2 ip address connecting to port 1345 & 1342?

[ceminess]

I have two ip address trying to get to port 1345 on my router

here is a copy of my incoming log table on my router.

205.188.9.61	1345
205.188.5.233	1342
205.188.9.61	1345
205.188.5.233	1342
205.188.9.61	1345
205.188.5.233	1342
205.188.9.61	1345
205.188.5.233	1342
205.188.9.61	1345

what are these ip address doing, and how do i stop them from doing whatever they are doing?

EDIT// also is there a website/app. to where i can type in an ip address and it tells me about the address, like where the address is coming from and stuff like that.

[Si Veteran]

EDIT// also is there a website/app. to where i can type in an ip address and it tells me about the address, like where the address is coming from and stuff like that.

http://www.dnsstuff.com

[Prisoner of Technology]

Check out DNSstuff

/edit too slow :p

[dotRoot]

If I remember right (I may be wrong though) those are the newer SubSeven ports. Those IPs are from AOLers. So either they are trying to connect to a trojan on your computer or they are just port scanning.

However those ports were listed as:

1342 - ESBroker

1345 - VPJP

[ceminess]

well they are aol address and they are coming from Virginia.

i just refreshed my incoming log table and now i got all this, whats going on :wacko:

Source IP	Destination Port Number
62.201.71.73	1025
69.93.173.18	1999
69.93.173.18	1998
82.50.109.111	6881
203.217.228.97	9898
203.217.228.97	5554
66.200.224.109	1026
220.121.91.147	9898
220.121.91.147	1023
220.121.91.147	5554
81.38.120.129	1025
24.12.66.142	1025
24.12.66.142	3127
24.12.66.142	6129
24.12.66.142	3127
24.12.66.142	1025
24.12.66.142	6129
24.12.66.142	3127
24.12.66.142	1025
205.188.9.61	1345
205.188.5.233	1342
205.188.9.61	1345
205.188.5.233	1342
205.188.9.61	1345
205.188.5.233	1342
205.188.9.61	1345
217.127.200.198	6881
216.239.57.104	49320
0.8.156.156  80

[dotRoot]

Looks like a portscan to me if that's happening.

[phono]

get tcpview from sysinternals.com and check what app is listening on those ports...

[ceminess]

none i have no apps listening on any of the ports that my incoming log table reports.

should i worry, or should i just ignore these incoming ip's

[phono]

keep firewall up, in shape & ignore those kids...

[ceminess]

okay thanks, i just reinstalled ZA pro.

[dotRoot]

Like I said I'm pretty sure they are just IP scanning. Probably doing it on your whole ISP's IP range and not targetting specifically you.

[mot]

If I remember right (I may be wrong though) those are the newer SubSeven ports. Those IPs are from AOLers. So either they are trying to connect to a trojan on your computer or they are just port scanning.

However those ports were listed as:

1342 - ESBroker

1345 - VPJP

Is there some kind of database where you can type in a port number and it'll tell you what those ports are used for? :D

[Billprozac]

There are some good lists out on the internet, just ggogle it. Although, if you do put them into a DB, let me know cause I could whip up a web frontend for it.

[OPaul]

Is there some kind of database where you can type in a port number and it'll tell you what those ports are used for? :D

http://www.iana.org/assignments/port-numbers

[Colin-uk Veteran]

Is there some kind of database where you can type in a port number and it'll tell you what those ports are used for? :D

http://www.grc.com/PortDataHelp.htm

[Sneakeh]

i bet its a trojan