks for that Link MsMittens very useful indeed, gonna be up all night reading now.
    So you got anymore useful Links like that or should i just go ask my best friend google?

    cheers
    ..::front2back::..

  6. #6
    Just a Virtualized Geek MrLinus's Avatar
    Join Date
    Sep 2001
    Location
    Redondo Beach, CA
    Posts
    7,324
    Google is the ultimate friend. If you look around AO there are a few tutorials/links on Locking Down Windows. Do a search for NSA+windows. Not too surprising, NSA has some guides on how to lock down Windows.
    Goodbye, Mittens (1992-2008). My pillow will be cold without your purring beside my head
    Extra! Extra! Get your FREE copy of Insight Newsletter||MsMittens' HomePage

  7. #7
    Originally posted here by MsMittens
    Google is the ultimate friend. If you look around AO there are a few tutorials/links on Locking Down Windows. Do a search for NSA+windows. Not too surprising, NSA has some guides on how to lock down Windows.
    Ok thanks MsMittens, i will defiantly do a google search, and search through the Tutorials area of this place.

    thanks
    ..::front2back::..

  8. #8
    Junior Member
    Join Date
    Jan 2004
    Posts
    20
    Are you using Mozilla? 'cause mozilla has two loop connections to localhost that are consecutive ports.

  9. #9
    Senior Member
    Join Date
    Nov 2003
    Posts
    285
    thanks all and i was not being paranoid i just wanted to know why there are two connections to my computer thats all . thanks for the links MsM it would be a long read so i would be a bit busy

    BTW : no i dont use Mozilla. ...

    Ok thanks MsMittens, i will defiantly do a google search, and search through the Tutorials area of this place
    so am i .....

    [edit]
    i just found out my G.F. has downloded Motzilla FireFox . i didn't notice that it was running at that time . those two connectins are only present when it is running. sorry about that may be i should stop drinking this much
    'cause mozilla has two loop connections to localhost that are consecutive ports.
    yep newinnash was dead right

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •