Unsolved
This post is more than 5 years old
1 Rookie
•
40 Posts
0
19507
May 1st, 2006 17:00
socks port 1080
i keep getting an event in my mcafee firewall saying;
A computer in your Banned IP list at IP address 194.225.118.19 has attempted to access TCP port 1080 on your computer.
TCP port 1080 is commonly used by the "Socks" service or program. SOCKS permits you to share your Internet connections with other computers. Many Connection sharing systems provide SOCKS support. It is unwise to open this port to Internet. Rather, use the trusted address group for your local LAN. Note that many IRC servers and ISPs will scan your computer to see if SOCKS is running when you connect. If your socks port is open, you may be denied access to IRC or the Internet due to considerable danger that open SOCKS system pose to the general public. If the scan is coming from your ISP or IRC server you may choose to ignore it. Otherwise you should consider reporting this scan.
TCP port 1080 is commonly used by the "Socks" service or program. SOCKS permits you to share your Internet connections with other computers. Many Connection sharing systems provide SOCKS support. It is unwise to open this port to Internet. Rather, use the trusted address group for your local LAN. Note that many IRC servers and ISPs will scan your computer to see if SOCKS is running when you connect. If your socks port is open, you may be denied access to IRC or the Internet due to considerable danger that open SOCKS system pose to the general public. If the scan is coming from your ISP or IRC server you may choose to ignore it. Otherwise you should consider reporting this scan.
after getting it for a few weeks i banned the address as its always the same one.
i went on whois and it gave me a company/group called BaneTele AS and it said it was a temp allocation of ip 194.0.0.0 - 194.0.255.255 for trade fairs ect.
Can anyone please help me with this or possibly give me some info on what any of this could mean?
The funny thing is, when i signed onto my aol account today, all my favourite places had changed back to the ones i had almost a year ago.
surely this would require some sort of restore but i have not done anything at all.
also i cannot access secure sites, only the type that require a special certificate!!
please help
No Events found!
bamajim
10.4K Posts
0
May 1st, 2006 19:00
lauraocal
The warning you are getting is accurate, posrt 1080 is used ofr File sharing, such as P2P, music and video downloads. It's good that your firewall is warning of such intrusions.
However, if your "favorites" have changed, without you changing them, and yo u have trouble accessing certain sites, we need to have a look
Go here and download Hijackthis
http://dsvs.org/5/HijackThis.exe
Save it in a convenient permanent folder such as C:\\HJT\\, double click HijackThis.exe, and hit "Scan". When the scan is finished, the "Scan" button will change into a "Save Log" button. Press that, save the log, Ctrl-A to Select All, and copy its contents AT THE LINK BELOW
http://forums.us.dell.com/supportforums/board?board.id=si_hijack
and include a description of the problem along with your log
Please do not be tempted to "fix" on your own. Hijackthis is a very powerful tool, if used incorrectly can cause system problems
bamajim
Training at Malware Removal University