Discussion:
Remote address 70:85:176:218
(too old to reply)
Roger K
2005-06-16 15:48:37 UTC
Permalink
Every so often my firewall says that remote address 70.85.176.218 (port
46340) is attempting to access svchost.exe on my PC. A trace on
70.85.176.218 says it's 218.70-85-176.reverse.theplanet.com which leaves me
non the wiser. I don't know why anything from outside should try to access
svchost.exe, though the FW seems to think it's not anything to worry about.
Can anyone please shed a little light?
TIA
Roger
mikeFNB
2005-06-16 21:58:30 UTC
Permalink
hijackers basically
thats what firewalls do, good job you have it.

mike
Post by Roger K
Every so often my firewall says that remote address 70.85.176.218 (port
46340) is attempting to access svchost.exe on my PC. A trace on
70.85.176.218 says it's 218.70-85-176.reverse.theplanet.com which leaves
me non the wiser. I don't know why anything from outside should try to
access svchost.exe, though the FW seems to think it's not anything to
worry about. Can anyone please shed a little light?
TIA
Roger
stephen
2005-06-19 13:52:03 UTC
Permalink
Post by mikeFNB
hijackers basically
thats what firewalls do, good job you have it.
mike
Post by Roger K
Every so often my firewall says that remote address 70.85.176.218 (port
46340) is attempting to access svchost.exe on my PC. A trace on
70.85.176.218 says it's 218.70-85-176.reverse.theplanet.com which leaves
me non the wiser. I don't know why anything from outside should try to
access svchost.exe, though the FW seems to think it's not anything to
worry about. Can anyone please shed a little light?
this is a common "hack attack" - it may be from that address is the return
IP address wasnt spoofed.

if you are worried about it, look up the domain contact for abuse and send
them a query - it is probably
Post by mikeFNB
Post by Roger K
TIA
Roger
--
Regards

Stephen Hope - return address needs fewer xxs
Roger K
2005-06-19 14:22:43 UTC
Permalink
Post by stephen
Post by mikeFNB
hijackers basically
thats what firewalls do, good job you have it.
mike
Post by Roger K
Every so often my firewall says that remote address 70.85.176.218 (port
46340) is attempting to access svchost.exe on my PC. A trace on
70.85.176.218 says it's 218.70-85-176.reverse.theplanet.com which leaves
me non the wiser. I don't know why anything from outside should try to
access svchost.exe, though the FW seems to think it's not anything to
worry about. Can anyone please shed a little light?
this is a common "hack attack" - it may be from that address is the return
IP address wasnt spoofed.
if you are worried about it, look up the domain contact for abuse and send
them a query - it is probably
Post by mikeFNB
Post by Roger K
TIA
Roger
--
Regards
Stephen Hope - return address needs fewer xxs
Thanks for the responses. It's not the usual kind of "attack" - if I block
it I find I can't use Windows update. If I allow the Windows updates
through, then I get the firewall warning several times a day.
Roger

Loading...