Author Topic: ashMaiSv.exe, someone from Asia is attempting to connect to Avast on my PC.  (Read 2382 times)

0 Members and 1 Guest are viewing this topic.

1use

  • Guest
Someone from Asia is attempting to connect to ashMaiSv.exe on my PC.
My firewall asked me if I should allow or block this, I blocked it.
 (NOTE: my firewall hasn't asked me a question for over a year.)
125.65.45.55:6000 TCP to my IP at port 2967 ashMaiSv.exe

The WhoIs lookup tells me its that IP is in Asia.
Looking up the domain name for IP: 125.65.45.55
(The domain name for the specified IP address could not be found.)
Connecting to the server on standard HTTP port: 80
HTTP/1.0 200 HTTP OK            Server: Serv-U/7.4.0.1
Set-Cookie: Session=; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/

So why would someone in Asia be trying to connect to my PC like that?

sded

  • Guest
Do you have a router?  What firewall are you using?  AshMaiSv.exe is the Internet Mail Provider, and only listens on your Avast! proxy ports for inbound connection requests, makes outbound connections to the internet on your mail ports (usually 25, 110) at your mail server's IP address. So don't know how your firewall could have decided the destination was AshMaiSv.exe from that port number  and IP address.
« Last Edit: March 02, 2009, 12:41:06 AM by sded »

CharleyO

  • Guest
***

Farther information on this IP address ...

http://www.ip-adress.com/whois/125.65.45.55

http://www.ip-adress.com/ip_tracer/125.65.45.55

http://rabidmonkey.org/  (see Honeypot summary report at top right)

It seems someone in China is trying to hack into your computer. Most likely, it is no one you know.


***