Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm picking up some strange traffic from seemingly random IP addresses on seemingly random ports. I have checked and ended all the processes in which I think would use any traffic but there is still lots of traffic flowing through my machine.

Some of the ports mentioned are: 12002, 15724, 33041, 63821

What could be causing it? Could I have some sort of virus?

share|improve this question
up vote 1 down vote accepted

Take a capture of the traffic using Wireshark and analyse it at your leisure. This should give you an idea of whether the traffic is being originated from your machine and what the contents are. You could always post an excerpt of it here for other people to look at.

share|improve this answer

Well of course you could have some sort of virus. In fact I'd be surprised if you didn't. Why are you asking us instead of scanning the machine and finding out for yourself?

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.