port 9495

[RobG2]

I just upgraded my home network to a Linksys WRT54G-TM with Tomato. I have
Wallwatcher installed to monitor traffic and bandwidth.

In the logs, I keep seeing unsolicited inbound traffic on UDP and TCP bound for port
9495. The packets come in every few minutes from various places around the world,
China, Japan, Canada, UK. Most packets have different source IP's and ports. I do see
packets headed for other ports as well, but nowhere near as many for 9495.

The router is doing its job, so I'm not worried about an intrusion. I just want to
know what is on port 9495? I cannot find any information about this port except
for some Tivoli application.

Anybody else seeing this?

Thanks
Rob

 

[JackMDS]

Welcome to AnandTech Forums.

You can control and should be worried about who comes and goes into your Home.

However you can Not control who is passing by and using your City's streets.

Traffic on the WAN port of a Broadband Router is traffic on the City's streets.

In any case, http://www.auditmypc.com/port/tcp-port-9495.asp

The best way to see what your LAN's TCP is actually busy with is download this free application and Run it on each computer.

http://technet.microsoft.com/e...nternals/bb897437.aspx

 

[RobG2]

Thanks..

Good analogy on streets; though I would not say someone trying to access a specific port on my pc is like someone passing by. It is more like someone knocking
on my door, getting no answer and coming back later.


TCPView looks like a fancy version of netstat -a. I'll give it a try to see if any of my systems are listening on this port, but since these "drive by" door knockers seem to
be unsolicited, I'm not expecting any system on my side of the router to be waiting on this port.

I was just wondering if this port is used by some known app or the Win XP OS to display spam or used by some virus/trojan to allow access to unprotected systems.

Rob