Why does iTunes keep trying to break into my machine?

Question

zone36 Author

Level 1

0 points

Why does iTunes keep trying to break into my machine?

In the past 11 hours iTunes has tried at least 27 times to log into my machine. The addresses are as follows:

17.172.232.132

17.172.232.89

17.172.232.152

17.172.232.129

17.172.232.183

17.172.232.156

17.172.232.120

17.172.232.66

17.172.232.115

17.172.232.98

17.172.232.210

17.172.232.169

17.172.232.60

17.172.232.211

17.172.232.220

17.172.232.215

17.172.232.172

17.172.232.170

17.172.232.181

17.172.232.175

17.172.232.154

17.172.232.118

17.172.232.73

17.172.232.57

17.172.232.164

17.172.232.143

17.172.232.194

17.172.232.177

17.172.232.56

17.172.232.183

17.172.232.114

17.172.232.112

17.172.232.116

17.172.232.114

17.172.232.152

17.172.232.132

17.172.232.208

17.172.232.194

17.172.232.211

17.172.232.188

17.172.232.153

17.172.232.134

17.172.232.219

17.172.232.188

17.172.232.126

17.172.232.124

17.172.232.176

17.172.232.167

17.172.232.96

17.172.232.82

17.172.232.206

17.172.232.204

17.172.232.51

17.172.232.206

17.172.232.125

17.172.232.112

17.172.232.67

17.172.232.219

17.172.232.86

17.172.232.62

17.172.232.108

17.172.232.102

17.172.232.195

17.172.232.171

17.172.232.187

17.172.232.182

17.172.232.116

17.172.232.85

17.172.232.133

17.172.232.103

17.172.232.194

17.172.232.189

17.172.232.205

17.172.232.163

17.172.232.99

17.172.232.66

17.172.232.154

17.172.232.150

17.172.232.221

17.172.232.219

17.172.232.203

17.172.232.172

17.172.232.97

17.172.232.80

17.172.232.132

17.172.232.99

17.172.232.101

17.172.232.100

17.172.232.97

17.172.232.176

17.172.232.149

17.172.232.134

17.172.232.96

17.172.232.83

17.172.232.170

17.172.232.113

17.172.232.133

17.172.232.98

17.172.232.144

17.172.232.95

17.172.232.168

17.172.232.142

17.172.232.210

17.172.232.177

17.172.232.90

17.172.232.182

17.172.232.129

17.172.232.85

17.172.232.171

17.172.232.104

17.172.232.193

17.172.232.183

17.172.232.218

17.172.232.194

17.172.232.59

17.172.232.188

17.172.232.119

17.172.232.111

17.172.232.98

17.172.232.97

17.172.232.125

17.172.232.117

17.172.232.210

17.172.232.166

17.172.232.118

17.172.232.105

17.172.232.200

17.172.232.182

17.172.232.104

17.172.232.93

17.172.232.177

17.172.232.168

17.172.232.181

17.172.232.177

17.172.232.171

17.172.232.102

17.172.232.106

17.172.232.74

17.172.232.146

17.172.232.137

17.172.232.146

17.172.232.131

17.172.232.120

17.172.232.103

17.172.232.147

17.172.232.127

17.172.232.118

17.172.232.56

17.172.232.54

17.172.232.201

17.172.232.68

17.172.232.65

17.172.232.145

17.172.232.107

17.172.232.204

17.172.232.198

17.172.232.84

17.172.232.53

17.172.232.136

17.172.232.124

17.172.232.190

17.172.232.180

17.172.232.164

17.172.232.155

17.172.232.141

17.172.232.64

17.172.232.218

17.172.232.208

17.172.232.81

17.172.232.57

17.172.232.103

17.172.232.83

17.172.232.107

17.172.232.62

17.172.232.78

17.172.232.71

17.172.232.78

17.172.232.75

17.172.232.102

17.172.232.91

17.172.232.201

17.172.232.188

17.172.232.124

17.172.232.107

17.172.232.179

17.172.232.154

17.172.232.155

17.172.232.118

17.172.232.101

17.172.232.84

17.172.232.68

17.172.232.216

17.172.232.127

17.172.232.98

17.172.232.142

17.172.232.107

17.172.232.115

17.172.232.74

17.172.232.51

17.172.232.153

17.172.232.139

17.172.232.91

17.172.232.92

17.172.232.83

17.172.232.177

17.172.232.175

17.172.232.190

17.172.232.164

17.172.232.54

17.172.232.211

17.172.232.56

17.172.232.216

17.172.232.120

17.172.232.107

17.172.232.172

17.172.232.151

17.172.232.94

17.172.232.51

17.172.232.218

17.172.232.202

17.172.232.89

17.172.232.75

17.172.232.116

17.172.232.99

17.172.232.183

17.172.232.108

17.172.232.109

17.172.232.105

17.172.232.218

17.172.232.210

17.172.232.171

17.172.232.144

17.172.232.154

17.172.232.133

17.172.232.163

17.172.232.147

17.172.232.184

17.172.232.181

17.172.232.155

17.172.232.146

17.172.232.94

17.172.232.85

17.172.232.146

17.172.232.207

17.172.232.133

17.172.232.175

17.172.232.172

17.172.232.215

17.172.232.184

Whats the deal? This started after installing the latest upgrade.

