cacti
+ Reply to Thread
Results 1 to 7 of 7

Thread: Spying Connection?

  1. #1
    HelpMe Guest

    Unhappy Spying Connection?

    It's some months I notice a strange connection on my port 80 (I usually monitor my ports with Ip-Tools). It changes from 2**.*2.*2.*0* to 2**.*2.*2.*05 (passing quite randomly through *02, *0*, *04) and it is sometimes in SYN SENT or TIME WAIT phase, rarely in ESTABLISHED phase. I scanned it in various ways but I coludn't find anything useful for proper identification. Please help me with all the info you can provide, I'd be very grateful! (I already tried SuperScan and CentralOps).

  2. #2
    Join Date
    Apr 2002
    Posts
    180

    Re: Spying Connection?

    Originally posted by HelpMe
    It's some months I notice a strange connection on my port 80 (I usually monitor my ports with Ip-Tools). It changes from 2**.*2.*2.*0* to 2**.*2.*2.*05 (passing quite randomly through *02, *0*, *04) and it is sometimes in SYN SENT or TIME WAIT phase, rarely in ESTABLISHED phase. I scanned it in various ways but I coludn't find anything useful for proper identification. Please help me with all the info you can provide, I'd be very grateful! (I already tried SuperScan and CentralOps).
    =======================================


    Hi

    I have the impression that it's NOT a connection on your port 80, it is rather an outgoing to 2**.*2.*2.*0*:80
    As a matter of fact, unless you are running your own http server, there will be NO possible connections on your port 80.
    From the other hand, the IP range 2**.*2.*2.*0* till 2**.*2.*2.*05 belongs to a site in Milano/Italy.
    I think that you have installed some kind of software that is trying to find an auto-update etc..

    Anyways, this is the software that you need, nothing else
    [url]http://www.ntutility.com/freeware.html[/url]
    works only for W2k, WinXP.
    Download "active ports" and see which application is behind this traffic, then you will decide to keep the suspected application or delete it.


    fEǚ.法Er
    __________________________
    [url]http://fmk.virtualave.net/*6crypt[/url]
    Last edited by fEǚ.法Er; 09-08-2003 at 09:26 AM.

  3. #3
    Join Date
    Sep 2003
    Posts
    3

    Question

    I need some more help on the subject: "Spying connection?". Please.

  4. #4
    Join Date
    Jun 2001
    Posts
    398
    hi,

    try google,if you can be a little more specific we may be able to help you.

    Regards Data.

  5. #5
    Join Date
    Sep 2003
    Posts
    3

    Exclamation Spying Connection

    Thanks Data. I'll be more specific. I've just discovered that the connection on port 80 begins when I use the Digiland chat ([url]http://digipeople.iol.it/chat_new.php[/url]). It rarely establishes, usually it remains in TIME WAIT status. It changes from 2**.*2.*2.*0* to 2**.*2.*2.*05, passing trough *02, *0*, *04 quite randomly, in the same period of time. These may be the 5 Digiland servers, they change depending on availability. The strange thing is that the connection is present even when I don't open Digiland chat for weeks. Maybe a javascript is downloaded on my pc the first time I have access to Digiland and then causes this? I think this is an interesting topic! Replies?

  6. #6
    Join Date
    Jun 2001
    Posts
    398
    HI,

    Ditto as Fever said. Install a firewall,set it to paranoid and keep watch of your outgoing connections.

    Regards Data.

  7. #7
    Unregistered Guest
    Umm try opening your chat program and then going to options and unchecking load at start-up. If theres no option, look in the windows start-up folder and move or delete the item. If that don't work go into your windows reg and delete the item from the run or run services key.

+ Reply to Thread

Similar Threads

  1. What are you doing to protect yourself from NSA spying?
    By allnettools in forum Internet Privacy
    Replies: 6
    Last Post: 06-09-2015, 11:25 AM
  2. Satellite Connection!!!
    By Joe-X in forum Programming
    Replies: 0
    Last Post: 01-20-2008, 11:02 PM
  3. I ain't lying, Microsoft is spying
    By johnny in forum Internet Privacy
    Replies: 4
    Last Post: 11-20-2005, 01:11 AM
  4. corporate spying
    By kaltenberg in forum Internet Privacy
    Replies: 0
    Last Post: 11-03-2005, 05:31 PM
  5. WARNING! Is your proxy spying on you?
    By Blacksheep in forum Proxies and Firewalls
    Replies: 16
    Last Post: 07-17-2001, 11:49 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts