what is 193.223.189.205:445

[jg]

what is 193.223.189.205:445 used for? What does the outgoing traffic in
that port for? time sync?

 

[bud]

what is 193.223.189.205:445 used for? What does the outgoing traffic in
that port for? time sync?

http://www.petri.co.il/what's_port_445_in_w2k_xp_2003.htm

 

[jg]

thank you. I guess I disable that in the firewall. But I sure would like
the stop the traffic form occurring in the first place.

 

[Enkidu]

what is 193.223.189.205:445 used for? What does the outgoing traffic
in that port for? time sync?

That appears to be an address owned by EDS Switzerland. It may be a
client of theirs though.

Port 445 is one of the ports that is used when using file shares.

Cheers,

Cliff

 

[jg]

thank you very much

how would one look up owner/domain of an address when there is no
corresponding website?

 

[Dick Cardy]

thank you very much

how would one look up owner/domain of an address when there is no
corresponding website?

By querying the appropriate authority for IP allocation, in this case RIPE

 

[q_q_anonymous]

That appears to be an address owned by EDS Switzerland. It may be a
client of theirs though.

Port 445 is one of the ports that is used when using file shares.

Port 139 seemsw to be standard file sharing. Port 445 iseems to be file
sharing minus netbios. it seems from netstat that port 139 is bound to
the LAN. whereas port 445 is open to the internet. that seems
insecure to me. To help secure port 445, the windows firewall be set
to block incoming connections to port 445 from outside the LAN.

i'd have thought that port 445 "file sharing" is accessed manually -
not with a client app - thus he should know if he is making an outgoing
connection -
file sharing - at least with port 139, is not (and cannot?) be done
over the internet-from outside a LAN, but apparently port 445 can.

It does seem very odd to have your comp accessing file sharing on
another comp without you actually doing it manually.

 

[jg]

thank you all. I finally tracked down the culprit and zap that.
the PC used to be part of network used that IP address to access network
resources. I killed that off

 

[Enkidu]

Port 139 seemsw to be standard file sharing. Port 445 iseems to be file
sharing minus netbios. it seems from netstat that port 139 is bound to
the LAN. whereas port 445 is open to the internet. that seems
insecure to me. To help secure port 445, the windows firewall be set
to block incoming connections to port 445 from outside the LAN.

I was trying to simplify. There are a number of ports involved in
filesharing.

Cheers,

Cliff

 

[q_q_anonymous]

thank you all. I finally tracked down the culprit and zap that.
the PC used to be part of network used that IP address to access network
resources. I killed that off

it wasn't a culprit. it was a facility you didn't want. No need for FUD