SRL Archive - The Bashing Club / BBQ Pit

My windows machine.
TCP 192.168.0.2:3389 186.182.51.166:63445 ESTABLISHED
…..

From: Aesheron>Mut>Styks>AMS
My windows machine.
TCP 192.168.0.2:3389 186.182.51.166:63445 ESTABLISHED
…..

What? I do not understand.

That's remote desktop.

You don't understand.. :/
Well anyway, it's pretty funny….
I've had more than one person do this..

From: Mushini
You don't understand.. :/
Well anyway, it's pretty funny….
I've had more than one person do this..

What do you mean I don't understand? Somebody initiated a connection to your machine using the remote desktop port. You obviously had the service running as it was accepted.

Yeah, I had no idea the service was running.. on my windows 7 home edition. Seen several people do this, lol. This person who connected has a windows 2003 server in spanish(or something) located in south america. I can connect to it.. lol.

From: Mushini
Yeah, I had no idea the service was running.. on my windows 7 home edition. Seen several people do this, lol. This person who connected has a windows 2003 server in spanish(or something) located in south america. I can connect to it.. lol.

Well even if the connection was established that does not mean he had access to your machine…just shut down the service and turn off the auto-start.

From: Sex
Well even if the connection was established that does not mean he had access to your machine…just shut down the service and turn off the auto-start.

http://windows.microsoft.com/en-US/windows7/Remote-Desktop-Connection-frequently-asked-questions
^ home edition doesn't come with remote desktop server. I can only "remotely login" into my machine using IP 127~. I disabled the 'other' remote desktop servers ages ago.

How are they connecting? My "router" doesn't have 3389 open. I'm aware that ESTABLISHED refers to the "connection."

Oh well. That's interesting. Any idea why people connect on 3389? Huh..