Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: 1use on March 01, 2009, 11:29:02 PM
-
Someone from Asia is attempting to connect to ashMaiSv.exe on my PC.
My firewall asked me if I should allow or block this, I blocked it.
(NOTE: my firewall hasn't asked me a question for over a year.)
125.65.45.55:6000 TCP to my IP at port 2967 ashMaiSv.exe
The WhoIs lookup tells me its that IP is in Asia.
Looking up the domain name for IP: 125.65.45.55
(The domain name for the specified IP address could not be found.)
Connecting to the server on standard HTTP port: 80
HTTP/1.0 200 HTTP OK Server: Serv-U/7.4.0.1
Set-Cookie: Session=; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/
So why would someone in Asia be trying to connect to my PC like that?
-
Do you have a router? What firewall are you using? AshMaiSv.exe is the Internet Mail Provider, and only listens on your Avast! proxy ports for inbound connection requests, makes outbound connections to the internet on your mail ports (usually 25, 110) at your mail server's IP address. So don't know how your firewall could have decided the destination was AshMaiSv.exe from that port number and IP address.
-
***
Farther information on this IP address ...
http://www.ip-adress.com/whois/125.65.45.55
http://www.ip-adress.com/ip_tracer/125.65.45.55
http://rabidmonkey.org/ (see Honeypot summary report at top right)
It seems someone in China is trying to hack into your computer. Most likely, it is no one you know.
***