Latest Announcemnent
New thread

127.0.0.1:2372 ??

Status
Not open for further replies.
H

heretolearn

Active Member
31
2013
6
0
What does this mean when i see this address from google analytics page. Somebody is browsing my site from that address 127.0.0.1:2372.
As i know 127.0.0.1 is my own computer.
I use VPN. with VPN kill switch and leak protection too, i use tcp and 443 connection.
Is someone spying on me?
 
5 comments
Port 2372/tcp may be used for several services including LanMessenger and more. Port 2372/tcp is known to have vulnerabilities caused by trojans and remote code execution [Read More]

Cleanup your system (Trojan, Malware)
 
Last edited:
Yeah, i use superantispyware, scanned my laptop daily. Weird thing is i never catched anything. Sumantec protects me too. I disabled all ports by hand, and when something tries to change anything, i am being notified.
Could they have listened my ports without installing any software to my machine?
thanks
 
Last edited:
127.0.0.1 is localhost its not being broadcast outside your computer (everybody has the local ip 127.0.0.1, so this would be absolute pointless), the server (with localhost 127.0.0.1) where your website is located is connecting to your website, for some reason, google sees this and reports that 127.0.0.1 (your server) on port 2372 is connecting to your website on port 80.
 
Last edited:
You have to figure who/what is making these connections.
search through your logs
Code: 
find /home/httpd -name '*-custom_log' -type f | xargs cat | grep '127.0.0.1'
use top netstats ps to find the who/what/program thats making these connections
Code: 
top -c
netstat -np;ps aux
 
Status
Not open for further replies.
Back
Top