Activity on Ports 1028 and 135
Posted by FFCus, 01-14-2008, 12:54 AM Using Active Ports, my Windows 2003 server is showing a very steady amount of action on Port 1028 and Port 135. The Process is listed as "Unknown" with a PID of 0 The Local IP is 127.0.0.1 The Remote IP is 127.0.0.1 The Remote Port is either 1028 or 135 The State is "TIME_WAIT" The Protocol is TCP The path to the executable is blank. At any given time there are at least 20 active processes of this. The virus scan says all is well. Does anybody have any suggestions as to what is doing this or how I can stop it?
Posted by plumsauce, 01-14-2008, 02:13 AM It's just windows mumbling to itself. I *think* 135 is the RPC listener. I forget what 1028 is. There is a KB article that identifies all the ports. As long as it is all local, nothing to worry about. But, make sure that you are properly firewalled.