My PC regularly tries to contact another server in an other domain on another subnet that I have nothing to do with. I am a LAN administrator and have not configured any client process that should connect with that server. There are other servers on that subnet and on my subnet that my PC does connect to in this way.
I have disabled network crawling but my PC still tries to open a TCP session with the server
I want to find out what is doing this or/ and prevent it from happening.
Below is what I see in port reporter. My PC is 142.105.2.21. The server which I should have nothing to do with is 142.105.96.112
Process ID: 4 (System)
System Process
PID Port Local IP State Remote IP:Port
4 TCP 445 0.0.0.0 LISTENING 0.0.0.0
4 TCP 139 142.105.2.21 LISTENING 0.0.0.0
4 TCP 1099 142.105.2.21 ESTABLISHED 142.105.2.52:445
4 TCP 1219 142.105.2.21 ESTABLISHED 142.105.96.112:139
4 UDP 445 0.0.0.0 *:*
4 UDP 137 142.105.2.21 *:*
4 UDP 138 142.105.2.21
Below also are some lines from my windows firewall log:
008-04-04 08:15:05 OPEN TCP 142.105.2.21 142.105.96.112 1066 445 - - - -
2008-04-04 08:15:53 OPEN TCP 142.105.2.21 142.105.96.112 1075 445 - - - - - - - - -
2008-04-04 08:15:53 OPEN TCP 142.105.2.21 142.105.96.112 1076 139 - - - - - - - - -
2008-04-04 08:15:53 CLOSE TCP 142.105.2.21 142.105.96.112 1076 139 - - -
2008-05-06 08:34:56 DROP TCP 142.105.96.112 142.105.2.21 139 1221 48 SA 418609128 2589345294 65535 - - - RECEIVE
Start Free Trial
