RE: PORT # Question... Am I being hacked ?

Hi Chuck -

>I notice that on the 2 servers I do hit for email, they both show :pop3 so
>what is the :1214 at the end of the rr address ?

If you use the -n switch with netstat, it will not convert port number to
their names for the common ports.  It also will not attempt to convert IP
addresses to host/domain names.

pop3 is port 110.  All of the standard ports for incoming connections are
below 1024.  Some common ones are:

20  FTP data
21  FPT control
22  SSH
23  Telnet
25  SMTP
80  HTTP
110 POP3
443 HTTPS

Specialized applications may use ports of 1024 and above for incoming
connections.

For standard applications the outgoing port number is an incrementing
number starting at 1024 and working up to 65535.

>ProTo           Local Address           Foreign Address         State
>
>TCP             gr30:2342
>clt74-35-022.carolina.rr.com:1214 ESTABLISHED
>
>the local address is my PC's name.
>
>is the :2342 a Port # - if so, what is it for ?
>is the :1214 a Port # - if so, what is it for ?

The main question here is, did your PC establish the connection or did the
rr.com system?

If your PC established the connection, then you need to think about what
you are running.  You may have "spyware" on your PC "phoning home".

If rr.com established the connection, then there had to be some kind of
program on your PC listening on port 2342, otherwise the connection request
would have been rejected.  You may have a "trojan" program on your PC which
someone could use to execure remote commands or do other naughty things.

You may want to install a desktop firewall.  Not only can it prevent
unauthorized incoming connections, it also can prevent unauthorized
outgoing connections if configured to do so.

I use Kerio Personal Firewall (free for personal use) ...

http://www.kerio.com/parser/mainpage.php?id=204&lg=1

Disclaimer: I have no connection with Kerio other than being a user and
sometime beta tester.

Ken
Opinions expressed are my own and do not necessarily represent the views of
my employer or anyone in their right mind.