Local Port: 2280 connect to foreign address 65.54.249.190:80

[Isabella]

I have use IPSec to block all the ports execpt some neccessary port. But
2280 definitly is NOT one of the port I have opened. I get this connection
by netstat.

Proto Local Address Foreign Address State
TCP xxx.xxx.xxx.xxx:2280 65.54.249.190:80 ESTABLISHED

Anyone know when what is this connection about? Is my server hacked by
someone?

Isabella

 

[Steven L Umbach]

You are connected to a website at that address. Enter that address
in the address bar of IE and see what it brings up and if it is related to
application, etc on your machine. You have not necessarily been hacked. Are
your ipsec filters suposed to block your computer from accessing the
internet for normal access of http sites?? You might want to go to
http://scan.sygatetech.com/ to see if your filters are working as expected
for inbound initiated traffic. Though ipsec filtering has it's place, I much
prefer a personal firewall. I use Kerio and it an even manages traffic by
application [protected by md5 hash], logs traffic, allows firewall rules to
be created on the fly, and maps port useage to process/application. So what
you describe would not happen on my computer because I only allow Internet
Explorer to access the internet on port 80. --- Steve