help with this

  • random553
  • Born
  • Born
  • random553
  • Posts: 2

Post 3+ Months Ago

Hey im brand new by the way :D

But anyway i found this when i typed netstat amoung other things some i know that are safe these two i dont recognize i googled them and couldnt find anything so i would like to know are these bad? :?

And would port numbers be needed?

cds779.lax.llnw.net:http CLOSE_WAIT
by1msg4146003.phx.gbl:1863 ESTABLISHED

and this one popped up just a second ago... i think its safe but while im asking may as well?

203-97-117-100.cable.telstraclear.net:3114 ESTABLISHED
  • Anonymous
  • Bot
  • No Avatar
  • Posts: ?
  • Loc: Ozzuland
  • Status: Online

Post 3+ Months Ago

  • Don2007
  • Web Master
  • Web Master
  • Don2007
  • Posts: 4924
  • Loc: NY

Post 3+ Months Ago

Port 1863 is MSN. Is telstraclear your ISP? Are you in NZ?
When you run netstat -an to check for unwanted connections, make sure that you have just rebooted and have no windows opened.
You can always google port numbers and also search google for 'trojan ports' That will give you a list of ports that trojans use.
High port numbers are ok in the local address column as they are random ports that both windows and unix use for outbound connections. They become suspicious when they are in the foreign address column.
  • random553
  • Born
  • Born
  • random553
  • Posts: 2

Post 3+ Months Ago

i got a local ISP and no im not in NZ
  • Don2007
  • Web Master
  • Web Master
  • Don2007
  • Posts: 4924
  • Loc: NY

Post 3+ Months Ago

Then I would be suspicious of that second entry on port 3114

Post Information

  • Total Posts in this topic: 4 posts
  • Users browsing this forum: No registered users and 78 guests
  • You cannot post new topics in this forum
  • You cannot reply to topics in this forum
  • You cannot edit your posts in this forum
  • You cannot delete your posts in this forum
  • You cannot post attachments in this forum
 
 

© 1998-2014. Ozzu® is a registered trademark of Unmelted, LLC.