Windows XP

Posted on Nov 23, 2011 8:12 PM

Reply

Answer 1

diesel vdub

Level 7

22,178 points

Nov 23, 2011 9:05 PM in response to zone36

iTunes is not trying to break into your machine. What leads you to this conclusion?

Reply

Answer 2

zone36 Author

Level 1

0 points

Nov 23, 2011 10:30 PM in response to zone36

Call it whatever you like...the question remains, Why is Apple Computer, Inc trying to talk to my computer?

Reply

Answer 3

diesel vdub

Level 7

22,178 points

Nov 24, 2011 3:52 PM in response to zone36

It could be iTunes checking for updates, attempting to update apps, download new podcasts (if you are subscribed to any), ping, genius trying to work.

Any number of things are possible.

Frankly, a list of IP addresses means absolutely nothing.

What gives you the idea that Apple, or anyone for that matter, is trying to "break into" your computer?

Did you simply pull this information out of thin air? Or?

Reply

Answer 4

zone36 Author

Level 1

0 points

Nov 24, 2011 6:45 PM in response to zone36

No this information is not "Pulled Out Of Thin Air", It comes from a program that monitors all IP addresses of computers trying to talk from my machine. And yes the IP addresses are important...they are all registered IPs of Apple. Yes your response about updates, attempting to update apps (don't use any), download new podcasts (if you are subscribed to any)(Do not subscribe to any), ping(don't use), genius(don't use) trying to work may be right but I never had it doing this before I updated to 10.5.1.42

Reply

Answer 5

Feb 14, 2012 10:48 PM in response to zone36

I noticed this with iCloud on *.82, which makes sense if they're polling to see new updates on what to sync

Reply

Answer 6

tfdatab

Level 1

0 points

Sep 20, 2012 10:56 AM in response to zone36

In my Hardware FW log I have the following from my WAN Interface:

Sep 20 17:04:07 [ATTACK]: SYN Flood from 17.172.232.215

This comes from the outside, and not from the inside of my computer, so it is not from a program on my computer, example itunes trying to update.But I have the program installed.

Why are they trying to break thru my fireweall to my computer. And why do they send Syn floods?

17.172.232.215 IP address location & more:
IP address [?]:	17.172.232.215 [Whois] [Reverse IP]
IP country code:	US
IP address country:	United States
IP address state:	California
IP address city:	Cupertino
IP postcode:	95014
IP address latitude:	37.3042
IP address longitude:	-122.0946
ISP of this IP [?]:	Apple
Organization:	Apple
Host of this IP: [?]:	st11p01st-courier165-bz.push.apple.com [Whois][Trace]
Local time in United States:	2012-09-20 10:46

Reply

Answer 7

Jun 2, 2013 4:33 AM in response to tfdatab

I am seeing similar behavior however the requests appear to be coming from within my network and going out to 17.172.232.xxx. Here is a portion of the logs:

[FVS338] [kernel] LAN2WAN[DROP] IN=LAN OUT=WAN SRC=192.168.0.115 DST=17.172.232.158 PROTO=TCP SPT=52901 DPT=443

[FVS338] [kernel] LAN2WAN[DROP] IN=LAN OUT=WAN SRC=192.168.0.115 DST=17.149.36.181 PROTO=TCP SPT=53027 DPT=5223

Notice that in some cases it attempts to use port 443 and others 5223. Apparently both ports are used by Apple for iTunes, iCoud, push notifications, and other noise. The problem I have is, why are the requests so frequest? This is causing far too much network noise.

Here is the only partially helpful reference I have found:

http://support.apple.com/kb/ts1629

Reply

Answer 8

Aug 17, 2013 11:43 PM in response to zone36

most likely you have "home sharing" turned on. It is a client initiated connection IMO, my macbook, ipad mini and apple tv all have "ESTABLISHED" connections at all times on port 5223 - they all have home sharing turned on too.

Reply

Answer 9

Aug 22, 2013 8:39 PM in response to Community User

here's a better answer; http://support.apple.com/kb/TS1629

Reply

Answer 10

r.w.b

Level 1

21 points

Oct 6, 2015 12:41 PM in response to Community User

Still useful in October 2015. Thanks.

Reply