svchost trying to accept connections from microsoft

Discussion in 'Windows XP Security' started by LMHmedchem, Jan 30, 2012.

  1. LMHmedchem


    Jan 30, 2012
    Likes Received:

    I have zone alarm iss installed and have always had svchost set to ask. This means I get a popup when ever a process using svchost tries to connect to the net. Most of these occur at start-up and I am familiar with the IP addresses that are being connected to. There is periodically an attempt for an outgoing connection to an IP at port 123, which I have always taken to be a sync to the time server.

    Today there was a string of attempts for an incoming connection from, meaning that IP and port were trying to connect to svchost, and not svchost trying to connect out. I refused the connection. Further, these refused connection attempts were not logged into the ISS log. Normally, every time I allow or block a connection attempt, the is logged into the log files.

    Does anyone know why svchost would be asking to allow a connection from a microsoft IP? I have never seen a request to allow incoming accept to, which I allow to act as a server.

    LMHmedchem, Jan 30, 2012
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.