Ntoskrnl.exe Tcp 2100

RayPoynter

RayPoynter

New Member
Hello,

I have been trying to dig up some information about why NTOSKRNL.EXE was trying to access TCP 2100 from a firewall log yesterday. Combing through Google, I found nothing!

First of, I am on a WinXP Pro SP2 machine, testing a Sygate personal Firewall.
I recieved this pop-up yesterday regarding ntoskrnl.exe.

Someone at Remote IP Address: 62.22.75.4 using TCP port 1921 was trying to access ntoskrnl.exe through TCP 2100.

Of course, I blocked this, but was curious to know, what was going on.

Any clues?

In addition, I have done the norm, scanned, scanned, scanned, and then some more scans. All with different AV, Trojan, Spyware, etc tools, system is clean.
 
It's a legit process, see here. The IP address is from RIPE Network Coordination Centre that allocates IP addresses for Europe and other parts of the world. I had the same thing happen a few weeks ago, I think its to check if your IP address is being used.
 
Hmmm, I see. I guess through all the panic, I never really did research the IP address, though I swear I did a lookup on it. Anyway, makes sense I guess, since this machine does have a presence on the outside world.

Thanks for your reply!
 
You must log in or register to reply here.
Back
Top