Wilders Security Forums  

Go Back   Wilders Security Forums > Security Products > other firewalls
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

 
 
Thread Tools Search this Thread
  #1  
Old February 5th, 2006, 04:42 PM
iceni60 iceni60 is offline
( ^o^)
 
Join Date: Jun 2004
Posts: 5,116
Default why would i be connected to 195.xx.xx.xx

hi, my connection seemed abit slow so i had alook to see what connections i had. one of them was 195.xx.xx.xx (i'm on a standalone PC) when i went to that address it was an apache server setup page. i think i saw sambra as a running process too but i'm not sure i wasn't thinking straight by then. i captured abit of the traffic but i can't find it now lol. also i saw ssh-agent as a running process too i'm sure about that.

so can someone tell me this is normal computer stuff and i have nothing to worry about? this was in Ubuntu, i'm in XP now. i have no backups so i can't so a reinstall.

i have to reboot because i launched icesword but i forgot it doesn't run correctly on my system and it's taking up all my resources and i can't kill it off.

how can i be connected to that 195 address? thanks
__________________
musical savant
-http://www.youtube.com/watch?v=liprsDr8GrE-
-http://www.youtube.com/watch?v=qpIigV7-kJk-
  #2  
Old February 5th, 2006, 09:16 PM
CrazyM's Avatar
CrazyM CrazyM is offline
Firewall Moderator
 
Join Date: Feb 2002
Location: BC, Canada
Posts: 2,433
Default Re: why would i be connected to 195.xx.xx.xx

Can you find any of the details from the captured traffic or any log info?

Regards,

CrazyM
__________________
"The best thing we can do in cyberspace is exactly what we do in the real world: do our best to manage the risks."
- Bruce Schneier
  #3  
Old February 5th, 2006, 09:45 PM
iceni60 iceni60 is offline
( ^o^)
 
Join Date: Jun 2004
Posts: 5,116
Default Re: why would i be connected to 195.xx.xx.xx

Quote:
Originally Posted by CrazyM
Can you find any of the details from the captured traffic or any log info?

Regards,

CrazyM
i'll have a look. i don't know where it is i was sure i saved it but maybe not. when i look for recent events it's not there.

i don't think i have been owned now i can't see how it could have happened, i think it's more likely something i did. but i really want to be sure though.

what are the options? what things can be at 195.xx.xx.xx if i'm not connected to anything? i have a printer but it was turned off and there's nothing else.
__________________
musical savant
-http://www.youtube.com/watch?v=liprsDr8GrE-
-http://www.youtube.com/watch?v=qpIigV7-kJk-
  #4  
Old February 6th, 2006, 01:41 AM
Mrkvonic Mrkvonic is offline
Linux Systems Expert
 
Join Date: May 2005
Posts: 7,467
Default Re: why would i be connected to 195.xx.xx.xx

Hi,
Maybe an update for the distro?
Did you try to reverse dns that address?
Mrk
__________________
http://www.dedoimedo.com

All your base are belong to us

Linux Systems Expert / Systems Programmer, Linux System Administrator, LPIC-1, LPIC-2 (WIP), GSEC, CCHD, CCHA
  #5  
Old February 6th, 2006, 02:20 AM
CrazyM's Avatar
CrazyM CrazyM is offline
Firewall Moderator
 
Join Date: Feb 2002
Location: BC, Canada
Posts: 2,433
Default Re: why would i be connected to 195.xx.xx.xx

Quote:
Originally Posted by iceni60
what are the options? what things can be at 195.xx.xx.xx if i'm not connected to anything? i have a printer but it was turned off and there's nothing else.
Without an IP and logs to narrow it down there is just not enough information at this time. Before you go online with that OS next be prepared to monitor and log network connections.

Regards,

CrazyM
__________________
"The best thing we can do in cyberspace is exactly what we do in the real world: do our best to manage the risks."
- Bruce Schneier
  #6  
Old February 6th, 2006, 08:02 AM
iceni60 iceni60 is offline
( ^o^)
 
Join Date: Jun 2004
Posts: 5,116
Default Re: why would i be connected to 195.xx.xx.xx

thanks for the help. i got abit confused with the address, i thought it was 192.xx.xx.xx so thought it was local. i don't think it was local now and was just a site using an apache server. i think it was a download i thought i had cancelled but was still running in the background.
__________________
musical savant
-http://www.youtube.com/watch?v=liprsDr8GrE-
-http://www.youtube.com/watch?v=qpIigV7-kJk-
  #7  
Old February 6th, 2006, 08:19 AM
iceni60 iceni60 is offline
( ^o^)
 
Join Date: Jun 2004
Posts: 5,116
Default Re: why would i be connected to 195.xx.xx.xx

i think it was a download from the site below. i saw the generic apache page because the site was having problems.
http://www.betterdesktop.org/
__________________
musical savant
-http://www.youtube.com/watch?v=liprsDr8GrE-
-http://www.youtube.com/watch?v=qpIigV7-kJk-
  #8  
Old February 7th, 2006, 01:41 AM
CrazyM's Avatar
CrazyM CrazyM is offline
Firewall Moderator
 
Join Date: Feb 2002
Location: BC, Canada
Posts: 2,433
Default Re: why would i be connected to 195.xx.xx.xx

Good to hear. Hopefully this mystery is solved and nothing to worry about.

Regards,

CrazyM
__________________
"The best thing we can do in cyberspace is exactly what we do in the real world: do our best to manage the risks."
- Bruce Schneier
 

Wilders Security Forums > Security Products > other firewalls « Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Settings
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -4. The time now is 06:52 AM.


Powered by vBulletin® Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2013, Wilders Security Forums