Windows 10: What does it mean when netstat shows as a remote connection DESKTOP:<port number>

I don't have remote desktop installed, yet sometimes I have interference and I sometimes when I run netstat get as a remote connection DESKTOP:<port number> - what does this mean? Is someone somehow connecting to my desktop through a remote connection or is it something else?

:)

 

What does it mean when netstat shows as a remote connection DESKTOP:<port number>

I don't have remote desktop installed, yet sometimes I have interference and I sometimes when I run netstat get as a remote connection DESKTOP:<port number> - what does this mean? Is someone somehow connecting to my desktop through a remote connection or is it something else?

 

What does it mean when netstat shows as a remote connection DESKTOP:<port number>

You are welcome.

If someone uses remote desktop connection (port 3389 for example) to remote connect to your computer, the netstat output can look like this:

TCP [your_computer_ip]:49632 [remote_ip_address]:3389 ESTABLISHED

The one you described that involves the local loopback address (127.0.0.1) and the computer name + port number - if that computer name is your own computer's name, the loopback address (127.0.0.1) is used for internal communication within your own computer. Therefore, that connection represents a local connection rather than a remote connection to another device on the network or the internet. That's actually not something to be concerned about.

 

What does it mean when netstat shows as a remote connection DESKTOP:<port number>

Netstat quite frequently doesn't show IP-addresses. I just turned off allowing access for "remote assistance." I'm afraid they may have used that as a backdoor.

As a local address it showed my 127.0.0.1 standard IP-address. As a foreign address, it said "DESKTOP:" and then a number. I had six lines of that with six different what I assume are port numbers. I don't have a screenshot.

I have also received a warning once in the past from outlook.com that someone in the United States tried to log into my E-mail. I live in The Netherlands. The IP-address reported pointed straight to MicroSoft itself.

I'm working on securing all of my systems. I'm a qualified Computer Science engineer.

I actually got a Windows computer, because my MacBook was hacked by DarkWebbies. I took down more than two-hundred DarkWeb servers so far. (If they had been Apple's servers, I'm pretty sure it would have been on the news.) Officially, my Internet connection itself is now pretty quiet. Only BlueTooth and Wifi still offer immediately apparent problems.

Can you look into what netstat would show when you get remote assistance to your desktop? Windows 10, or at least my version, doesn't have Remote Desktop that I can turn on for others to log into other than remote assistance.